Microsoft announced that the BinaryFormatter class is insecure and cannot be made secure, but how bad can it be?

This can be exploited to launch a remote code execution exploit. We'll demo this attack and show this vulnerability using JSON and Newtonsoft.

Demos and code samples are in C#, but this exploit is possible in any insecure deserialization process. By the end of this talk, you'll know what to look for in your company's code and how to prevent the attack.