2/27 Cloudbleed: Private info breach through Cloudflare

Summarized from CNET. com:

Cloudbleed is the latest internet bug that puts users private information in jeopardy, through a breach of the internet company Cloudflare.

Cloudflare securely moves information entered by users of ~3,400 “https” websites to the sites’ servers. Some information was unexpectedly saved when it should not have been, and some of it was cached by search engines.

If any of your accounts that use Cloudflare, change the passwords. Fitbit, Yelp, Uber, OKCupid, and Medium are a few, but you can enter a website URL to see if it uses Cloudflare.

[More support for two-factor authentication!] If any of those websites or services offer two-step verification (sometimes called two-factor verification), use it. It ensures that even if someone were to get your password, they would not be able to access your account.

To: Everyone
From: Veronica Brandstrader, LTS, x2171
More info: Computing Help Desk, helpdesk@wellesley.edu, 781-283-7777 (students), x3333 (faculty-staff)

This entry was posted in Security. Bookmark the permalink.