Nowhere to Hide: How COVID-19 Forever Changed Your Company’s Attack Surface
summary
CrowdStrike telemetry shows a big Q1 2020 spike tied to remote work: a 98% increase in distinct, sophisticated intrusions and ~75% of North American attacks using fileless techniques. COVID lures jump from ~10 in February to ~1,250 by May. Adversaries scale via ransomware-as-a-service and data extortion; phishing, malicious apps and spoofed dashboards drive initial access. Recommendations focus on treating the endpoint/identity as the perimeter, adopting zero trust, intelligence-driven threat hunting and simplifying defenses.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:45The World Changed
- 1:44Phishing
- 2:41Fraudulent Malware
- 3:51Impact of COVID19
- 7:44Common themes
- 10:31Understanding problems
- 12:16Threat landscape
- 12:59Comparing yourself against the adversary
- 15:31Internal vs Perimeter vs External
- 16:21PreCovid vs PostCovid
- 22:21Evolution
- 23:05Endpoint is the New Perimeter
- 24:26Simplicity is Your Friend
- 26:48Be Proactive
- 29:39Prepare for the New Normal
- 31:43Conclusion
related talks
30mGetting Engagement in the Midst of Chaos
40mOne Step Ahead: Keeping Security at the Forefront
29mCOVID-19 and Cyber Security: Side Effects or Business as Usual?
43mClouds in the forecast: CrowdStrike cloud risk report
27mReality Check: Cybersecurity’s Story
57mInsights and Predictions: What's Next in InfoSec
42mKeynote: The Expanding Universe of Cyber Threats
40mNew Normal, New Security? Five Security Trends to Watch in 2021 and Beyond