Fighting Back Without Hacking Back: Why “Risk Management” Isn’t Enough In The Era of Cyber War
summary
Claim: nation-state and criminal actors move from espionage to deliberate disruption, hitting healthcare and utilities (examples: Sandworm, Vault Typhoon, ransomware on public health) and AI is accelerating vulnerability discovery and CVE volume. Modern supply‑chain compromises like Sunburst show attackers can brick critical systems. Recommended shifts: assume breach, reallocate budget from pure prevention toward secure by design and sustained operational log analysis, partner with governments, and invest to raise attacker cost until only insider tradecraft remains viable.
AI-written summary · about
chapters (10)
- 0:00Welcome
- 0:43Speaker overview
- 2:31Era of cyber war
- 5:41Risk management limits
- 9:51Why deliberation can be a security shortcoming
- 12:21Risk lessons from other sectors
- 14:31Siege mindset for defense
- 17:20Resilience over prevention
- 18:24Assume breach and supply chains
- 20:09Conclusions and opening the floor for questions
related talks
50mGlobal Threat Overview
58mThe Next Arms Race
57mInsights and Predictions: What's Next in InfoSec
40mMulti-Front War: Mitigating Cyber Risk and Maximizing Security
52mHow to prevent cyber-attack, & what to do when attacked?
40mPublic Health Cyber War Games: How Hackers are Exploiting Healthcare
51mReconsidering Ragnarok: The Cyber Threat Terrain After the Ukraine Invasion
51mGetting Serious: Critical Disruptions/Thinking/Responses (& Rumors of War)