Archive

Cloudflare says attackers are already trying to abuse two leaked PHP vulnerabilities, which makes this an early warning for defenders rather than a theoretical disclosure. Security teams running PHP-based services should treat it as a patching and exposure check item, especially where public-facing applications may be reachable before fixes are applied.

CERT-UA is warning about a campaign that uses fake Cloudflare verification pages to push LunexStealer. The defender impact is clear: it is an active phishing-to-malware delivery path that can lead to credential theft and endpoint compromise, so detection of lookalike infrastructure and user-facing web checks matters.

Cloudflare is being described as having a flaw that could let one customer access deleted data belonging to another. For defenders, this is a cloud isolation and data-handling issue that raises exposure for any organization relying on shared infrastructure and should trigger review of tenant separation and deletion controls.