Tales from the Breach - A Crash Course in Modern Adversaries
summary
Jason Haddix examines the Lapsus$ breach of his organization and walks through lessons learned by studying breach notifications and reporting from many modern incidents. He focuses on patterns in how well-resourced, security-focused teams were compromised and provides concrete defensive and offensive tips drawn from those investigations.
AI-written summary · about
chapters (14)
- 0:00Start
- 0:36Disclaimer
- 1:14Story Time
- 3:44Research Mode & Calling Backup
- 5:34Initial Entry
- 10:42Pivoting
- 11:54Endgame
- 13:47BYOD
- 16:33Stolen/Leaked Cookies and Creds
- 21:46Authentication
- 24:38MFA Add/Change
- 26:29Secrets Management
- 28:51Architecture
- 30:43Tips++
related talks
33mTales From the Front Line
28mBreaches Are Everywhere; What's a Good Security Leader to Do
46mBreaches Are Everywhere. What’s A Good Security Leader To Do?!
01h 24mCode Red: Navigating the Minefield of Security Programming Blunders
40mData Breaches: Barbarians in the Throne Room
09mQuick Look: Hackers Interrupted
59mInnovation lessons we can learn from hackers
45mDefenders Struggle as the Adversary Continues to Break Away