The 5 Most Dangerous New Attack Techniques and How to Counter Them
summary
Panel catalogues actual threats and defenses: dozens of new command‑and‑control frameworks catalogued on the C2 Matrix plus free detection tools like RITA and DeepBlueCLI; living‑off‑the‑land abuse summarized by the LolBaS list; hardware persistence rising from rubber‑ducky USBs to malware‑filled cables (USB Ninja) and unpatchable SoC exploits like checkm8/checkra1n that require DFU installs. Examples include exploited Pulse, Palo Alto and Citrix VPNs, Dell tech‑agent and Zoom local APIs, and recycled phone numbers exposing WhatsApp. Defenses: restrict outbound, application whitelisting, purple teaming, MDM/remote wipe, vendor patch notices and supply‑chain vetting.
AI-written summary · about
chapters (5)
- 0:00Introduction of speakers
- 2:20Ed Skoudis: Attack vectors
- 10:48Heather Mahalik: Mobile risks
- 18:57Johannes Ullrich: Perimeter flaws
- 27:23Panel Q&A and wrap-up
related talks
44mThe Five Most Dangerous New Attack Techniques and How to Counter Them
48mThe Five Most Dangerous New Attack Techniques
02mFive Most Dangerous New Attack Techniques
42mKeynote: The Expanding Universe of Cyber Threats
40mFighting Where They Aren't: How Attackers Avoid Endpoints in Modern Attacks
52mFlying Under the Radar - New Security Evasion Techniques
18mSecuring cloud innovation: Lessons learned
55mAzure Attacks Unpacked: Real-World Threats & Lessons