Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
A short minisode on Apache Struts, XML deserialisation attacks, and Equifax.
- XML? Be cautious!
- Severe security vulnerability found in Apache Struts using lgtm.com (CVE-2017-9805)
- CVE-2017-9805: Analysis of Apache Struts RCE Vulnerability in REST Plugin
- Apache Struts Statement on Equifax Security Breach
- Apache Struts Security Bulletins
- OWASP Dependency Check
- struts-pwn - an exploit tester
- Remotely Exploitable Java Zero Day Exploits through Deserialization (2015 alert for Apache Commons Collections 3.x)
- A critical Apache Struts security flaw makes it 'easy' to hack Fortune 100 firms
Upgrade your s**t!