2024 Threat Report – OT Cyber Attacks with Physical Consequences

Podcast: PodomationEpisode: 004 - Secure Seas: Navigating Maritime CybersecurityPub date: 2024-05-16The landscape of maritime cybersecurity has evolved significantly, driven by current events, increasing digitization and the adoption of emerging technologies. These changes enhance operational capabilities, but also introduce vulnerabilities. Regulation and standards introductions have been pivotal in guiding the integration of cyber risk management into safety management systems onboard ships. However, a primary concern in maritime cybersecurity is OT systems, which are vital for the control and operation of physical shipboard processes. Panelists: Sean Plankey, Global Head of Cybersecurity Software, Willis Towers WatsonMichael DeVolld, Senior Principal Consultant, American Bureau of ShippingKevin Duffy, CEO, Maritime Imperative Marco Ayala, President, Infragard Houston The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: ICS Cyber Talks PodcastEpisode: וובינר ניהול משבר סייבר במגזר התעשייתיPub date: 2024-05-15וובינר בנושא ניהול משבר במגזר התעשייתי בהנחייתו של יוגב נחום מחברת קוד בלו  משתתפים: חגית איסר - מנכ"לית דגש פ.ק  יסמין טל בדש - מנהלת סיכוני סייבר עולמי של טכנולוגיה תפעולית וחדשנות באי.סי.אל לשעבר כימיקלים לישראל יוסי שביט - ראש יחידת סייבר בתעשייה המשרד להגנת הסביבה נחשון פינקו - סייבר אוונגליסט וסמנכ"ל בכיר ליעוץ ניאטק סייבר סקיורטי בע"מThe podcast and artwork embedded on this page are from Nachshon Pincu, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Unsolicited Response (LS 34 · TOP 5% what is this?)Episode: Chris Hughes, Author of Effective Vulnerability ManagementPub date: 2024-05-15Chris Hughes and Nikki Robinson recently wrote the book Effective Vulnerability Management. Dale and Chris discuss the topic and book including: The definition and scope of vulnerabilities. It’s much more than coding errors that need patches. Are ICS protocols lacking authentication “vulnerabilities” The reality that most organizations have 100’s of thousands of unpatched vulnerabilities. Some statistics and will this change. Ways to prioritize what vulnerabilities you address. The SSVC decision tree approach that was introduced at S4 as Never, Next, Now Tooling … vulnerability management, software configuration, ticketing, remediation. And much more.   Links: Effective Vulnerability Management, https://www.amazon.com/Effective-Vulnerability-Management-Vulnerable-Ecosystem/dp/1394221207/ Dale’s ICS-Patch Decision Tree, https://dale-peterson.com/wp-content/uploads/2020/10/ICS-Patch-0_1.pdf  The podcast and artwork embedded on this page are from Dale Peterson: ICS Security Catalyst and S4 Conference Chair, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Control Loop: The OT Cybersecurity Podcast (LS 34 · TOP 3% what is this?)Episode: Hacktivism targeting OT devices.Pub date: 2024-05-15US Defense Department warns of Russian hacktivists targeting OT devices. The US government establishes safety and security board to advise the deployment of AI in critical infrastructure sectors. Vulnerabilities affect CyberPower UPS management software. US congressmen put forward water system cybersecurity bill. Encore guest Garrett Bladow, Distinguished Engineer at Dragos, joins us from the CyberCon 2023 event in Bismarck, North Dakota. Garrett discusses active visibility into OT systems. The Learning Lab is currently on a hiatus this episode. Control Loop News Brief.US DOD warns of Russian hacktivists targeting OT devices.Urgent Warning from Multiple Cybersecurity Organizations on Current Threat to OT Systems (NSA)US government establishes safety and security board to advise on deployment of AI in critical infrastructure sectors.DHS launches safety and security board focused on AI and critical infrastructure (FedScoop)Over 20 Technology and Critical Infrastructure Executives, Civil Rights Leaders, Academics, and Policymakers Join New DHS Artificial Intelligence Safety and Security Board to Advance AI’s Responsible Development and Deployment (DHS)Vulnerabilities affecting CyberPower UPS management software.Uninterrupted Power Supply (UPS): A Silent Threat to Critical Infrastructure Resilience (Cyble)US congressmen introduce water system cybersecurity bill.Crawford puts forward bill on cybersecurity risks to water systems (Arkansas Democrat-Gazette)Control Loop Interview.Guest is Garrett Bladow, Distinguished Engineer at Dragos, discussing active visibility into OT systems. Control