Himanshu's Home

Blogs Published on Current and Previous Employers' Websites

• CoinMarketCap Client-Side Attack: A Comprehensive Analysis

  CoinMarketCap Client-Side Attack: A Comprehensive Analysis

• Is relying on Indicators of Compromise secure enough?

  Is relying on Indicators of Compromise secure enough?

• Weaponized Google OAuth Triggers Malicious WebSocket

  Weaponized Google OAuth Triggers Malicious WebSocket

• Ruthless Client-Side Attacks Targeting Multiple Platforms with ClickFix

  Ruthless Client-Side Attacks Targeting Multiple Platforms with ClickFix

• Chinese Adult Content Scam Targets Mobile Users Through PWA Injection

  Chinese Adult Content Scam Targets Mobile Users Through PWA Injection

• Over 150K websites hit by full-page hijack linking to Chinese gambling sites

  Over 150K websites hit by full-page hijack linking to Chinese gambling sites

• Over 35,000 Websites Targeted in Full-Page Hijack Linking to a Chinese-Language Gambling Scam

  Over 35,000 Websites Targeted in Full-Page Hijack Linking to a Chinese-Language Gambling Scam

• Government and university websites targeted in ScriptAPI[.]dev client-side attack

  Government and university websites targeted in ScriptAPI[.]dev client-side attack

• The cost of false positives - how we became a target

  The cost of false positives - how we became a target

• Over 5,000 WordPress sites caught in WP3[.]XYZ malware attack

  Over 5,000 WordPress sites caught in WP3[.]XYZ malware attack

• Over 5,000 WordPress sites caught in WP3[.]XYZ malware attack

  Over 5,000 WordPress sites caught in WP3[.]XYZ malware attack

• New client-side attack only a proxy could stop

  New client-side attack only a proxy could stop

• Kuwait ecommerce site is being used to facilitate client-side skimming attacks

  Kuwait ecommerce site is being used to facilitate client-side skimming attacks

• New Magecart attack code revealed

  New Magecart attack code revealed

• New 3rd party JS script attack found: Artifyau[.]com and Quantifymy[.]com

  New 3rd party JS script attack found: Artifyau[.]com and Quantifymy[.]com

• Cisco client-side Magecart JavaScript attack

  A detailed analysis of the magecart type attack on Cisco's merchant website.

• Ticketmaster Data Breach Déjà Vu: What You Need to Know

  A detailed analysis of the repeated data breaches affecting Ticketmaster.

• Navigating the maze of Magecart: a cautionary tale of a Magecart impacted website

  Insights into the Magecart attack vector and how to mitigate it.

• How Cloudflare’s AI WAF proactively detected the Ivanti Connect Secure critical zero-day vulnerability

  Discussion on how AI-driven WAF identified and mitigated a critical vulnerability.

• All Cloudflare Customers Protected from Atlassian Confluence CVE-2023-22515

  Discussion on how AI-driven WAF identified and mitigated a critical vulnerability.

• Unmasking the top exploited vulnerabilities of 2022

  Discussion top exploits in 2022 from the eye of Cloudflare.

• Cloudflare observations of Confluence zero day (CVE-2022-26134)

  Cloudflare observation for CVE-2022-26134.

• WAF mitigations for Spring4Shell

  Spring4Shell attack mitigated by Cloudflare WAF.

• Vulnerable Joomla! Installation under active attack

  Joompla exploit targeting websites.

• One-click fraudsters extend reach by learning Chinese

  Once click fraud on chinese websites infecting users to ask for money.

• Facebook Scam Leads to Nuclear Exploit Kit

  Facebook scam websites leading victimes to nuclear exploit kit.