PODCAST

Security Insights

securityinsights

A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.

technology

All Episodes

29:55

Security, diversity and resilience

Security Insights ·

2023/02/17

IT security and business resilience are often viewed as separate disciplines. But both are now squarely board-level issues. The challenge for IT directors and cybersecurity leaders, though, is that teams, technologies and practices exist in their own silos. This makes it harder for a business to defend itself, and harder for it to recover if defences are breached. Our guest this week is Elizabeth Green. She is European advisory and cyber leader at Dell Technologies. Her background is in data and

29:53

Benchmarking, checkboxes and cyber hygiene

Security Insights ·

2023/02/02

It’s often said that the cybersecurity and data privacy worlds rely too much on checkbox compliance exercises – and fail to get to grips with the real issues that put data and systems at risk. But how true is that? Organisations face both increasing threats and increasing regulatory burdens. And often, CISOs and other business leaders lack a true picture of good practice. This has prompted security researchers at Panaseer to develop a series of real-world security benchmarks. The research came up

29:55

Critical infrastructure, cyber threats, and lessons...

Security Insights ·

2023/01/18

In this episode we look at the continuing threats to critical national infrastructure, or CNI. National infrastructure is under attack from both nation state actors, and from ransomware gangs and other crime groups. And, as the war in Ukraine has shown, energy and power generation is especially vulnerable. Are we set to see more politically motivated cyber attacks, and are we likely to see more use of cyber warfare, alone or in combination with conventional military tactics? Our guest this week is

37:54

Cybersecurity in 2023

Security Insights ·

2023/01/04

In this extended episode, we review the key cybersecurity events of 2022, and analyse likely developments, and priorities, for 2023. We look at Log4J, ransomware and "wiper" malware; the geopolitical situation and how the war in Ukraine is impacting cyber security, and the ongoing challenge of the industry's skills shortage. And we review CISOs' priorities for the coming year, changes in both the threat environment and the regulatory landscape, and discuss security teams will need to handle ever

29:55

Ukraine, geopolitics and cyber risk

Security Insights ·

2022/12/22

Russia's invasion of Ukraine has brought war to the European continent once again. And the conflict has, inevitably, brought an increase in cyber attacks against both Ukraine and its supporters. That those attacks have not done more damage, or achieved a higher profile, is largely down to the defensive capabilities both of Ukraine and NATO. But increasingly Russia is trying to combine cyber with physical attacks on critical infrastructure in Ukraine. How can states defend themselves against these

29:55

Fake apps and novel phishing attacks

Security Insights ·

2022/12/07

According to cybersecurity researchers, attackers are turning to new and dangerous methods to carry out phishing attacks. As security teams have improved their defences, especially around email, so the attackers have adapted too. They are using fake web apps, blog posts and even exploiting the way search engines operate, to spread malware. In this episode we speak to Ray Canzanese, the director of Netskope’s Threat Labs and the organisation behind the research. He explains the new attack vectors,

27:51

5G: Revolution or security risk?

Security Insights ·

2022/11/23

Over the last few years 5G networks have expanded quickly, offering faster speeds and greater capacity than previous wireless networks. And although take up has been fastest among consumers, businesses and the public sector are looking to 5G as well, as it offers a boost in both performance and flexibility. Applications include the internet of things, logistics and transportation, as well as telemedicine and public safety. But 5G could also come with a significant security impact. It offers a

29:55

Neurodiversity, neurodivergence, and cyber

Security Insights ·

2022/11/02

With the skills crisis in cyber now well established, organisations are having to look beyond the conventional methods to fill vacancies. Expanding the pool of potential talent is a key to this. Until recently, though, little attention was paid to neurodiversity, and the idea that neurodivergent candidates -- including people with ADHD and autism -- can be highly effective cyber specialists. But neurodivergent people face challenges entering into the workforce. Often, very bright and talented

29:55

Cyber’s $150bn black hole: operationalising...

Security Insights ·

2022/10/19

Cybersecurity spending seems to be on a never-ending upward curve. But this spending, spending, which analysts put at US$150bn annually, doesn't seem to reduce the number of cyber threats. Could it be that we need a new approach to security? Our guest this week is Jason Hart, CTO, EMEA at Rapid7. He argues that the problem is that we are spending money, but are not making security part of the culture, or central to how we do business. In this episode, we look at whether a new approach could both

33:50

DDoS’ shifting focus: war, religion and politics

Security Insights ·

2022/10/05

Over the last six to twelve months security researchers have seen a shift in the pattern of cyber attacks, as the impact of the pandemic has largely been replaced by a focus on the Russian invasion of Ukraine. Security firm NETSCOUT runs one of the largest monitoring projects for DDoS attacks. They have, for example, seen falls globally in DDoS activity, but an increase in the EMEA region. Deterring and prosecuting those behind the attacks is as hard as ever, argues Richard Hummel, ASERT Threat

31:02

Why do we love weak passwords?

