CyberWire Daily

ThinkPHP exploit from Asia-Pacific region goes global. [Research Saturday]

Share this episode
Anyone with this link can open it.
Share Link
Start at 0:00

This episode isn’t summarized yet

Create a free account and summarize it. In a few minutes you’ll have the key takeaways and a section-by-section summary.

Show notes

Akamai's Larry Cashdollar joins us to describe an exploit he recently came across while researching MageCart incidents. It's a remote command execution vulnerability affecting ThinkPHP, a popular web framework.
The original research can be found here:
https://blogs.akamai.com/sitr/2019/01/thinkphp-exploit-actively-exploited-in-the-wild.html
 
Learn more about your ad choices. Visit megaphone.fm/adchoices

Couldn't load the audio. A blocker may be stopping the show's tracking links. Open the file