DEF CON 32 - AppSec Considerations From the Casino Industry - Aleise McGowan, Tennisha Martin

The video discusses cybersecurity threats in the casino industry, emphasizing how cyberattacks—especially ransomware—disrupt operations and highlight critical security gaps. Key takeaways include the industry’s extensive data collection, vulnerabilities in IoT and ICT systems, and the significant impact of response strategies.

Key Takeaways:
• Casinos use facial recognition and surveillance to track patrons, collecting vast personal and behavioral data 2:45.
• Cybercriminals target casinos due to high-value data and financial assets, using tactics like social engineering and ransomware 5:00.
• The 2019 MGM breach began with a failed slot machine attack but escalated to a full system compromise, showing how weak IoT devices create entry points 15:12.
• Caesars paid a $4 million ransom and recovered in four days, while MGM avoided payment and faced over $30 million in losses and 15 days of downtime 17:10.

The casino industry faces high-stakes cyber threats due to interconnected systems and data-rich environments, requiring robust, proactive security measures beyond reactive ransom payments.

Sources:

• 2:45 Discussion of surveillance systems and data collection in casinos
• 5:00 Explanation of cybercriminal motivations and attack methods
• 15:12 Case of the MGM breach starting with a slot machine vulnerability
• 17:10 Comparison of Caesars and MGM responses to ransomware attacks