Loop Learning Lab.The Learning Lab is on a break. Stay tuned. Control Loop OT Cybersecurity Briefing.A companion monthly newsletter is available through free subscription and on the N2K CyberWire website.The podcast and artwork embedded on this page are from N2K Networks, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Bites & Bytes PodcastEpisode: Leadership in the Food Industry with Tia Glave and Jill StuberPub date: 2024-05-14Join host Kristin Demoranville for this insightful Bites and Bytes Podcast episode featuring special guests Tia Glave and Jill Stuber. The discussion will bridge the worlds of food safety, quality, and transformative leadership within the food industry. Tia Glave, a trained chemical engineer and a seasoned food safety and quality professional, brings extensive experience working across diverse food sectors.  In this episode, Tia discusses her approach to integrating leadership principles with technical strategies to enhance food safety programs, reflecting her passion for supporting talent in the food industry. Jill Stuber, with her comprehensive background in Food Safety & Quality (FSQ) and her roles in various multi-million-dollar food organizations, shares her journey and the joy she finds in coaching and positively impacting the food safety sector.  With a Master of Science in both Food Science and Quality Management, Jill’s professional coaching certification and leadership skills shine through as she discusses the importance of integrating leadership skills with technical expertise to foster better outcomes in food safety. Together, they explore the evolving landscape of food industry leadership, the integration of technology, and the critical role of empathy and effective communication in cultivating a safe and innovative food environment.  This episode explores their journeys and highlights their unique perspectives on the future of food safety and intentional leadership’s pivotal role in navigating modern food systems’ challenges. In this episode, we also focus on the critical intersection of cybersecurity with food safety.  As digital transformations sweep through the food industry, understanding the cyber aspects becomes increasingly vital.  Kristin, Tia, and Jill discuss how enhancing cybersecurity measures is integral to safeguarding food production processes.  They emphasize the need for leaders to be proficient not only in traditional food safety roles but also in combating potential cyber threats that could impact food integrity and safety.  This conversation highlights the importance of a holistic approach to food safety, including robust cybersecurity practices, ensuring that the food industry can effectively face modern challenges. Don’t miss this engaging conversation that connects the dots between creating efficient, safe food practices and nurturing the next generation of food industry leaders. ___________________________________________ Episode Key Highlights: (00:50 - 02:58) Food Safety Leadership Development and Coaching (13:29 - 14:48) The Importance of Catalyst in Industry  (16:45 - 17:34) Diverse Roles in Food Industry Leadership (25:11 - 26:06) Personal Development and Self-Reflection (28:37 - 29:26) Cybersecurity and Food Safety Discussions  (32:25 - 33:57) Consumer Education in the Food Industry  (43:29 - 46:02) Leadership and Empathy in Food Industry  (51:14 - 52:42) Navigating Uncertainty Together  (54:59 - 56:12) Future of Hybrid Food Safety Roles ___________________________________________ To learn more about Tia & Jill’s company, please check out their website Catalyst LLC and LinkedIn Catalyst is a comprehensive and holistic coaching program for creating transformational change within people and organizations toward the ultimate food safety and quality culture. You can find Tia Glave on LinkedIn and also find Jill Stuber on LinkedIn. Catalyst Youtube:  Ever wonder why food safety culture seems so challenging?  or why technical experts aren’t, by default, technical leaders?  Join us each week as we explore these topics and more! ___________________________________________ 🌟NEW MERCH STORE! 