The Latest in IT Security

Attackers exploit Twilio’s misconfigured cloud storage, inject malicious code into SDK

23
Jul
2020
Attackers exploit Twilio’s misconfigured cloud storage, inject malicious code into SDK

image credit: pixabay

Twilio has confirmed that, for 8 or so hours on July 19, a malicious version of their TaskRouter JS SDK was being served from their one of their AWS S3 buckets.

“Due to a misconfiguration in the S3 bucket that was hosting the library, a bad actor was able to inject code that made the user’s browser load an extraneous URL that has been associated with the Magecart group of attacks,” the company shared.

Related posts:
  1. How to implement least privilege in the cloud
  2. Hybrid cloud complexity pushes organizations to look for more security tools
  3. Top cloud security controls you should be using
  4. Data security matters more than ever in the new normal
  5. An effective cloud security posture begins with these three steps

Read More

Tags:  
Written by Feedproxy
0 Comments
Comments are closed.

Categories

SATURDAY, APRIL 20, 2024
WHITE PAPERS

Mission-Critical Broadband – Why Governments Should Partner with Commercial Operators:
Many governments embrace mobile network operator (MNO) networks as ...

ARA at Scale: How to Choose a Solution That Grows With Your Needs:
Application release automation (ARA) tools enable best practices in...

The Multi-Model Database:
Part of the “new normal” where data and cloud applications are ...

Featured

Archives

Latest Comments