Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby on Rails we...

Ruby on Rails flaws expose thousands of websites to attack

Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby on Rails we...

According to O’Donnell, the RoR vulnerability could be used for the creation of a worm , but it would be far worse if attackers were to use the vulnerability to silently compromise massive numbers of vulnerable websites, grab everything from the database, and install persistent back doors in the infrastructure of every organisation running the vulnerable code.

Full article: http://www.computerweekly.com/news/2240175855/Ruby-on-Rai...

Tweets

@bsodmike » 11 Jan '13, 9pm
Haters are doing their best to make a big deal out of the recent #rails security booboo, which have patches available! [link]
@TheOnyxITGroup » 11 Jan '13, 6am
Ruby on Rails flaws expose thousands of websites to attack - More than 240,000 websites that use Ruby on Rails web a... [link]
@m25host » 11 Jan '13, 1am
#security Ruby on Rails flaws expose thousands of websites to attack [link]
@glynrob » 10 Jan '13, 8pm
@alexparish you seen this? [link]
@itxSMG » 10 Jan '13, 6pm
RT @kamaluf: Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby o... [link] #Pakistan
@kamaluf » 10 Jan '13, 5pm
Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby o... [link] #Pakistan
@HiteshPatel_IT » 10 Jan '13, 5pm
Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use ... [link] #IT #Consultant
@Xc0resecurity » 10 Jan '13, 5pm
#xc0resecurity Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 webs... [link] #cybersecurity
@ITDataSecurity » 10 Jan '13, 4pm
Ruby on Rails flaws expose thousands of websites to attack [link] (Computer Weekly)
@2morrowstudios » 10 Jan '13, 4pm
Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby on Rails we... [link]
@teleglobe » 10 Jan '13, 5pm
Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby on Rails we... [link]
@CyberBullyAlert » 10 Jan '13, 5pm
Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby on Rails we... [link]
@macklamm » 10 Jan '13, 4pm
Ruby on Rails flaws expose thousands of websites to attack [link]
@ComputerWeekly » 10 Jan '13, 4pm
Ruby on Rails flaws expose websites to attack: [link]
@UK_Tech_News » 10 Jan '13, 4pm
Ruby on Rails flaws expose thousands of websites to attack: More than 240,000 websites that use Ruby on Rails we... [link]

Exploit Code, Metasploit Module Out for Ruby on...

threatpost.com 10 Jan '13, 3pm

Just two days after the disclosure of a string of serious vulnerabilities in Ruby on Rails, researchers have released proo...

Attack Code, Metasploit Module Released For Ser...

darkreading.com 10 Jan '13, 9pm

This just got (more) real: Researchers today unleashed exploit code for a pair of newly found vulnerabilities in the popul...

Duizenden websites in gevaar door Ruby on Rails...

security.nl 11 Jan '13, 12pm

Het beveiligingslek in Ruby on Rails waardoor DigiD woensdag offline ging heeft gevolgen voor honderdduizenden websites. R...

Drop everything now and patch Ruby on Rails app...

darkreading.com 10 Jan '13, 9pm

This just got (more) real: Researchers today unleashed exploit code for a pair of newly found vulnerabilities in the popul...

Critical Ruby on Rails flaws fixed, upgrade imm...

net-security.org 09 Jan '13, 2pm

For the second week in a row since the start of the new year, users of open source web application framework Ruby on Rails...

Me at @CSO_Australia: "Nasty Ruby on Rails vuln...

cso.com.au 11 Jan '13, 4am

The revelation of serious long-term vulnerabilities in the popular Ruby on Rails web programming framework is just one of ...

Ruby on Rails Vulnerabilities Discovered, Users...

thewhir.com 10 Jan '13, 4pm

A vulnerability discovered on the Ruby on Rails web application framework allows attackers to bypass authentication system...

Critical Flaws Patched in Ruby on Rails

threatpost.com 08 Jan '13, 9pm

"There are multiple weaknesses in the parameter parsing code for Ruby on Rails which allows attackers to bypass authentica...

Ruby on Rails derails 240,000 sites with enormo...

theregister.co.uk 10 Jan '13, 3pm

Popular programming framework Ruby on Rails is affected by two critical security vulnerabilities - one allowing anyone to ...

Extremely critical Ruby on Rails bug threatens ...

mukpin.com 10 Jan '13, 1pm

Extremely critical Ruby on Rails bug threatens more than 200,000 sites hundreds of thousands of websites are potentially a...

Vulnerability in Ruby on Rails could bring 200,...

geek.com 10 Jan '13, 12pm

In the realm of computer security there are bugs , and then there are bugs . The latter refers to a real showstopper — the...

Update Ruby now before it goes off the Rails

pcworld.com 10 Jan '13, 10pm

Do you use Ruby on Rails? If so, it’s time to update. Now. Ruby on Rails is an open source Web application framework built...

Ruby on Rails patches more critical vulnerabili...

news.hitb.org 09 Jan '13, 10am

Those using the Ruby on Rails web application framework on their websites are being advised to update the software immedia...

Ruby on Rails patches more critical vulnerabili...

infoworld.com 09 Jan '13, 12pm

Those using the Ruby on Rails Web application framework on their websites are being advised to update the software immedia...

Read @adamjodonnell's insights on the latest Ru...

blog.sourcefire.com 09 Jan '13, 8pm

A little under 24 hours ago two major, long-standing vulnerabilities were announced in the popular web programming framewo...