Risky Bulletin: Brotli RCE is wrecking what's left of the internet
Runs 7:50. Streams from dts.podtrac.com only when you press play.
While everyone was distracted by PHP, another RCE has been wrecking the internet, Australia’s ABC wipes some staff devices, a third PHP RCE is incoming and researchers discover a new DDoS attack vector in HTTP/3.
Show notes from Risky Business News.
Explained
The technology and terms in this story. Learn more
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- TechnologyPHPA programming language that powers a large share of websites, including WordPress.
- AttackDDoS · Distributed denial of serviceFlooding a service with traffic from many machines until it can't respond.