Hello and welcome to the Thursday, March 14th, 2020, 4 edition of the Sands.

And it's Stormstarst, Stormcast. My name is Johannes Ulrich. And today I'm recording from

Jackstville, Florida. Large language models like chat GPT are making so many tasks easier.

Now, a lot of people talk about the offensive side of it,

how chat GPT can be tricked into writing malware, writing exploit. Xavier today took a more

defensive look at chat GPT and explored if it's at all useful, helping the obfuscate malicious Python scripts.

And while it actually worked pretty well, this particular script had two obfuscated lines.

One was a byte sequence that was first decompressed and then base 64 decoded.

Chad GPT did a great job in not only the obvious skating the code,

but also kind of explaining what it does, basically check whether or not there is network connectivity.

Xavier is promising more diaries like it, in particular.

He says he's working currently on integrating chat GPT with JITRA, everybody's favorite open source reverse analysis tool. And while we are not done with patches yet as often after patch Tuesday, we sort of have cleanup Wednesday, where we cover

some additional patches. Let me start with probably the more serious ones here. I would actually

rate this particular set of vulnerabilities worse than the vulnerabilities patched by Microsoft,

and they are released by 40Net and are part of 40 OS and 40 proxy.

The vulnerabilities that are being addressed here do have a CSS rating of 9.8 and 8.1 respectively

and could allow an attacker to seize complete control of vulnerable systems.

Now, one thing that Fortinet here suggests as a workaround is to not rely on form-based

authentication instead to use something like basic HTTP authentication or NTLM.

Nina, one of them is actually that great, but the one big thing that these authentication mechanisms

do, and I think actually I mentioned this sort of as one kind of workaround yesterday is that they

prevent any custom code from being executed before authentication happens, substantially

...