Share story
Security

cfsolve developer says Rust tool solves Cloudflare challenges without a browser

Cloudflare turnstile and challenge page solver in Rust (full reverse, request based) - chris124567/cfsolve Image: Primary
The developer of cfsolve says the Rust library and command line tool can solve Cloudflare Turnstile widgets and challenge pages without running a headless browser. Its documentation describes returning verification tokens or clearance cookies that allow requests through challenge pages. The tool impersonates a browser using a profile and recorded responses to browser checks. It includes a Safari-on-iPhone profile and supports Safari and Chrome profile types. The claimed capability depends on matching browser details: Cloudflare will reject a clearance cookie sent from a different IP address or user agent. New challenge builds can also produce unsupported errors.
Sources
github.com
In this story
Google Apple Cloudflare
Published by Tech & Business, a media brand covering technology and business. This story was sourced from github.com and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security
Security

Cloudflare finds forged eMudhra certificates and persistent patching gaps

Cloudflare says its monitoring found forged certificates using eMudhra's weak signing keys, including one dated less than an hour after Mozilla's public disclosure. It found no evidence that attackers used the keys to intercept Cloudflare connections.

The Cloudflare Blog
Security
Security

Applebee's fixes app credential flaw that exposed customer data

Applebee's exposed registered customers' personal information through a database password embedded in its Android app, TechCrunch reported Friday. The chain confirmed Thursday that it had addressed the flaw. Researcher Robert Wiggins found the credential with AI assistance.

TechCrunch
Security
Security

SSH setup bugs limited access from malicious Cursor extension

Coding errors likely prevented attackers from gaining remote access to many Windows and macOS systems exposed to the malicious Claude Code extension in Cursor's marketplace, BleepingComputer reports, citing Phorion's analysis.

Bleeping Computer
Policy Security
Policy Security

Google in talks on data security for Golden Dome software

Google is in talks with the US Defense Department about securing data that feeds software being built for the Golden Dome missile defense program, Bloomberg reported, citing sources. The discussions concern a new data security effort underpinning the program's software.

Techmeme