Hacked in hours: Red team assessments unveiling vulnerabilities
summary
Claims that red teams breach both physical and technical defenses within hours, supported by concrete numbers: 136,000 reported cybercrimes (Germany 2022), average detection seven months, mitigation 11 months. Describes tools and methods: Macarena social engineering to illustrate compliance, OSINT from LinkedIn and office tour videos, Google Maps reconnaissance, tailgating and dumpster‑style physical access, and payloads like USB Rubber Ducky and in‑memory execution to stay stealthy. Shows mitigations that worked or would work: MFA with hardware keys, image/code signing, endpoint behavior detection, honeypots, and strict legal/ethical scope rules.
AI-written summary · about
chapters (17)
- 0:00Red team assessments overview
- 1:13Cybercrime and digitalization risks
- 4:26Introduction
- 6:12Red team assessments defined
- 8:04Project flow overview
- 10:10Cyber kill chain & MITRE ATT&CK
- 12:17Recon phase and open source intelligence
- 16:38Physical recon techniques
- 23:48Social engineering defenses
- 26:03Phishing for initial access
- 31:48Defending access points
- 33:14Lateral movement & misconfigs
- 36:55Evasion & in-memory execution
- 39:54Endpoint detection heuristics
- 41:03Ethical & legal boundaries
- 47:05Defense in depth
- 49:58Q&A: Physical vs digital reactions
related talks
42mRed vs. Bank: Surviving a Three Year Red Team
47mPenetration Testing & Red Teaming for Healthcare
27mThe Offensive Approach to Cybersecurity
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024
49mTraining for Incident Response: The Red, the Blue, and the Ugly
24mNo More Time: Closing the Gap with Attackers