Thwarting the Tactics of the Equifax Attackers
Nov 13, 2017Alex Cruz Farmer
Summary
This post details the analysis of the Equifax breach, highlighting the importance of timely patching and the risks associated with single points of failure in vulnerability communication. It explains Remote Code Execution (RCE) via Apache Struts vulnerabilities (CVE-2017-5638, CVE-2017-9805) with code examples and discusses SQL Injection (SQLi) with a detailed example of account takeover. It also mentions Cloudflare's WAF rules protecting against these and other attacks (XSS), noting the high volume of matches observed. The post emphasizes communication, awareness of installed software versions, and the role of Cloudflare's WAF as a last line of defense.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack