Differences Between European And Canadian Approach For Cybersecurity
summary
Compares penetration testing adoption: Dutch firms require pentests almost universally (only ~12% lack policy, real rate <10%) while many Canadian firms show far lower coverage, roughly half doing red team work, and average breach cost differs dramatically — about $7M CAD per incident in Canada versus ~€300k in the Netherlands. Demonstrates a live compromise using nmap and netcat, an exploit from GitHub, reverse shells, privilege escalation via an unquoted service path, then credential harvesting with mimikatz and PSExec to reach the domain controller.
AI-written summary · about
chapters (22)
- 0:00Introduction and speaker background
- 1:06Overview of European vs Canadian cybersecurity
- 3:15Statistical differences in cybersecurity approaches
- 7:49Reasons for the observed differences
- 10:19Cost comparison of cyber incidents
- 12:08Types of penetration testing explained
- 17:03When to conduct penetration tests
- 18:06Frameworks and standards overview
- 21:18Live hack demonstration introduction
- 21:39Port scanning and service exploitation
- 23:24Gaining initial access and reverse shell
- 24:30Privilege escalation techniques
- 26:16Disabling security controls
- 27:19Extracting password hashes
- 28:26Pivoting to internal network
- 29:10Targeting domain admin privileges
- 30:52Compromising the domain controller
- 32:58Full network compromise and ethical considerations
- 34:05Fixing vulnerabilities and low-hanging fruits
- 35:06Red teaming and pentesting services
- 36:33Summary of key findings and recommendations
- 37:14Q&A session begins
related talks
54mHacked in hours: Red team assessments unveiling vulnerabilities
27mThe Offensive Approach to Cybersecurity
47mPenetration Testing & Red Teaming for Healthcare
28mBeyond Penetration Testing: Developing a Defensive Cyber-Workforce
19mPenetration Testing
23mHack Your Cybersecurity Career: Your Role in the Ecosystem
50mA CISO's Best Friend: The Pentester
58mWhy Control System Cyber-Security Sucks…