{"type":"raw_signal","id":"misconfiguring-turnstile-by-skipping-backend-validation-leaves-sites-eea943","slug":"misconfiguring-turnstile-by-skipping-backend-validation-leaves-sites-eea943","title":"Misconfiguring Turnstile by skipping backend validation leaves sites exposed to bots.","description":"Cloudflare has launched Turnstile Spin, an agent-mediated setup flow for its Turnstile bot-protection product.","retrieval_nugget":"Cloudflare has launched Turnstile Spin, an agent-mediated setup flow for its Turnstile bot-protection product.","observed_at":"2026-09-25","record_date":"2026-09-25","date_kind":"observed_at","why_it_matters":"Cloudflare states that application code is not sent to or remotely changed by Cloudflare. The selected agent makes approved changes in the user’s codebase, while the new Cloudflare-side resource is the Turnstile widget. Source: https://blog.cloudflare.com/turnstile-spin","novelty":"notable","verification_level":"source-linked","signal_type":"release","source_platform":"blog.cloudflare.com","topics":[],"entities":[],"related_patterns":[],"source_url":"https://blog.cloudflare.com/turnstile-spin","source_urls":["https://blog.cloudflare.com/turnstile-spin"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"signal:misconfiguring-turnstile-by-skipping-backend-validation-leaves-sites-eea943","status":"published","visuals":[],"routes":{"html":"https://newruntime.com/signals/misconfiguring-turnstile-by-skipping-backend-validation-leaves-sites-eea943/","markdown":"https://newruntime.com/signals/misconfiguring-turnstile-by-skipping-backend-validation-leaves-sites-eea943.md","json":"https://newruntime.com/signals/misconfiguring-turnstile-by-skipping-backend-validation-leaves-sites-eea943.json"},"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"next_reads":[{"type":"collection","path":"/signals/","url":"https://newruntime.com/signals/","title":"Raw Signals","reason":"Open every source-linked raw signal.","media_type":"text/html","json_url":"https://newruntime.com/signals.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}