State of the Hack 2023
summary
NSA threat intelligence shows 2,000+ Russian attacks in 2022 with >300 against defense, ~400 against commerce and >500 against other government targets, and Russia mixes intelligence, disruptive cyber, and hacktivists while avoiding internet‑wide worms. China increases zero‑day use (Mandiant metrics), runs the Tianfu Cup and forces vulnerability disclosure laws, and hides operations behind compromised SOHO routers as obfuscation networks. A joint mitigation of a Citrix zero‑day and industry partners reduces vulnerable servers by ~25% in days, and NSA pushes quantum‑resistant crypto, adversary‑defeat, and AI/ML defenses.
AI-written summary · about
chapters (8)
- 0:00The conflict in Ukraine
- 5:31Russian intelligence groups
- 14:03China as a pacing threat
- 15:19Chinese tradecraft and tactics
- 37:49Generative AI implications
- 43:30FISA Section 702
- 45:43Partnerships for impact
- 47:07Closing thoughts and Q&A
related talks
48mState of the Hack 2024 - NSA’s Perspectives
25mGlobal Threat Brief: Hacks and Adversaries Unveiled
43mCERT-UA: Research and Technical Analysis of Large-Scale Cyber Attacks in Ukraine in 2021
49mGeopolitics and Cyber Risk in 2024 and Beyond
54mHacked in hours: Red team assessments unveiling vulnerabilities
42mKeynote: The Expanding Universe of Cyber Threats
50mGlobal Threat Overview
15mThink Zero Days Are Your Your Biggest Risk - Think Again