TF-CSIRT Meeting & FIRST Regional Symposium Europe 2022
2022-03-02..2022-03-03
-- online --
| title | author | length |
|---|---|---|
| Opening Remarks and Updates | Alexander Jaeger, Chris Gibson, Silvio Oertli | 10m |
TF‑CSIRT and FIRST issue a statement condemning the Russian invasion of Ukraine and also condemn cyber attacks from any side, and the community temporarily… | ||
| Building Capacity in Critical Infrastructure Sectors | Justin Novak | 35m |
SEI’s Sector CSIRT Framework offers a six‑step, practical roadmap (prerequisites, information gathering, gap analysis, roadmap, implement, post‑implementation)… | ||
| Approaches & Practices for Increasing the Maturity & Capabilities for CSIRTs in Emerging Economies | Hayretdin Bahsi, Sherif Hashem, Jean-Robert Hountomey, Unal Tatar, Kaleem Ahmed Usmani | 31m |
Two linked reports build a practical, low-cost roadmap: 16 CSIRTs surveyed (28 raw responses, 10 follow-ups) and services mapped to the NIST workforce… | ||
| Cybersecurity Emergency Action Plan for Local Entities in Comunitat Valenciana, Spain | Jose Vila | 29m |
Presenter: Jose Vila (CSIRT-CV, ES)
With the rise of ransomware attacks against municipalities in Comunitat Valenciana (Spain) in the first half of 2021… | ||
| Lightning Talks | Henrich Slezak, Aleksander Pawlicki, Shannon Sabens, Martin Laštovička, Jan Kopřiva, Christos Arvanitis | 34m |
New Bratislava CSIRT announces structure, claims 10 assigned CVEs and 15 in progress, 300+ IR engagements and in-house tools like Gargamel and IOC checker; CVE… | ||
| Ransomware Attack: Lessons Learned | Paolo Cravero, Francesco De Luca | 21m |
A ransomware incident starts with one stolen remote desktop credential used for daytime reconnaissance on Thursday and Friday and full encryption launched… | ||
| Hunting for log4shell Compromises | José Ángel García Guijarro | 26m |
Two post-disclosure compromise assessments run across a healthcare and an energy org find thousands of probing attempts but only ~50 successful web responses… | ||
| Fuzzing Windows Media Foundation in 2021 | Milan Kyselica | 27m |
Fuzzing targets the Windows Media Foundation codec DLL that enables WebM playback via a custom harness and corpus of ~1,000 WebM files (1 KB–1 MB) run on… | ||
| Data Driven APT Attribution and AI/ML Research | Patrick Mana, Bahtiar Mustafa | 23m |
A free desktop app called FIT Adversary Finder uses the MITRE ATT&CK database, Python and a neo4j graph to map observed TTP IDs or names to APT profiles and… | ||
| Flubot - Pandemic in Our Pockets | Juho Jauhiainen | 31m |
Android banking trojan Flubot (aka Cabazos) spreads by SMS from infected phones using contacts stolen from victims and WordPress drop sites and hits Finland… | ||
| nothing matches | ||