All content for Protocol is the property of Teleport and is served directly from their servers
with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.
Audio versions of Teleport best technical blog posts.
https://goteleport.com/blog/
Anatomy of a Cloud Infrastructure Attack via a Pull Request
Protocol
11 minutes
3 years ago
Anatomy of a Cloud Infrastructure Attack via a Pull Request
In April 2021, I discovered an attack vector that could allow a malicious Pull Request to a Github repository to gain access to our production environment. Open source companies like us, or anyone else who accepts external contributions, are especially vulnerable to this.
https://goteleport.com/blog/hack-via-pull-request/
Protocol
Audio versions of Teleport best technical blog posts.
https://goteleport.com/blog/
