Keynote: What's New or Not in 2020: Are we Making Progress?
summary
A decade review names concrete incidents and shifts: Stuxnet damaged about $20M of centrifuges and used USBs to bridge air gaps, WannaCry hits 150 countries with billion‑dollar impact via EternalBlue, NotPetya targets Ukraine first, Heartbleed and Spectre/Meltdown expose crypto and CPU design flaws, Yahoo leaks 3 billion accounts, and HummingBad infects ~10M Androids while 24,000 malicious apps are blocked daily. Cloud adoption, GDPR/CCPA, mobile ubiquity, weak detection and slow patching persist; recommended fixes are logging, red teaming, prioritized risk sprints and better detection metrics.
AI-written summary · about
chapters (7)
- 0:00Start
- 9:33Meltdown and Spectre (2017)
- 9:51Eternal Blue (2017)
- 21:06Storytime
- 23:41Checklist
- 29:00What's it
- 31:41How will you know?
related talks
33m40,000 CVEs and Counting: What 60 Years of AppSec Tells Us About 2026
58mKeynote: What Got Us Here Wont Get Us There
42mKeynote: The Expanding Universe of Cyber Threats
48mThe Five Most Dangerous New Attack Techniques
01h 00mKeynote - Our Kryptonite: A Defendable Internet
48mState of the Hack 2024 - NSA’s Perspectives
46mKeynote: The Moral Imperatives and Challenges for Modern Application Security
53mKeynote