kyber.today

daily cyber × ai intelligence

← index

tagged

[cloudflare]

22 editions · 26 items

October 30, 2026

  • NetamLoader: Kaspersky describes an unknown APT hitting a Windows 10 build customised for Asian governments, starting from a CAB-triggered PatchMyPC-ScriptRunner.exe, using AppDomainManager injection and fabric.config/Resources.resx abuse (ResXResourceSet plus BinaryFormatter.Deserialize with TypeConfuseDelegate) to stage XAML-based .NET payloads with an AMSI bypass, beaconing to a Cloudflare-fronted C2 at openaigpt4v[.]com (Securelist). · Threat Activity & Breaches

in Attackers Go for the Management Plane

October 26, 2026

  • node2shell-lab packages the Brotli flaw into a crash-first pentest exercise. The single-container lab uses the real CVE-2026-111497 decoder bug but explicitly treats a reliable engine crash as success, not a shell. In the author’s Rosetta tests, the crash primitive worked in 48 of 48 runs and the public-PoC RCE landing worked in 0 of 48. Cloudflare also added two WAF detections in log mode for this continuing thread (earlier coverage). · New Tools & Releases
  • Iran’s Prince of Persia placed Tornado C2 infrastructure on US shared hosting for the first time since 2016. The state-sponsored actor, also tracked as Infy, resumed operations on May 27 after a three-month pause. Its Tonnerre malware then removed more than 1,800 files from one victim within seven days. In August, researchers found a second-stage server for the actor’s Tornado malware on Namecheap shared hosting; later infrastructure moved behind Cloudflare (SecurityWeek). · Threat Activity

in PHP2Shell May Outlive the Patch

October 13, 2026

  • Blinder Tunnel has a new, invisible variant. Nextron went hunting after Unit 42's reporting and found RuntimeBroker.dll sitting at 0 of 71 VirusTotal detections six weeks after its 25 August submission from the Iraq region, with infrastructure not in prior write-ups: a Cloudflare Workers relay, a new PeakyBlindersTeam GitHub account, and per-victim-encrypted credential-rotation instructions hidden in HTML comments on Microsoft/vscode issues. Delivery was an Inno Setup installer themed as a Dubai Airport careers IT assessment (Nextron). Unit 42 separately reported the Iran-aligned actor hitting Middle East aviation and telecom with weaponised .csproj files and GitHub C2 (@Unit42_Intel; earlier coverage). · Threat Intelligence

in Malware That Lives Off the Victim's AI Tooling

October 7, 2026

  • Hacktron reports 24 validated issues, 4 of them critical, in Cloudflare's "vinext", a Next.js replacement built in roughly a week; Cloudflare patched them. A useful data point on what AI-accelerated development leaves behind for AI-accelerated review to find (Hacktron). · AI & Model Security
  • ClickFix is hiding its payloads better. Microsoft Threat Intelligence describes compromised sites pre-fetching a script into the browser cache disguised as a PNG, so the pasted command loads locally instead of pulling a remote payload — sidestepping Windows Run dialog length limits and the usual network-stage detections; DNS TXT records are also being used as payload storage (The Hacker News, Dark Reading). Separately, CERT-UA found over 100 compromised Ukrainian websites serving fake Cloudflare checks that drop Lunex Stealer, including a Chromium extension posing as "Microsoft Office Word Editor" and a component reaching the filesystem; tracked as UAC-0277 (The Record). · Threat Activity

in Pre-Auth File Read Hits Eight Atlassian Data Center Products

October 2, 2026

OpenAI Disrupts a Coordinated Model-Reasoning Extraction Campaign

OpenAI disrupted a coordinated campaign extracting protected model reasoning from over 4,000 users, though researchers later reproduced the technique against GPT-6 Astra through Azure. Manus AI agents were shown vulnerable to encoded prompt injection enabling code execution from a single inbound email, and autonomous agents conducted probing attacks against US and Canadian government websites including SQL injection attempts. Fortinet disclosed active exploitation of FortiMail path-traversal vulnerability CVE-2026-104286, while Huntress reported wild exploitation of VMware ESXi VM-escape vulnerabilities.

September 28, 2026

  • Cloudflare has fixed the Containers/Sandboxes cross-tenant flaw (earlier coverage) and published the mechanics: a shared storage pool skipped zeroing reused 64 KiB blocks, so writing 4 KiB into a new container's disk left up to 60 KiB of a previous tenant readable. Researchers found residual material on 18 of 24 container placements and 20 of 22 underlying nodes tested, including directory structures, database pages and structurally complete SQLite databases; reported via HackerOne on 4 September (BleepingComputer). · Cloud & Supply Chain

in Citrix Patches the NetScaler Zero-Days, and CISA Starts the Forensics Clock

September 26, 2026

  • Cloudflare Containers leaked other customers' leftover disk data. Thin-provisioned 64KB blocks were returned to a pool shared across accounts with zeroing disabled, so a container writing only 4KB into a reused block could read the previous tenant's bytes from the remaining 60KB at raw disk level. Oren Yomtov of Accomplish reported it on 4 September; researchers found leftover material on 18 of 24 production attempts and on 20 of 22 underlying machines across four continents, recovering directory listings, SQLite databases, Chromium profiles, .env and credential files. Cloudflare Sandboxes — sold for running untrusted and AI-agent-written code — was affected too. Cloudflare re-enabled wiping; the researchers confirmed the PoC dead on 14 September (The Hacker News). · Cloud, CI/CD & Identity
  • ClickFix, quantified. CTM360 analysed more than 17,000 infected URLs serving fake Cloudflare verification pages, around 3,000 still live at publication. Microsoft attributed 47% of initial-access cases handled by its Defender Experts team in 2025 to the technique, ahead of conventional phishing; ESET measured a 517% rise into H1 2025 and a further 108% from H2 2025 to H1 2026 (The Hacker News). SANS ISC has follow-up malware analysis from the macOS-focused Macfinger cluster (ISC). · Threat Intelligence

