Defcon 20 Video - Owning One to Rule Them All

At Defcon, David Kennedy presented "Owning One to Rule Them All," demonstrating methods to compromise Microsoft SCCM patch management servers and use them as a staging ground to deploy malicious software. The talk focused on organizational deployment scenarios and defensive gaps rather than a flaw in Microsoft products, and included live demonstrations and examples of automatic "patching" of SCCM to deliver malicious payloads.