Data Breaches: Barbarians in the Throne Room
summary
Analysis of ~500 breach reports shows most large incidents are avoidable: common root causes include SQL injection, forgotten admin credentials, unpatched systems and S3 misconfigurations that expose millions of records (Heartland/40M, Equifax/143M, many smaller leaks like 50,000 Thai credentials). Attackers use off‑the‑shelf tools (Metasploit, XP_cmdshell exploits, internet scanners like masscan) and dwell 100–200 days before discovery. Practical fixes are specific: sanitize inputs, enforce patching, audit buckets, add layered controls, track risk and test recovery.
AI-written summary · about
chapters (15)
- 0:00Introduction and background
- 2:29Commonalities in data breaches
- 6:41Publicly accessible S3 buckets
- 9:06Attackers target all systems
- 12:42Equifax breach and lessons
- 16:38Tracking data breaches over time
- 19:47Security must be baked in
- 22:14Costs of data breaches
- 25:50GDPR and accountability
- 28:39Hacking back and mistakes
- 31:30Unintended consequences of code
- 33:37Working with internal audit
- 35:42Managing security debt
- 38:10Letting go of control
- 39:55Closing remarks and thanks
related talks
37mData Breaches: Barbarians in the Throne Room
27mProtecting Businesses from Breaches: Simple Lessons Still Unlearned
26mPrivacy Issues in Big Data Processing in light of Data Breaches
57mLessons From Billions of Breached Records
22mSecurity and Risks
47mLessons From Billions of Breached Records
34mThe State of Web Security
28mBreaches Are Everywhere; What's a Good Security Leader to Do