in Kiteworks Orders a Global Shutdown on a Zero-Day Warning

September 25, 2026

  • Shortcuts can bypass Chrome for iOS call prompts (Doyensec). blog.doyensec.com Cloudflare also published its write-up of a cross-tenant data exposure in Containers. Cloudflare · Vulnerability Research
  • The placeholder domain third-party.com, referenced across 1,700+ repositories and dev docs, now serves ClickFix. Manifold Security found it while reviewing public AI skills and MCP server documentation. Unlike the IANA-reserved example.com, it is an ordinary registered domain: it displays a fake Cloudflare "Performing security verification" page, copies a PowerShell command to the clipboard, and instructs the user through Win+R and paste. The payload host no longer resolves, but a May VirusTotal scan shows it pulling a 131 MB zip. BleepingComputer, The Hacker News · Threat Activity
  • Compromised legitimate Ukrainian business sites are running the same fake-Cloudflare ClickFix lure to deliver a previously undocumented stealer called Psychedelic, with a Windows Installer command pasted from the clipboard. The Hacker News · Threat Activity

in An OpenAI Agent Found Its Way Around a Government Portal's Access Controls

September 19, 2026

  • The Brevo incident escalated from account compromise to edge-served malware. After the 10 September SAML SSO compromise that reached 138 customer accounts (including Trezor's), attackers returned on 14 September using a long-lived Cloudflare API key with full account permissions that had been left in application source code. They deployed a malicious Cloudflare Worker that rewrote responses at the edge and stripped Content-Security-Policy headers — origin files were never modified, so integrity checks missed it — injecting a script from a Brevo-owned domain into the chat widget and tracking scripts loaded from cdn.brevo.com. Payloads were a malicious WordPress plugin installed when site admins visited their own site, and a ClickFix overlay for visitors; Sansec estimates more than 100,000 sites were served malware (Security Affairs, SecurityWeek) (earlier coverage). · Supply Chain & Malicious Packages

in From a Help Forum to OpenAI's Monorepo in 72 Hours

September 16, 2026

CVE-2026-76461 Gives Remote Attackers Root on Cisco Email Gateways

Cisco Secure Email Gateway suffers from CVE-2026-76461, an unauthenticated SQL injection flaw in AsyncOS being actively exploited for root-level command execution; CISA has added it to KEV. CVE-2026-39364 enables mass scanning of exposed Vite development servers to harvest cloud secrets from AWS, Azure, and Terraform configurations. n8n patched two agent authorization bypasses (CVE-2026-65015 and CVE-2026-59207) that allowed read-only users to execute arbitrary nodes and bypass domain restrictions to steal credentials. Iranian state actors deployed CHOSEN BRICK spyware against dissidents and journalists using fake MRI results as a social-engineering lure, while UTA0560 exploited a Chrome–Windows zero-day chain to deliver GRIMWEDGE against NGOs on September 1.

September 2, 2026

  • OpenAI's Astra scored 100% on ExploitBench and, on a fresh internal benchmark of 20 recent high-severity V8 bugs built to control for contamination, hit ~39% arbitrary-code-execution versus ~1% for GPT-5.6 Sol at comparable token spend, per @AiBattle_. In expert evaluations the model reportedly escaped a hardened browser sandbox from a single HTML file and chained OS bugs from unprivileged user to root, and discovered two previously unknown V8 vulnerabilities during the eval itself (@kimmonismus). Read the numbers with care: the strongest results reflect elevated Daybreak Blue access rather than the default public configuration, and full exploit capability goes to alpha testers and Daybreak partners like Cisco and Cloudflare first (@TokenGremlin, @IntCyberDigest). OpenAI says public release is "soon" with cyber capabilities restricted. · AI & Model Security
  • Nimbus Manticore / Mirage Kitten is now cross-platform, delivering the previously undocumented NodeRabbit and PollCat Node.js/JavaScript RATs to Windows, Linux, and macOS via LinkedIn spear-phishing with trojanized coding-challenge archives. Kaspersky reports targeting of aviation and FinTech in Afghanistan, Egypt, and Ethiopia, with C2 blended into Azure and Cloudflare traffic (Securelist, The Hacker News). · Threat Activity

in OpenAI Says Astra Crossed the Line: Autonomous Zero-Day Discovery at "Critical" Cyber Risk

August 31, 2026

  • TerminalFix chains a fake Cloudflare CAPTCHA (ClickFix) lure into DLL sideloading and a reverse tunnel for persistent access, with Microsoft publishing detections and hunting queries (Microsoft, The Hacker News). Kevin Beaumont notes the same entry technique is being run by a ransomware-as-a-service operation that is reaching some of the world's largest companies (discussion). · Threat Activity

in Fully Patched, Still Domain Admin