Selena Larson

Mark, how are you doing?

I'm doing good, Selena.

How are you?

I'm good.

So the first two exploits that were involved in the exploit chain are both Chromium vulnerabilities.

And they were both, I believe, the fix for them was committed in August.

And so the first one, like Mark mentioned, and Selena, like you so kindly summarized, is a type confusion bug in the V8 engine.

Specifically in the part of the V8 engine that optimizes the code, the type confusion bug allowed an attacker to craft what's known as a primitive, which allows you to read arbitrary addresses in memory and then read and write to memory.

All right.

Save us here, Selena.

[upbeat music] I'll allow it.

So just to get everyone all on the same page, on August 12th, the White House issued a national security presidential mem- memorandum titled Expanding Capabilities to Combat Transnational Cyber-Enabled Crime.

It's just like...

You know, because it, it's a high-stress environment.

Whether, whether you're an offensive person going out and doing, you know, the, the, uh, the offensive operations, or you're just in a SOC, like you had mentioned, Selena, you know, um, you know, th- this weekend, uh, you know, I was supposed to be at my kid's birthday, and all of a sudden we have an IR right now.

Uh, and I'm on the phone, and I'm briefing people, and, you know, and it's just I'm working 15-hour days.

Hello to all our cyber pals.

I'm Selena Larson, your host of the Proofpoint Discarded Podcast.

This week, I wanted to do something a little bit different.

I'm sharing with you a recording of our latest Intercepted.

And hello, everyone.

Welcome to our August episode of Intercepted.

I am your host, Therese Abadka, joined by my lovely co-host, Selena Larson.

And today, our heads are up in the clouds.