Security Theater Is Canceled: Time for a Real Show
summary
Covers concrete incidents and concrete failures: social engineering by Scattered Spider social engineering and teenagers, nation-state campaigns (SolarWinds, Operation Aurora, Salt/Vault Typhoon), and ransomware fueled by crypto with figures ($1.5B Bybit, ~$6B total). Explains crypto as a key-management problem with Zoom’s false E2EE and Cloudflare’s rotation outage (Mar 2025), shows malware risks from shared models (Hugging Face pickles stuffed with malware), describes a caught RCE in an agentic feature and MCP as an injection vector, and gives practical cross-functional fixes and measurement pitfalls.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:35Annoying adversaries
- 3:48Governments and cybercrime
- 5:55Ransomware and crypto
- 7:00AI attack surface myths
- 9:47AI vulnerabilities and agents
- 11:09Cryptography as key management
- 12:14Security measurement challenges
- 13:59Getting people to actually do security
- 15:22Cross-team security collaboration
- 17:50Handling feedback
- 19:15Security in a complex world
related talks
30mSecurity Starts With You: Social Engineering
42mKeynote: The Expanding Universe of Cyber Threats
40mCyber’s Past, Present, and Future: The Truth is Stranger than Fiction
51mSecurity 101: A Beginner’s Guide to Cybersecurity and Zero Trust for Developers
35mCYBERSECURITY! The good, the bad, and the hacked
45mOpening Remarks, Rumblings, Ruminations, and Rants
40mTotal Security: Investigative Perspectives from Public to Private Sector
13mThe Future of Cyber Security pt.1