S0:E25 — The Exchange Bug That's Worse Than Its Score
A CVSS 8 elevation-of-privilege bug in on-prem Exchange looks unassuming until you dig into what it actually grants an attacker. Jess and Jake break down the proxy flaw, why "authorized attacker" is doing a lot of quiet work in that description, and why this is one of the rare moments defenders get a head start before exploitation goes wide.
Jake's course at Wild West Hackin' Fest: https://www.antisyphontraining.com/product/hands-on-ai-security-risk-assessment-with-jake-williams/
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.