Three Windows zero-days in three months: how we found them in the wild

Presented by

Anton Ivanov - Head of Advanced Threats Research and Detection Team

About this talk

Within just a three-month period, Kaspersky Lab technologies automatically detected a unique occurrence of three zero-day exploits in the wild. All of them were found in APT attacks in the Middle East and Asia. Attacks that go through zero-day vulnerabilities continue to be among the most dangerous, as they involve the exploitation of an undiscovered and unfixed weakness. This, though, makes them particularly difficult to detect and prevent. If such a vulnerability is found by criminals first, it can be used to create an exploit – a special malicious program that will have open access to an entire system. This “hidden threat” attack scenario is widely used by sophisticated actors in APT attacks and was used across all these three incidents. Security researcher Anton Ivanov is head of the team of researchers that, in collaboration with Kaspersky Lab GReAT, disclosed zero-day vulnerabilities in Microsoft Windows OS following Kaspersky Lab mechanisms detecting the exploit. In this webinar, Anton will share the details of the work done by his team while working on the following zero-days vulnerabilities: •CVE-2018-8453 •CVE-2018-8589 •CVE-2018-8611 Anton will elaborate on the technologies that made it possible to detect these exploits and discuss the process of searching and finding such vulnerabilities – including both technical and ethical (such as responsible disclosure) aspects.

Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (199)
Subscribers (43285)
On this channel, Kaspersky experts share their knowledge and key insights into high-fidelity threat hunting and intelligence, incident management, malware analysis, reverse engineering, security solutions, and several other vital aspects of the cyberworld. To keep you up to date, the experts also provide detailed webinars and workshops on how Kaspersky security solutions and services can halt and prevent a vast range of malicious attacks conducted by cybercriminals. Kaspersky is a global cybersecurity and digital privacy company that has been providing protection for 25 years, with over 400 million users from more than 200 countries. Kaspersky experts' mission is to help you find the perfect weapon to protect against any cyberthreat, carried out by even the most sophisticated cybercriminals. Kaspersky researchers are top-notch cybersecurity and protection technology experts, who regularly take part in leading information security events worldwide as best-in-class speakers. Kaspersky’s deep threat intelligence and security expertise is constantly being transformed into innovative security solutions and services that protect businesses, critical infrastructure, governments and consumers around the globe. Subscribe and learn more about the latest cybersecurity discoveries on the threat landscape and how to defend against them. Contact us at https://www.kaspersky.com/about/contact