53: Offensive security at Meta’s Red Team X

<p dir="ltr">Red Team X is a security team at Meta that is responsible for finding and exploiting vulnerabilities in third-party products that could impact Meta's own security. The team acts as a hybrid between a traditional red team, which focuses on probing their own organisation's systems and products for vulnerabilities, and an elite bug-hunting group.</p> <p dir="ltr">The team was founded by Vlad I. in 2020 when the pandemic and the sudden shift to Work From Home challenged various previously-held assumptions about security.</p> <p dir="ltr">In his discussion with Pascal, Vlad explains the roles of different security teams within Meta, how they go about prioritising the highest-impact targets to exploit and how they work with vendors to ensure not just Meta but the entire world benefits from the fixes produced.</p> <p dir="ltr">Got feedback? Send it to us on Twitter (<a href= "https://twitter.com/metatechpod">https://twitter.com/metatechpod</a>), Instagram (<a href= "https://instagram.com/metatechpod">https://instagram.com/metatechpod</a>) and don’t forget to follow our host @passy (<a href= "https://twitter.com/passy">https://twitter.com/passy</a> and <a href= "https://mastodon.social/@passy">https://mastodon.social/@passy</a>). Fancy working with us? Check out <a href= "https://www.metacareers.com/">https://www.metacareers.com/</a>.</p> <p><strong> </strong></p> <p dir="ltr"><strong>Links:</strong></p> <ul> <li dir="ltr" aria-level="1"> <p dir="ltr" role="presentation">The Diff episode about Velox: <a href= "https://thediffpodcast.com/docs/episode-17">https://thediffpodcast.com/docs/episode-17</a></p> </li> <li dir="ltr" aria-level="1"> <p dir="ltr" role="presentation">Risky Business Podcast: <a href= "https://risky.biz/">https://risky.biz/</a></p> </li> <li dir="ltr" aria-level="1"> <p dir="ltr" role="presentation">RTX Blog: <a href= "https://rtx.meta.security">https://rtx.meta.security</a></p> </li> <li dir="ltr" aria-level="1"> <p dir="ltr" role="presentation">RTX Disclosures: <a href= "https://rtx.meta