FortiBleed, 70,000 Compromised Devices, and the Credential Economy Powering Every Breach

When a 20-person team using AI, automated tools, and a list of default credentials compromised 70,000 devices across 194 countries they exposed how mature the criminal market behind credential theft has become. Initial access brokers are now packaging pre-validated enterprise access for an average of $113,000, and the window from information stealer infection to ransomware deployment is just seven days.Join hosts Tehman Tariq and John Dilgen as they break down:The mechanics behind FortiBleed and what made it so effective at scaleHow the IAB market has turned stolen credentials into a premium productWhy identity drift and non-human identities are becoming attackers' favorite targets Two questions your organization should be asking right now:Does your credential compromise runbook treat session termination as the first step — or is password rotation all that's covered?Can your team name the owner and rotation schedule for your top 10 most privileged non-human identities?Resources: https://linktr.ee/ReliaQuestShadowTalkTehman Tariq: Sr. Manager of Cyber Operations at ReliaQuest. He has spent a majority of my career leading our Incident Response, Security Architecture, and Detection teams. As well has working hand in hand with CISOs to introduce automation allowing for the maturity of their security programs.John Dilgen: Cyber Threat Intelligence Analyst at ReliaQuest, where he specializes in researching cyber threats impacting ReliaQuest customers. With a strong technical background, he previously served as an Incident Response Analyst and Trainer at ReliaQuest.