Security Insights ·

2022/09/21

Passwords are still a cornerstone of web security, especially for consumer-facing sites. But convincing consumers, and firms, to use stronger passwords remains a struggle Steven Furnell is a senior member of the IEEE, and professor of cybersecurity at the University of Nottingham. For the last 15 years, he has been tracking the password policies of leading web and ecommerce sites. Do they, for example, allow weak or easy to guess passwords? And how easy do they make it for users to pick stronger

31:11

Risk or reward: can we control cyber risks?

Security Insights ·

2022/09/07

How can we control cyber risks? And how do cyber risks stack up, against the other challenges facing business? Cyber threats have risen steadily over the last few years, and the move to digital business has created its own security challenges. But at the same time, conventional risks have not gone away. Only recently we've seen wildfires and floods. And we are still feeling the after effects of the global pandemic. How does an organisation balance physical threats and cyber risks, against the need

29:55

Closing the skills gap – part 4: Michael Smith, Neustar

Security Insights ·

2022/08/24

Is there a "hiring gap" in cybersecurity? Over the last few episodes on Security Insights, we’ve looked more deeply at the skills skills shortage. But is the problem as much down to matching candidates to roles, as it is finding the right people? And are organisations failing to do enough to develop the staff they do recruit, and so ensuring they stay? In week's episode, our guest Michael Smith, field CTO at Neustar Security Services, argues that the issue goes beyond skills alone. And firms need to

29:56

Closing the skills gap: part 3 - Karen Worstell, VMWare

Security Insights ·

2022/08/05

How early do we need to start to awaken interest in cybersecurity, and indeed technology, as a career? In this week's episode, VMWare's senior security advocate, Karen Worstell, argues that we might need to go back as far as early years education. Then, of course, we need to maintain and develop that interest, as a young person moves through education and on to their career. And there's also more industry can do, from developing people at the starts of their careers to improving the levels of

29:55

Closing the security skills gap - Part 2: Tia Hopkins

Security Insights ·

2022/07/20

In the second part of our series on the cyber skills crisis, we take a deeper look at the challenges around recruiting entry level staff – and the knock on effect that has on finding mid-tier and experienced hires. Our guest this week is Tia Hopkins. Based in New York, she is field CTO and chief cyber risk strategist at eSentire. In addition, Hopkins teaches cyber security, is working on her PhD, and is CEO of Empow(H)er Cybersecurity, which mentors women of colour in the cyber security

29:18

Closing the security skills gap - part 1: Deryck...

Security Insights ·

2022/07/06

UK businesses are short of skilled cybersecurity professionals, and the number of vacancies is in the tens of thousands. Worldwide, the shortfall is in the millions. But what are the reasons? Is it cultural, problems with education, a lack of diversity? And what is the impact on organisations in the public and private sector? Over the next few weeks, Security Insights will attempt to answer at least some of these questions. Our first guest in the series is Deryck Mitchelson, former Director of

29:55

Surviving a ransomware attack

Security Insights ·

2022/06/29

When IT director Tony Mendoza found his company under attack by a ransomware group, there was no playbook for how to respond. He and his team had to react -- at speed -- to a rapidly developing situation. Fortunately his organisation, technology vendor Spectra Logic, survived the attack and was able to restore its data. But he learned some hard lessons about managing a crisis, building defences and, above all, why it pays to accept that an attack will happen. In this episode, Mendoza recalls his

29:08

Security, SMEs, and new ways of working

Security Insights ·

2022/06/08

Smaller businesses are no means immune to cyber attack. In fact, there is growing evidence that criminal groups are targetting smaller businesses. One reason is the changes to working practices brought on by the pandemic, with more remote access and the use of consumer IT. And smaller firms are being used as a way to infiltrate the supply chains of their larger customers. What, though, can smaller companies do to improve their security? Improved training, clearer IT policies and better use of

29:55

Critical infrastructure, and geopolitical risk -...

Security Insights ·

2022/05/25

In the current climate, operators of critical infrastructure are finding themselves in the front line. And it is not just the obvious and traditional fields of CNI, such as energy or transport, that are under threat. The banking system, healthcare, manufacturing and food supply are all part of geopolitical risk, and at risk of cyber attack. So just how vulnerable is critical infrastructure to cyber attack? And how should governments and industry work together to improve security? Our guest this week

29:55

Malware, security and the cloud

Security Insights ·

2022/05/11

In this episode we look at the risks and threats facing the cloud, with Ray Canzanese, director at Netskope’s Threat Labs. The firm has just released its latest Cloud and Threat Report, and Canzanese talks through some of the highlights, including the use of PDFs and search engines to deliver malware, and the (mis)use of cloud storage.

150 results

Security Insights

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs