Really excited to share this piece of research from @TomerPeled92 and @yoni.

The two managed to sophisticatedly exploit an MD5 collision vulnerability in CryptoAPI (disclosed by the NSA & NCSC).

Our blog details everything from root cause to exploitation:
https://akamai.com/blog/security-research/exploiting-critical-spoofing-vulnerability-microsoft-cryptoapi

Link to PoC and demo: https://github.com/akamai/akamai-security-research/tree/main/PoCs/CVE-2022-34689

Our RPC toolkit (https://github.com/akamai/akamai-security-research/tree/main/rpc_toolkit) was updated today with even more stuff from Ben Barnea (@nachoskrnl on Twitter):

* a flowchart describing the various security protections that can stop a remote RPC request

* two new blog posts, one on RPC security and the other on Ben's LSM vulnerabilities