Read the abstract ➤ https://www.conf42.com/DevSecOps_2023_Brian_Contos_hacking_demos_secrets_asset_intelligence Other sessions at this event ➤ https://www.conf42.com/devsecops2023 Join Discord ➤ https://discord.gg/DnyHgrC7jC Chapters 0:00 intro 1:43 preamble 1:58 asset intelligence 4:12 dirty secrets: xiot 6:08 internet-accessible xiot 8:13 research stats 10:46 dangerous lies - common xiot attack types 11:18 rsocks common xiot attack types 12:55 - physical 13:15 - fronton 14:09 - oem attacks 14:19 - illegal xiot devices 16:08 - pivot attacks 16:19 - quietexit 20:27 demo 1 - industrial camera 25:34 demo 2 - hacking industrial robots 34:38 remediation, visibility with an asset intelligence platform 36:45 try it. a free poc only takes 60 minutes 37:18 thanks