FIRSTCON21 - June 8 | Stream 1 (12:00-15:30 UTC)
summary
Four short, decision-making notes: FDA’s CVSS medical-device rubric is implemented as an online calculator and raises one real case from 3.1 to 4.0 by forcing more specific answers — medical-device CVSS rubric and online calculator; an automatic web risk method derives C/I/A asset sensitivity from crawled pages and access logs and shows Spearman ≈0.82 vs. analyst importance — asset-sensitive CVSS scoring (alpha/beta/gamma); grub “BootHole” class bugs force complex dbx revocation workflows; a Nephilim ransomware family evolves from RATs to Cobalt Strike-led intrusions, uses Mega/FTP for exfil, 77 payload variants and ~43 RSA keys in campaigns.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:25Scoring Security Vulnerabilities in Medical Devices: Rubric for CVSS
- 33:10Simple Method of Automatic Risks Assessment for Web Systems Considering Assets Sensitivity
- 1:15:37Featured Panel: Life in Security - Practitioners in the Wild
- 2:30:33Breaking the Chain of Trust
- 3:02:07From RATs to Extorting Multibillion Companies: The Evolution of a Modern Ransomware Group
related talks
57mFIRST SIG Updates
30mScoring Security Vulnerabilities in Medical Devices: Rubric for CVSS
01h 16mCVSS SIG Past, Present & Future + CVSS v4.0 Beyond the Numbers
29mDiving into the CVSS Base Score Metrics - An Exploratory Analysis Bridging Product Security...
41mLocknote: Conclusions and Key Takeaways from Day 1 locknote
20mCalcifying Crisis Readiness
33mUnderstanding the Impact of Critical Vulnerabilities in Critical Infrastructure: A De...
48mState of the Hack 2024 - NSA’s Perspectives