Security News

Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps
2021-08-20 09:02

Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service attack recorded to date. "Within seconds, the botnet bombarded the Cloudflare edge with over 330 million attack requests," the company noted, at one point reaching a record high of 17.2 million requests-per-second, making it three times bigger than previously reported HTTP DDoS attacks.

Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps
2021-08-20 09:02

Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service attack recorded to date. "Within seconds, the botnet bombarded the Cloudflare edge with over 330 million attack requests," the company noted, at one point reaching a record high of 17.2 million requests-per-second, making it three times bigger than previously reported HTTP DDoS attacks.

Cloudflare’s Project Pangea helps underserved communities expand access to the internet for free
2021-07-27 22:45

Cloudflare announced Project Pangea, a new initiative to improve internet access for underserved communities around the world. This allows Cloudflare to offer a secure, affordable way to expand access to the internet that can grow with, and contribute to, the sustainability of these networks, as well as be ready for any new networks that launch.

Cloudflare reaches final step before full FedRAMP authorization
2021-07-21 22:05

Cloudflare announced that it is now listed in the FedRAMP marketplace, the federal government's rigorous cloud security assessment program. Reaching this final step before full FedRAMP authorization will allow more federal agencies to adopt Cloudflare's performance, security and zero trust solutions as part of their efforts to build a more secure and resilient infrastructure for the future.

CloudFlare CDNJS Bug Could Have Led to Widespread Supply-Chain Attacks
2021-07-18 22:58

Web infrastructure and website security company Cloudflare last month fixed a critical vulnerability in its CDNJS library that's used by 12.7% of all websites on the internet. CDNJS is a free and open-source content delivery network that serves about 4,041 JavaScript and CSS libraries, making it the second most popular CDN for JavaScript after Google Hosted Libraries.

Critical Cloudflare CDN flaw allowed compromise of 12% of all sites
2021-07-16 10:29

Cloudflare has fixed a critical vulnerability in its free and open-source CDNJS potentially impacting 12.7% of all websites on the internet. CDNJS serves millions of websites with over 4,000 JavaScript and CSS libraries stored publicly on GitHub, making it the second-largest JavaScript CDN. The vulnerability exploits comprised publishing packages to Cloudflare's CDNJS using GitHub and npm, to trigger a Path Traversal vulnerability, and eventually remote code execution.

Cloudflare fixes CDN code execution bug affecting 12.7% of all sites
2021-07-16 10:29

Cloudflare has fixed a critical vulnerability in its free and open-source CDNJS potentially impacting 12.7% of all websites on the internet. CDNJS serves millions of websites with over 4,000 JavaScript and CSS libraries stored publicly on GitHub, making it the second-largest JavaScript CDN. The vulnerability exploits comprised publishing packages to Cloudflare's CDNJS using GitHub and npm, to trigger a Path Traversal vulnerability, and eventually remote code execution.

Cloudflare integrates with Microsoft, Splunk, Datadog, and Sumo Logic
2021-06-22 23:30

Cloudflare, the security, performance, and reliability company, announced new integrations with Microsoft Azure Sentinel, Splunk, Datadog, and Sumo Logic to make it easier for businesses to connect and analyze key insights across their infrastructure. Now, businesses will be able to funnel security insights from Cloudflare directly into their preferred analytics platform to easily analyze in the context of their entire technology stack - without the cost or complexity of building custom integrations.

Cloudflare launches campaign to ‘end the madness’ of CAPTCHAs
2021-05-14 03:29

Cloudflare research engineer Thibault Meunier assumed that the average internet user sees a CAPTCHA once ever ten days and multiplied that by world's 4.6 billion internet users and Cloudflare's 32-second CAPTCHA-completion estimate to assert that humanity collectively spends 500 years every day completing CAPTCHAs. Cloudflare will initially support three - YubiKeys, HyperFIDO keys; and Thetis FIDO U2F. "Completing this flow takes five seconds," Meunier asserts in a post on Cloudflare's blog.

Jonathon Dixon joins Cloudflare as VP and GM, Asia Pacific
2021-04-11 22:30

Cloudflare announced the appointment of Jonathon Dixon as Vice President and General Manager, Asia Pacific, bringing with him more than 20 years of enterprise leadership experience in the IT industry, working for companies including IBM, Cisco and Amazon Web Services. Today, Cloudflare's global network spans more than 200 cities in more than 100 countries, including 44 cities across Asia Pacific.