The January 2022 Open Source Software Security Summit at the White House[1] brought together top U.S. national security and cyber officials as well as private sector tech leaders to discuss open-source software security, following the discovery of a vulnerability which threatened millions of devices and applications and remains a threat to this day.[2] According to National Security Advisor Jake Sullivan, the summit was a “constructive discussion” about helping the public and private work together to become more resilient. Participating in the conference were officials from multiple federal agencies – the Department of Defense, the Department of Commerce, the Department of Energy, and the Department of Homeland Security, as well as representatives from the Cybersecurity and Infrastructure Security Agency (CISA), the National Institute of Standards and Technology, and the National Science Foundation, and representatives from Amazon, Apple, Facebook/Meta, Google, IBM, the Linux Foundation, the Open Source Security Foundation, Microsoft, and Oracle – and U.S.-based reverse proxy service Cloudflare.[3] (…) Cloudflare is used by a host of ecommerce businesses. It was reported in March 2022 that the top 20 ecommerce companies protected by Cloudflare are Etsy, Walmart, Best Buy, Dell, Nike, Doordash, and H&M, as well as Taylor & Francis Online (tfandonline.com), the journal content platform of one of the world’s leading academic publishers.[5] Cloudflare’s History Of Serving Jihadis Another sector that is protected by Cloudflare to protect websites and forums is jihadi terrorist organizationss. A 2018 in-depth study by the Middle East Media Research Institute (MEMRI) Cyber & Jihad Lab (CJL) on jihadi use of Cloudflare found that for years the company had been providing services to nearly every major jihadi group (see Cloudflare, The U.S.-Based Leading Reverse-Proxy Service, Is Exploited By Every Major Jihadi Organization – Including ISIS, Al-Qaeda, Hamas, Taliban – Posing A Global Security Risk).

via memri: Cloudflare, The U.S.-Based Leading Reverse Proxy Service, Is Favored By Prominent Neo-Nazis And White Supremacists – And Is Part Of Select Group Trusted By U.S. Government To Provide Cybersecurity Services