PODCAST

Security Insights

securityinsights

A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.

technology

All Episodes

30:55

Open source: a security risk?

Security Insights ·

2023/11/02

As many as 96 per cent of vulnerabilities in open source software are because developers use an outdated, or unpatched version of the code. And this matters, because open source is now the building block of almost all enterprise software, web applications, and even the code that runs consumer technology. But open source can be secure. It just needs developers, and the organisation they work for, to think about security throughout the software lifecycle. With guest Brian Fox, CTO and co-founder at

29:13

Automation and the cybersecurity skills gap

Security Insights ·

2023/10/19

The cybersecurity industry faces an ongoing -- and some say worsening -- skills gap. Both the private and public sectors need more skilled security professionals, as more operations go online. And there is only so much the education system, or training within the business, can do to solve the problem. So do we need to rethink how cybersecurity operates? Perhaps it is time for the industry to undergo its own digital transformation, and look at automation to take the load off human professionals. Our

29:55

Cyber resilience: are we prepared?

Security Insights ·

2023/10/05

Most boards -- and certainly all CISOs -- now understand that it is not if a cyber attack happens, but when. None the less, organisations are not doing enough to ensure that they can continue to operate during a cyber attack, and recover from it. And the latest UK Government Cyber Security Breaches survey goes further, suggesting that not only are organisations failing to invest in cyber security, but in some cases, are going backwards. They are paying less attention to the basic "cyber hygiene"

29:00

Defending healthcare in cyberspace

Security Insights ·

2023/09/21

Healthcare is coming under an increasing volume of cyber attacks, especially since the pandemic. And attacks are spreading to smaller health care outfits, such as ambulance services, suppliers to the health care system, and the pharmaceutical industry. Much of this is being driven by ransomware, but we are also seeing more complex attacks. How can healthcare organisations protect themselves? Our guest is Trevor Dearing, Director of Critical Infrastructure at Illumio, who reports that a growing

35:54

Cyber war: is it everyone’s business?

Security Insights ·

2023/09/07

Is cyber war a risk that only governments can deal with? Or should enterprises be prepared to mount their own defences? In this episode we speak to Prof Richard Benham, a UK Government adviser on cyber security, the first professor in cyber security management, Patron of The National Museum of Computing at Bletchley Park, and non-executive director at Emerge Digital. He believes that, in some ways, a cyber war has already started. He speaks to editor Stephen Pritchard about the reasons why, and sets

29:52

Cloud insecurity: leaving the keys in the door?

Security Insights ·

2023/08/24

The cloud is now a mainstream technology across both the public and private sectors. Its flexibility and scaleability are attractive to organisations of all sizes, and early concerns about security have been addressed. Or have they? There is growing evidence that data breaches and attacks, such as ransomware, are exploiting gaps in cloud security. All too often, this is because security measures have not been deployed, or cloud resources are misconfigured. And bad actors can exploit those gaps,

33:25

Deep fakes, AI and digital trust

Security Insights ·

2023/08/11

Without trust, we can’t have security. But the growth of the digital economy, and the wider online world, is changing our idea of trust. A lot of the ways we identified and trusted the people, and organisations in the physical world are not easy to replicate online. And, as well as removing the human traits that help us to establish trust – from eye contact or a handshake, to a tone of voice – it's becoming harder to identify if another person is who they say they are. In fact, it's now hard to be

29:55

Biometrics: Eyes in the sky?

Security Insights ·

2023/07/27

Biometric technology promises both security and convenience: there's a reason the leading smartphone makers have adopted face ID, or fingerprint scanners. But improvements in computing power and AI, as well as more powerful sensors, have opened up entirely new fields, such as remote surveillance. Are we comfortable with systems that can pick out a face from a crowd? And how do we feel about artificial intelligence making decisions about those images, such as whether someone’s actions look

29:55

Building security capability at Thrive Homes

Security Insights ·

2023/07/06

This week's episode is an insider's account of exactly what it takes to review, and build up, an business' cyber defences. When John Stenton took over as head of IT at housing provider Thrive Homes, he admits technology was a "bit of a mess". And a lot needed to be done, both to review security and to reassure the board. Thrive Homes is fairly typical of the type of mid-sized organisation that didn't see itself as being in the cyber front line. But, as Stenton explains, any organisation can be a

25:56

People and cyber resilience: the human factor

Security Insights ·

2023/06/22

Cybersecurity is about technology, processes and above all, people. And with CISOs' growing emphasis on resilience in the face of cyber attacks, perhaps it is time to look at the human factors involved in combatting and recovering from an incident. How can we help our teams make the right decisions, and cope under pressure? In this episode, we look at an investigation into workforce resilience, carried out by Osterman Research for Immersive Labs. Our guest is Immersive Labs' VP of Cyber, Max

35:26

CRA and DORA: New laws, new defences?

