Nullcon Goa 2023 | The Curious Case Of The Rogue SOAR By Jaden Furtado & Mukesh Kumar

In this talk, Jaden and Mukesh explore the vulnerabilities inherent in SOAR (Security Orchestration, Automation, and Response) tools, highlighting how these vulnerabilities can lead to significant breaches within a network. They discuss the unique challenges presented when attackers target these tools, which are typically considered safe due to their whitelisting in organizations. The session examines potential consequences of such attacks, including the risks posed by log poisoning and the implications of using large language models like ChatGPT in cybersecurity. The speakers provide insights into future threats and emphasize the need for better security measures in defending against these evolving attacks.