Get the Freaking Basics Right!
summary
Security fails come from missed fundamentals: known vulnerabilities left unpatched, flat networks, and rampant privileged accounts. Claim: focusing on three fixes—apply critical patches, network microsegmentation, and privilege clean‑up—reduces exploitability dramatically. Use automation like SCCM, Puppet, Ansible and continuous vulnerability scanning to verify effectiveness; unexpected findings include asset counts varying from 4,800 to 9,000 and clients with 1,000 local admin accounts. Implement Tier‑0 workstations, just‑in‑time privileges and MFA; these measures measurably slow and contain real incidents.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:10Welcome
- 2:00Explanation
- 2:55Introductions
- 5:05Previous Incidents
- 8:15Three Important Statements
- 10:30Security vs Compliance
- 11:25Two types of companies
- 12:45Accept the security risk
- 13:50After an incident
- 15:25Application of critical patches
- 18:45Message of encouragement
- 22:25Technology Lifecycle Management
- 24:20Network Segmentation
- 25:55Privileged Accounts
- 27:28Conclusion
related talks
30mThe **** we've seen
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
50mYou’re Doing It Wrong! Common Security Anti Patterns
20mEvolving from patch management to risk mitigation
01h 06mEscaping Vulnerability Hell: Bridging the Gap Between Developers and Security Teams
29mMake It Fixable: Preparing for Security Vulnerability Reports
22mGive up! Just stop patching vulnerabilities!
01h 11m2024 Security BSides // Adam Pennington