Загрузка...

Rapid7’s Deral Heiland on Why Your Network Segmentation Strategy Overlooks IoT Risk

Even in "properly secured" networks, Deral Heiland, Principal Security Research (IoT) at Rapid7, explains how inter-chip communication vulnerabilities and shared infrastructure enable lateral movement — including finding active hospital credentials on secondhand medical equipment and using unsegmented security cameras to breach state government networks. His research reveals why common security practices often fail: even when external interfaces are encrypted, internal device communications remain vulnerable. Learn practical approaches to implementing protocol-aware monitoring, developing hardware testing capabilities, and securing legacy devices that can't be patched.

Chapters:
00:00 Introduction and background
03:49 IoT ecosystem testing methodology
07:43 Inter-chip communication vulnerabilities
11:15 Protocol-specific monitoring
12:53 Coordinated vulnerability disclosure
15:05 Network segmentation strategies
19:31 Hardware testing skill development
21:20 Asset management and disposal
22:50 Legacy device security
26:57 Incident response for IoT
29:49 Implementation case studies
31:37 Closing thoughts

Follow us on Social Media
LinkedIn: https://www.linkedin.com/company/team-cymru/
Twitter: https://twitter.com/teamcymru
Twitter (Research Team): https://twitter.com/teamcymru_S2

Learn more at team-cymru.com

#cybersecurity #cybersecurityleadership #podcast #cyberpodcast #riskmanagement #securitymanagement #threat #threatintelligence #threatintel #threatdetection #threatmanagement #threatprevention #threatanalysis #thoughtleader #thoughtleadership #securityoperations #secops #networksecurity #securityprofessionals #cybersecuritycompany #risk

Видео Rapid7’s Deral Heiland on Why Your Network Segmentation Strategy Overlooks IoT Risk канала Team Cymru
threatintel secops cybersec Threat inteligence threatintelligence infosec informationsecurity threatrecon threat recon threat reconaisance reconnaissance future of cyber risk cyber risk cyberrisk futureofthreatintel recorded future recordedfuture cyber sec pure signal puresignal pure signal recon pure signal scout pure signal orbut pure signal orbit scoutinsight scout insight team cumry team cyrmu cymru cumry asm attack surface management soc
Комментарии отсутствуют
Зарегистрируйтесь или войдите с
Информация о видео
7 марта 2025 г. 20:18:01
00:31:32
Team Cymru
Теги
Правообладателям
Жалоба на материал Недопустимый материал Нарушение авторских прав
Комментарии
Поделиться
Другие видео канала

Hacktivist Hoaxes, DPRK Zoom Exploits, and Defending with AIHacktivist Hoaxes, DPRK Zoom Exploits, and Defending with AI

GigaOm’s Howard Holton on Cyber Threats Facing Small BusinessesGigaOm’s Howard Holton on Cyber Threats Facing Small Businesses

Strategic Identity Security — From Tactical Fires to Enterprise InfluenceStrategic Identity Security — From Tactical Fires to Enterprise Influence

The Futurum Group's Fernando Montenegro on the OODA Loop Approach to Security StrategyThe Futurum Group's Fernando Montenegro on the OODA Loop Approach to Security Strategy

TIG Risk Services' Duaine Labno on How Remote Hiring Became an Opening for InfiltrationTIG Risk Services' Duaine Labno on How Remote Hiring Became an Opening for Infiltration

Getting Management Commitment Behind Your Certification EffortsGetting Management Commitment Behind Your Certification Efforts

Silverado Policy Accelerator’s Dmitri Alperovitch on Hunting Intruders After They're Already InSilverado Policy Accelerator’s Dmitri Alperovitch on Hunting Intruders After They're Already In

Future of Cyber Risk Podcast: COEs Alexander Seger on Building Cybercrime Capacity Around the GlobeFuture of Cyber Risk Podcast: COEs Alexander Seger on Building Cybercrime Capacity Around the Globe

The Customer Pain Points Led to the Creation of Pure Signal ScoutThe Customer Pain Points Led to the Creation of Pure Signal Scout

Tokio Marine HCC's Alex Bovicelli on the SMB Ransomware Wave the Industry Isn't Talking AboutTokio Marine HCC's Alex Bovicelli on the SMB Ransomware Wave the Industry Isn't Talking About

Why an Unactionable Alert Is Worse Than No Alert at AllWhy an Unactionable Alert Is Worse Than No Alert at All

29% of exploited CVEs are already being attacked before you even see them29% of exploited CVEs are already being attacked before you even see them

The AI Zero-Day Engine, China’s Cyber Rise, and CI/CD PoisoningThe AI Zero-Day Engine, China’s Cyber Rise, and CI/CD Poisoning

Security Investments Unlock Business GrowthSecurity Investments Unlock Business Growth

Communicating the “Why” Over the “What”Communicating the “Why” Over the “What”

More Empathy and Simplicity for Better SecurityMore Empathy and Simplicity for Better Security

How The OODA Loop Is Empowering Quick Decision-Making in CybersecurityHow The OODA Loop Is Empowering Quick Decision-Making in Cybersecurity

Agentic Overload: The Rise of AI Exploits and the "Wet Bandit" APTAgentic Overload: The Rise of AI Exploits and the "Wet Bandit" APT

Operation Ghost Mail, Starlink Evasion, and the Stoat Waffle ThreatOperation Ghost Mail, Starlink Evasion, and the Stoat Waffle Threat

Real AI Applications In Law EnforcementReal AI Applications In Law Enforcement

Taking Action to Make Cybercrime Prosecution EasierTaking Action to Make Cybercrime Prosecution Easier

Яндекс.Метрика
© 2008-2026 «Информационно-развлекательный портал города Верхняя Салда»
salda.ws@mail.ru salda_ws Контакты Карта портала Сообщить об ошибке Соглашения Пользовательское соглашение Соглашение о конфиденциальности Согласие на обработку персональных данных Информация для правообладателей Об использовании Cookies
Все заметки Новая заметка Страницу в заметки
Страницу в закладки Мои закладки
На информационно-развлекательном портале SALDA.WS применяются cookie-файлы. Нажимая кнопку Принять, вы подтверждаете свое согласие на их использование.
О CookiesНапомнить позжеПринять