Security Insights ·

2023/06/08

The next few years will see the European Union introduce new laws governing cybersecurity. These include the Cyber Resilience Act, and DORA. DORA -- or the Digital Operational Resilience Act -- looks to improve overall ICT resilience in the financial services sector. But as our guests this week point out, its impact is likely to be felt by other sectors too. The Cyber Resilience Act is more broadly based, and sets out baseline security requirements for both hardware and software or, as the text

29:55

CRESTCon 2023: CREST President, Rowland Johnson

Security Insights ·

2023/05/31

In our second podcast from CRESTCon Europe 2023, we catch up with Rowland Johnson, CREST President. CREST is a non profit organisation focused on building standards in cyber. This includes accreditation of companies and certification of individual cybersecurity professionals. The cybersecurity sector faces a number of challenges: professionalisation, improving diversity, dealing with a stubborn skills shortage and the potential, and potential threats, of AI. So how does the industry — and the

29:55

Nation state cyber attacks: part 2: evolving threats,...

Security Insights ·

2023/05/25

In this second part of our analysis of nation state cyber attacks, we look at how threats are evolving, and how increasingly private businesses are their targets. According to research by analysts Forrester, nation state attacks are becoming both more frequent, and more severe. And attackers have widened both their objectives, and their methods. But can organisations, especially in the private sector, defend themselves against these attacks? Forrester has put together a model setting out one way to

29:55

CRESTCon 2023: Security and integrity with Jon...

Security Insights ·

2023/05/24

Over the last few years, security professionals have become increasingly concerned about where software, and software components, come from. A growing number of significant security breaches have been caused by vulnerabilities in the software supply chain. But should we now start to look beyond just software, and look at data too? Jon Geater thinks we should. The keynote speaker at this year’s CRESTCon Europe, Jon is co-founder at RKVST and co-chair if the IETF’s supply chain integrity, transparency

29:55

CNI, healthcare and cyber threats

Security Insights ·

2023/05/11

Any system that is connected to the public internet is at risk of cyber attack. And any system that connects to a network or other system connected to the internet, is also at risk. This poses dilemmas for operators of critical infrastructure. Devices and applications developed to run on standalone infrastructure, often with specialist operating systems, are not designed to work safely online. How, then, can organisations operating critical national infrastructure, protect their systems from cyber

29:55

Insight Interview: Chris Dimitriadis, ISACA

Security Insights ·

2023/04/27

ISACA today is one of the principal organisations providing accreditation and skills training for infosecurity professionals. But that's not all it does. The organisation is involved in standards as well as developing developing tools for secure and software development and driving areas such as digital trust. That puts ISACA in a very good position to take the pulse of the cybersecurity industry. Our guest for this episode is Chris Dimitriadis, who is their Chief Strategy Officer. In a wide ranging

34:25

Nation state cyber attacks: an unstoppable force?

Security Insights ·

2023/04/13

Nation state attacks are now an unavoidable part of the cybersecurity landscape. And increasingly, these attacks are either targeting commercial organisations, to gather intelligence, steal intellectual property or simply for political or diplomatic leverage. Even if there is no specific hostile intent, businesses and public sector bodies risk being caught in the spill over from attacks aimed elsewhere. Can organisations defend themselves against an attacker with the resources of a nation state

35:55

Cyber skills: are we our own worst enemy?

Security Insights ·

2023/03/30

The cybersecurity industry has long complained of a skills shortage. But is the industry itself at least partially to blame? From recruitment processes to training, development and retention, and a lack of diversity, there is certainly work to be done. And with no let up in cyber threats, and a growing demand for skilled staff, this needs to be tackled with urgency. Our guests this week are setting out to do that. Sally Walker is a former director of cybersecurity at GCHQ. She is now neurodiversity

30:55

Data privacy, AI and the board

Security Insights ·

2023/03/16

Is data privacy still something businesses need to worry about? With financial pressures, rising inflation, the continuing aftermath of the pandemic and the ongoing challenge of recruiting skilled people – especially for technical roles – it would be understandable, if privacy had slipped down the agenda. Our guest this week, though, argues that it is wrong to overlook privacy concerns and data protection. Camilla Winlo is head of data privacy at Gemserv. She points to new legislation, the need to

29:55

GPT-3, Generative AI, and cyberthreats

Security Insights ·

2023/02/28

Over the last few months, AI has attracted even more attention than usual. Much of this is driven by OpenAI's ChatGPT tool, which allows anyone to create convincing, "human sounding" text from just a web browser. But GPT-3 and generative AI can be misused, and could make it easier to carry out cybercrime or create fake news. Although ChatGPT has safeguards built in, the tools to create natural language text are becoming cheaper. Security researchers at Finnish firm WithSecure put this to the test,

150 results

Security Insights

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs