This talk explores five critical Rsync vulnerabilities, including a 9.8 severity CVE, affecting over 18,000 exposed servers—many hosting critical files or services. The talk will cover root causes, exploitation techniques, and scanning methods, followed by an analysis of supply chain attack risks with real-world scenarios. While some vulnerabilities are still under disclosure, all discussed findings have received explicit consent from relevant parties.
Simon is a self-taught vulnerability researcher and is part of Google’s Cloud Vulnerability Research team. Apart from playing board-games and traveling, he enjoys finding memory unsafety issues and exploiting logic bugs.
A Self-taught vulnerability researcher and part of Google’s Cloud Vulnerability Research team
Simon is a self-taught vulnerability researcher and is part of Google's Cloud Vulnerability Research team. Apart from playing board-games and traveling, he enjoys finding memory unsafety issues and exploiting logic bugs.