Hackfest - Level UP

Johnny Xmas

Johnny has been a dedicated contributor to the public forum, sharing his extensive research and knowledge to the public since 2002. Most notably recognized for his pivotal role in exposing the American TSA Master Key leaks (2014-2018), uncovering Venmo stalking vulnerabilities (2018), and being an overall nuisance. Currently, he is the Global Head of Offensive Security for A Fortune 100 food and beverage manufacturer.


Votre compte twitter ou autre réseau social:

@j0hnnyxm4s on everything

Vos pronoms:

He/Him


Intervention

31/10
13:30
50minutes
5 Lies Enterprise Security Still Tells Itself
Johnny Xmas

Your security program is built on a foundation of convenient lies. Your risk register holds 2014 acceptances. Your asset inventory doesn't exist. Your identity perimeter is a joke. Your vendor controls are theater. And that expensive shelfware? It's never actually alerted on anything you'd care about.
This is not a technical deep-dive. This is a no-bullshit inventory of enterprise security theater — the persistent, systemic failures that breach-tested Fortune 500s keep repeating, slide after slide, hack after hack.

Défensif
Track 1 (306B)