Lessons From Billions of Breached Records
summary
A long-running breach index contains 582 services and 11.7 billion records and surfaces concrete patterns: a 17-year-old using sqlmap causes the £77M TalkTalk breach; CloudPets data sits in a publicly exposed MongoDB and gets ransomed; a kids’ tracker API exposes families by decrementing a numeric ID. Password rules and 90‑day rotations backfire, NIST/NCSC now advise against composition and forced rotation, TLS covers ~80% of web traffic, and the practical defense pivots to zero trust and behavioral or cryptographic auth.
AI-written summary · about
chapters (4)
- 0:00Introduction
- 1:50Lessons From Billions of Breached Records
- 36:14Q&A
- 56:31Join us on Mar 15 with Michael Coates
related talks
48mLessons From Billions of Breached Records
46mKeynote: Lessons From 11 Billion Breached Records
59mInside the Breach: Secrets Exposed
40mData Breaches: Barbarians in the Throne Room
37mData Breaches: Barbarians in the Throne Room
01h 00mHack to the Future
27mProtecting Businesses from Breaches: Simple Lessons Still Unlearned
34mThe State of Web Security