Collaborative response to emerging critical RCE vulnerabilities in exposed edge devices
Provides collaborative response to emerging critical RCE vulnerabilities in exposed edge devices and evaluates key implications for security practitioners.
Summary
Shadowserver Mission
The Shadowserver Foundation CEO describes the nonprofit's role responding to critical RCE vulnerabilities in exposed edge devices. With roughly 30 staff, they collaborate globally rather than operating as a commercial vendor.
Free Threat Intelligence Model
Shadowserver provides no-cost, network-scoped threat data to defenders worldwide—governments, ISPs, and organizations receive intelligence only about their own assets, raising the global security baseline. They monitor exposed endpoints continuously for internet-wide early warning.
Collaborative Response
When edge-device vulnerabilities emerge, Shadowserver works with national CERTs, law enforcement, researchers, and community partners to identify vulnerable devices, detect exploitation, reverse implants or webshells, and broadcast findings to incident responders.
Sustainability and Reach
Operating costs roughly $5 million annually, funded primarily by government grants and philanthropy, the organization serves defenders across 175 countries and territories while maintaining technical fingerprinting and disruption capabilities.
Related talks
Briefings·26 min
Noam Moshe
What are the consequences if an adversary compromises the surveillance cameras of thousands of leading Western organizations and companies.
Briefings·34 min
Ryan Barnett · Isabella Barnett
As web applications evolve, so do their data processing pipelines—handling Unicode normalization, encoding, and translation before storing or executing user input.
Briefings·36 min
Qibo Shi · Victor V · Wei Xiao · Zhiniang Peng
Diving into Windows HTTP: Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services (PRE-RECORDED) The Windows operating system heavily relies on HTTP services.