Episode 116: Packagist Patch Shows how Supply Chain Threats Could Impact WordPress

Think Like a Hacker with Wordfence

Content provided by Mark Maunder. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Mark Maunder or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

3y ago 24:58

MP3•Episode home

Archived series ("Inactive feed" status)

When? This feed was archived on October 25, 2021 06:08 (2+ y ago). Last successful fetch was on September 16, 2021 15:41 (2+ y ago)

Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

A vulnerability discovered in Packagist, which is used by Composer to manage PHP package requests, could have allowed attackers to cause Composer to download the wrong source code, potentially affecting all WordPress sites. Packagist reports that it's not aware of any exploits. A SQL injection vulnerability was patched in the CleanTalk AntiSpam plugin installed on over 100k sites. Vulnerabilities were discovered in Exim mail server, including 3 RCE vulnerabilities. We’re seeing some of the first trickle-down attacks from the Codecov supply chain attack, first from HashiCorp and also from Twilio. Apple releases iOS 14.5.1 to patch vulnerabilities in WebKit that are being exploited in the wild, a DDoS takes down Belgium, Peloton exposes customer information, and Signal taunts Facebook with a rejected advertising campaign.

125 episodes

#Wordpress #Tech #Innovation #Security #Tech News #Mark Maunder #News #Industries