Data Breaches: Barbarians in the Throne Room

on YouTube ↗37m

" summary

Sites still accept 4-character passwords, leave AWS S3 buckets publicly readable, and expose databases via SQL injection or default credentials like admin/admin. Historic breaches (Heartland, Equifax) prove 40 million‑record compromises and routine failures: detection often takes 180–250 days, data leaves unencrypted, and credential reuse enables password‑spray hits on Citrix. Practical takeaways: inventory assets, fix long‑known vulnerabilities, enforce multi‑factor auth, and validate that deployed controls actually block the demonstrated attack paths.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 6:25DATA BREACH.
3. 19:19CISO "RETIRED"
4. 28:41INTERNAL AUDITING
5. 31:02PATCHING

" related talks

• 40mData Breaches: Barbarians in the Throne RoomDave Lewis · Codemotion Rome 2018
• 57mLessons From Billions of Breached RecordsTroy Hunt · Security Visionaries 2022
• 47mLessons From Billions of Breached RecordsTroy Hunt · Security Visionaries 2022
• 26mPrivacy Issues in Big Data Processing in light of Data BreachesS. Srinivasan · Data By the Bay 2016
• 27mProtecting Businesses from Breaches: Simple Lessons Still UnlearnedChristine Smoley · RSAC 2020 Asia Pacific & Japan
• 22mDevSecOps - The Story of 3 Security BreachesYash Kadakia · SREday London 2022
• 29mBe nice, help the person who hacks your servers to get your dataSrdjan Vranac · Laracon EU 2019
• 34mThe State of Web SecurityMike Milner · RailsConf 2016