Conducting a Pre-Mortem on the Next Zero Trust Breach
summary
Pre-mortem imagines 2028 breach after a Zero Trust rollout: momentum dies via the cottage to goblin cycle, projects lock only top ~250 apps while thousands remain unprotected, contractors and legacy on‑prem systems stay out of scope, and fragmented checks (IDP, MDM, EDR, CASB) never form a unified policy engine. Attackers exploit lifecycle gaps (MFA enrollment/replace), steal or spoof device identities despite 16 billion devices global scale, and pivot to session hijack, JWT/SAML tampering, and appsec flaws.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:26Pre-mortem?
- 3:14Grab your favorite time machine, let's ride.
- 7:28Cottage-Goblin cycle
- 16:26About people (authorized subject)
- 20:11About devices (authorized systems)
related talks
24mExploring Zero Trust, Threat Intelligence, and Secure SDLC
31mAttacking Zero Trust Designs in 2021
19mBeyond Perimeters: Implementing Zero Trust at Enterprise Scale
51mSecurity 101: A Beginner’s Guide to Cybersecurity and Zero Trust for Developers
40mZero Trust and Privacy: Moving Security Closer to the Target
18mRedefining Cybersecurity: Harnessing Zero Trust Architecture for a Resilient Future
41mHuman Vulnerability Management and Assessment in the Age of Zero Trust
18mImplementing Zero Trust at Enterprise Scale