my tweets are severely limited by my lack of understanding of what I am doing.
So Apache Struts vulnerability patched 3/8/17, and Equifax applied the patch 4.5 months later (7/30/17), only after learning it was hacked.
Depending on how far behind it may have been a faff to apply it. You have to reroll/deploy the app, AppSec and DevOps area.
-
-
Docker for the win..
-
Docker still vuln, and still needs a process to update and redeploy. As a dev platform Struts looks... shakey, security wise.
- Pokaż odpowiedzi
Nowa rozmowa -
-
-
Ten tweet jest niedostępny.
-
Respectfully, I think you're comparing two very different business processes: vulnerability mgmt and incident response.
- Pokaż odpowiedzi
-
-
-
They needed an
#appsec team in a bad way. -
They appear to have one, I saw the recruitment for it. They've got a lot of legacy dev like that to sort out
Koniec rozmowy
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.