Global Threat Brief: Hacks and Adversaries Unveiled
summary
Claims that SVR used a supply‑chain Trojan with a kill switch in SUNBURST that Russia flipped to exit 99% of victims, and that HAFNIUM left web shells with default passwords on Exchange servers, are backed by forensic detail and incident counts. Reported specifics: Golden SAML token forging, VPN exploit chains, Temp.Isotope targeting airports, APT38 stealing from 16 banks, Chinese zero‑day hunts against network gear and biotech researchers, and ransomware extortion demands hitting ~$50M and journalists being contacted. Practical mitigation advice focuses on identity, patching, and IR for compromised credentials.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:30SolarWinds
- 3:55ExchangeHafnium
- 5:32China
- 11:50North Korea
- 14:29Russia
- 16:19Critical Infrastructure
- 19:31Tokyo Olympics
related talks
51mState of the Hack 2023
50mGlobal Threat Overview
48mThey Hide, We Seek: Leveraging Global Partnerships Against Our Adversaries
42mKeynote: The Expanding Universe of Cyber Threats
48mState of the Hack 2024 - NSA’s Perspectives
52mLessons Learned from the Summer of Supply Chain Attacks
55mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures