Hello, welcome to the Thursday, November 15th, 2018 edition of the Sands and its Storm Center's

Stormcast. My name is Johannes Ulrich and the damn recording from Jacksonville, Florida.

In yesterday's patch Tuesday updates, there was one vulnerability that was already exploited in the wild, according to Microsoft,

but we didn't really have a lot of details about it. Well, that changed now. Kerspersky published

a blog post about CVE 2018, 85, 89. This was this Wynn 32K Pervage Escalation escalation vulnerability. Well, it turns out that Kerski

did detect this particular vulnerability being exploited on a system that was protected by

Kerserski and high malware. So Kerski notified Microsoft and now publishes some details about the vulnerability

and the exploit that they found in the wild. They only saw it being exploited against 32-bit Windows

7. Well, I'm talking about exploiting Seredays yesterday, the Pone to Own contest, which is held as part of the Pax SAC conference, finished and with it, a number of devices fell as it is now quite common.

The original idea behind this contest was that if you're able to exploit the device you got to keep it

that's sort of where the name Pohn to own comes from but in recent years this

zero-day initiative has sponsored and has handed out quite nice cash prices this year the

winning team got away with $250,000 worth of price money.

Now all devices that were part of the contest did eventually fall to new exploits.

All these devices were fully patched.

For example, in iPhone 10, they also had a Galaxy S9 and a Xiaomi My6.

Altogether, 18 new vulnerabilities were released as part of this contest, and the SIRDA initiative did pay out a total of $325,000 for these exploits.

These exploits will not be released, at least not right away.

The Serity Initiative will use them and report them to respective manufacturers.

Now, we typically do see patches coming out for these vulnerabilities relatively quickly.

Now, as part of the contest, these phones were connected to a Wi-Fi access point that

the attacker controlled.

...