Cybersecurity · 22 views

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it ca…

Source The Hacker News Story Brief Updated June 22, 2026

Story intelligence Beta

Confidence Limited Single-outlet story

Views 22 Community interest

Read time 1 min ~57 words

Story Brief

A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic through the same proxy. The bug traces to a 1997 FTP-parsing change and is still live in Squid's default configuration.

Read full article on The Hackernews

Dark ReadingJust now4 views
Calling on Cyber Pros to Help Defend City HallContinue reading
SecurityWeek50m ago
Critical Isolated-vm Vulnerability Leads to RCE on HostContinue reading
BleepingComputer51m ago1 view
CISA orders feds to patch actively exploited TrueConf Server flawsContinue reading
The Hacker News2h ago1 view
Wazuh and AI For Enhanced SOC WorkflowsContinue reading

Support HappeningNow

Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.

Support HappeningNow

Report an issue with this page

HAPPENING NOW

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

More from Cybersecurity