Clever and “Shellshock”
Clever’s Response to the “Shellshock” Security Issue
Recently, a critical security issue was discovered and disclosed to the larger community. This issue, nicknamed Shellshock, could have allowed an attacker to take control of certain systems using specially crafted HTTP requests. The vulnerability came from a flaw in Bash, a tool used by the majority of Internet web servers, including some of Clever’s machines.
Even though we had no reason to believe that any of our services were directly vulnerable, we immediately took action on Wednesday, September 24th to completely secure all of our systems. Our developers worked around the clock to apply fixes as soon as they became available, typically within an hour of release.
We have investigated our systems for evidence of any attempts to exploit this vulnerability and found no such evidence. We will continue watching “Shellshock” closely, and continue to scan for malicious attempts to access Clever’s systems.
If you’d like more general information about “Shellshock”, please read more on the Clever engineering blog.
More to read
February 29, 2024
Clever is Secure by Design: Roadmap for 2024Read Clever’s detailed Secure by Design product roadmap – a critical aspect of fulfilling the Secure by Design Pledge. In August 2023, I had the privilege of joining the Back to School Safely Cybersecurity event hosted by First Lady Dr. Jill Biden at the White House. In partnership with the U.S. Cybersecurity and Infrastructure Security […]
February 12, 2024
Former teacher launches her second career as an engineerLearn about Sophia's experiences, challenges, and triumphs in her transition from teaching to engineering, and find out why she chose Clever as a launchpad for her second career.
December 18, 2023
Year in review: Diversity, equity, and inclusion in 2023Explore how we evolved our diversity, equity and inclusion efforts in 2023 and learn more about our journey.