Uncovering Critical Vulnerabilities in Magento: A Deep Dive -

Uncovering Critical Vulnerabilities in Magento: A Deep Dive

Listen now

Description

Today, co-hosts Michael and Shubs reflect on the six-year milestone of Assetnote and do a deep dive into a critical Magento bug. They explore the importance of proactive and reactive security research, the limitations of traditional vulnerability scoring systems like CVSS and EPSS, and the significance of understanding exploitability in assessing vulnerabilities. Learn about the need for deeper insights into security risks and the value of in-depth research for security teams. To learn more about Assetnote, visit https://www.assetnote.io/.

More Episodes

See all »

Maximizing Security Outcomes: The Role of ASM in Bug Bounty Programs

Running an effective bug bounty program requires balancing an attractive scope and payout to hunters with an attack surface that challenges hunters to do more than automated scans. Program managers want to pay for skillful findings, not automated ones. In this episode, we talk about how ASM helps...

Published 10/10/24

Surfacing Security

Published 10/10/24

Internet-Wide Recon: Moving Past IP-Centric Approaches

In this episode, we discuss the blindspots of IP-centric approaches to asset discovery and the importance of understanding the full attack surface of an organization. We unpack the challenges posed by modern cloud architectures, load balancers, and WAFs, and how these can create blind spots in...

Published 10/02/24