Ep1.Capital One Incidente 2019
Erratic robó al información de más de 100 millones de personas, pero dejó su Curriculum CV justo en el repositorio donde estaba exfiltrando la información... Esta es la historia del incidente que tuvo la empresa Capital One en el año 2019. Referencias https://www.capitalone.com/digital/facts2019/ https://www.capitalonesettlement.com/en https://securityboulevard.com/2019/12/cost-of-data-breaches-in-2019-the-4-worst-hits-on-the-corporate-wallet/ https://insidersecurity.co/capitalone-data-breach-how-ssrf-vulnerability-exposed-100-million-customer-records/ https://dl.acm.org/doi/full/10.1145/3546068 https://www.capitalone.com/about/newsroom/capital-one-announces-data-security-incident/ https://datatracker.ietf.org/doc/html/rfc3927 https://en.wikipedia.org/wiki/Link-local_address https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html https://github.com/owasp-modsecurity/ModSecurity/wiki/ModSecurity-Frequently-Asked-Questions-(FAQ)#user-content-I_hear_that_ModSecurity_can_be_run_in_embeddedmode_what_does_that_mean_exactly