teissTalk: Evolving the scope of pentesting for remote workers

teissTalk host Jenny Radcliffe was joined by Adrian Winckles, Director of Cyber Security Research Group at Anglia Ruskin University and Ken Munro, Partner, PenTest Partners in a festive teissTalk.

Views on news

An article titled “The internet is on fire” is about the mayhem LOG4Shell, a remote code execution exploit found in popular open-source JAVA logging library wreaked on the internet affecting software products, online systems and internet-connected devices. The critical vulnerability was made public last week, almost a month after security researchers at Alibaba disclosed it to the Apache Software foundation.

Guests agreed that although the vulnerability poses serious threats, the apocalyptic language the article uses is over the top. API and open-source vulnerabilities have already been around for some time (think of Heartbleed, Xcode Ghost, etc) but there are always new exploits, which can still cause a lot of damage if they remain unpatched. Although everyone loves a freebie, there is a pressing need for raising money through (crowd)funding to finance the source code review of open-source projects.