Topic

#Web Security

7 articles on Web Security — news, releases, guides and analysis from the SourceFeed engine.

Even Cloudflare Couldn't Tell Cloudflare From Phishing

A veteran browser-security engineer ran phishing triage on the Wallets launch, and Cloudflare's own support AI agreed with him.

Ji-ho Choi

Adform's Breach Made the Ad Tracker the Malware

A trojanized trackpoint-async.js swapped crypto wallet addresses across thousands of sites while every scanner called it clean.

Article · 1w ago2

Cloudflare Turnstile's 'Bypass' Costs $1.45 Per Thousand

A denied bounty report is really a lesson about who owns validating bearer tokens.

Article · 2w ago0

Cursor's CORS Fix Is a Critical Vulnerability

AI assistants keep reflecting the Origin header with credentials on — the one pattern that turns an authenticated API into an open door.

Article · 2w ago0

SQL Injection Still Chains to RCE on Apple

A single unparameterized CFML query behind a JSON API turned a travel portal into remote code execution.

Article · 1mo ago2

The CAPTCHA is Dead (And AI Killed It)

Active puzzles no longer stop modern bots, forcing developers to shift to passive, cryptographic, and behavioral defense layers.

Article · 1mo ago3

Chrome Strips the Last Manifest V2 Escape Hatches — Time to Audit Your Browser Tooling

Google is deleting the feature flags that kept uBlock Origin and other MV2 extensions alive in Chrome. Edge and Opera are lining up behind it — and anyone leaning on webRequest-style blocking in headless or test stacks should plan accordingly.

News · 2mos ago2