By Alex Griswold The Wall St. Journal Feb 28, 2017 12:33:07A new cybersecurity threat could be lurking in the cloud computing world.
The new threat, which researchers warn could threaten the future of free, decentralized Internet, could be known as a “bubble” of private, encrypted servers.
The threat has been dubbed a “cloud-based DDoS attack” and it has not been detected in any major cyber attack since 2013.
The researchers say the vulnerability is a new type of “black box DDoS” or “DDoS attack,” meaning a malicious program is running inside a server, and can be easily triggered by a network attack.
The attack, the researchers warn, is very dangerous and could have devastating consequences for the free, distributed, Internet.
“We are very concerned about this,” said Chris Valasek, a senior research engineer with the cyber-security firm CloudFlare, which has worked with researchers to track the bug.
“We don’t know what the source of this vulnerability is.
We are hoping that this will be patched in a later patch, but we can’t know that until we see the vulnerability in action.”
The vulnerability was discovered last year by security researcher Jameson Lo, a security researcher with CrowdStrike, a cyber-attack firm.
Lo and others have reported numerous DDoS attacks using similar methods, including a method called “shadow DDoS,” in which attackers inject malicious code into websites.
The researchers say it’s possible the new threat is a separate vulnerability that has not yet been patched, or it could be a newly discovered vulnerability, like the one discovered by CrowdStrike.
The vulnerability has not surfaced in any of the major DDoS operations, but could be found in any attack against a website hosted on the cloud.
It is not clear how the attackers could trigger the attack.
A new attack may be a new form of DDoS, which means a malicious code is running in the background of a server.
The attackers can cause any site to go offline, causing the victim to be unable to download or use the websites contents, or to be able to download a site but not to use it.
The new vulnerability could affect more than just websites hosting services.
The vulnerability has been identified by CloudFlaring, which was also the first to find the vulnerability.
CloudFlares researchers discovered the vulnerability, which the company has patched, in an exploit for the Flash plugin of the Apache Mysql Web Server and a tool for the Apache Web Server, and found it in the MysQL Web Server itself.
“When we found this vulnerability and discovered it, we didn’t know if we had found the first vulnerability,” said CloudFlases head of engineering, Ben O’Brien, who was not involved in the research.
The company has published a patch for the vulnerability as part of a security update.
Valasek told The Wall Sputnik that this vulnerability could be exploited by hackers to inject code into the Apache HTTP Server itself, in order to cause the server to go down, or even to redirect users to a page with malicious content.
“This is just the tip of the iceberg,” he said.
“This is a very bad and very dangerous vulnerability,” O’Donnell said.
“It’s just one more reason why we need to protect the open Internet and the open web.”