Stored Flammables: How Local Privilege Escalation Threatens Your Security Program
TL;DR: LPE scores low in vulnerability management because it requires local access to exploit. That's the wrong frame once an attacker already has a foothold: LPE invalidates your security architecture and compresses lateral movement time to near zero. Here's something you might not think about: Building codes save more lives from fire than firefighters do. When you look at the sheetrock in a modern home, you don't stop to consider that someone did fire resistance testing. The code works because it's invisible, unglamorous, and does its job before the fire starts. Security architecture works the same way. When a network is built right, attacks can't spread quickly. Incidents get mitigated down to inconveniences. Nobody notices. Most security programs never evaluate what happens when flammable materials end up somewhere they weren't designed to be stored. Cluttered garages degrade fire resistance. A building's fire resistance rating is calibrated fo...