Stretching BHE Horizontally: Identity Security at Unusual Scale | SO-CON 26
Source: YouTube · SpecterOps · published Jun 17, 2026 · 36:23
The speaker introduces a foundational network security graph from 20 years ago that illustrates the severe risk of shared local administrator passwords across a massive network 0:07.
Key Takeaways:
• The visualization maps out a customer's network, where blue dots represent individual hosts 0:32.
• Red boxes within the graph denote local account credentials on those hosts 0:37.
• A large "Pac-Man" shape emerged because 1,000 systems were using the exact same local administrator password 0:44.
• This shared credential vulnerability meant that compromising just a single host would effectively result in the compromise of the entire network 0:54.
This early visualization effectively demonstrated to the customer how a single point of failure could lead to a total network takeover.
Sources:
- 0:07 Speaker introduces their 20-year-old "graph origin story."
- 0:32 Blue dots are defined as network hosts.
- 0:37 Red boxes represent local account credentials.
- 0:44 The Pac-Man shape represents 1,000 systems with identical local admin passwords.
- 0:54 Explanation of how one compromise leads to total network compromise.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
So, before I start my presentations, I often like to share a story or picture from long ago, right? And this is a graph that I created probably 20-some years ago, and it is more or less my graph origin story. >> [snorts] >> Um, I'm also very fond of it simply because it kind of looks like Pac-Man to me. But, at the time it was really useful for conveying a story or a problem to a customer of ours. So, in it, each of those little blue dots represents a host on their network. And each red box was a local account credential. >> [snorts] >> The the giant Pac-Man, well, that existed because there were a thousand systems in this network with the same a local administrator account password. Right? [snorts] So, a compromise of any one of those hosts is essentially a compromise of them all. It's ba…