The Curious Case of the Rogue SOAR

Explore the intriguing world of cybersecurity in this 31-minute conference talk from Nullcon Goa 2023. Delve into the unexpected vulnerabilities of Security Orchestration, Automation, and Response (SOAR) tools, which are typically trusted to defend networks. Discover how attackers can exploit these tools, potentially leading to complete network compromise. Learn about the far-reaching consequences of such vulnerabilities, including risks to internal devices and services in large corporate networks. Gain insights into future attack vectors, such as log poisoning on Security Operations Centers (SOCs) and SOAR tools utilizing Large Language Models like ChatGPT, which could result in prompt injections. Presented by Jaden Furtado and Mukesh Kumar, this talk offers valuable knowledge for cybersecurity professionals, network administrators, and anyone interested in staying ahead of emerging threats in the digital landscape.