Penguin Power – a 21st Century Intrusion

People often believe that Linux is a “secure” operating system or that they “don’t have much Linux” in their environment, so they “don’t need to worry about it.” However, this is rarely true. Linux attacks are becoming commonplace, and it is hard to imagine how any organization can operate without it, as Linux operating systems power our switches, routers, and more.

In this session, we will examine an intrusion into a Southeast Asia–based business, where the attackers almost entirely pivoted through the organization’s Linux estate. We’ll explore the lessons they had to learn about Linux incident response— and highlight some of the things they, and you, can do better in the future.