AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Cyber Security Headlines
Cloudflare’s protection bypass, ALPHV healthcare victim, Lazarus Meta recruiter
Oct 2, 2023
Cloudflare's protection bypassed; McLaren Health Care victimized; Lazarus Group impersonates Meta recruiters; CISOseries.com covers the stories behind the headlines: bypass in Cloudflare's firewall discovered, McLaren Healthcare falls victim to a cyber group, Lazarus Group targets Spanish engineers, critical vulnerability in Microsoft SharePoint Server found.
07:08
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Cloudflare's DDoS protections can be bypassed through logic flaws in cross-tenant security controls.
- Lazarus Group impersonates Meta recruiters to launch sophisticated attacks on Spanish engineers.
Deep dives
Cloudflare's DDoS protections can be bypassed using a free account
A researcher has discovered that Cloudflare's firewall and DDoS prevention can be bypassed by leveraging logic flaws in cross-tenant security controls. This vulnerability arises from Cloudflare's strategy of using shared infrastructure that accepts connections from all tenants. The researcher identified the vulnerabilities in Cloudflare's authenticated origin polls and allow list Cloudflare IP addresses. Despite reporting the issue to Cloudflare, it was marked as 'informative' and not addressed.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode