Firewall 0-day Investigations | Tom Lancaster
Summary: Tom Lancaster presented a May 2023 Volexity Cyber Sessions talk covering two real-world cases of Chinese nation-state attackers using 0-day exploits to compromise firewall devices. The talk explains how the attacks were detected and the investigation process that followed, including the actions attackers took after breaching the target network.
What you should know: The entry point in both cases was the firewall itself, exploited as a 0-day by a nation-state actor - the perimeter device you rely on for defense was the way in, and the source's focus on post-breach attacker actions is the part most organizations would have no visibility into.
Read the original at Volexity Blog ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026