PODCAST

Security Insights

securityinsights

A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.

technology

All Episodes

34:22

Red Teams and Cyber War

Security Insights ·

2022/04/27

How do organisations prepare for cyber attacks? Does “red teaming” work? And how close are we to cyber war? Over the last few years, more firms have turned to red team security testing, putting their organisations through realistic attack simulations. But how do we balance the cost and time these tests demand, with the wider needs of the business? Our Insights Interview guest this week is Reuven Aronashvili, founder and CEO of Israeli cybersecurity company CYE. Today, he works with large enterprises

29:55

Surviving a crisis: the psychology of cyber attacks

Security Insights ·

2022/04/14

Nearly everyone in cyber talks about people, process and technology. But often, the people side is mentioned only in passing. But it is people that determine how well an organisation handles a cyber attack, and how quickly it recovers. Processes and technology are vital, of course. But as our guest this week says, behind every piece of wire, there is a human being. Rebecca McKeown is the director of human sciences at Immersive Labs. A psychologist who has worked with militaries, aviation,

29:55

Denial of service: attacks on the rise?

Security Insights ·

2022/03/30

Distributed denial of service attacks -- or DDoS -- are up 14 per cent on 2019's figures, according to research by security firm NETSCOUT. And attacks are becoming more complex, with some using as many as 26 different vectors. At the same time, there is a massive online market for DDoS attacks, with a terabit-class attack costing as little as $6500. Sites on the dark web even offer criminal hackers free trials of their wares, so the barriers to entry are effectively zero. What, then, can security

29:56

Is mobile a security weak spot?

Security Insights ·

2022/03/16

Are we underestimating the security threats to mobile devices – and indeed the threats to mobile infrastructure? Organisations of all sizes now depend heavily on mobile devices. But, although mobile security rarely makes the headlines, the risks posed by ever more powerful devices, and networks, are all too real. In fact, this week's guest argues that mobile devices were never designed to operate on corporate networks. Andy Brown is the CTO at Mobliciti. His firm’s been running mobile infrastructure

29:55

Identity, deception and compromised credentials

Security Insights ·

2022/02/23

Stolen or compromised identities have been an attack vector for years, if not decades. Even now, organisations are failing to protect against compromised identity. Identity is one of security’s critical weak spots. But why is this? Once an attacker breaches defences, it is still too easy for them to move laterally, and to attack higher value targets, or as we've seen recently, attack an organisation with ransomware. Our guest this week is chief security architect and formally the chief deception

29:55

The tale of a stolen iPad

Security Insights ·

2022/02/09

What happens if your personal devices are stolen? Few victims of theft recover their goods. But the loss of the hardware might only be the start of their problems. There is a growing black market in stolen devices, but also in tools that can unlock them, to steal credentials or to attack other networks. People who lose a device can be a victim twice over, if hackers then use their own property to target their identity. In this week’s episode, security researcher Adalsteinn Jonsson explains how this

29:55

Ageism in Infosec: Are we losing the older generation?

Security Insights ·

2022/01/26

Is ageism a problem in cybersecurity, and IT? The pandemic has accelerated a trend that observers were already warning about: older staff are leaving IT security. And with them, their knowledge and experience leaves too. What then can be done to encourage older workers to stay in the industry? Is ageism a problem, and if it is, how do we counter it? This week’s guests are inter-generational diversity expert and author, Henry Rose Lee and Gernot Hacker, from cybersecurity firm Appgate. Appgate

29:56

The security of things: protecting the IoT

Security Insights ·

2022/01/12

The Internet of Things continues to grow at pace. But are its security flaws being addressed? Industrial, operational technology and consumer devices are increasingly connected, but security is too often an afterthought, with flaws such as default passwords and insecure firmware. And many IoT devices are hard to patch, if they can be upgraded at all. The result is an expanding attack surface, that risks undermining the benefits of IoT technology. But could 2022 be the year this is changes? The

29:55

2021: Year in Review

Security Insights ·

2021/12/16

In this programme, Security Insights invites a selection of industry experts to look back at 2021, and to give their outlook for cybersecurity in 2022. This episode's guests are: Piers Wilson, director, Chartered Institute of Information Security Dr Ian Pratt, Global Head of Security at HP David Carroll, MD, Nominet Cyber Jamie Collier, cyber threat intelligence consultant, Mandiant. Episode edited by Stephen Pritchard

29:55

Can we make cybersecurity a safer place to work?

Security Insights ·

2021/12/02

Respect In Security was founded earlier this year to tackle harassment and inappropriate behaviour in the cybersecurity industry. And negative behaviour, online and face to face, is all too common. Security Insights invited Respect In Security's co-founders, Lisa Forte and Rik Ferguson, to explain their mission - and why making the industry safer and more inclusive ultimately benefits everyone. Interview by Stephen Pritchard

29:55

Can digital solve the global identity gap?

