About Contact

Cloudflare API Key Compromises Prompt Security Concerns and Fixes Across Multiple Platforms

Cloudflare API Key Compromises Prompt Security Concerns and Fixes Across Multiple Platforms

BTCPay’s API key fix is merged, but its latest release still predates the patch
BTCPay’s API key fix is merged, but its latest release still predates the patch

The October 19 merge restricts broad store-scoped grants, while the latest listed release still predates the change. Read the full story on CryptoSlateUnderstand the crypto stories that matter and...

Passport maker Foundation says compromised Cloudflare API keys sent phishing from its domains
Passport maker Foundation says compromised Cloudflare API keys sent phishing from its domains

Foundation says leaked Cloudflare API keys let scammers send emails from its domains. It revoked every key and says Passport funds and hardware are safe.

Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys

Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe.... Read the full story at The Defiant

API Key Rotation: What Revocation and Redeployment Actually Change
API Key Rotation: What Revocation and Redeployment Actually Change

Scheduled replacement can let two keys overlap. Suspected exposure makes that overlap a security decision, not just a way to avoid downtime.... Read the full story at The Defiant

Coverage dates

First reported:

First saved on ClustZ:

Coverage updated:

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.