CypherCon 2025
Comedy Of Error Codes – When Incident Response Goes Wrong
Joshua Havlik
Abstract:
A real incident never goes as planned, minor missteps can amplify risks and complications in an incident. You can start with the feeling of HTTP 200 (OK), to feeling HTTP 418 (I’m a teapot) in the matter of minutes. Sometimes you just need to take a step back and HTTTP 205 (Reset Content). In this talk I will be going through some of the pitfalls in an incident that I was a part of, that could be described as nothing more than a comedy of error (codes).
Importance: This talk highlights common pitfalls and lessons that strengthen response capabilities. By learning from past mistakes, teams can refine their plans, improve decision-making, and foster a culture of continuous improvement, ultimately building a more resilient approach to cyber threats. This talk also supports compliance, documentation, and preparedness for future incidents.

Joshua Havlik
Three Letters…
Joshua Havlik has been a Security Engineer at Unnamed Company for over 2 years, bringing with him more than 14 years of experience in the cybersecurity field. His diverse background includes roles as a security manager in the manufacturing industry, a security analyst in the financial sector, and an analyst for a three-letter agency in the US Navy. Outside of work, Joshua is an avid hobbyist, currently focused on mastering the art of safe cracking.