Anatomy of a Cloud Infrastructure Attack via a Pull Request
from Protocol Hosted by Teleport
In April 2021, I discovered an attack vector that could allow a malicious Pull Request to a Github repository to gain access to our production environment. Open source companies like us, or anyone else who accepts external contributions, are especially vulnerable to this. https://goteleport.com/blog/hack-via-pull-request/
Embed this episode
No transcript yet.
Similar podcasts
Frequently asked questions
How long is this episode of Protocol?
This episode is 11 minutes long.
When was this Protocol episode published?
This episode was published on February 2, 2022.
Can I download this Protocol episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.