3 ms·
Note that the linked article isn't clickbait. It's an InfoSec description of how they dealt with the same vuln that hit Equifax. The article was written ~6 week
by thephyber 9y ago
Note that the linked article isn't clickbait. It's an InfoSec description of how they dealt with the same vuln that hit Equifax. The article was written ~6 weeks before Equifax's stated timeline of attack.
To clarify your comment, Equifax did recently reveal[1] the specific vuln (CVE-2017-5638) in Apache Struts that was used during the ~May-July attack that caused the most headlines.
[1] https://investor.equifax.com/news-and-events/news/2017/09-15-2017-224018832 https://investor.equifax.com/news-and-events/news/2017/09-15...
- joatmon-snoo 9y agoOh, yes, I understand that the linked article isn't clickbait - I was calling out the title specifically for that reason, because if Equifax hadn't confirmed the CVE, I think it would qualify as a clickbait title ;) Thanks for the link, though, I somehow managed to miss that announcement.