Paul's Security WeeklySubscribe
Vulnerability Management, Security Program Controls/Technologies, Security Staff Acquisition & Development

Uncovering a Major Linux PolicyKit Security Vulnerability: Pwnkit – Wheel – PSW #727

Qualys researcher, Wheel, will discuss the discovery of the 12 year old Linux vulnerability in PolicyKit - which Qualys had dubbed, PwnKit. Wheel will provide an overview of the vulnerability and then dive into a technical discussion of the research.

Segment Resources:

https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034

Full episode and show notes

Announcements

  • CRA's Business Intelligence Unit has launched its next survey on Zero Trust! What are Your Barriers to Zero Trust Implementation? Take our survey and enter to win a $500 Tango card by visiting https://securityweekly.com/zerotrust. Report results will be released at our upcoming Zero Trust E-Summit in March!

Guest

. Wheel
Researcher at Qualys

“Wheel” is a member of the Qualys Research Team responsible for finding zero-days.

Host

Principal Security Evangelist at Eclypsium

Related

Discovering a common Salesforce mistake launched this security professional’s career – Aaron Costello – ESW #379

Aaron was already a skilled bug hunter and working at HackerOne as a triage analyst at the time. What he discovered can't even be described as a software bug or a vulnerability. This type of finding has probably resulted in more security incidents and breaches than any other category: the unintentional misconfiguration. There's a lot of conversati...
The Saga Continues – PSW #846

Get ready for a wild ride in this week's podcast episode, where we dive into the latest security shenanigans! Default Credentials Gone Wild: We’ll kick things off with a look at how default credential scanners are like that friend who shows up to the party but never brings snacks. They're everywhere, but good luck finding one that actually works!...