Paul's Security WeeklySubscribe
Vulnerability Management, Security Program Controls/Technologies, Security Staff Acquisition & Development

Uncovering a Major Linux PolicyKit Security Vulnerability: Pwnkit – Wheel – PSW #727

Qualys researcher, Wheel, will discuss the discovery of the 12 year old Linux vulnerability in PolicyKit - which Qualys had dubbed, PwnKit. Wheel will provide an overview of the vulnerability and then dive into a technical discussion of the research.

Segment Resources:

https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034

Full episode and show notes

Announcements

  • CRA's Business Intelligence Unit has launched its next survey on Zero Trust! What are Your Barriers to Zero Trust Implementation? Take our survey and enter to win a $500 Tango card by visiting https://securityweekly.com/zerotrust. Report results will be released at our upcoming Zero Trust E-Summit in March!

Guest

Researcher at Qualys

“Wheel” is a member of the Qualys Research Team responsible for finding zero-days.

Host

Principal Security Researcher at Eclypsium

Related

You can skip this ad in 5 seconds