x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Security Breach

A weekly discussion of new developments and the latest cybersecurity threats, including ransomware, malware, phishing schemes, DDoS attacks and more, facing the U.S. industrial sector.

news tech news

All Episodes

42:15

Looking Back to Move Forward

Security Breach ·

2024/12/12

As we begin to close out 2024 and look ahead to 2025, I couldn’t resist the urge to revisit some of my favorite guests from the last couple of months.While I’m grateful for everyone we’ve had on the show, and all the support we continue to receive from the industrial cybersecurity community, I felt these comments were worth another listen, with special focus being given to a handful of the most critical issues confronting our OT environments. First, we hear from Jon Taylor (1:16) at Vers...

en-us

36:04

AI Is Exposing Your Most Vulnerable Attack Surface

Security Breach ·

2024/12/09

According to Fortinet’s 2024 State of Operational Technology and Cybersecurity Report, 43 percent of those surveyed reported a loss of business critical data or intellectual property so far in 2024– a number this is up nearly 10 percent from last year. And we all know what happens with this hijacked data. Per the World Economic Forum’s May 2024 white paper, the number of ransomware attacks on industrial infrastructure doubled in 2023, boosting ransomware to the leading concern for m...

en-us

40:01

Minimizing Hacks by Focusing on Uptime

Security Breach ·

2024/11/21

Next to artificial intelligence, one of the biggest buzz terms in industrial cybersecurity right now might be SBOM, or software bill of materials. The term generates equal parts concern and eye roll as those entrusted with enterprise defense look to ensure that there are no embedded vulnerabilities amongst the data platforms they are both sourcing and utilizing within their offerings. Perhaps most frustrating is having to essentially reverse engineer a number of established products in o...

en-us

54:24

What Cybersecurity Can Learn from Tom Brady

Security Breach ·

2024/11/15

We assembled some "nerds from the basement" to cover a key strategy in combatting evolving threats.Today’s episode is going to take on a little different flavor, as we’re going to show you one particular tool that can impact a number of your security planning, training and discovery strategies.While table top exercises are nothing new, we’re going to demonstrate how they’re evolving and can be customized according to your needs. We’re going to tackle the human element of cybersecurity by disc...

en-us

38:25

Threat Landscape Update

Security Breach ·

2024/11/08

For this episode, instead of tapping into one source for feedback and updates on industrial cybersecurity, we’re going to look at some of the key insights previous guests have offered on the evolving threat landscape – from increased risks emanating from technological integrations and an uptick in automation, to the more traditional adversaries responsible for next-generation malware, ransomware and phishing schemes. To kick things off, we'll hear from:Tom Marsland, VP of Technology for ...

en-us

38:04

The Little Things That Kill

Security Breach ·

2024/10/31

While there are plenty of unknowns when it comes to protecting the OT attack surface, there are some things that are undeniably true.We know that the frequency of attacks will continue to increase.We know that it’s not if your ICS will be probed, but when.And we also know that asset and connection visibility is an ongoing challenge due to the implementation of more automated technology.Finally, we also know that one of the most important aspects of any cybersecurity plan is the portion that l...

en-us

22:22

Phishing Attack Defense 'Not Rocket Science'

Security Breach ·

2024/10/24

Maybe you’re sick of hearing about phishing schemes and the way hackers are using this strategy to infiltrate your networks, access intellectual data, shut down production, or hold your assets for ransom. If that’s the case, then you’ve made a lot of hackers very happy.And based on Proofpoint’s 2024 State of Phish report, protecting against phishing schemes is simply not being reinforced or given the proper priority. For example,71% of surveyed users admitted to taking a risky action, and 96%...

en-us

41:49

Legacy Mindsets Are Helping Hackers Weaponize Networks

Security Breach ·

2024/10/18

Send us a textSo, my daughters like to give me a hard time about growing old. Said another way, I’m a legacy asset - just like most of the devices many of you observe, manage and secure every day. Your machines are still in place because they work. While the technology around these assets has evolved, their core functionality and value to the production process has remained constant. But as sensors, network connections and access parameters have been upgraded to improve output, thes...

en-us

39:22

Using Force Multipliers to Protect Against Next-Gen...

Security Breach ·

2024/10/10

Send us a textWhile the justifications for additional cybersecurity spending is easy to explain, getting buy-in at the C-level can be difficult. However, some recent research might help you win over those controlling the purse strings.SonicWall’s Mid-Year Cyber Threat Report found that their firewalls were under attack 125 percent of the time during a 40-hour work week. And if that doesn’t get the attention of the powers that be, it might also be worth mentioning that during these attacks Son...

en-us

32:38

Never Let a Good Hack Go to Waste

Security Breach ·

2024/10/03

Send us a textOne of the most common topics we explore here on Security Breach is the ongoing challenge of asset visibility in the OT landscape. It's frustrating because it would seem that the solution starts with basic inventory management approaches, i.e. the first step in developing frameworks and plans for everything from tool selection to attack response.Of course, this is never simple due to the increasing amount of IIoT technology and the connection demands they place on industrial sys...

en-us

38:17

Finding Your 'Creative Maliciousness'

