How Organizations Can Use Blunders to Level Up Their Security Programs

Megan Benoit’s RSAC presentation highlights eight common security mistakes—exposed ports, poor patching, weak password practices, misconfigured edge devices, insufficient logging, phishing susceptibility, insecure OAuth consent, and cultural/security control gaps—and provides practical mitigations such as stricter access controls, dual EDR, enforcing MFA and password hygiene, blocking risky OAuth consent, stronger email protections, and fostering developer-security relationships.