Persistence is Vital: Key Lessons Learned when Finding and Discovering CVE-2020-17049

NetSPI Managing Consultant Jake Karnes spoke at the CrestCon UK 2022 conference at the Royal College of Physicians. During this session, Jake described how he found and responsibly disclosed a serious Microsoft vulnerability: The Kerberos Bronze Bit Attack.

Watch the recording below to:

• Gain a high-level understanding of Kerberos and the Bronze Bit Attack
• Get a behind-the-scenes look at the responsible vulnerability disclosure process
• Learn from and apply Jake’s lessons learned from a critical vulnerability finding to your security testing practices