State of the Hack 2024 - NSA’s Perspectives
summary
NSA reports nine plus internet‑facing nine+ edge-device CVEs this year, urges rapid patching, MFA and zero‑trust; cloud attacks surge—Midnight Blizzard and Storm‑0558 drive a 75% increase in cloud exploitation and prompt emphasis on MFA and log retention; ransomware cases like Change Healthcare show paying rarely restores systems and law enforcement disrupted LockBit infrastructure; China’s Volt Typhoon embeds long‑term access using Volt Typhoon living‑off‑the‑land techniques; AI mainly amplifies social engineering and log analysis—AI boosts phishing/deepfakes.
AI-written summary · about
chapters (11)
- 0:00NSA's State of the Hack 2024
- 1:06Edge device exploitation
- 4:25Cloud breaches and attacks
- 9:26Ransomware threat
- 14:56Russia-Ukraine cyber activity
- 19:33Critical infrastructure threats
- 24:39Volt Typhoon threat
- 30:44China's hacking ecosystem
- 35:48AI in cybersecurity
- 39:43Space system threats
- 44:11Q&A
related talks
51mState of the Hack 2023
25mGlobal Threat Brief: Hacks and Adversaries Unveiled
40mOne Step Ahead: Keeping Security at the Forefront
33m40,000 CVEs and Counting: What 60 Years of AppSec Tells Us About 2026
36mKeynote: What's New or Not in 2020: Are we Making Progress?
42mKeynote: The Expanding Universe of Cyber Threats
57mInsights and Predictions: What's Next in InfoSec
48mThe Five Most Dangerous New Attack Techniques