Introduction

Attack the Glass in plain English, for a board, a general counsel, an executive team and anyone else meeting it for the first time: what it is, why existing controls do not reach it, and the questions worth putting to your own people. No engineering background is assumed. The technical treatment is under Technical.

Attack the Glass: Executive Summary

v2.4.7 · 12 sectionsa twelve minute read

Attack the Glass is a supply chain injection vulnerability that targets the last step in almost every digital system: the moment a screen is assembled and shown to a person. The page you publish is not the page your reader sees, and neither of you can tell.

Start reading