In this episode we talk to Kostya about the process that is behind Cloud Burst.  He speaks about breaking out of the existing Virtual Machine and into the host.  Once you own the host you have the ability to own other Virtual Machines.

Quick Topics: OS X Security Update Palm Pre North Korea Cyberware Air France Flight 447

Hosts: Anthony Gartner - http://www.anthonygartner.com - @anthonygartner Chris Gerling - http://www.chrisgerling.com - @hak5chris Christopher Mills - http://www.packetsense.net - @thechrisam Jason Mueller - @securabit_jay

Guests: Kostya Kortchinsky - http://www.linkedin.com/pub/kostya-kortchinsky/4/211/a71 Tim Krabec - http://www.SMBMinute.com - @tkrabec

Links: Immunity Inc - http://www.immunitysec.com/ CLOUDBURST exploit video -  http://www.immunityinc.com/documentation/cloudburst-vista.html CVE-2009-1244 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1244 53634 : VMware Multiple Products Display Function Host OS Arbitrary Code Execution - http://osvdb.org/53634 Microsoft Security Bulletin MS08-067 - http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx SyScan '09 Singapore July 2-3 - http://www.syscan.org/Sg/program.html The Cassandra Tool - https://cassandra.cerias.purdue.edu/main/index.html Apple Security Update 2009-002 / Mac OS X v10.5.7 - http://support.apple.com/kb/HT3549 Palm® Pre™ - http://www.palm.com/us/products/phones/pre/ North Korea Builds Up Cyber Warfare Unit - http://news.yahoo.com/s/afp/20090505/ts_afp/nkoreaitmilitary Air France Flight 447 - http://en.wikipedia.org/wiki/Air_France_Flight_447 DEFCON® Hacking Conference - http://www.defcon.org/ Immunity CANVAS - http://www.immunitysec.com/products-canvas.shtml