The Blind Spots of IT Experts on Security & What Companies Must Do Against It
summary
Log4j shows that hidden library code causes enterprise-wide breaches because companies have no searchable inventory of embedded components, so build a central database (a SBOM) and adopt CycloneDX plus Dependency-Track to query affected apps immediately. A full IPv4 scan using open-source scanners exposes 63,000 SMB hosts, 1,500 anonymous SMB shares, about 10,000 MQTT endpoints (including live telemetry for 70 buses and open traffic cameras), and exposed IBH Soft Tech gateways to oil-plant takeover; scans complete in minutes on fast links.
AI-written summary · about
chapters (5)
- 0:00Start
- 1:41Log4j
- 7:32Why We Scanned the Internet
- 10:06How Did We Scan the Internet
- 10:57How Long Did It Take To Scan the Whole Ipv4 Internet
related talks
18mIT Security – Don’t let Open Source Software become the next menace
40mBlind Spots: Two Cloud Threats You Didn’t Even Know You Had
50mStranger Danger: Your Java Attack Surface Just Got Bigger
32mBuilding a secure future using DEVSECOPS practices and technologies
58mAttacking through the Software Supply Chain
26mInternet Scanning - Current State and Lessons Learned
59m(In)secure Things
32mIs the Internet on Fire? Strategies for Mitigating Open Source...