Security Breach

Send us Fan Mail The little things that can shore up cyber defenses and protect against evolving attack groups. When it comes to assessing the threat landscape for OT cybersecurity environments, the challenge has become less about identifying possible sources of attack, and more about prioritizing them. Protection from external sources gets a lot of attention, and rightfully so. However, another s...

Send us Fan Mail Artificial intelligence is an unrivaled cyber threat, but benefits are also emerging for the White Hats. We’ve talked about a lot of challenges, vulnerabilities, attacks and hacker groups on Security Breach , but no topic generates greater consternation than Artificial Intelligence, and all the questions it brings to the table.  According to an IBM report, the average cost for a d...

Send us Fan Mail How a dip in reported ransomware attacks could be disguising a push to target smaller manufacturers. Today’s episode offers some new takes on a familiar topic – the rollercoaster-like dynamics of ransomware attacks. One of the latest updates comes via Kovrr and their Ransomware Threat Landscape report for the first half of 2023. The firm found that while the number of reported ran...

Send us Fan Mail Quantum Computing is not a future need - how it impacts (positively and negatively) everything you want to keep secure. Instead of setting things up with data about recent attacks or stats from industry reports, we're going to dive right into this episode's topic - Quantum Computing, and its short and long-term impact on every piece of personal, intellectual and operatio...

Send us Fan Mail How and why hackers are targeting smaller enterprises, and one organization's efforts to defend manufacturing. We all know that cyberattacks in the industrial sector continue to rise and create new production, supply chain and data management challenges throughout the industrial sector. And conversations on this podcast have covered numerous reasons as to why these numbers co...

Send us Fan Mail EV charging stations, telematics and infotainment offer tremendous benefits, and security vulnerabilities. Typically, when we talk about the expanding attack surface being created by new, exciting and efficiency-driven technology, we’re referencing digital transformation’s impact on the plant floor and throughout the manufacturing enterprise. Today, pun intended, we’re shifting ge...

Send us Fan Mail How the Industry IoT Consortium's new security framework offers a 'belt and suspenders' approach to cybersecurity. One cybersecurity topic that gets me up on the soapbox quicker than most is the need for stakeholders within the industrial sector to collaborate and share more information on cyber attacks, hacker tactics and best practices for both in warding off intr...

Send us Fan Mail Takeaways from two unique, yet similarly damaging attacks. This episode takes a slightly different approach. Instead of a single leading voice discussing trends and strategies focused on addressing and responding to OT cyberattacks, we’re going to dive into a couple of recent hacks that impacted the manufacturing sector. We’re going to start off with Matt Radolec. He’s an incident...

Send us Fan Mail Assessing the priorities, assets and technology strategies that make cybersecurity a journey, not a destination. A recent report from OT cybersecurity solutions provider Cyolo discussed several factors related to secure remote access in the industrial sector. Specifically, it identified a lack of visibility, insufficient user education and training, and weak access control as the...

Send us Fan Mail Using data to break down silos, reverse engineer outcomes, and identify emerging threats like WormGPT. According to recent report from Trellix, 31 percent of CISOs identified a lack of buy-in and use of cyber tools as one of their leading challenges. Additionally, of those who have experienced a large security incident, significant stress to the SecOps team and major attrition fro...

Send us Fan Mail Embracing the 'not if, but when' mindset. Cybersecurity solutions provider Trellix recently unveiled their 2023 Voice of the CISO report. Among other topics, it explored the top 5 challenges cited by Chief Information Security Officers who responded to the Trellix survey. In order, they included: Too many different sources of information. A growing attack surface created...

Send us Fan Mail How a global manufacturer learned from past attacks, and the most critical benefit of security tools. IBM research shows a 33 percent increase in cyberattacks against manufacturing companies between 2021-2022. Of those, according to IBM, 44 percent occurred because industrial companies failed to apply the appropriate software patches. With this in mind, it’s not a surprise that ad...

Send us Fan Mail "It just boggles the mind that things that are so important to how our world works are so shockingly unprotected." According to ABI Research, less than five percent of critical industrial infrastructure is monitored for threats. The company also reports that by 2030 industrial environments will house more than 1.2 billion connection points for machines and production sys...

