OffSec Update (12 - 16 Oct 2020)

Progress

Collaboration

Discussed the new infosec service desks with GRC
Discussed the EISA initiative with GRC
Synchronized issue tracker with product security team's finding

All staging security issues that are also on the prod should also be tracked down at SECURITY jira and follow GRC VMP process.

Issues Reported

Authentication bypass in AWS and GCP auth methods in HashiCorp Vault <1.4.4 (CVE-2020-16250, CVE-2020-16251) https://29022131.atlassian.net/browse/SECURITY-593

Plan

Strategic planning for Red Team Q4 exercise
Continue research as usual

People
-

Problem
-

Misc
-