{"id":242386,"date":"2026-08-08T02:19:48","date_gmt":"2026-08-08T07:19:48","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/08\/when-security-becomes-a-risk-factor-privacy-risks-of-public-url-scanning-services"},"modified":"2026-08-08T02:19:48","modified_gmt":"2026-08-08T07:19:48","slug":"when-security-becomes-a-risk-factor-privacy-risks-of-public-url-scanning-services","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/08\/when-security-becomes-a-risk-factor-privacy-risks-of-public-url-scanning-services","title":{"rendered":"When security becomes a risk factor\u2014privacy risks of public URL-scanning services"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/when-security-becomes-a-risk-factor-privacy-risks-of-public-url-scanning-services2.jpg\"><\/a><\/p>\n<p>URL scanning services are now a common component of modern security workflows. They help detect phishing websites or malware early and warn users before they visit a URL. However, the practice of some of these services\u2014publishing scanned URLs\u2014can inadvertently expose sensitive user data. CISPA researcher Ali Mustafa, together with colleagues from the Max Planck Institute for Security and Privacy and Ca\u2019 Foscari University of Venice, conducted the first systematic investigation of the risks arising from this practice.<\/p>\n<p>The researchers presented their paper, \u201c<a href=\"https:\/\/ieeexplore.ieee.org\/document\/11573500\/\" target=\"_blank\">LEAKYLINKS: Measuring the Security and Privacy Risks of URL Scanning Services<\/a>,\u201d at the IEEE Symposium on Security and Privacy 2026.<\/p>\n<p>URL scanning services such as URLScan, VirusTotal or Cloudflare Radar automatically analyze websites for suspicious content. \u201cFor example, they check network requests, site reputations or embedded scripts, thereby helping companies and individuals detect malicious websites early on,\u201d Mustafa explains.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>URL scanning services are now a common component of modern security workflows. They help detect phishing websites or malware early and warn users before they visit a URL. However, the practice of some of these services\u2014publishing scanned URLs\u2014can inadvertently expose sensitive user data. CISPA researcher Ali Mustafa, together with colleagues from the Max Planck Institute [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-242386","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=242386"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242386\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=242386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=242386"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=242386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}