Zero-days in the wild: 2019 retrospective - ERP Spain.com - España y América Latina

Attacks that involve zero-day vulnerabilities remain among the most dangerous with more and more investment into zero-day exploits taking place in the criminal world. Zero-day vulnerabilities involve the exploitation of an undiscovered and unfixed weaknesses, which makes them particularly difficult to detect and prevent. If such a vulnerability is found by criminals first, it can be used to create an exploit – a special malicious program that will have open access to an entire system. This “hidden threat” attack scenario is widely used by sophisticated actors in APT attacks and was used to conduct a number of incidents in 2019. Security researcher Boris Larin will present an overview of four zero-day vulnerabilities detected and disclosed by Kaspersky in 2019, following mechanisms that detected the exploit, which included Miscosoft Windows OS and Google Chrome exploits. In this session, Boris will share: •What is happening in the zero-day market •What framework was often used to implement many zero-day exploits •What work was done by him and his team when working on the following vulnerabilities: CVE-2019-0797, CVE-2019-0859, CVE-2019-1458, CVE-2019-13720