Slack Hackers Slackers

on YouTube ↗43m

" summary

Slack breaches recur because attackers harvest chat history, abuse apps and sessions, and exploit culture not bugs: attackers buy a Slack session cookie for $10, use that persistent web session to join IT channels, reset SSO credentials and exfiltrate source code (EA/Uber/Twitter examples) or post ransom notes; Slack has ~2,400 apps with ~10% official authors, channel defaults are public, and Audit Logs off by default and costly so defenses rely on exports and scripted backups plus default channels are public and tighter app approvals.

AI-written summary · about

" chapters (13)

1. 0:00Introduction and speaker background
2. 1:28Why Slack is a prime target
3. 6:49Slack culture and security risks
4. 11:08Real-world Slack attack examples
5. 16:23How attackers exploit Slack
6. 20:20The danger of Slack apps
7. 23:10Ransomware and data destruction risks
8. 25:45Mitigation and cultural changes
9. 29:23Technical security controls for Slack
10. 31:31Audit logs and forensic readiness
11. 36:37Incident response and backups
12. 38:02Next steps for Slack security
13. 39:47Q&A on Teams and Slack differences

" related talks

• 28mSlack App Security: Securing Your Workspaces From a Bot UprisingKelly Ann · BSidesSF 2019
• 55mAttacking Modern Web TechnologiesFrans Rosén · NDC Oslo 2018
• 41mHackers vs. Devs - Attacking Dev Tools and InfrastructureOfer Maor · RSA Conference 2024
• 26mBuilding Secure CulturesLeigh Honeywell · Strange Loop 2016
• 30mHow to hack a web app?Asim Hussain · Render Conference 2018
• 28mCyberespionage: Targeted Attacks Abusing Third-Party Cloud ServicesJaromir Horejsi · RSAC 2020 Asia Pacific & Japan
• 46mHow to hack a node app?Asim Hussain · The Rolling Scopes Conference 2018
• 12mAre Users Able to Take Control of Their Data?Marten Mickos · Slush 2017