Podcast Detail

Hikvision Exploited; Detecting PAM Backdoors

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://chrt.fm/track/2748D7/https://traffic.libsyn.com/securitypodcast/7766.mp3

Podcast Logo
SANS Daily Network Security Podcast (Stormcast) for Monday, November 22nd, 2021
00:00

Interested in Internet Storm Center stickers? Check here if there are still some available for today.

Hikvision Security Cameras Potentially Exposed to Remote Code Execution
https://isc.sans.edu/forums/diary/Hikvision+Security+Cameras+Potentially+Exposed+to+Remote+Code+Execution/28056/

Detecting PAM Backdoors
https://isc.sans.edu/forums/diary/Backdooring+PAM/28058/

Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem
https://dl.acm.org/doi/pdf/10.1145/3460120.3484768

CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory
https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/