{"id":3296,"date":"2018-04-12T14:13:00","date_gmt":"2018-04-12T14:13:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/one-in-five-serverless-apps-has-a-critical-security-vulnerability\/"},"modified":"2018-04-12T14:13:00","modified_gmt":"2018-04-12T14:13:00","slug":"one-in-five-serverless-apps-has-a-critical-security-vulnerability","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/one-in-five-serverless-apps-has-a-critical-security-vulnerability\/","title":{"rendered":"One in five serverless apps has a critical security vulnerability"},"content":{"rendered":"
<\/div>\n

Serverless computing is an emerging trend that is likely to explode in popularity this year. It takes the idea of a smaller server footprint to the next level. First, there were virtual machines, which ran a whole instance of an operating system. Then they were shrunk to containers, which only loaded the bare minimum of the OS required to run the app. This led to a smaller footprint.<\/p>\n

Now we have \u201cserverless\u201d apps, which is a bit of a misnomer. They still run on a server; they just don\u2019t have a dedicated server, virtual machine, or container running 24\/7. They run in a server instance until they complete their task, then shut down. It\u2019s the ultimate in small server footprint and reducing server load.<\/p>\n

Audit of serverless apps finds critical security flaws<\/h2>\n

And like all emerging technologies, security seems to be an afterthought. An audit from a firm specializing in serverless application security has found one in five serverless apps has one form or another of a critical security flaw, allowing attackers to manipulate applications and perform various malicious actions.<\/p>\n