Critical Vulnerability Discovered in Slack's Desktop Application
A significant security vulnerability was discovered in Slack, one of today's most popular business-oriented communication platforms.
A significant security vulnerability was discovered in Slack, one of today's most popular business-oriented communication platforms.
One of today's most popular business-oriented communication platforms. on SlackIt was announced that a significant security vulnerability was discovered the other day. The vulnerability, which is declared to be at a critical level, is caused by hackers using Slack's desktop application. users to access their computers He was paving the way.
The vulnerability was not discovered by Slack's own security team; It was discovered by third-party security researchers. remote code execution The vulnerability that enabled it was so significant that any hacker could gain access to confidential files, passwords, the internet network and much more.
The hacker who discovered the vulnerability was given a reward of only $1,750:
The security vulnerability published on HackerOne was fixed by Slack and the threat was eliminated. Discovering the vulnerability and sharing 'oskars' HackerOne user, as a reward $1,750 won. The discovered vulnerability has not affected any Slack users so far.
According to the information on HackerOne, by performing the attack on only one person, hackers could also access other colleagues in the network of the attacked user. Those who see the reward that Slack gives to the user who reports the bug, see the difference between the rate of the bug and the reward ratio. does not fit together He was complaining about it.
Many users interested in computer security, It is worth 20 billion dollars He railed against Slack, stating that Slack only gave the user $1,750. If the same researcher reports the same error to a private company, users can report that company to the researcher. tens of thousands of dollars He said he might have given it.
Slack on HackerOne on the page According to the information provided, the 'critical' category, which includes 'remote code execution' attacks, which is the type of attack discovered, has been updated. Reward given with the update up to $5,000 had risen. Slack to users who discovered a vulnerability in the last 90 days $36,375 made payment.
Every business is unique. Let’s explore how we can tailor these ideas to your own digital project.
