Evolving Your Defense: Making Heads or Tails of Threat Actor Trends
summary
Covers trends observed by Cisco Talos on APTs and threat actors—such as state-sponsored attacks, rising zero-day availability, and the growing value of stolen credentials—and recommends defensive architecture and incident response changes to mitigate these specific risks.
AI-written summary · about
chapters (16)
- 0:00Intro
- 2:13Moonlight Maze
- 3:13Operation Aurora
- 8:17Olympic Destroyer
- 9:42VPN Filter / Cyclops Blink
- 11:15HermeticWiper/CaddyWiper/DoubleZero
- 12:33Sea Turtle
- 14:54Hafnium / Exchange Vulnerabilities
- 16:50Kaseya Overview
- 17:41Summary
- 22:49Creating a Defender-Friendly Infrastructure
- 24:58Incident Response Process
- 27:00Detection and Analysis
- 28:15Containment
- 31:22Eradication and Recovery
- 33:57Test and improve
related talks
35mThese Aren't the Threats You're Looking For: How Our APT Focus Ruins CTI
42mKeynote: The Expanding Universe of Cyber Threats
29mThrough the Eyes of the Adversary: How to Build a Threat Intel Program
20mThe Cyber Threat Landscape: New Themes in Prevention, Detection and Response
27mAdapting Defense to New Threats
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
40mThreat Informed Planning with Macro-level ATT&CK Trending
53mAI-equipped Threat Actors Versus AI-enhanced Cyber Tools: Who Wins?