cloudflare news
4 stories
Brevo Supply-Chain Attack Infected Over 100,000 Websites
A supply-chain attack targeting Brevo, a French cloud-based marketing and customer communication platform, led to the injection of malicious code into its own websites and those of over 100,000 customers. The incident, which began on September 10, involved attackers exploiting a vulnerability in Brevo's SAML single sign-on (SSO) system.
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
Cybersecurity researchers have reportedly demonstrated a refined Spectre attack targeting Cloudflare Workers, successfully exfiltrating a JSON Web Token (JWT) from a co-located Worker. The attack achieved a data leakage rate of 12 bits per second, which is described as a significant improvement in speed over prior iterations of similar attacks.
Introducing Cache Response Rules
Cloudflare has announced a new feature called Cache Response Rules, designed to give customers more granular control over how their content is cached and delivered. This new capability allows users to define specific rules that dictate caching behavior based on various HTTP response properties.
Introducing Meerkat: an experiment in global consensus
Cloudflare has developed an experimental consensus service named Meerkat, designed to manage critical control-plane state across its global network of over 330 data centers. This new system aims to provide strong consistency and high availability, even under challenging internet conditions.