Security Breach

247 Days Later

Send us Fan Mail Recently, the conversation in industrial cybersecurity has shifted from detection to response. The onset of faster-moving and easier to scale attacks driven by AI makes detection significantly more difficult, and faced with limited resources, it’s easy to understand why many are embracing the mantra of “it’s not if, but when you’re attacked” and allocating more time and money to their response capabilities. However, this episode's guest offers some insight on the flaws of downplaying the detection element of cybersecurity. Chris Nyhuis is the Co-Founder and CEO of Vigilant. Listen as he offers perspective on: • Establishing priorities and applying them to tactics like segmentation when addressing the expanding threat landscape. • What data flow can tell you about soft spots on your network. • Why detection is so critical in not only developing strategies for your response, but in understanding the right ways to respond. • How the right detection tools can help minimize the impacts of breaches that often result from dwelling, or living-off-the-land attacks. • And, or course, the best ways to leverage AI in developing and implementing cybersecurity strategies. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Network Security - Don't Fix the Engine While The Plane is Flying

Send us Fan Mail If there’s one area where the old adage of “you have to see it to believe it” might not resonate as strongly, it’s OT cybersecurity. I say this because one of the biggest challenges for our sector continues to be visibility. Although it’s clearly one of those blocking and tackling-type elements, identifying and securing all our assets, endpoints, connections and devices is tough. And not only do we know this – so do the bad guys, and they’re continuing to find new and creative ways to leverage these defensive soft spots in stealing data, extorting funds and shutting down operations. That’s why I was excited to bring in this episode's guest. Mitch Densley is a Principle Solutions Architect for Opengear. Watch/listen as we discuss: Avoiding the temptation to "fix the engine while the airplane is flying" when it comes to network patching. Why reliability and resiliency need to be treated like a "first class citizen" instead of being relegated to lower priorities. Using AI to negate some of industrial cybersecurity's lacking resources. The tools and strategies widely available to help manufacturers get a better vantage point of the expanding threat landscape - on their network and with OT assets. Identifying and managing network vulnerabilities stemming from legacy infrastructure. To catch up on past episodes, you can go to Manufacturing.net,IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Water Treatment Hacks Reflect Larger OT Threats

Send us Fan Mail Although the need to defend the networks, data and endpoints of critical infrastructure dates back to the first time a PLC was connected to an HMI, the realization of how damaging such a compromise could be was probably Stuxnet. And while we’ve progressed enough to typically spot an unknown or malicious player armed with a suspicious USB, the threat landscape has expanded, and the bad actors have evolved. Combining those factors with a lack of funds, training, expertise and resources has opened the doors to ransomware groups and state-sponsored hackers to infiltrate, shutdown or compromise infrastructure operations across the globe, and more recently, across the United States. These growing threats were recently on display when over 100 water treatment facilities across 12 states experienced temporary shutdowns due to breeches believed to have been carried out by Iranian hacking groups. Here to discuss the rise in these attacks, and what they mean in the broader scope of industrial cybersecurity is Jen Sovada, General Manager for Public Sector initiatives at Claroty. Listen as we discuss: The blocking and tackling of OT security that has become vital in defending critical assets on any plant floor. How Watershed 250 is working to help utilities protect their OT infrastructure. How the ongoing IT/OT divide is hurting new cybersecurity initiatives. The proper implementation of strategies like microsegmentation, artificial intelligence tools. How, despite all the challenges facing industrial cybersecurity, she can still sleep at night. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Shadow AI Is Amplifying OT Threats

Send us Fan Mail Name a prominent AI company, and chances are they’ve been in the news for the wrong reasons over the last couple of months. Anthropic, OpenAI and Meta have all made headlines as their AI agents have escaped the testing sandbox and either exposed vulnerabilities or performed outright hacks of other systems. The underlying engine driving these attacks is fueled by both competitive pressures and consumer demands. In manufacturing the use of AI has escalated at a furious pace, as enterprise stakeholders are encouraging everyone from the plant floor to payroll to embrace the technology in finding ways to optimize any and all tasks. While this had led to a number of positive use cases, the implementation of AI without proper checks and balances has also created a new monster called Shadow AI. In the rush to seek forgiveness instead of asking permission, AI is being implemented throughout the manufacturing sector without letting key IT, operations or security personnel know what is being used. This creates huge security concerns, along with cost overruns and internal confusion on the best ways to leverage AI. In this episode we talk to Julie Brunias, Cybersecurity Expert at Videotron. Watch/listen as we discuss: Preventing the villanization of artificial intelligence. The importance of having a man-in-the-loop for all AI integrations. The role of regulatory bodies when it comes to AI. Understanding the right AI tools for your environment. Here's a link to the information Julie shared. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com . You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

AI is Fueling, Killing Ransomware

Send us Fan Mail In this episode, we’re doubling up on a couple of topics that continue to be at the top of industrial cybersecurity’s critical issue list – ransomware and artificial intelligence. The confluence of these two topics is interesting to break down in considering how AI has contributed to the speed and scale of ransomware attacks, while the growth of these extortion campaigns has led to more enterprises seeking out AI solutions to bolster their cyber defenses. To discuss these intertwining facets of industrial cybersecurity, we’ll first hear from Rob T. Lee, the Chief AI Officer and Chief of Research at the SANS Institute, then from Eric Herzog, the Chief Marketing Officer at Infinidat before getting some closing remarks from Rob. Listen/watch as they discuss: • The growing threat landscape and what is feeding it. • How data storage strategies can help mitigate attacks. • The growing importance of response plans. • How AI is generating both concern and excitement for cybersecurity strategies. • The rise of autonomous attack schemes. • Why experimentation should be a key element of cybersecurity training. • A copy of the report Rob mentioned can be found here. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com. #Cybersecurity #Ransomware #ArtificialIntelligence #AI #IndustrialCybersecurity #Manufacturing #OTSecurity #CyberThreats #CyberDefense #ManufacturingCybersecurity As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Good Guys Also Use AI

