Cloudflare is adding Drupal WAF Rule to Mitigate Critical Drupal Exploit https://blog.cloudflare.com/drupal-waf-rule-mitigate-critical-exploit/