Latest / Kill Chains and Coffee
Cloud Compromise & OT Reachability | Kill Chains and Coffee
Discover how low-priority vulnerabilities turn into complete kill chains in the AI era.
In this episode of “Kill Chains and Coffee," Armadin Founder and Chief Offensive Security Officer Evan Peña joins host Greg Heon to discuss two kill chains Armadin recently discovered.
Kill chain 1 progressed from SSRF to API remote code execution (RCE) to Kubernetes and the cloud. Kill chain 2 went from an assumed breach to an operational technology (OT) environment.
The kill chain 1 entry point was unauthenticated SSRF via a manipulated HTTP header. The SSRF chained to API RCE, landing the Armadin…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.