The Enemy Within: Modern Supply Chain Attacks
summary
Microsoft treats supply chain as layered risks and gives concrete responses: after Wipro staffing alarms it audits vendor access across 135,000 employees and enforces principle of least privilege; after a VOXOX SMS leak of ~25M records it expires tokens and searches for suspicious logins; CCleaner-era TeamViewer use leads to policy changes and blocking; Strontium compromises exploit default creds on video decoders, reusing simple tactics 300+ times across IoT. Emphasis is on inventory, automation, contracts and coordinated disclosure.
AI-written summary · about
chapters (30)
- 0:00Introduction
- 1:48The World Lives On A Giant Turtle
- 2:47Its Turtles All The Way Down
- 3:32Your Supply Chain
- 3:59GitHub
- 4:15Office
- 4:25LinkedIn
- 7:06Supply Chain Risk
- 7:55Software
- 8:32Defending Microsoft
- 9:54Defending the Cloud
- 10:12Cyber Defense Operations Center
- 11:33The world needs more acronyms
- 11:46People
- 13:12Whats your risk
- 18:11Assume breach
- 20:32Remote viewing software
- 27:27Practical advice
- 30:10Services
- 30:47Inventory
- 31:50Blackout
- 36:07Jumping Hardware
- 41:54flickering
- 42:39technology
- 43:52my daughter
- 45:36culture
- 47:52response matters
- 48:08best practices
- 49:41the small stuff
- 49:56embrace the whole
related talks
25mSupply Chain Attacks
39mSoftware Supply Chain Security
50mSoftware Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies
16mThe Rise of Supply Chain Attacks
50mThe World in Crisis: Prepare for Extreme Events via Supply Chain Resilience
52mLessons Learned from the Summer of Supply Chain Attacks
15mSoftware Supply Chain Security for those in a rush
37mSupply Chain Attacks and the Future of Software Delivery