Government Rails Site Hit Hours After CVE Patch

Rietta patched a government client running a Ruby on Rails website within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.
105 points by rietta 47 days ago rietta.com 35 comments

Summary

A government client’s Ruby on Rails website was targeted by exploit attempts shortly after a critical security patch was applied. The rapid response to a serious vulnerability highlights the ongoing threats faced by web applications.

Comments (35 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open