[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fq8AH3-GT3mYCGHbc69tjrN6FC_mc14yr8pxwqYGBHMg":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":6,"url":10,"image_url":11,"published_at":12,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":31,"category":32,"article_tags":36},"8981c722-14ad-45b7-85b5-31f5b0abc73e","Cloudflare fixes Containers cross-tenant flaw exposing customer data","cloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-data-cf659e","Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host. [...]","Cloudflare has patched a vulnerability in its Containers and Sandboxes service that could have allowed Workers Paid account holders to access residual data from other customers' containers on the same physical host. The flaw involved a shared storage pool that reused data blocks without proper zeroing, potentially exposing directory listings, databases, and credentials. Cloudflare stated that no customer data was actually exposed and has since removed the problematic setting and cleared affected storage.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-data\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2023\u002F11\u002F02\u002Fcloudflare.jpg","2026-09-27T14:13:31+00:00","2026-09-27T20:00:23.570922+00:00",7,[16,19,22,24,26,29],{"name":17,"type":18},"Cloudflare","vendor",{"name":20,"type":21},"Containers","product",{"name":23,"type":21},"Sandboxes",{"name":25,"type":21},"Workers Paid",{"name":27,"type":28},"SQLite","technology",{"name":30,"type":28},"Chromium","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[17,20,23],{"controls":52,"vendors":137},[53,82,111],{"slug":54,"name":55,"problem":56,"products":57},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":83,"name":84,"problem":85,"products":86},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"slug":112,"name":113,"problem":114,"products":115},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[116,124,129],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":125,"product_name":126,"url":127,"description":128},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[138],{"slug":139,"name":17,"logo_path":140,"roles":141},"cloudflare","\u002Fvendor-logos\u002Fcloudflare.png",[142],"affected",{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":159},"cloudflare-container-flaw-exposed-cross-tenant-data-via-unzeroed-storage-blocks","Cloudflare Container Flaw Exposed Cross-Tenant Data via Unzeroed Storage Blocks","The root cause of this vulnerability was a misconfigured shared storage pool that reused data blocks without clearing (zeroing) them between tenant allocations — a classic configuration management failure in multi-tenant environments. This meant one customer's container could read residual data left behind by another customer, including sensitive artifacts like directory listings, databases, and credentials. In cloud and shared infrastructure environments, proper memory and storage sanitization between tenant workloads is a fundamental security requirement, not an optional hardening step. While Cloudflare confirmed no actual data exposure occurred, the potential blast radius — credential theft, lateral movement, and data breaches across customer boundaries — underscores how infrastructure-level misconfigurations can completely undermine tenant isolation guarantees. This incident is a reminder that multi-tenant security is only as strong as the least-sanitized shared resource.",[148,149,150,151,152,153,154,155,156,157,158],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 10: Malware Defenses (data sanitization at rest)","CIS Control 18: Penetration Testing (tenant isolation validation)","NIST SP 800-53 SC-4: Information in Shared System Resources","NIST SP 800-53 SC-39: Process Isolation","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 CM-7: Least Functionality","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing (appropriate technical measures)","ISO\u002FIEC 27001 A.13.1.3: Segregation in Networks","NIST CSF PR.DS-5: Protections Against Data Leaks",{}]