The CSOs myopia
summary
Claim: The CSO's Myopia means policies produce pseudo security not real defense. Evidence: exposed config.php, SQL dumps, open Samba shares, downloadable CSVs with personal and payment data, plaintext passwords, and unvalidated ID parameters that allow privilege escalation. Attack method: google dorking, simple brute force and tiny scripts that enumerate IDs and flip order flags — often complete in five minutes — plus open redirects that let an attacker host remote commands. Remediation requires fixing exposure, auth checks and encryption.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:15Apologize
- 1:53The value of Information
- 2:53So, why don't you take care of it?
- 3:10But, Yeah, we do take care of it
- 21:54Examples
- 22:39Impacts
related talks
57mSomething Something Security
51mThe Hole in Your SOC: How a compromise of your SIEM could
36mWhen The Front Door Becomes a Backdoor: The Security Paradox of OSDP
05mEnterprise security: A new hope
35mCYBERSECURITY! The good, the bad, and the hacked
01h 24mCode Red: Navigating the Minefield of Security Programming Blunders
38mDo You Feel Secure?
36mSaaC – Security as a Culture, the Distributed Advocacy