TLDR DevOps · OPINIONS & TUTORIALS

WHEN SCANNERS MISS THE ATTACK: HOW CLOUDFLARE CLIENT-SIDE SECURITY PROTECTS STOREFRONTS

blog.cloudflare.com21 min read

Summary from the TLDR DevOps newsletter

Cloudflare's Page Shield ML system uncovered four malicious JavaScript campaigns hijacking affiliate commissions, cloaking ad fraud, and running a remote code execution backdoor on e-commerce sites, detecting all eight payloads even though most were missed by VirusTotal and URLScan.