Download to read offline
Cybersecurity 101 - A Masterclass in Securing MSPs and IT Pros Understand Hacker Tactics and Strengthen Your Defenses
- 1. MSP Security Masterclass Webinar1 of 3 Tyler Wrightson Leet Cyber Security Twitter: @tbwrightson
- 6.
- 10.
- 14. Do Hackers evenTarget MSPs?
- 15. Do Hackers evenTarget MSPs?
- 20. MSP Risk isUnique
- 21. MSP Risk isUnique • Inherent risk from all primary tools
- 22. MSP Risk isBidirectional
- 23. MSP Risk isBidirectional
- 24. MSP Client Client ClientClient Client Client
- 25. MSP Client Client ClientClient Client Client Hacked
- 26. MSP Client Client ClientClient Client Client Hacked
- 27. MSP Client Client ClientClient Client Client Hacked
- 28. MSP Client Client ClientClient Client Client Hacked Hacked
- 29. MSP Client Client ClientClient Client Client Hacked Hacked
- 30. Thus • Your clientsvulnerabilities are your own • Your clients risks are your own • Your clients ARE your attack surface
- 31. MSP Top ThreeSystemic Issues 1. Password Issues 2. Minimum Necessary 3. Complacency
- 32. 1. Password Issues •Password Reuse
- 33.
- 34.
- 35. MSP Client Client ClientClient Client Client Hacked SuperS3cretCrazyPassString99!!
- 36. MSP Client Client ClientClient Client Client Hacked SuperS3cretCrazyPassString99!!
- 37. 1. Password Issues •Password Reuse • Password Systems
- 38.
- 39. MSP IBM Acme XYZ SuperS3cr3tIBMPass!! SuperS3cr3tAcmePass!!SuperS3cr3tXYZPass!!
- 40. But I haveMFA….
- 41. 1. Password Issues– How are they Compromised
- 43. 1. Password Issues- Compromise • Phishing • Vishing • Breach creds • Wateringholes • Season Passes – Winter23!, Winter2023!, Fall2023!, Autumn23$ • In Memory • Pass The Hash
- 44. 2. Minimum Necessary •Too many people with access they don’t need – CEO, Admin • Too many old systems that ‘we tried once’
- 45. 3. Complacency • Techjobs are hard • Many repetitive tasks – Which are quick, in the moment • IT People suffer from Technician Mindset
- 46. Recommendations 1. Admin policy& Training to avoid password reuse – Make specific to your MSP – Mostly remote vs In Person 2. MFA Everything (of value) 3. Minimum Necessary & Least Privilege – Define what you have • Data access & Systems 4. Complacency – Recurring Checks – Recurring Training
- 47.
- 49.