Cyber Security Headlines
Cloudflare’s protection bypass, ALPHV healthcare victim, Lazarus Meta recruiter
Oct 2, 2023
Cloudflare's protection bypassed; McLaren Health Care victimized; Lazarus Group impersonates Meta recruiters; CISOseries.com covers the stories behind the headlines: bypass in Cloudflare's firewall discovered, McLaren Healthcare falls victim to a cyber group, Lazarus Group targets Spanish engineers, critical vulnerability in Microsoft SharePoint Server found.
07:08
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Cloudflare's DDoS protections can be bypassed through logic flaws in cross-tenant security controls.
- Lazarus Group impersonates Meta recruiters to launch sophisticated attacks on Spanish engineers.
Deep dives
Cloudflare's DDoS protections can be bypassed using a free account
A researcher has discovered that Cloudflare's firewall and DDoS prevention can be bypassed by leveraging logic flaws in cross-tenant security controls. This vulnerability arises from Cloudflare's strategy of using shared infrastructure that accepts connections from all tenants. The researcher identified the vulnerabilities in Cloudflare's authenticated origin polls and allow list Cloudflare IP addresses. Despite reporting the issue to Cloudflare, it was marked as 'informative' and not addressed.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