🌟 Bites and Bytes Podcast website for additional show notes, blog, and more!The podcast and artwork embedded on this page are from AnzenSage, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber SecurityEpisode: 109: Teaser for the CNI Research Report with Chase RichardsonPub date: 2024-05-14We are delighted to have Chase Richardson, the VP of Consulting at Bridewell, back on the show today. Bridewell boasts a rich history in industrials, offering comprehensive cybersecurity services across the entire cybersecurity spectrum, including operating technology. Recently, Bridewell came up with an insightful report on cybersecurity within the US critical infrastructure. In this episode, Chase dives into the current state of cybersecurity regulations in critical infrastructure and shares the details and origin of the upcoming Bridewell report, which falls squarely within the interest of CSAI. Tune in to learn more about this exciting project.Show highlights:How the attacks experienced by CISOs and cyber managers have decreased despite an increase in risk sentiment The challenges small and mid-sized airports face when implementing regulations due to their limited cybersecurity budgetsHow cybersecurity regulations in the US differ from those in the UKWhat is the link between IT and OT security?Why it is essential to implement a hybrid of IT and OT security measures to protect critical infrastructureWhy organizations need to comply with relevant cybersecurity standards and regulationsChase shares key findings and insights from Bridewell's upcoming cybersecurity report for critical infrastructure.Links and resources:(CS)²AI Derek Harp on LinkedInBridewellChase Richardson on LinkedInThe podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cybercrime Magazine Podcast (LS 32 · TOP 5% what is this?)Episode: Securing Space For A Better World. Cybersecurity For Satellites At The 2024 Texas Eclipse Festival.Pub date: 2024-05-13Cybercrime Magazine attended the recent Texas Eclipse Festival in Burnet, Texas, where we met with former NASA astronaut Nicole Stott, and Christina Corp, director of Space For A Better World. Together, we discussed the crucial, but often overlooked, topic of cybersecurity in satellites and other space technologies. To learn more about Space For A Better World, visit https://spaceforabetterworld.com. • For more on cybersecurity, visit us at https://cybersecurityventures.com.The podcast and artwork embedded on this page are from Cybercrime Magazine, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Click Here (LS 51 · TOP 0.5% what is this?)Episode: 130. A wrinkle in time: GPS jamming in Ukraine and its ripple effectsPub date: 2024-05-14A story about satellites, electronic warfare, and a team of America techies who MacGyver-ed a way to keep the power flowing in Ukraine.The podcast and artwork embedded on this page are from Recorded Future News, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: WE'RE IN! (LS 32 · TOP 5% what is this?)Episode: Mara Winn on protecting America’s critical infrastructure from cyberthreatsPub date: 2024-05-01A first-of-its-kind 2016 cyberattack on Ukraine’s power grid was a wake-up call for countries around the world to shore up protection of vulnerable energy resources. Mara Winn, Deputy Director for Preparedness, Policy, and Risk Analysis at the Department of Energy's Office of Cybersecurity, Energy Security, and Emergency Response (CESAR), is in charge of acting on just that. From securing electric vehicles to safeguarding electric substations, Mara and her team help to ensure the resilience of the energy sector against cyber, physical and climate-based disruptions.Mara takes a holistic approach to risk management, considering both physical and cyber threats. In the latest episode of WE’RE IN!, she cautions against focusing too much on the "flashy object of the day" and describes why she imbues diversity in risk management for the best outcomes.Listen to hear more about: Why early implementation of security measures in product development is necessary for distributed energy resources like solar, wind and battery technologies How to educate investors, entrepreneurs and designers about understanding the full risk picture in business decisionsThe role of the National Association of Regulatory Utility Commissioners and the Federal Power Act in defining federal and state responsibilities in the energy systemThe podcast and artwork embedded on this page are from Synack, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad IndustrialEpisode: 1/4 Contexto del Caso Gestión de Ciberseguridad en la Cadena de Suministro IndustrialPub date: 2024-05-13En este episodio se presenta el contexto del caso: datos del entrevistado, riesgos de la cadena de suministro , complejidad y medidas para evaluar y mejorar su resiliencia.The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.