Exploring Zero Trust, Threat Intelligence, and Secure SDLC
summary
Covers concrete failures and fixes: Zero Trust would have limited lateral movement that let attackers bypass MFA and stay in a VPN for four days during the LastPass incident, then use a keylogger to steal the master Vault keys; Equifax exposes 143 million people after an unpatched Apache vulnerability; Stuxnet chains four zero‑days to physically destroy nuclear equipment and set a program back years. Recommends BeyondCorp, NIST-aligned checks, tactical/strategic threat feeds and inserting security gates into each SDLC phase.
AI-written summary · about
chapters (9)
- 0:00Introduction and background
- 2:09Zero trust explained simply
- 7:23LastPass breach analysis
- 10:12Operation Aurora overview
- 11:56Threat intelligence fundamentals
- 16:08Stuxnet cyber attack details
- 17:53Secure SDLC explained
- 20:21Equifax breach case study
- 22:05Balancing security and cost
related talks
51mSecurity 101: A Beginner’s Guide to Cybersecurity and Zero Trust for Developers
31mAttacking Zero Trust Designs in 2021
51mConducting a Pre-Mortem on the Next Zero Trust Breach
42mImplementing Zero Trust in Government Settings: Strategies, Challenges, and Best Pra...
57mMaking Security Priority Zero
18mRedefining Cybersecurity: Harnessing Zero Trust Architecture for a Resilient Future
01h 02mIntroduction to Zero Trust Security
34mZero Trust Best Practices in Government and Federal Industries