Learn AI, Data Science & Business — Earn Certificates That Get You Hired
Most AI Pilots Fail to Scale. MIT Sloan Teaches You Why — and How to Fix It
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore a critical security vulnerability in VMware's API that could allow insider threats to escalate privileges and bypass crucial security measures. Delve into how enterprises commonly use VMware's security model to separate infrastructure and guest machine domains, restricting IT teams from accessing sensitive data inside administered machines. Learn about a discovered method to exploit VMware's API, potentially enabling malicious insiders to manipulate files and interact with guest machine consoles despite lacking proper permissions. Gain insights into this 20-minute Black Hat conference talk by Ofri Ziv, which highlights the importance of robust security measures and the potential risks associated with seemingly secure virtualization environments.
Syllabus
Escalating Insider Threats Using VMware's API
Taught by
Black Hat