Cloudflare Bug Leak Puts Corporate Companies at Risk

Cloudflare Bug Puts Corporate Companies at Risk

  • Feb 24, 2017

A software bug at Cloudflare Inc. was disclosed Thursday, February 23. It is believed that this bug has affected company systems since September of last year, causing some of Cloudflare’s web servers to leak information that should have remained private, potentially including passwords and other types of authenticated data.

Before the fix, the bug was said to have affected about one in every 3.3 million web requests processed by its network. Cloudflare serves billions of pages each day, meaning the number of “leaky” pages could add up to nearly 120,000 per day, the company said.

Even worse, some pages were then copied automatically by search engines, making the private information viewable in cached versions of the page’s source code.

Cloudflare has said they have not found any evidence that the leaked data was misused, “Although it is a very scary thing to have private information exposed like this, we think it’s unlikely that someone actually spotted it and did something bad with it.” John Graham-Cumming, Cloudflare’s chief technology officer said in an interview with Wall Street Journal.

It wasn’t immediately clear how many companies were affected by the bug, but Cloudflare has over 5 million customers. Its clients include dating site OkCupid and AngileBits, Inc., maker of the 1Password security software.

The bug was discovered by a researcher at Google a week ago. Cloudflare said it is working with Google and other search-engine companies to remove any leaked data, most of which has been scrubbed by the time the news of the bug was released, Cloudflare said.

Featured

  • Improve Incident Response With Intelligent Cloud Video Surveillance

    Video surveillance is a vital part of business security, helping institutions protect against everyday threats for increased employee, customer, and student safety. However, many outdated surveillance solutions lack the ability to offer immediate insights into critical incidents. This slows down investigations and limits how effectively teams can respond to situations, creating greater risks for the organization. Read Now

  • Security Today Announces 2025 CyberSecured Award Winners

    Security Today is pleased to announce the 2025 CyberSecured Awards winners. Sixteen companies are being recognized this year for their network products and other cybersecurity initiatives that secure our world today. Read Now

  • Empowering and Securing a Mobile Workforce

    What happens when technology lets you work anywhere – but exposes you to security threats everywhere? This is the reality of modern work. No longer tethered to desks, work happens everywhere – in the office, from home, on the road, and in countless locations in between. Read Now

  • TSA Introduces New $45 Fee Option for Travelers Without REAL ID Starting February 1

    The Transportation Security Administration (TSA) announced today that it will refer all passengers who do not present an acceptable form of ID and still want to fly an option to pay a $45 fee to use a modernized alternative identity verification system, TSA Confirm.ID, to establish identity at security checkpoints beginning on February 1, 2026. Read Now

  • The Evolution of IP Camera Intelligence

    As the 30th anniversary of the IP camera approaches in 2026, it is worth reflecting on how far we have come. The first network camera, launched in 1996, delivered one frame every 17 seconds—not impressive by today’s standards, but groundbreaking at the time. It did something that no analog system could: transmit video over a standard IP network. Read Now

Most   Popular

New Products

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.