Protecting Businesses from Breaches: Simple Lessons Still Unlearned
summary
Most large breaches here trace to simple failures: a leaked NSA exploit hitting unpatched SMBv1 (WannaCry shuts 80 NHS orgs, cancels 20,000 appointments), a misconfigured ModSecurity WAF that queries the AWS metadata service and exposes credentials (Capital One: 100k’s of SSNs and ~80k bank accounts), public S3 buckets leaking 40,000 passwords (Accenture), and an unpatched Apache Struts instance exposing data for 143 million consumers (Equifax); fixes are inventorying assets, automated scans, and timely patching.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:08Who am I
- 3:42Known vulnerabilities
- 9:07Copypaste compromises
- 10:41Common vulnerabilities
- 12:30Ransomware example
- 15:38Capital One breach
- 17:48Accenture cloud leak
- 20:08Equifax breach
- 21:49Summary
related talks
40mData Breaches: Barbarians in the Throne Room
57mLessons From Billions of Breached Records
37mData Breaches: Barbarians in the Throne Room
32mDo This, Not That – Lessons from 7 Headline Grabbing Security Breaches
26mPrivacy Issues in Big Data Processing in light of Data Breaches
47mLessons From Billions of Breached Records
22mSecurity and Risks
34mThe State of Web Security