In today's interconnected world, MSPs and IT Professionals play a vital role in ensuring the seamless operation of businesses. However, this critical position also makes them prime targets for cybercriminals. Join us in this exclusive webinar where you'll have the unique opportunity to learn from a seasoned veteran hacker, Tyler Wrightson.

1. MSP Security Masterclass
Webinar 1 of 3
Tyler Wrightson
Leet Cyber Security
Twitter: @tbwrightson

6. @tbwrightson

10. Takeaway

14. Do Hackers even Target MSPs?

15. Do Hackers even Target MSPs?

20. MSP Risk is Unique

21. MSP Risk is Unique
• Inherent risk from all primary tools

22. MSP Risk is Bidirectional

23. MSP Risk is Bidirectional

24. MSP
Client Client Client Client Client Client

25. MSP
Client Client Client Client Client Client
Hacked

26. MSP
Client Client Client Client Client Client
Hacked

27. MSP
Client Client Client Client Client Client
Hacked

28. MSP
Client Client Client Client Client Client
Hacked
Hacked

29. MSP
Client Client Client Client Client Client
Hacked
Hacked

30. Thus
• Your clients vulnerabilities are your own
• Your clients risks are your own
• Your clients ARE your attack surface

31. MSP Top Three Systemic Issues
1. Password Issues
2. Minimum Necessary
3. Complacency

32. 1. Password Issues
• Password Reuse

33. Password Reuse

34. Password Reuse

35. MSP
Client Client Client Client Client Client
Hacked
SuperS3cretCrazyPassString99!!

36. MSP
Client Client Client Client Client Client
Hacked
SuperS3cretCrazyPassString99!!

37. 1. Password Issues
• Password Reuse
• Password Systems

38. MSP
IBM Acme XYZ
Hacked
SuperS3cr3tIBMPass!!

39. MSP
IBM Acme XYZ
SuperS3cr3tIBMPass!!
SuperS3cr3tAcmePass!! SuperS3cr3tXYZPass!!

40. But I have MFA….

41. 1. Password Issues –
How are they Compromised

43. 1. Password Issues - Compromise
• Phishing
• Vishing
• Breach creds
• Wateringholes
• Season Passes
– Winter23!, Winter2023!, Fall2023!, Autumn23$
• In Memory
• Pass The Hash

44. 2. Minimum Necessary
• Too many people with access they don’t need
– CEO, Admin
• Too many old systems that ‘we tried once’

45. 3. Complacency
• Tech jobs are hard
• Many repetitive tasks
– Which are quick, in the moment
• IT People suffer from Technician Mindset

46. Recommendations
1. Admin policy & Training to avoid password reuse
– Make specific to your MSP
– Mostly remote vs In Person
2. MFA Everything (of value)
3. Minimum Necessary & Least Privilege
– Define what you have
• Data access & Systems
4. Complacency
– Recurring Checks
– Recurring Training

47. Questions

49. Thank You
@leetsys
blog.leetsys.com
@tbwrightson
Email: TW@LEETSYS.COM