AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
SANS Stormcast: Webshells; Undocumented ESP32 Commands; Camera Used For Ransomware Distribution
Mar 10, 2025
Discover the lurking dangers of web shells, which attackers use to infiltrate vulnerable servers while staying one step ahead. Learn about hidden backdoors in the popular ESP32 chipsets that could compromise IoT devices, thanks to recent findings from a conference presentation. Finally, be shocked by the Akira group's tactic of deploying ransomware through unsuspecting webcams, illustrating a new wave of innovative cyber threats. Enhance your security awareness with these intriguing insights!
06:45
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Web shells present a major security threat by allowing attackers to exploit vulnerabilities in web applications, necessitating strict control over server configurations.
- Undocumented commands in ESP32 chipsets expose significant vulnerabilities that could be exploited in IoT devices, highlighting the need for thorough security audits.
Deep dives
Web Shells and Security Measures
Web shells continue to pose significant security risks, particularly when introduced through file upload and command injection vulnerabilities. Attackers often exploit these vulnerabilities by executing commands to download malicious web shells onto compromised servers. To mitigate these risks, it's crucial for organizations to establish a clear production lifecycle for their web applications, ensuring that they know which files are intended to be present on their servers. By maintaining awareness of expected configurations, it becomes easier to identify unauthorized changes and thwart potential attacks.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode