180 matches found
Security at the Edge - What is Gartner's SASE & why does it matter?
Recently, Gartner published a report called "Market Trends: How to Win as WAN Edge and Security Converge Into the Secure Access Service Edge" that dives into how to enable security and network access controls as-a-service from the cloud. But what is Gartner's SASE pronounced like "sassy"? The...
New Cache Poisoning Attack Lets Attackers Target CDN Protected Sites
A team of German cybersecurity researchers has discovered a new cache poisoning attack against web caching systems that could be used by an attacker to force a targeted website into delivering error pages to most of its visitors instead of legitimate content or resources. The issue could affect...
Vxscan
This is a Python script called Vxscan, which is a comprehensive scanning tool. It is primarily used for sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, and SQL injection. T...
CVE-2019-14997
The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose through caching vulnerability when Jira is configured with a reverse Proxy and or a load balancer with caching or a CDN...
Apache Traffic Control Authentication Vulnerability
Apache Traffic Control is the United States Apache Apache Software Foundation of a distributed , scalable content delivery solutions. The product is mainly used to build large-scale content delivery network. An authentication vulnerability exists in Apache Traffic Control, which stems from...
UPDATE: Kali Linux 2019.3 Release
PenTestIT RSS Feed Kali Linux 2019.3, the latest and the greatest Kali Linux release is now officially available! This is the third 2019 release, which comes after Kali Linux 2019.2. This release includes the normal bugs fixes, updates the kernel to version 5.2.9, and includes various new feature...
Cloudflare’s recent 502 Bad Gateway outage blamed on bad software
By Waqas If you are visiting a website and it is displaying “502 Bad Gateway” error it is not your fault but an issue with Cloudflare. Cloudflare, the world's largest "Content Delivery Network" CDN on the internet has suffered a service disruption causing “502 Bad Gateway” error on thousands of...
Sitadel - Web Application Security Scanner
Sitadel is basically an update for WAScan making it compatible for python = 3.4 It allows more flexibility for you to write new modules and implement new features : Frontend framework detection Content Delivery Network detection Define Risk Level to allow for scans Plugin system Docker image...
Adaptive Media Player Named Readers' Choice Finalist
In its first time being nominated, Akamai's Adaptive Media Player AMP was named a runner up in the 2018 Streaming Media Readers' Choice Awards "Video Player/SDK" category. The Awards annually survey Streaming Media's readers for the top products and services for streaming video and audio. We are...
Akamai Takes Home Three Streaming Media Readers' Choice Awards
Streaming Media has announced its 2018 Readers' Choice Award winners at Streaming Media West in Huntington Beach, Calif. Recognizing technological excellence in the online video industry, Streaming Media readers cast more than 25,000 votes across 30 categories. Akamai was honored to win in three...
Introducing New WhoAmI Tool DNS Resolver Information
The Domain Name System DNS tools “whoami.akamai.net” and its alias “whoami.akamai.com” have been used for many years, often as a step in the process for diagnosing how a content delivery network CDN is directing traffic, locality, and network reachability issues. Whoami was originally introduced ...
Drupal Issues Highly Critical Patch: Over 1M Sites Vulnerable
Drupal released a patch for a “highly critical” flaw in versions 6, 7 and 8 of its CMS platform that could allow an attacker to take control of an affected site simply by visiting it. Drupal also warned an unprivileged and untrusted attacker could modify or delete data hosted on affected CMS...
Porn Site Becomes Hub for KovCoreG Group Malvertising Campaigns
Pornhub, a top-20 ranked U.S. website according to Alexa, was serving up large-scale malvertising attacks exposing millions of visitors to click-fraud. Behind the attacks is the KovCoreG Group, best known for distributing Kovter click-fraud malware. The campaigns, spotted by researchers at...
Cloudflare CTO Goes Inside the Cloudbleed Bug
MADRID—John Graham-Cumming presided over a confessional Wednesday at Virus Bulletin 2017. Cloudflare’s chief technology officer was frank and apologetic about February’s Cloudbleed bug, which leaked memory from the content delivery network that included internal private keys and authentication...
Novel Attack Tricks Servers to Cache And Expose Personal Data
LAS VEGAS—Researcher Omer Gil has devised a way to trick a web server into caching pages and exposing personal data. The so-called web caching attack targets sites that use content delivery network CDN services such as Akamai and Cloudflare. These services act as traffic load balancers and revers...
What You Need to Know About Caching Video Series
In this "unofficial" video series, Akamai Solutions Engineers Tedd Smith and CJ Arnesen explain the basics of caching: what it is, why it's important, and how to get the most out of it. A great introduction to Akamai, caching, and content delivery network CDN basics, this series supplements Akama...
Serious Bug Exposes Sensitive Data From Millions Sites Sitting Behind CloudFlare
A severe security vulnerability has been discovered in the CloudFlare content delivery network that has caused big-name websites to expose private session keys and other sensitive data. CloudFlare, a content delivery network CDN and web security provider that helps optimize safety and performance...
File Containment Vulnerability in CDN Acceleration Server of Shanghai Dilian Information Technology Co.
Ltd. CDN acceleration server, through the introduction of active content management layer and global load balancing, and combined with content caching and other technologies, for users to build a middle layer optimized for broadband service support on the basis of the existing IP network, so that...
'Kyle and Stan' Malvertising Network Targets Windows and Mac Users
A malvertising network that has been operating since at least May has been able to place malicious ads on a number of high-profile sites, including Amazon and YouTube and serves a unique piece of malware to each victim. The network, dubbed Kyle and Stan by the Cisco researchers who analyzed its...
