2018 Black Hat Hacker Survey Report: What Hackers Really Think About Your Cyber Defenses

Curious about what hackers really think of your cyber defenses? Thycotic’s new 2018 Black Hat Conference survey conducted in Las Vegas in August reveals some disturbing answers.

75% hackers say companies fail at applying the principle of least privilege
50% of hackers say they easily compromised both Windows 10/8 within the past year
More than 90% say they compromised Windows environments despite the use of Group Policy Objects (GPO)
Join Thycotic’s Chief Cyber Security Scientist Joseph Carson as he dives into what hackers say about top vulnerabilities they exploit, and how companies are failing to control privileged account credentials. He will then guide you through action steps you can take to limit “overprivileged” users without impacting their productivity.

1. Privileged Access Management 101
What Hackers Really Think About Your Cyber Defenses

2. 17,000 Security Professionals
BLACK HAT CONFERENCE 2018

3. Google’s Security Princess
delivering the Keynote

4. Detecting Credential Compromise in
AWS

5. From Workstation to Domain Admin

6. “So I Became a Domain Controller”

7. Privileged Access Management 101
What Hackers Really Think About Your Cyber Defenses

11. 50% of Hackers Easily Conquered Windows OS in the Past Year
Windows1027%
Windows822.5%
BASED ON SURVEY QUESTION:
Which OS did you conquer the
most in the past 12 months?
Less than 5% of hackers listed Mac OS,
Unix, and Mobile devices as
compromised.
Alsoidentifiedaseasilyconquered:
LinuxOS18%

12. say traditional perimeter security
firewalls and antivirus are irrelevant
or obsolete73
%
OF HACKERS SAY

14. 56% of Hackers say
Social
Engineering is the
fastest way to
access privileged
accounts
SocialEngineering56%
Application/
OSVulnerability20%
IdentityTheft10%
Malware,
StolenEndpoints<7%
BASED ON SURVEY QUESTION:
What’s the fastest way to get
onto a network to access
privileged accounts?

15. Phishing Scams
Not an
attachment
but hyperlink

17. Password Re-Useis the riskiest behavior by employees
Re-usedpasswords47%
UsingUSBdrives
Withoutscanning20%
Accessviapublicwifi19%
Malware,
StolenEndpoints<7%
BASED ON SURVEY QUESTION:
What’s risky behavior do you
exploit the most?

19. 91% of Hackers
Conquer Windows
Environments
Despite Using
Group Policy
Objects
Yes,usingMimikatz43%
Yes,easily26%
Yes,passwordsinSYSVOL
&GroupPolicyPreferences22%
BASED ON SURVEY QUESTION:
Do you exploit companies
using Microsoft GPO?

22. Default Vendor PasswordsAllow Hackers to Escalate Privileges
Defaultvendorpasswords22%
App/OSvulnerabilities20%
MisconfiguredserviceAccts18%
SocialEngineering17%
Sharedaccounts12%
Bruteforce7%
BASED ON SURVEY QUESTION:
What is the single best way to
typically escalate privileges?

24. Domain Admin AccountsAllow Hackers to RULE the Network
Domainadministrator25%
Serviceaccount19%
Rootaccount19%
BASED ON SURVEY QUESTION:
What is the primary type of
privileged account that you
prefer to target and stay hidden?

25. accessing privileged accounts was the
number one choice for the easiest and
fastest way to get at sensitive data32
%
OF HACKERS SAY

26. 1.Adopt a zero trust posture
2.Don’t rely only on GPO for security
3.Apply the principle ofLeast Privilege
Black Hat 2018 Report Key Takeaways

27. üReduces Costs: Saves companies time and money
üEmpower Happy Employees: Reduce employee cyber
fatigue
üPositive Security Impact
üFast Track to Compliance: Automation and reduced
complexity
üKeeps Cyber Criminals Out
PAM: #1 Project in 2018

29. Ask Advice
Click Here

30. A Secure Internet
Starts With You
QUESTIONS

31. Thycotic prevents cyberattacks by securing
passwords, protecting endpoints, and controlling
access
10,000+
Customers
180,000
IT Admins &
Security Pros
1M+
Endpoints
Protected