Zero-day vulnerabilities in commonly used third-party applications can put your environment at risk, especially if AI-enabled adversaries move faster than you do in finding them.
In this episode of “Kill Chains and Coffee,” host Greg Heon dives deep with Armadin Founder, Evan Peña and Senior Capabilities Researcher, Kai Huang on a series of unauthenticated remote code executions (RCEs) Armadin conducted on SolarWinds products.
The Armadin team combined assumed breach scenarios with advanced zero-day capabilities to build complete kill chains from external assets to internal systems. They discovered the zero-days using large language models (LMMs) to handle approximately 90% of the workload, with human red team guidance driving the final 10%.
The AI models were a significant force multiplier of human expertise, in terms of both speed and scale. One attack path ended in domain admin compromise, while another reached internal network switches, potentially exposing industrial devices.
These attacks foreshadow what might become commonplace in the next few years: future LLMs advancing AI-driven attacks to an impact level that only nation-state adversaries can currently achieve.
Guidance for security teams: Armadin’s AI Hyperattacks safely deliver the machine speed and scale to help you identify and eliminate exploitable risk across your entire environment. Learn how at https://hyperattack.AI.
RESOURCES
Companion Blog Posts:
Part I: https://www.armadin.com/blog-posts/unauthenticated-rce-in-solarwinds-access-rights-manager-responsible-disclosure-part-1
Part II: https://www.armadin.com/blog-posts/unauthenticated-rce-in-solarwinds-web-performance-monitor-responsible-disclosure-part-2
Part III: https://www.armadin.com/blog-posts/unauthenticated-rce-in-solarwinds-core-responsible-disclosure-part-3
Armadin Offensive Security Platform: https://armadin.com/platform
AI Hyperattacks: https://hyperattack.AI
Request a Demo: https://www.armadin.com/request-a-demo
CONNECT WITH ARMADIN
Website: https://armadin.com
LinkedIn: https://www.linkedin.com/company/armadin
Twitter/X: https://x.com/armadinsecurity