Send us Fan Mail Netskope Threat Labs , a leading provider of threat analysis and cyber defense strategies for cloud-based vulnerabilities, recently published their most recent Threat Labs Report. Findings specific to manufacturing include: Cloud-delivered malware increased from 32 percent to 66 percent in the past twelve months, led by downloads from popular apps like Microsoft OneDrive, Google D...

Send us Fan Mail The latest tools and technology needed to create and defend your data fortress. A couple of recent ransomware attacks offer perspective on evolving cybersecurity concerns within the industrial sector Gentex is a Michigan-based manufacturer of electronic safety systems for the automotive sector. They were attacked by a ransomware gang called Dunghill, which is believed to be a rebr...

Send us Fan Mail Vital defensive tactics that go beyond the attacker. The sensor and communication technology associated with remote monitoring has proven to be both a time-saving and productivity enhancing tool, as well as a potentially debilitating cyber defense vulnerability for the industrial sector. The issues stem from a combination of internal failures and the evolution of highly innovative...

Send us Fan Mail How hackers are targeting ERP systems and automating more attacks. Adding to the data supporting a surge in cyber-criminal activity is the FBI Crime Compliant Center’s most recent Internet Crime Report. The IC3 data shows that while the number of reported complaints actually dipped by about five percent last year, the financial losses directly attributed with Ransomware, Phishing...

Send us Fan Mail How increasingly complex attacks might demand taking humans out of the cybersecurity loop. First published in 2014, the National Institute of Standards and Technology (NIST) recently announced updates to its Cybersecurity Framework (CSF). The goal of version 2.0 of the CSF is to better integrate areas like supply chain risk management and governance. All of these measures would ap...

Send us Fan Mail Credential harvesting, backdoor attacks and staying on top of who or what is logging into your networks. While more connection points can create more security soft spots for industrial enterprises, it’s no surprise that hackers would generally prefer to log in, as opposed to break in. It’s rumored that credential theft via phishing schemes is how attackers were able to infiltrate...

Send us Fan Mail Inside the resurgence of ransomware attacks and the rise of billion-dollar "unicorn" hacker gangs. Believe it or not, there was a time in recent history when we actually experienced a reprieve in ransomware attacks. According to a report from Black Kite, a leading provider of third-party risk management and cyber intelligence, a number of factors contributed to a flatten...

Send us Fan Mail Strategies for breaking down IT silos in learning how people, devices and networks can be attacked. Providing a significant assist to transparency efforts in cybersecurity is the Strengthening American Cybersecurity Act, which was signed into law in March 2022. Unlike other regulatory efforts focused on updating network security, or mandating agencies like CISA (Cybersecurity and...

Send us Fan Mail Why cybersecurity is all about ROI, and other "unsexy" stuff on which to build your defenses. In previous episodes of Security Breach , we’ve discussed penetration testing, ethical hackers, cataloging connection points, and getting a handle on all those API connections. These strategies are centered on developing defenses that reduce your attack surface, make attackers e...

Send us Fan Mail Supply chain management has always been a priority for the industrial sector, but over the last three-plus years, its importance has been elevated for numerous reasons. The problem, from a cybersecurity perspective, is that as soon as an operational area starts to garner more attention, it also becomes a hotter target for hackers. Elise Manna-Browne, director of advisory services...

Send us Fan Mail One of the biggest challenges surrounding industrial cybersecurity is the size of the attack surface that must be monitored, assessed, and constantly updated in order to evolve with the rising number of complex threat actors. Throw in a growing number of connection points, APIs and new and legacy network component combinations, and the complexity only grows. This makes improving v...

Send us Fan Mail The industrial sector continues to be a hot target for hackers. Ransomware, malware and phishing attacks all continue to escalate in both frequency and potency. The on-going mixture of new technologies with legacy systems invites attention, and the reality is that it continues to pay dividends for hackers and ransomware groups. However, there are solutions. One of which is to work...