Cybersecurity News
Filters
Filtered by tag: cloudflare × Clear
15 Malicious Firefox Extensions Abuse Cloudflare Workers to Exfiltrate Crypto Wallet Secrets
Matched: cryptocurrency
Fifteen malicious Firefox extensions posing as crypto wallets, themes, and browser tools have been stealing recovery phrases, private keys, login credentials, and clipboard data since at least March 2026. The campaign uses Cloudflare Workers to exfiltrate stolen information and spans 77 extensions total, putting users' digital assets and online accounts at serious risk.
When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers
Check Point Research found five memory-corruption bugs in workerd, the C++ runtime underlying Cloudflare Workers and Code Mode. By targeting this shared layer, researchers broke both products simultaneously. The flaws exist in native "glue" code bridging V8 and Cloudflare's sandbox, which relies entirely on V8 for isolation. The vulnerabilities allowed sandbox escape from what should be isolated untrusted code execution environments.