[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fw5Nbq-8snqPyOToYCpglzF0nKyXImsZJzUTeVpMmBXc":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":110},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":30},"0b8676bb-7186-46f8-b939-c8e8517ece00","Has anyone confirmed this?\n\n\"Catching Cloudflare WARP Leaking Real IPs Through Tor\"\n\nhttps:\u002F\u002Ft.co...","has-anyone-confirmed-this-catching-cloudflare-warp-leaking-real-ips-through-tor--00e8e3","Has anyone confirmed this?\n\n\"Catching Cloudflare WARP Leaking Real IPs Through Tor\"\n\nhttps:\u002F\u002Ft.co\u002FqbTXtez75N\n\n\"A visitor reached a Beelzebub honeypot emulating Ollama through six Tor exit nodes across four countries. Every request carried five Cloudflare headers, including the","Security researchers reported that Cloudflare WARP may be leaking users' real IP addresses through Tor exit nodes, with requests containing identifying Cloudflare headers despite Tor's anonymity guarantees. A honeypot experiment tracking traffic across six Tor exit nodes in four countries detected consistent Cloudflare headers that could potentially deanonymize users. The finding raises questions about WARP's privacy protections and Tor compatibility.","Cloudflare WARP allegedly leaks real IPs through Tor exit nodes via HTTP headers.","https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2044133360855846922",null,"2026-04-14T19:19:06+00:00","2026-04-14T20:00:10.930715+00:00",7,[17,20,23],{"name":18,"type":19},"Cloudflare","vendor",{"name":21,"type":22},"Cloudflare WARP","product",{"name":24,"type":25},"Tor","technology","614132b8-5837-4952-b8b5-c6c9a32a1d85",{"id":26,"icon":12,"name":28,"slug":29},"Privacy","privacy",[31,36],{"category":32},{"id":33,"icon":12,"name":34,"slug":35},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":37},{"id":38,"icon":12,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"malware","Ollama","Honeypot service emulated to detect IP leakage",[18,21],{"controls":48,"vendors":104},[49,78],{"slug":50,"name":51,"problem":52,"products":53},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":79,"name":80,"problem":81,"products":82},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":100,"product_name":101,"url":102,"description":103},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",[105],{"slug":106,"name":18,"logo_path":107,"roles":108},"cloudflare","\u002Fvendor-logos\u002Fcloudflare.png",[109],"affected",{"slug":111,"title":112,"body":113,"framework_refs":114,"framework_notes":119},"cloudflare-warp-leaks-real-ip-addresses-through-tor","Cloudflare WARP Leaks Real IP Addresses Through Tor","Cloudflare WARP's configuration appears to be incompatible with Tor's anonymity requirements, as it injects identifying headers into traffic that should be anonymous. This misconfiguration undermines user privacy expectations and demonstrates how security tools can conflict with each other if not properly tested together. The leak of real IP addresses through Tor exit nodes exposes users to potential surveillance and tracking, defeating the purpose of using anonymity networks.",[115,116,117,118],"CIS Control 12 (Network Infrastructure Management)","NIST PR.DS-1 (Data Protection)","GDPR Article 25 (Data Protection by Design)","NIST PR.IP-1 (Configuration Management)",{}]