Security
Concerns of supply-chain attacks amplify as remote code execution was found in Ruby gem strong_password
Snyk Blog0 views
On July 5th, 2019, the CVE-2019-13354 security advisory was published for a malicious version of the strong_password Ruby gem which allows for remote code execution in applications bundling the vulnerable dependency.
Source：https://snyk.io/blog/ruby-gem-strong_password-found-to-contain-remote-code-execution-code-in-a-malicious-version-further-strengthening-worries-of-growth-in-supply-chain-attacks/PreviousHow SME lender New10 uses AWS and Snyk to deliver quickly and securelyNextSnyk research team discovers severe prototype pollution security vulnerabilities affecting all versions of lodash
Related posts
Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
0SANS ISC
AI Vulnerability Finding
0Schneier on Security
![[$] Managing the kernel CVE flood](/storage/uploads/covers/auto/p165341.svg)
[$] Managing the kernel CVE flood
0LWN.net
5 Stars for sale: Inside the underground fake review trade
0Hacker News New
Show HN: Hands-on security exercises for students and instructors
0Hacker News Show
Investors Dish on New Startups & What They'd Back Next
0Dark Reading