Recommended
Recommended
More Related Content
Similar to Cybersecurity 101 - A Masterclass in Securing MSPs and IT Pros Secure Your Future: Getting Cyber Ready for 2024
Similar to Cybersecurity 101 - A Masterclass in Securing MSPs and IT Pros Secure Your Future: Getting Cyber Ready for 2024 (20)
More from MSP360
More from MSP360 (20)
Recently uploaded
Recently uploaded (20)
Cybersecurity 101 - A Masterclass in Securing MSPs and IT Pros Secure Your Future: Getting Cyber Ready for 2024
- 1. MSP Security Masterclass Webinar 3 of 3 Tyler Wrightson Leet Cyber Security
- 6. @tbwrightson
- 10. First Week Recap • Hackers Target MSPs • Risk is Bidirectional 1. Admin policy & Training to avoid password reuse 2. MFA Everything (of value) 3. Minimum Necessary & Least Privilege 4. Complacency
- 11. Last Week Recap • Strength in Small Business • Foundations – Business Risk – Vuln != Risk – Context Matters
- 12. Last Week Recap – Top Five Controls 1. MFA 1. Email & VPN 2. Legacy Protocols 3. “Other” login locations 2. VPN ACLs 1. Minimum Necessary & Least Privilege 2. Isolate what matters 3. Internal Network ACLs
- 13. Last Week Recap – Top Five Controls 4. Privileges & Passwords 1. Local Admins Group 2. Credential Reuse (and Pass-The-Hash) 3. Privileged Users 4. LAPS & PAWs 5. MDR – Specifically Managed – Not NSM
- 16. Getting Cyber Ready for 2024 What will hacking look like in 2024 and what can MSPs do about it
- 19. Know Thyself and... -Sun Tzu
- 24. Hackers look to inflict…
- 25. Cyber Criminals are like water
- 28. “No ones going to touch us, no one knows us”
- 31. Spray & Pray
- 32. Scan & Slam
- 33. Access Brokers
- 34. It’s been a tough year…
- 36. 1. Next Gen Social Engineering • “Synthetic Media” (image, video, audio and text) – AI Image generation – Deepfakes – Voice Cloning – Text
- 39. Voice Clone – What do we say? • Anything that works in a phishing email • Get me some gift cards • Funds transfer, credit card payment, bank info • We’re almost done with your loan application, just one more thing • I have a new cell phone number, then “Hey did you get my voicemail” • Text your MFA code to a test • Leave Keys, access tokens, computers, phone, tablet • Someone will be there soon to grab X… • Leave where you are • Go somewhere specific • ANYTHING
- 40. Text Cloning • Scrape your blog – Draft an email • Scrape social media – How do you talk to relatives – How do you talk to Spouse • Chatbot / SMS automation – Voice recordings – Romance scams • Perfect English, no more typos • Perfect industry lingo and references
- 55. What Can MSPs Do About it… • Awareness & Education • Educate your clients – AI, Voicecloning, Deepfakes • Continue your education – Understand your adversary
- 58. Questions
- 61. Cyber Insurance
- 62. • Cyber Insurance Carriers continue to focus on a core set of critical Security Controls as a primary requirement when evaluating a prospective insureds • Prospective insureds should have strong responses for all control areas. • Priority may vary slightly from one insurance carrier to another, based on insured’s industry sector, size, and Cyber profile. • Poor responses in one or more controls may result in declination, refusal to quote, elimination or co-insurance on ransomware coverage 66 Critical Controls for Cyber Insurability MFA EDR PAM Tested Backups Segregated Backups Service Accounts OT Security Cloud & Email Security Vendor Risk Management Tabletop Exercises Network Segmentation # of Domain Admins IR/BC/DR Planning 24/7 Monitoring Vulnerability Management Cyber Awareness & Training