Assume Compromise: Think Like a Hacker to Build Resilience
summary
Claims that a single foothold turns into a disaster: a bank data center is owned in eight minutes using LoftCrack, eight admin passwords crack in three seconds, a film set camera feed is grabbed via Wi‑Fi, and a hospital proof‑of‑concept uses lobby Starbucks Wi‑Fi plus exposed printers to identify rooms and remotely loop patient monitors with a three‑second cache. Investigations find 270 VLANs with no controls; mitigation focuses on lateral movement elimination via host‑level microsegmentation and least privileged network access (OS filtering, block RDP/SMB) so a compromise stays isolated.
AI-written summary · about
chapters (24)
- 0:00Introduction and talk overview
- 1:06Zero Trust and lateral movement
- 2:32Early hacking experiences and lessons
- 4:35Bank data center compromise case study
- 6:42Lateral movement and ransomware risks
- 7:25Nuclear energy facility assessment
- 8:06Film production network breach
- 9:10Medical device attack hypothesis
- 13:08Societal impact of cyber attacks
- 13:51Modern attack surface challenges
- 16:49Evolution of cyber attack impacts
- 18:37Cyber resilience and defense strategies
- 22:42Zero Trust segmentation explained
- 25:41Illumio’s Zero Trust platform
- 28:51Actionable steps and closing advice
- 30:42Q&A session begins
- 31:14Healthcare device connectivity risks
- 33:40White noise and whitelisting
- 35:08Micro segmentation and host-based firewalls
- 37:11Threat modeling importance
- 40:30Value of honeypots and deception
- 41:52Zero Trust implementation challenges
- 45:37Identity’s role in Zero Trust
- 47:25Final Q&A and wrap-up
related talks
25mTrust in the edge, trouble in the cloud
29mGet the Freaking Basics Right!
41mA reasonable guide to security practices
30mInside the Mind of a Hacker: How a Light Bulb Almost Stopped Christmas
51mHacker’s Perspective on Your Infrastructure: Lessons from the Field
40mPractice Safe Networking
40mAll Your LAN are Belong to Us. Managing the Real Threats to Remote Workers.
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions