cybersecurity
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
Source:
feeds.feedburner.com 1 min read
Share
You are reading a summary. The full content is hosted on feeds.feedburner.com.
A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic through the same proxy. The bug traces to a 1997 FTP-parsing change and is still live in Squid's default configuration. Researchers at Calif.io disclosed it in June and named it Squidbleed (
Read the full article on the original website
External link to feeds.feedburner.com
Related Articles
cybersecurity
JadePuffer ransomware used AI agent to automate entire attack
1 min read •
cybersecurity
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
1 min read •
cybersecurity
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
1 min read •