Past, Present & Future of Credentials Theft
•
2 likes•286 views
Reviewing recent history of credentials theft, present trends and how credentials theft looks like on cloud and devops environments.
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Past, Present & Future of Credentials Theft
Similar to Past, Present & Future of Credentials Theft (20)
Recently uploaded
Recently uploaded (20)
Past, Present & Future of Credentials Theft
- 1. 1 PAST, PRESENT & FUTURE OF CREDENTIALS THEFT Lavi Lazarovitz @ Cyberark Labs
- 2. Israel Saudi Arabia Belgium China Bangladesh North Korea Iran UK CYBERARK 2 CREDENTIALS THEFT PAST Lockheed Martin Social engineering on RSA and compromised third party credentials US OPM Breach The attacker manipulated third party credentials to gain initial foothold and compromise PII and fingerprints SWIFT attack The bank’s SWIFT credentials were compromise and used to transfer money. DUQU 2 The malware utilized a vulnerability in the Kerberos authentication protocol to escalate privileges. https://medium.com/@LaviLazarovitz_56453/brief-history-of-credentials-theft-1a9bb669a9a2
- 3. CREDENTIALS THEFT NOW CYBERARK 3 Third Party Credentials The security of your network is as strong as your weakest trusted partner Dirty Networks Privileged credentials are compromised in trusted contaminated machines S.a.a.T – Security as a Target Security personal and security controls are used to take control of the network
- 4. Cloud Shadow Admins Tier 0 Permissions Indirect Access to Permissions Hidden in Masses
- 5. PERMISSION POLICY STRUCTURE EFFECT ACTION RESOURCES CYBERARK 5
- 6. FULL AWS ADMIN POLICY CYBERARK 6
- 7. CLOUD SHADOW ADMIN POLICY CYBERARK 7
- 8. CYBERARK CLOUD SHADOW ADMIN DEMO 8
- 9. CYBERARK 9 DEV SEC OOPS… DevSecOps DevOps Pipeline On Fire
- 10. CYBERARK 10 NEED FOR SPEED DEPLOYMENTS A DAY 1000
- 12. JENKINS ORCHESTRATOR https://hostadvice.com/wp-content/uploads/2018/03/devopsjenkins.pngCYBERARK 12
- 14. CYBERARK 14 Credentials Theft Precognition Eliminating Credentials Theft HotSpots FUTURE OF PREVENTION
- 19. CYBERARK LABS ARMORY CYBERARK 18 Threat Research Blog https://www.cyberark.com/threat-research-blog/ SkyArk Mapping Cloud Shadow Admins https://github.com/cyberark/SKyArk PreCog Credentials Theft Precognition https://github.com/cyberark/PreCog