It’s 2019 and breaches are just as prevalent now as they ever were. Companies are still making it into the headlines with news of data leakage, cyber intrusion and theft of PII, credit card data, and other confidential information. There is no shortage of security frameworks and technology that are being sold and/or mandated for compliance but businesses around the world are still failing to keep data safe.
We will discuss real-world scenarios and how they can be avoided demonstrating TTPs executed in breaches that Trustwave has investigated. Methods to mitigate those vulnerabilities and avoid exploitation will be demonstrated with an eye toward the controls being utilized and how they map back to various security frameworks.