Skip to content
Off-topic for aiqbench

Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Hackers Can Manipulate Web Cache Keys to Access Restricted Data and Poison Websites

Cybersecurity News4 min read

A web cache poisoning technique called cache key injection could let attackers access restricted data, disrupt websites, or poison cached pages with malicious content. Alex Brumen’s research shows attackers don’t always need to exploit unkeyed HTTP request values, the usual focus of cache poisoning attacks. Instead, they can abuse values that are already included in […] The post Hackers Can Manipulate Web Cache Keys to Access Restricted Data and Poison Websites appeared first on Cyber Security News.

A web cache poisoning technique called cache key injection could let attackers access restricted data, disrupt websites, or poison cached pages with malicious content. Alex Brumen’s research shows attackers don’t always need to exploit unkeyed HTTP request values, the usual focus of cache poisoning attacks. Instead, they can abuse values that are already included in a cache key when a web server combines them without clear separators. Web caches improve performance by storing…

Excerpt shown under the publisher's RSS terms · 73 words · full text and figures are on the publisher's site

Related coverage