Microsoft’s Justin Campbell on offensive security research

Justin Campbell leads Microsoft’s Offensive Research and Security Engineering (MORSE) team. He joins the show to talk about his team's discovery of a SolarWinds in-the-wild zero-day, the never-ending stream of memory safety vulnerabilities, the evolving 'shift-left' mindset and Redmond's ongoing work to reduce attack surfaces.

Links:

• Microsoft Flags SolarWinds Serv-U 0-day exploit
• SolarWinds Serv-U RCE advisory
• In-the-wild zero-day counter
• Hacked SolarWinds Software Lacked Basic Anti-Exploit Mitigation