Podcast Detail

SAMBA Vuln. Exploited;

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://traffic.libsyn.com/securitypodcast/5538.mp3

previous
next
Podcast Logo
SANS Daily Network Security Podcast (Stormcast) for Monday, June 12th 2017
00:00
Spotify spotify logo

Discussion

For an interesting overview of the unique attack surface presented by Wifi SOCs in general / Broadcom chips in particular as well as a detailed walk through of an interesting vulnerability and how it was used to get code execution on the application processor, check out some recent work by Google Project Zero:

Part 1
https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html

Part 2
https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_11.html

As smart phone operating systems present more and more difficult targets to attackers, expect attackers to start looking into other system components as a way in: Cellular baseband, Wifi, bluetooth, NFC, etc. These things are made by third parties and often there is very little known about them, so you can guess that security is not going to be as good. They are ripe grounds for new vulnerabilities and they will only become more attractive to attackers.
Posted by Anonymous on Mon Jun 12 2017, 16:50

New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form


Application Security: Securing Web Apps, APIs, and MicroservicesSan FranciscoDec 5th - Dec 10th 2022
Application Security: Securing Web Apps, APIs, and MicroservicesOnline | US PacificDec 5th - Dec 10th 2022
Intrusion Detection In-DepthOnline | Central European TimeJan 30th - Feb 4th 2023
Network Monitoring and Threat Detection In-DepthBrusselsJan 30th - Feb 4th 2023
Application Security: Securing Web Apps, APIs, and MicroservicesOnline | US CentralFeb 20th - Feb 25th 2023