Blocking Visual Studio Code embedded reverse shell before it's too late

Re:Blocking Visual Studio Code embedded reverse shell before... by baz00 on Saturday September 23, 2023 @02:01PM (#37625700)

I thought their goal was collecting vendor certifications.

[ Parent | on HN ]

Re:Blocking Visual Studio Code embedded reverse shell before... by eddythompson80 on Saturday September 23, 2023 @02:04PM (#37625732)

Ouch dude

[ Parent | on HN ]

Re:Blocking Visual Studio Code embedded reverse shell before... by baz00 on Saturday September 23, 2023 @02:08PM (#37625770)

It's a burn but it's accurate. Had three consultancies in (high end well known ones) and and two in house certified to their eyeballs professional cyber security experts in charge. All they did was tick a fuck load of boxes, run some scans, spend a lot of money and make it really hard for people.

Yet I managed to find a fully remote RCE and exploit it in 30 minutes after they did all this.

The industry is a fucking scam.

[ Parent | on HN ]

Re:Blocking Visual Studio Code embedded reverse shell before... by rf15 on Saturday September 23, 2023 @04:34PM (#37627245)

Confirming this experience, it is Security Theatre all the way down.

[ Parent | on HN ]

Re:Blocking Visual Studio Code embedded reverse shell before... by Forbo on Sunday September 24, 2023 @12:45PM (#37634726)

Sounds like it's time to make your own certification. :D

[ Parent | on HN ]