Latest CDN news

Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator

The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected up to tens of millions of websites has been traced to a common operator. Researchers discovered a public GitHub repository with leaked API keys helping them draw a conclusion.
- Ax Sharma
- June 28, 2024
- 09:00 AM
- 1
Polyfill claims it has been 'defamed', returns after domain shut down

The owners of Polyfill.io have relaunched the JavaScript CDN service on a new domain after polyfill.io was shut down as researchers exposed it was delivering malicious code on upwards of 100,000 websites.. The Polyfill service claims that it has been "maliciously defamed" and been subject to "media messages slandering Polyfill."
- Ax Sharma
- June 27, 2024
- 06:57 AM
- 0
Cloudflare: We never authorized polyfill.io to use our name

Cloudflare, a lead provider of content delivery network (CDN) services, cloud security, and DDoS protection has warned that it has not authorized the use of its name or logo on the Polyfill.io website, which has recently been caught injecting malware on more than 100,000 websites in a significant supply chain attack.
- Ax Sharma
- June 27, 2024
- 05:18 AM
- 1
GitLab affected by GitHub-style CDN flaw allowing malware hosting

BleepingComputer recently reported how a GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with Microsoft repositories, making the files appear trustworthy. It turns out, GitLab is also affected by this issue and could be abused in a similar fashion.
- Ax Sharma
- April 22, 2024
- 11:05 AM
- 0
GitHub comments abused to push malware via Microsoft repo URLs

A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository, making the files appear trustworthy.
- Lawrence Abrams
- April 20, 2024
- 10:14 AM
- 1
Discord will switch to temporary file links to block malware delivery

Discord will switch to temporary file links for all users by the end of the year to block attackers from using its CDN (content delivery network) for hosting and pushing malware.
- Sergiu Gatlan
- November 04, 2023
- 11:16 AM
- 1
Critical Cloudflare CDN flaw allowed compromise of 12% of all sites

Cloudflare has fixed a critical vulnerability in its free and open-source CDNJS potentially impacting 12.7% of all websites on the internet. CDNJS serves millions of websites with over 4,000 JavaScript and CSS libraries stored publicly on GitHub, making it the second-largest JavaScript CDN.
- Ax Sharma
- July 16, 2021
- 06:29 AM
- 0
StackOverflow, Twitch, Reddit, others down in Fastly CDN outage

Major websites around the world are either completely down or not loading properly in a global outage.
- Ax Sharma
- June 08, 2021
- 06:33 AM
- 1
What are these suspicious Google GVT1.com URLs?

These Google-owned domains have confused even the most skilled researchers and security products time and time again if these are malicious. The domains in question are redirector.gvt1.com and gvt1/gvt2 subdomains that have spun many threads on the internet. BleepingComputer has dug deeper into the origin of these domains.
- Ax Sharma
- February 28, 2021
- 11:52 AM
- 2
Discord Abused to Spread Malware and Harvest Stolen Data

Malware developers and attackers are abusing the Discord chat service by using it to host their malware, act as command and control servers, or by modifying the chat client to perform malicious behavior.
- Lawrence Abrams
- October 31, 2019
- 03:17 PM
- 1
New CPDoS Web Cache Poisoning Attacks Impact Sites Using Popular CDNs

Details have emerged about a new class of web cache poisoning attacks that could be used to deny users access to resources delivered through a content delivery network (CDN).
- Ionut Ilascu
- October 22, 2019
- 09:23 PM
- 0
Cryptojacking Campaign Employs Deleted GitHub Account and Unofficial GitHub CDN

Cybercriminals appear to have an obsession with abusing GitHub and GitHub-related services to hide in-browser cryptocurrency mining scripts that they later use on hacked sites.
- Catalin Cimpanu
- August 01, 2018
- 12:00 AM
- 0
Google User Content CDN Used for Malware Hosting

Hackers are hiding malicious code inside the metadata fields of images hosted on Google's official CDN (content delivery network) —googleusercontent.com.
- Catalin Cimpanu
- July 20, 2018
- 12:35 AM
- 0
Researchers Hijack Over 2,000 Subdomains From Legitimate Sites in CloudFront Experiment

Security experts from MindPoint Group, an information security firm, have hijacked over 2,000 subdomains from legitimate websites while researching possible security flaws in Amazon's CloudFront CDN service.
- Catalin Cimpanu
- April 05, 2018
- 06:25 AM
- 0
AdBlock Adds Feature to Cache Popular JavaScript Libraries

Popular ad-blocking browser extension AdBlock has added a new feature that will cache popular JavaScript libraries locally on the users' computers.
- Catalin Cimpanu
- March 01, 2018
- 11:45 AM
- 1