CloudFlare Security Breach: The Result Of Smart Social Engineering, Flaw In Google’s Account Recovery System

CloudFlare, the increasingly popular security and CDN service, suffered a security breach last week that allowed hacktivist group UGNazi to hijack the company's CEO's Matthew Prince's Gmail account and gain access to the account of one of CloudFlare's customers. CloudFlare won't say who exactly the hacker targeted with this attack, but rumor has it that 4chan.org was likely on the hacker's hit list. Now, after investigating the problem over the weekend, CloudFlare is releasing more information about how this could have happened. As Prince told me earlier today, the attack was the result of flaws in AT&T's, Google's and CloudFlare's security protocols. The hacker smartly exploited all of these to gain access to the CloudFlare user's account.

Source: http://feedproxy.google.com/~r/Techcrunch/~3/SRBDKjS9abo/

HEWLETT PACKARD CO HEARTLAND PAYMENT SYSTEMS GOOGLE GOOGLE FORMFACTOR