#531: Critical 10/10 n8n Vulnerability EXPLOITED

Security researchers Dor Attias and Ofek Itach demonstrate a critical CVSS 10.0 n8n vulnerability (CVE-2026-21858). Watch the full RCE exploit demo using type confusion to bypass authentication and read sensitive local files. // Dor Attias SOCIAL // LinkedIn: / dor-attias-740758155 // Ofek Itach SOCIAL // LinkedIn: / ofek-it // N8N Hack Blog https://www.cyera.com/research-labs/n... // Cyera Blog // https://www.cyera.com/blog // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 - Coming up 0:56 - n8n vulnerability explained 02:33 - n8n hacking demo // How the vulnerability works 09:13 - How bad is it? 11:51 - Vulnerability summary 13:28 - More explained on Cyera blog // Webhooks 16:59 - Webhooks explained 18:09 - Formidable 19:18 - Formidable explained 20:01 - Handling uploaded files in n8n 22:32 - The form webhook node 24:28 - How to exploit 25:54 - Exploit summary 26:46 - How to mitigate 27:37 - How to become a security researcher 32:36 - Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(500)

#597: The Hacking Gadgets You Need to Know

Note: Hak5 did not pay me to make this video. But, I'm marking it as sponsored because Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link: https://davidbombal.wiki/ge...

24 Aug 42min

#596: This is the Real Cybersecurity Problem

Thank you to Threatlocker for sponsoring my trip to Black Hat so I can interview amazing people. Jen Easterly joins David Bombal to discuss why today’s cybersecurity problem may actually be a softwar...

20 Aug 28min

#595: How to Detect Fake Cell Towers Near You

Big thanks to Proton VPN for sponsoring this video. To sign up for Proton VPN please use the following link https://protonvpn.com/davidbombal and get 70% off. Learn how fake cell towers and Stingray...

18 Aug 1h 2min

#594: How to Protect Your Network From Insecure IoT Devices

Hackers are using overlooked IoT devices such as IP cameras, printers and smart speakers to gain access to networks and spread ransomware. Philip Wylie explains how an outdated IP camera became a ran...

30 Juli 31min

#593: How to pass the CCNA exam (advice from two Cisco instructors)

Two Cisco training veterans break down how to know you are ready for the CCNA exam, what changes in CCNA 2.0, and whether the CCNA is still worth it in 2026. Brian Bays has been teaching official Cis...

25 Juli 36min

#592: Why most enterprise AI fails (and how to succeed)

Agentic AI is putting a 400x load on enterprise networks. Cisco and NTT Data experts reveal why only 13% of leaders successfully scale AI, the nightmare of quantum threats, and how to secure your infr...

15 Juli 37min

#591: Inside the Cisco Live 2026 NOC (exclusive tour)

Big thanks to Cisco for sponsoring my trip to Cisco Live EMEA and for changing my life and the lives of many other people. // Joe Clarke SOCIAL // LinkedIn: / joeclarke2 // YouTube video REFER...

15 Juli 26min

#590: CCNA 2.0: What did Cisco just remove from the exam?

Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Vegas. Cisco has officially announced a major update to the CCNA, moving from version 1.1 to the new CCNA 2.0 bluepr...

2 Juli 44min