Resilience Under Fire: Lessons from Cyber Defense in Ukraine
summary
Ukraine case studies name exact failures: attackers push Hermetic Wiper via active directory group policy so EDR and backups do not stop mass deployment; Viasat exploit chains through a Fortinet VPN vulnerability to flash-overwrite modem firmware and sever comms; Industroyer 2 is a scheduled logic bomb caught before its 16:10 UTC detonation; Kyivstar sees 40% of core wiped and 24 million subscribers offline requiring weeks to recover, driving fixes like FIDO keys, ephemeral privileged accounts, out‑of‑band comms, and immutable offline backups.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:10Practical cyber defense lessons
- 3:59Destructive attack response framework
- 6:02Hermetic Wiper case study
- 8:11Hermetic Wiper deployment lessons
- 11:48Viasat satellite attack case
- 13:35Viasat attack details and failures
- 15:21Viasat attack lessons and recovery
- 17:47Industroyer 2 energy attack case
- 19:31Detecting Industroyer 2 early
- 22:23Kyivstar telecom attack case
- 24:50Kyivstar response and containment
- 27:41Key takeaways and resilient strategies
- 30:53Summary and recommendations
- 33:20Bonus insights from Ukraine
- 35:53Q&A
related talks
47mBear Necessities: Ukraine's Experience Facing APTs, Building Resilience
41mWhat We Can Learn from Ukraine's Cyber Defenders about Building a More Resilient Future
25mFirst world cyberwar: public & private in Ukrainian cyber defense
01h 33mInnovate with Resilience!
50mStronger Together: The US-Ukrainian Cyber Partnership
43mCERT-UA: Research and Technical Analysis of Large-Scale Cyber Attacks in Ukraine in 2021
51mReconsidering Ragnarok: The Cyber Threat Terrain After the Ukraine Invasion
40mThe Virtual Battlefield in 2022: Russia Ukraine War & Its Policy Implications