Guard Me If You Can: A Novel Passwordless-to-Password Attack

Overview: About the speaker Yuya Chudo is a principal consultant at Fujitsu. He specializes in red team testing and vulnerability assessment, and has been working in the field of cyber security for around ... We will also identify the protection gap in Credential Guard that allows this exfiltration, present real-world attack scenarios, and cover recommended mitigations. On modern Windows endpoints, Credential Guard is designed to prevent these credential theft, and it raises the bar for attackers. Prior r Details: esearch has uncovered several bypasses, but our investigation found that, by combining authentication flows with keys stored in the endpoint's TPM, malware running with only standard user privileges can ... Sahan Fernando - Building an Attack Path Management Practice in Healthcare Simon Lachkar and Charl-Alexandre Le Brun - AnsibleHound Attack Path Management applied to Ansible Valdemar Carøe - Catching Credential Guard Off Guard Yuya Chudo an