Skip to content
Artwork for Pressure Zone a podcast by Hack The Box
Pressure Zone a podcast by Hack The Box · July 22 · 31 min

The Zero-Day Squeeze

An unauthenticated Remote Code Execution (RCE) vulnerability hits a deep open-source dependency inside your production microservices. The solo maintainer drops a proof-of-concept exploit and refuses to release a patch until corporate users pool a $600,000 sustainability fund. In the fourth episode of Pressure Zone, host Christine Bartlett puts Chief Strategy Officer Caroline Wong into the executive hot seat. What begins as an ethical open-source strike quickly spirals into a high-pressure crisis involving SEC disclosure dilemmas, boardroom pressure to alter risk dashboards, an internal developer mutiny, and active internet scanning. Faced with brutal trade-offs, Caroline must choose whether to risk database corruption with an experimental memory patch, pull rank on exhausted engineers, or aggressively amputate application features to save core database records.

0:00-31:32

transcript

No transcript — this publisher did not publish one.

show notes

An unauthenticated Remote Code Execution (RCE) vulnerability hits a deep open-source dependency inside your production microservices. The solo maintainer drops a proof-of-concept exploit and refuses to release a patch until corporate users pool a $600,000 sustainability fund.

In the fourth episode of Pressure Zone, host Christine Bartlett puts Chief Strategy Officer Caroline Wong into the executive hot seat. What begins as an ethical open-source strike quickly spirals into a high-pressure crisis involving SEC disclosure dilemmas, boardroom pressure to alter risk dashboards, an internal developer mutiny, and active internet scanning.

Faced with brutal trade-offs, Caroline must choose whether to risk database corruption with an experimental memory patch, pull rank on exhausted engineers, or aggressively amputate application features to save core database records.

more episodes

All episodes