Skip to content
Sign inOpen the app
CyberWire Daily

A Jira vulnerability that’s leaking data in the public cloud. [Research Saturday]

Jan 2, 2020 · 16 min · Season 4 · Episode 116
0:00-16:05

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

Open in podnod

Unit 42 (the Palo Alto Networks threat intelligence team) released new research on a Jira vulnerability that’s leaking data of technology, industrial and media organizations in the public cloud. The vulnerability (a Server Side Request Forgery -- SSRF) is the same type that led to the Capital One data breach in July 2019.

Jen Miller-Osborn is the Deputy Director of Threat Intelligence for Unit 42 at Palo Alto Networks, and she joins us to share their findings.

The research can be found here:

https://unit42.paloaltonetworks.com/server-side-request-forgery-exposes-data-of-technology-industrial-and-media-organizations/