FIRSTCON21 - June 9 | Stream 2 (12:00-14:15)
summary
500 products rely on a single vendor and its in-house Ericsson vulnerability management service that maps dependencies via CPE; the team inspects 15,000 vulnerabilities/year and flags ~3,500 as product-applicable, so the proposed “step zero” is treating internal coordination as multi-party using bill-of-materials, templates and info sessions. A national CERT traces an attack from an ERP vendor with admin access to customers into ~90 victims (≈70% of sector customers), exploiting unsecured RDP/VPN and backup servers; IR teams shut connections, but logs were deleted and extortion followed. Executive one-pager and event-summary templates standardize reporting and worked to spread knowledge under remote work.
AI-written summary · about
chapters (5)
- 0:00Start
- 2:08Step 0 for a Multi-party Vulnerability Coordination is Yet Another Multi-party Vulnerability Coordination
- 28:54Connecting the Dots in a Cyber Pandemic Era
- 1:15:00Influence Operations (*Audio and Video Issues; Will be Updated Soon)
- 1:50:10Story Telling Through Reports
related talks
20mConnecting the Dots in a Cyber Pandemic Era
27mStep 0 for a Multi-party Vulnerability Coordination is Yet Another Multi-party Vulnerability Coor...
50mSoftware Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies
33mUnderstanding the Impact of Critical Vulnerabilities in Critical Infrastructure: A De...
48mRemaining Resilient in the Supply Chainpocalypse
30mTaking Control of Cyber-Supply Chain Security
50mThe World in Crisis: Prepare for Extreme Events via Supply Chain Resilience
51mThe Enemy Within: Modern Supply Chain Attacks