BleepingComputer reported at the time that ShinyHunters had used it as a zero-day to steal data from 100 organizations.
D
David ShipleyHOST
8:19
Organizations that couldn't patch at the time were told to block the vulnerable PSEM hub endpoint at their web application firewall, and many did, and many apparently stopped there.
D
David ShipleyHOST
8:33
This created a literal WAF bypass.
D
David ShipleyHOST
8:36
Many rules that were put in place looked for the literal path PSEM hub in the defense.
We value your privacy
We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.