Think Zero Days Are Your Your Biggest Risk - Think Again
summary
A CISA/FBI/NCSC/Australian joint advisory claims routinely exploited, publicly known vulnerabilities far outnumber zero-days, urging rapid remediation; the average vulnerability remains unpatched for nearly 7 years while Zerodium pays up to $2.5M for zero-day exploits. Government data shows Citrix and Fortinet and Microsoft ZeroLogon defects and SSL VPN bugs are top initial-access vectors, NCSC reports 723 defended incidents in 12 months, and recommended mitigations are routine patching plus NIST/ISO/Cyber Essentials controls.
AI-written summary · about
chapters (5)
related talks
56mZero Days, Thousands of Nights: The Life & Times of Zero-Day Vulns and Their Exploits
39m"Vulnerabilities for Sale - The Good, the Bad and the Ugly"
44mPreparing for Zero-Day: Vulnerability Disclosure in Open Source Software
35m0-day In-the-Wild Exploitation in 2022...so far.
07mWednesday Keynotes
24mExploring Zero Trust, Threat Intelligence, and Secure SDLC
40mTales from the Underground: The Vulnerability Weaponization Lifecycle
50mSelling 0-Days to Governments and Offensive Security Companies