Twilio's TaskRouter JavaScript SDK was in a world-writeable S3 bucket, and had what appears to be a precursor to a payment-card skimmer inserted for about 12 hours

Deimos
Wed, 22 Jul 2020 19:59:40 +0000

Link URL: https://www.theregister.com/2020/07/21/twilio_sdk_code_injection/

Comments URL: https://tildes.net/~comp/qs3/twilios_taskrouter_javascript_sdk_was_in_a_world_writeable_s3_bucket_and_had_what_appears_to_be_a

Votes: 10

Comments: 0