Security Breach ·

2024/09/26

Send us a textAccording to Veeam’s 2024 Ransomware Trends Report, cyber victims stated that they were unable to restore 43 percent of whatever data was affected by ransomware attacks. This reaffirms what a number of Security Breach guests have stated about trusting hackers after paying their extortion demands. Another finding shows that 63 percent of ransomware attack victims restored the compromised systems directly back into their production environment, without some type of quarantine...

en-us

35:10

Getting Past the Whack-A-Mole Approach

Security Breach ·

2024/09/20

Send us a textThe ongoing theme in industrial cybersecurity centers on two competing dynamics – the desire to expand our implementation of automation and Industry 4.0 technologies with the goal of using more and faster connections, along with the decision-making data each generates to improve the efficiency and quality of production.However, these goals now need to be counter-balanced against the heightened risks that all these connections spawn, and the doors they can open for hackers lookin...

en-us

31:41

Inside the Growing Complexity of Ransomware Hacking...

Security Breach ·

2024/09/11

Send us a textWe’re back to discuss an all-too-familiar topic – ransomware.Ironically enough, it seems the topics we describe in this manner become so familiar because we can’t figure out viable, long-term solutions. I think part of the challenge for industrial organizations dealing with ransomware is that we have to divide our energy and resources between prevention, detection and response. Any one of those is a challenge, but managing all three is daunting, and hackers know this. But so do ...

en-us

38:52

Time to 'Rip off the Band-Aid' to Ensure Security

Security Breach ·

2024/09/05

Send us a textA smarter, well-funded hacker community means embracing basic, yet daunting cyber challenges.In manufacturing, regardless of your role, avoiding downtime is an obvious priority, and one of the motivating factors driving investments in cybersecurity.In working to mitigate potential DDoS attacks or malware drops, manufacturers are tapping into more resources in heightening their awareness of vulnerabilities and the associated remedies, which can include updating access protocols, ...

en-us

45:47

Combating the 20th Century Mafia with a Stronger...

Security Breach ·

2024/08/28

Send us a textSophos recently reported that 65 percent of manufacturing and production organizations were hit by ransomware last year, which, unlike other sectors, is an increase. Overall, these attacks have increased by 41 percent for manufacturing since 2020. Additionally, the cybersecurity firm found that 44 percent of computers used in manufacturing have been impacted by a ransomware attack, and over half of these intrusions can be directly linked to malicious emails and compromised crede...

en-us

41:33

Tearing Down the 'Set It and Forget It' Mindset

Security Breach ·

2024/08/22

Send us a Text Message.I recently watched an interesting documentary called Turning Point: The Bomb and the Cold War on Netflix. Great watch – I’d highly recommend it. Essentially it positioned nearly every prominent geo-political event since World War II as fallout from the U.S. dropping the nuclear bomb on Japan to end World War II.Similarly, we can look at a number of recent, major cybersecurity events that have their origins in attacks on critical infrastructure. Whether you want to go al...

en-us

20:09

Bridging the IT-OT Divide

Security Breach ·

2024/08/15

Send us a Text Message.When I was a kid, we always looked forward to my dad’s work picnic. He was a tool and dye maker for a leading caster manufacturer that would rent out a local park, make a ton of food and put on various games and activities for the families. One of the highlights of this day was a softball game pitting the office versus the shop.The good-natured shots that were fired across the dugouts of this summer classic reminds me of the challenges we see in industrial cybersecurity...

en-us

51:08

'There's No Bulletproof Vest' in Cybersecurity

Security Breach ·

2024/08/08

Send us a Text Message.An ethical cyber researcher breaks down the 'tsunami of exposed data' he continues to uncover.When it comes to solving industrial cybersecurity's biggest challenges, I think we have to continue to ask questions that simultaneously tackle basic blocking and tackling concerns, as well as those that lead to bad news. Both prevent us from putting our heads in the sand in trying to ignore the shortcomings of our current strategies, and I’d argue that a great deal of positive...

en-us

19:30

Are We Over-Connected?

Security Breach ·

2024/08/02

Send us a Text Message.The landscape of industrial cybersecurity continues to change and evolve, and demands a vigilant monitoring of the next threat, vulnerability or potential soft spot in our defenses. That’s why we continue to produce Security Breach, and, by the way, continue to be so appreciative of the growth and support we’ve received from each of you.That said, once in a while it’s good to take a look back at some of the ongoing lessons that we’re learning, especially when the input ...

en-us

30:22

The $25M 'Wake-Up Call' Supply Chain Hack

Security Breach ·

2024/07/24

Send us a Text Message.According to IBM’s Cost of a Data Breach Report, nearly 20 percent of the organizations surveyed stated that they have experienced a breach stemming from a compromise in their supply chain, or a vulnerability related to it. The average cost of these breaches was estimated at just under $4.5 million. Their data also found that attacks emanating from the supply chain had a longer lifecycle than average.The increased costs and complexities of addressing supply chain attack...

en-us

143 results

Similar Podcasts

DW Noticias

DW

JIJI English News-時事通信英語ニュース-

時事通信社

Legal AF by MeidasTouch

MeidasTouch Network

Mark Levin Podcast

Cumulus Podcast Network

朝日新聞AJW 英語ニュース（The Asahi Shimbun Asia & Japan Watch）

朝日新聞ポッドキャスト