ShellTorch - The Next Evolution in *4Shell Executions
CNCF [Cloud Native Computing Foundation] via YouTube
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore a critical security vulnerability in the PyTorch ecosystem through this conference talk by Gal Elbaz and Avi Lumelsky from Oligo Security. Dive into the details of ShellTorch, a chain of four vulnerabilities allowing Remote Code Execution (RCE) in TorchServe, with a focus on the newly discovered CVE-2023-43654 carrying a CVSS score of 9.8. Learn about the potential impact on thousands of exposed instances and the risks of unauthorized access to AI models. Understand the importance of securing AI applications and tooling stacks in the era of growing AI and LLM adoption. Witness a live demonstration of the exploit, which enables viewing, modifying, stealing, and deleting AI models and sensitive data on targeted TorchServe servers. Gain valuable insights into immediate mitigation steps to protect your systems from this high-severity threat.
Syllabus
ShellTorch the Next Evolution in *4Shell Executions - Gal Elbaz & Avi Lumelsky, Oligo Security
Taught by
CNCF [Cloud Native Computing Foundation]