How We Fired the Sysadmin
summary
A postmortem of an incident after an administrator was fired, when the team suspected customer passwords had leaked. It describes concrete steps taken: notifying and handling customers with confirmed and potential password leaks, interaction with the legal/HR department, changes to access controls and security policies, and organizational lessons learned.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 3:16Threatening client emails
- 9:22Hacker provocation
- 14:51Incident analysis
- 20:34Firing checklist
- 26:02Q&A
related talks
29mBe nice, help the person who hacks your servers to get your data
22mDevSecOps - The Story of 3 Security Breaches
34mThe Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
40mIncident Response – How to Give the Advantage to the Hackers!
39mSecrets Management: How to (not) help the person who hacks your servers get your data
46mKeynote Presentation Survive Your Nightmare Security Incident and Thrive Again
37mData Breaches: Barbarians in the Throne Room
49mA Short Tale of a Single Leak? — A True Story