NoThreat: Threats Inside Your Network
How attackers reach critical systems unnoticed, and how to stop them before impact
Speaker
Lev Zabudko
Co-founder & CPTO, Nothreat
With 20+ years in tech and product leadership, he has built products reaching 63M+ monthly active users, including driving growth for Yandex Alisa and building a parking platform processing 500,000+ payments daily.
Agenda
Recent attacks on banks in Azerbaijan
How it happened, the timeline and the consequences.
Your company as the attacker sees it
What internet asset search engines reveal about you and your suppliers.
An off-the-shelf attacker toolkit
Attack tools and AI models anyone can buy on the dark web.
Three stages of an internal attack
- Discovery: internal scanning, AD/LDAP enumeration, IoT devices, file shares, all hidden inside normal admin traffic.
- Exploitation: valid credentials, living off the land, quiet moves toward critical systems and data, with no malware to detect.
- Fix after use: patches, IoC feeds and SIEM rules arrive only after the breach. Takeaway: detection that relies on knowing the attack in advance is always one step behind.
Gartner's preemptive model: Deny, Deceive, Disrupt
Why the industry is shifting budget from "detect and respond" to "act before impact."
Deception in practice: digital twins
How cloning, fully interactive environments and stateful services help detect and stop attackers.
Q&A
What You Will Leave With
Everything you need to know before you save your seat
How attackers find and exploit weak points inside corporate networks, based on recent bank attacks, why reactive security falls behind, and how preemptive defense with digital twins works.