At the turn of the millennium IT organisations had about 60 days to fix software vulnerabilities. Fast forward to 2022 and, well, it’s not good. Zero day vulnerabilities have come and gone. The world now has to learn how to deal with widespread exploitation happening before a fix is available.
In this session we’ll look at Cybercrime and its bigger more dangerous cousin: Cyber-warfare. We'll explore the drivers behind the radical shift, the software arsenal available and how and why developers are both target and unwitting helpers. A dip into Log4Shell and SpringShell will help us understand the basics of how we make software vulnerable and maybe, what we can do to reduce the risks.
1