Sharon Brizinov's guest appearances

Sharon Brizinov

@BEERISAC: OT/ICS Security Podcast Playlist

20 Minute Leaders

Nexus: A Claroty Podcast

OwlTail

Podcast: Nexus: A Claroty Podcast (LS 28 · TOP 10% what is this?)Episode: Sharon Brizinov on Hacking IoTPub date: 2022-12-12Claroty Team82 Director of Research Sharon Brizinov joins the podcast to discuss the recent Pwn2Own Toronto event. Brizinov was successful in three categories at the event, finding and exploiting zero day vulnerabilities in two network-attached storage devices and a popular router. In this episode, Brizinov explains his preparation for the contest, and compares and contrasts hacking industrial control systems and internet of things connected devices. The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: <a href="https://www.listennotes.com/podcasts/nexus-a-claroty-podcast-claroty-zCh-SjZqY3A/" rel="nofollow" target="_blank">Nexus: A Claroty Podcast</a> (LS 28 · TOP 10% <a href="https://www.listennotes.com/listen-score/" rel="nofollow" target="_blank">what is this?</a>) Episode: <a href="https://www.listennotes.com/e/ea6904d5e55445d48b64d31158455f77/" rel="nofollow" target="_blank">Sharon Brizinov on Hacking IoT</a> Pub date: 2022-12-12 Claroty <a href="https://claroty.com/team82" rel="nofollow" target="_blank">Team82</a> Director of Research Sharon Brizinov joins the podcast to discuss the recent <a href="https://www.zerodayinitiative.com/blog/2022/12/8/pwn2own-toronto-2022-day-three-results" rel="nofollow" target="_blank">Pwn2Own Toronto</a> event. Brizinov was successful in three categories at the event, finding and exploiting zero day vulnerabilities in two network-attached storage devices and a popular router.  In this episode, Brizinov explains his preparation for the contest, and compares and contrasts hacking industrial control systems and internet of things connected devices. The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Sharon Brizinov on Hacking IoT

Podcast: Nexus: A Claroty Podcast (LS 25 · TOP 10% what is this?)Episode: Sharon Brizinov on Hacking and Securing PLCsPub date: 2022-04-20In this episode of the Aperture podcast, Claroty Team82 vulnerability research lead Sharon Brizinov covers a presentation he’s giving at the S4x22 conference in Miami that explains a unique attack against Siemens SIMATIC 1200 and 1500 PLCs that enabled native code execution on the device. Also, Brizinov explains his participation in the Pwn2Own contest. S4 hosts the only ICS-focused version of Pwn2Own, and this year there are four categories of targets in scope: control servers, OPC UA servers, data gateways, and HMIs.“The goal in most cases is to achieve remote code execution, not only to find a vulnerability but achieve exploitation,” Brizinov said. “Usually we are able to find at least one vulnerability, but the real challenge is to exploit those vulnerabilities. Usually the difficulty around this is to bypass the different security mitigations that both the software, hardware, or operating system present.”The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: <a href="https://www.listennotes.com/podcasts/nexus-a-claroty-podcast-claroty-zCh-SjZqY3A/" rel="nofollow" target="_blank">Nexus: A Claroty Podcast</a> (LS 25 · TOP 10% <a href="https://www.listennotes.com/listen-score/" rel="nofollow" target="_blank">what is this?</a>) Episode: <a href="https://www.listennotes.com/e/b0442475577a45218e8f0ba5e908527e/" rel="nofollow" target="_blank">Sharon Brizinov on Hacking and Securing PLCs</a> Pub date: 2022-04-20 In this episode of the Aperture podcast, Claroty Team82 vulnerability research lead Sharon Brizinov covers a presentation he’s giving at the S4x22 conference in Miami that explains a <a href="https://claroty.com/2021/05/28/blog-research-race-to-native-code-execution-in-plcs/" rel="nofollow" target="_blank">unique attack against Siemens SIMATIC 1200 and 1500 PLCs</a> that enabled native code execution on the device.  Also, Brizinov explains his participation in the Pwn2Own contest. S4 hosts the only ICS-focused version of Pwn2Own, and this year there are four categories of targets in scope: control servers, OPC UA servers, data gateways, and HMIs. “The goal in most cases is to achieve remote code execution, not only to find a vulnerability but achieve exploitation,” Brizinov said. “Usually we are able to find at least one vulnerability, but the real challenge is to exploit those vulnerabilities. Usually the difficulty around this is to bypass the different security mitigations that both the software, hardware, or operating system present.” The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Sharon Brizinov on Hacking and Securing PLCs

In this episode of the Aperture podcast, Claroty Team82 vulnerability research lead Sharon Brizinov covers a presentation he’s giving at the S4x22 conference in Miami that explains a unique attack against Siemens SIMATIC 1200 and 1500 PLCs that enabled native code execution on the device. Also, Brizinov explains his participation in the Pwn2Own contest. S4 hosts the only ICS-focused version of Pwn2Own, and this year there are four categories of targets in scope: control servers, OPC UA servers, data gateways, and HMIs.“The goal in most cases is to achieve remote code execution, not only to find a vulnerability but achieve exploitation,” Brizinov said. “Usually we are able to find at least one vulnerability, but the real challenge is to exploit those vulnerabilities. Usually the difficulty around this is to bypass the different security mitigations that both the software, hardware, or operating system present.”

In this episode of the Aperture podcast, Claroty Team82 vulnerability research lead Sharon Brizinov covers a presentation he’s giving at the S4x22 conference in Miami that explains a <a href="https://claroty.com/2021/05/28/blog-research-race-to-native-code-execution-in-plcs/" rel="nofollow" target="_blank">unique attack against Siemens SIMATIC 1200 and 1500 PLCs</a> that enabled native code execution on the device.  Also, Brizinov explains his participation in the Pwn2Own contest. S4 hosts the only ICS-focused version of Pwn2Own, and this year there are four categories of targets in scope: control servers, OPC UA servers, data gateways, and HMIs. “The goal in most cases is to achieve remote code execution, not only to find a vulnerability but achieve exploitation,” Brizinov said. “Usually we are able to find at least one vulnerability, but the real challenge is to exploit those vulnerabilities. Usually the difficulty around this is to bypass the different security mitigations that both the software, hardware, or operating system present.”

Claroty

LEAD

Michael is Co-Founder and CTO at Five Sigma, an InsurTech company helping insurers optimize claims handling processes using data. Previously, Michael was leading R&amp;D teams within the Prime Minister's office. Michael worked on multiple groundbreaking projects, including one that has received the "Israel Defense Prize". Michael is a data science and math enthusiast with a BSC and MSC in mathematics from Bar Ilan University.

Michael is Co-Founder and CTO at Five Sigma, an InsurTech company helping insurers optimize claims handling processes using data. Previously, Michael was leading R&amp;D teams within the Prime Minister's office. Michael worked on multiple groundbreaking projects, including one that has received the "Israel Defense Prize". Michael is a data science and math enthusiast with a BSC and MSC in mathematics from Bar Ilan University.