3 ms·
Does anyone else remember the 27C3 presentation on this? My take away was that Stuxnet was _largely_ enabled by 0day vulnerabilities in Microsoft's products.
by akira2501 3y ago
Does anyone else remember the 27C3 presentation on this? My take away was that Stuxnet was _largely_ enabled by 0day vulnerabilities in Microsoft's products. The especially damning one was the print spooler script running vulnerability.
Anyways, from this perspective, even back then, the analysis was pretty thorough:
https://www.youtube.com/watch?v=rOwMW6agpTI https://www.youtube.com/watch?v=rOwMW6agpTI
- deserted 3y agoThe thing that made it so notable at the time is that it was basically using 'all the things'... a hardcoded password by Siemens, a zero day in some Siemens code, a couple stolen private keys from Taiwanese hardware manufacturers, and 4 Windows zero days (the print spooler one, something with Shortcuts, and two escalation of privilege vulns).