Despite the World Bank's wealth, their cybersecurity measures were inadequate, relying solely on user IDs and passwords. When there was a security breach, it was surprising to find the hackers targeting HR, but it was due to obtaining password hashes and the enterprise admin’s password.
The speaker shares their experience of working late during a cyber attack incident, involving only sleeping a few hours under their desk with a pillow and a blanket they eventually left at work.
A look into the 2016 World Bank data breach, which resulted in the loss of private employee data, and the questionable security practices that may have contributed to the incident.
The ability to quickly crack password hashes indicates that enterprise admin passwords are not very strong, leaving networks vulnerable. Two-factor authentication can provide added security.
Microsoft was called in to conduct an analysis of Active Directory forest management for a bank after a security breach. The company developed a security operations center and incident handling playbook to improve overall security.