Slack in the security spotlight – lessons for collaboration servers

Researchers at German pentesting company Enable Security just published an intriguing blog post about a security problem they found in the popular online collaboration tool Slack. The short version is that they uncovered a way to poke around inside the private parts of Slack’s network, so they disclosed it, Slack fixed it and paid them a $3500 bounty… …and then, as sometimes happens when the rest-of-life gets in the way, it was another two years before they got the green light to publish their findings.

Read full article on Naked Security

 


Date:

Categorie(s):