
ISC StormCast for Friday, March 24th, 2023
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
00:00
Unencrypted Credentials: A Proof of Concept Exploit
Vulnerability in Veeam backup service allows unauthenticated users access to unencrypted credentials. Phylum has an interesting article about how they found a malicious Python module that attempts to use Unicode in order to hide its malicious code. And we also have a pwn to own contest going on again in a Vancouver. This time, the after day one already have exploits for Tesla Model 3 Microsoft Teams and Oracle's Virtual Box.
Transcript
Play full episode