[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7wPLgDAeD-aJrpuclzzQ-k9jYoC0eFhlXS06aTSiP0E":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"f1b813b9-887a-4fbe-bb88-a7315627e261","Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data","cloudflare-fixes-flaw-that-let-one-container-read-another-customer-s-leftover-di-b6378b","A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could not choose whose data they got, according to Cloudflare. The company","A vulnerability in Cloudflare Containers allowed one customer's container to access residual data left on shared disk space by previous containers. The issue stemmed from thin provisioning in Linux, where disk blocks were not wiped before being reallocated. While the data was not from live workloads and attackers couldn't target specific customers, researchers found leftover directory structures, database pages, and credential files. Cloudflare has since fixed the flaw by re-enabling block wiping and clearing affected server caches, and found no evidence of exploitation.","Cloudflare fixes flaw allowing one container to read another customer's leftover disk data.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fcloudflare-fixes-flaw-that-let-one.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjJuj6tshfElqbwJCAvJf00nvl1Tng8D3yBW5uZZyVpwOqXJuzBB1df67IlNM1OSkHdGH11R6G8rseykpeXWUBu24sJvyxDL-uiqA7NC2ItwUUN2fMdaTWhqcHR2WYfpI6ihc0EVpEXfep1VFBygmh2-F6cAL1lwin0qQbmSebV5OmhqFmgBs3i0_WtdGI\u002Fs1600\u002Fcf-escape.jpg","2026-09-25T04:49:22+00:00","2026-09-25T08:00:11.594762+00:00",8,[17,20,22,25,27],{"name":18,"type":19},"Cloudflare Containers","product",{"name":21,"type":19},"Cloudflare Sandboxes",{"name":23,"type":24},"Cloudflare","vendor",{"name":26,"type":19},"Linux",{"name":28,"type":19},"SQLite","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40,42],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[23,18,21],{"controls":50,"vendors":138},[51,80,109],{"slug":52,"name":53,"problem":54,"products":55},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"slug":81,"name":82,"problem":83,"products":84},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":110,"name":111,"problem":112,"products":113},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",[139],{"slug":140,"name":23,"logo_path":141,"roles":142},"cloudflare","\u002Fvendor-logos\u002Fcloudflare.png",[143],"affected",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":160},"cloudflare-container-flaw-exposed-residual-disk-data-across-customers","Cloudflare Container Flaw Exposed Residual Disk Data Across Customers","The vulnerability arose from a misconfiguration in Cloudflare's container infrastructure where thin-provisioned Linux disk blocks were not wiped before being reallocated to new customer containers. This meant leftover artifacts — including directory structures, database pages, and credential files — from previous workloads were potentially readable by subsequent tenants. In multi-tenant cloud environments, improper resource recycling can break critical isolation boundaries even without active exploitation. This incident highlights that secure defaults (such as block wiping) must be explicitly verified and tested, not assumed, especially when performance optimizations are applied. The potential exposure of credential files underscores how even 'residual' data can carry serious confidentiality risk.",[149,150,151,152,153,154,155,156,157,158,159],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 3: Data Protection","NIST SP 800-88: Guidelines for Media Sanitization","NIST SP 800-190: Application Container Security Guide","NIST AC-4: Information Flow Enforcement","NIST SC-4: Information in Shared System Resources","NIST CM-6: Configuration Settings","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","ISO\u002FIEC 27001 Annex A.8.10: Information Deletion","ITIL: Change Enablement (change management and risk assessment)",{}]