The Kitchen's Finally Burned Down: DLP Security Bakeoff
summary
Researchers test commercial and open‑source DLP stacks (Trend Micro, Sophos, Websense/Forcepoint, OpenDLP and anonymized vendors) and find concrete failures: pickled Python objects -> RCE via policy regex bundles, persistent XSS/CSRF allowing policy deletion or gadgeted admin actions, plaintext file‑shadowing and network channels, unsigned/old binaries and shared DSA keys, and endpoint agents running as root with installable unsigned modules — several bugs lead to shells, license exhaustion or arbitrary package installation using Burp, fuzzing, reversing and packet inspection.
AI-written summary · about
chapters (4)
related talks
54mStay Out of the Kitchen: A DLP Security Bake-Off
44mData Splicing Attacks: Breaking Enterprise...
35mLCDPwn: Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again
56m"Easy LPEs and Common Software Vulnerabilities"
18mIT Security – Don’t let Open Source Software become the next menace
49mBreaching LLM-Powered Applications: Overcoming Security and Privacy Challenges
50mSecuring LLM-Powered Applications: Overcoming Security and Privacy Challenges
58mKeynote: What Got Us Here Wont Get Us There