Security Briefing: Cloudflare Loses Logs, LogoFAIL Exploited, Firefox Zero Days

December 4th, 2024 Security Briefing with IANS Faculty ⁠Wolfgang Goerlich⁠ and ⁠Jake Williams

This Episode Details:

• Cloudflare’s Missing Logs - On November 14, Cloudflare made changes to an internal service that resulted in the loss of 55% of all logs pushed to customers over a 3.5 hour period. Users of the “Cloudflare Logs” service were impacted by what can only be described as a cascading failure.

• LogoFAIL Actively Exploited - Last week, researchers discovered code named BootKitty that was using the LogoFAIL vulnerability to exploit UEFI and load malware at boot time. Malware…