Security Insights ·

2021/11/17

Can digital technology help people around the world who lack access to a documented identity? Over a billion people worldwide lack access to basic papers, such as a birth certificate or passport. This makes it hard to access services such as health and education. For states, it makes it hard to prevent fraud, or detect crime. Our guest this week is Julie Dawson, head of regulatory and policy at Yoti, a digital ID provider. She speaks to editor Stephen Pritchard about the identity gap, and also

29:55

Threat modelling: finding flaws before software goes...

Security Insights ·

2021/11/03

The idea of building security in to new hardware and software products from the outset has gained ground over the last few years. And the move to "shift left" and introduce security by design has gained ground, following growing concerns about supply chain attacks. One way to achieve this is through threat modelling. Threat modelling is not, itself, new: Microsoft did pioneering work on it in the Nineties. But it is now being adopted by bodies such as NIST, with the goal of reducing zero-day

29:56

Rent a hack? Why cybercrime is now a service

Security Insights ·

2021/10/20

Criminal groups are increasingly turning their attention to cyber, a trend that picked up pace during the pandemic. One reason is that technical skills are no longer needed to launch a cyber or phishing attack. Instead, anyone can buy malware, zero day exploits and phishing templates on the dark web. This has led to an active market in vulnerabilities, and a wider range of crime groups and nation state actors buying in sophisticated exploits. But why is cybercrime evolve in this way? And what

29:31

Ransomware: dealing with the aftermath

Security Insights ·

2021/10/06

Ransomware continues to threaten organisations of all sizes. And although cybersecurity teams are improving their ability to detect and block ransomware attacks, some will make it through. How, then, should we deal with the aftermath? In this episode we look at the 30 days after am attack, and the impact of ransomware attacks on operations and reputation, and how businesses can recover. As our guest this week -- Ed Williams, from Trustwave SpiderLabs -- argues ransomware needs attention from the

29:55

Altered States:The State of the Security Profession...

Security Insights ·

2021/09/22

After a tumultuous 18 months, cybersecurity is by no means alone in taking stock. Which of the changes introduced to deal with the global pandemic are here to stay? And how have changes to the way we work impacted how we manage security in a world that is, if anything, riskier? The Chartered Institute of Information Security has just released a report covering all this, and more. In this episode, Security Insights talks to CIISec director, and report lead author, Piers Wilson about the outlook for

34:40

Defending universities and research, part 2

Security Insights ·

2021/09/08

Universities and research institutes saw an upswing in cyber attacks during the pandemic. But even before 2020, the sector was finding itself under increasing threat, from ransomware, espionage, and also because of underinvestment in technology and training. Our guests in this episode are Allie Mellen, an analyst covering security and risk, at Forrester, and previously an academic researcher at MIT, and Mark Wantling, the CIO at Salford University. They discuss the threats, and possible solutions,

29:52

Ready for a new term? How universities are improving...

Security Insights ·

2021/08/25

Universities and academic research institutions are under growing threat from cyber attack, driven by the rise of ransomware, Covid-19, and those on the search for intellectual property. But could collaboration help secure a sector that is vital to the UK's economic prosperity? As universities prepare for the start of the new academic year, Security Insights editor Stephen Pritchard discusses this, and more, with Professor Kevin Curran, senior member of the IEEE and Professor of Cyber Security at

29:55

Paper trail: security risks from printed documents

Security Insights ·

2021/08/11

Are paper documents a hidden security risk? According to one survey, two out of three people print sensitive work documents at home. But losing paper records could put an organisation in breach of the GDPR, and cause significant reputational damage. Controlling access to printed documents, and their secure destruction, is enough of a challenge in the workplace. But add in widespread home working, and the problem becomes all the greater. Could a clean desk policy at home be the answer? Mike Cluskey,

29:56

A new roadmap for identity from The Alan Turing...

Security Insights ·

2021/07/21

Researchers at The Alan Turing Institute are tackling one of the most pressing challenges of the digital world: trusted identity. How can we develop a version of identity that works for governments, businesses and individuals, is easy and cost effective to apply, reliable and works at scale? And how can robust identity counter the growing threats online? The Alan Turing Institute is the UK’s national institute for data science and artificial intelligence. And it is working on a four year project,

52:52

Ransomware: cybersecurity's clear and present danger

Security Insights ·

2021/07/07

According to the National Centre for Cyber Security, ransomware is the greatest cyber threat to UK business. And globally, ransomware is both increasing, and becoming more damaging. What are the reasons, and what can businesses, and governments, do to tackle it? In this episode, Security Insights invited three experts, Forrester analyst Steve Turner, security consultant James Bore, and James Rees, CISO and director of consultancy at Razorthorn, to discuss the threat, and some possible solutions. The

150 results

Security Insights

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs