InfoQ - Security - News

Cloudflare Adds Optional OAuth Scopes, Letting Developers Mark What Users May Decline

Steef-Jan Wiggers — Wed, 02 Sep 2026 09:07:00 GMT

Cloudflare has added optional OAuth scopes, letting client owners mark which permissions users may deselect at consent. The company names MCP servers as the motivating case, since agents request the union of everything they might do. Partial consent exists elsewhere, but developer control over which scopes are droppable does not.

By Steef-Jan Wiggers

Audio Fingerprinting Discovered on Alibaba Websites While Debugging BLE Multipoint Disconnects

Olimpiu Pop — Fri, 28 Aug 2026 07:07:00 GMT

A recent discovery revealed that AliExpress employs silent audio streams for device fingerprinting, leveraging the Web Audio API. This technique involves analyzing hardware-specific audio processing to distinguish user devices. Privacy-focused browsers have developed countermeasures, highlighting a security gap in current web standards regarding audio context initialization and user privacy.

By Olimpiu Pop

DRAM Controller Register Manipulation Breaks CPU Memory Isolation

Olimpiu Pop — Sun, 23 Aug 2026 04:04:00 GMT

Security researcher Christopher Domas developed skitter-creek-bath-salts, an open-source hardware security tool that disrupts CPU privilege boundaries by manipulating memory controller translation registers. This allows unprivileged software to access protected memory regions, revealing a vulnerability in modern processor architectures that could affect cloud and confidential computing security.

By Olimpiu Pop