Every company, government agency, and individual depends increasingly on the computers, computing devices like smartphones, and the networks that connect them, presenting opportunities for cybercriminals. As Covid pandemic measures have pushed people and businesses increasingly online and remote, attackers have pivoted as well, exploiting weaknesses in these technologies. Always a present threat, today's exploits are now automated, pushing us to automate our defense as well. Many threats--even if larger in scale--remain the same. Phishing, credential re-use, known vulnerable components, the traditional attacks continue to provide criminals with a steady stream of access to private networks and personal data. It seems that nobody, and no company or agency, is safe from cyber theft—from individual hackers who steal identities and personal financial information, to more organized, even international, efforts that attempt to capture an organization's data and hold it for ransom. Is it going to get worse? What can we do? Fortunately, lessons learned from watching adversaries can also be applied to improve our defenses. Proactively looking for indicators of compromise, adding two-factor authentication, and thwarting credential re-use are easier today than ever before. Join us as Gabe Schuyler, a cybersecurity expert now with WizIO, explains the types of computer and network vulnerabilities and how they are exploited, examples of a variety of attack types and threats, and explains why they are possible, why they happen, and what can/should be done to prevent them, or at least recover from them. Gabe will close with some very practical advice on what your companies/organizations, and you individually, can to do be more secure against cyberthreats.

1. Cybersecurity in 2022
Gabe Schuyler
The state of attack & defense
Austin Forum on Technology and Society
March 1, 2022

2. Agenda
• Going remote
• Cloud computing
• Automation
• Zero-days
• Internet of things
• Ransom
• Supply chain
• Nation-state actors
• Armed Con
fl
ict
• Q & A
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

3. Gabe Schuyler
• Enterprise Solutions Engineer at Wiz, Inc.
• Long time operations person
• Medium time cybersecurity professional
• Also into wireless hacking, RFID tags, and
using technology for positive social change.
@gabe_sky
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

4. Going remote
• Lock-down
• Bring your own device
• Borrow your work device
• Segment your networks
• Protect all endpoints
• "I'm not a cat"
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

5. Cloud computing
• Cheap and remote
• Unsecured resources
• Crypto-mining
• Cloud security posture management
• Inventory and monitoring
• Department of transportation
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

6. Automation
• Criminals are lazy
• Brute force
• Large-scale phishing
• Password managers and MFA
• Automated response
• Honeypots
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

7. Zero-day and zero-click exploits
• No patch to stop it
• Lucrative job, selling
• Effective against well-defended
• Defense in depth
• Incentivize updates and patches
• NSO group
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

8. Internet of Things
• Valuable data and orchestration
• Firmware updates rare/never
• Stepping stone inside
• Change default passwords
• Segment networks
• Hacked by a
fi
sh tank
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

9. Ransomware
• Lucrative and automatable
• Ransomware as a service
• Double-ransom
• Backups
• Insurance
• Colonial pipeline
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

10. Supply Chain
• Applications "borrow" code
• Enterprises use diverse software
• Often opaque to developers
• Automate security in development process
• Defense in depth & zero trust
• SolarWinds
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

11. Nation states
• Rare but unstoppable
• Disruption and misinformation
• Espionage
• Listen to CISA (and NSA?)
• Insurance ("Acts of War")
• Chinese warship on pause
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

12. Armed Con
fl
ict
• Conspicuously quiet
• DDoS and defacement
• Disinformation
• Trusted sources, veri
fi
ed information
• Protect against splash damage
• Current insanity
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler

13. Q & A
Gabe Schuyler
@gabe_sky
@gabe_sky
Austin Forum on Technology and Society -- March 2022
Gabe Schuyler