Send us Fan Mail The pace of technological advancement and the evolution of hacker behaviors makes recording episodes of this podcast well in advance a bit or a risk. There’s always the worry that whatever we discuss could become less relevant by the time it goes live. Today’s episode, however, bucks that trend. The number of AI programs that have made headlines recently for busting out of their developmental sandboxes has generated some justified scrutiny of AI-based security solutions. And while all of these developers deserve the heat they’re getting, it’s also important to not let these missteps serve as an excuse to delay your use of AI in strengthening cyber defenses. I’m excited to have you listen to a conversation I had recently with AirMDR’s CEO Kumar Saurabh. His unbridled enthusiasm about how AI can help the good guys keep pace with evolving threats and implement solutions far more quickly and cost-effectively than even months ago, serves as a critical reminder to continue moving forward with AI implementations, albeit at possibly a more measured pace. Watch/listen as we discuss: How AI also simplifies and scales things for the good guys. Why AI is only in the second inning of the game. How an AI strategy should be like "building the car around the engine." Why AI could be the solution for enterprises trying to implement cybersecurity fixes, but lack the time and resources. Where agents and humans can compliment each other. Why shrinking attack windows mean manufacturers have to pick up the pace for response. Ways to identify the right tools and platforms for your organization. A copy of the report mentioned by Kumar can be found here. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

LISTEN: The Continuing Evolution of Ransomware

Send us Fan Mail There is perhaps no greater confluence of old and new school ideologies than the current ransomware threat landscape plaguing the industrial sector. On one hand – the motivations and avenues of attack have changed very little. Hackers are still leveraging weak log-in security or lagging parameter defenses to steal data and launch malware as they extort the enterprise. However, that malware is now being released by highly specialized hacking groups that can launch and scale their attacks more quickly with AI tools, and with malware either sourced from another specialized provider, or optimized by, again, AI tools. The overall result has been another surge in ransomware attacks against the hacking community’s favorite target – manufacturing. Here to offer some insight on these and other trends related to ransomware in the industrial sector is Sean Nikkel. He serves as the Team Lead for Bitdefender’s Cyber Intelligence Fusion Cell. Listen as we discuss: • The spike in living-off-the-land ransomware attacks, and how old-school detection strategies may be fueling this surge. • How a combination of ransomware group specialization and AI are helping bad actors scale their attacks in unprecedented ways. • The need to prioritize vulnerabilities in new ways. • How fewer ransomware payments could only be a temporary win for the sector. • How to build a culture where cybersecurity is more than doom and gloom, and the best ways to celebrate the wins. A copy of the report Sean mentioned can be found here. https://www.bitdefender.com/en-us/blog/businessinsights/ransomware-attacks-targeting-us-organizations-2026 To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com. #cybersecurity, #infosec, #cybersecurityawareness, #ethicalhacking, #hacking, #cyberattack, #datasecurity, #networksecurity, #informationsecurity, #cybercrime, #tech, #technology, #ai, #ransomware, #malware, #cloudsecurity, #zerotrust, #phishing, #soc, #cyberdefense, #itsecurity, #cybernews, #security, #penetrationtesting, #digitalsecurity As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

LISTEN: Security Breach: 'Prevention is Damn Near Impossible'

Send us Fan Mail The truth can be … brutal. The harsh realities of many situations we face on a daily basis can be tough to embrace, especially when they dictate having to adjust many long-held beliefs or established processes. This is often referred to as “breaking paradigms”, and is a situation that is simultaneously prominent in need, and typically lacking in execution throughout industrial cybersecurity. We know the realities of addressing security concerns, but often face so many challenges in addressing them, that we choose to continue doing what we’ve always done, even if that’s not the best solution. That’s why it’s good to hear from people like my guest for today’s episode. John Anthony Smith is the founder and chief security office of Fenix24. His company specializes in responding to breaches and he pulls no punches when it comes to the changes he feels manufacturers need to make in order to address the evolving threat landscape. I can almost guarantee that at some point you will disagree with John, but I’d encourage you to continue listening and find the areas of your security strategies that could benefit from a more critical perspective. Watch/listen as we discuss: What he has learned from meeting clients on their worst day. Why so many organizations struggle to fully understand their data, and the bad decisions and strategies this can fuel. How over-spending on prevention tools has created a false confidence in defense posture. Why the industry needs to share more information about breeches, and why that will continue to be a challenge. The right ways to use AI. The surprising source of a growing number of hacks in the manufacturing sector. To catch up on past episodes, you can go to Manufacturing.net,IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

The Hard Realities of OT Cybersecurity

Send us Fan Mail Perhaps you’re familiar with the phrase, “ignorance is bliss.” It was first written by English poet Thomas Gray in 1742. He was reflecting on the carefree aspect of childhood, and how, "In knowing nothing, life is most delightful." Well, I have to admit, he’s got a point. Not recognizing or dealing with problems does eliminate them from your day-to-day. Unfortunately, that doesn’t mean they fail to exist. The reality is that choosing to remain ignorant about ongoing problems is far from delightful, especially for all those who continue to operate with their heads above sand level and beneath the clouds. Our guest for today’s episode, CyberProof’s Nick Lantuh, illustrates this pretty plainly when discussing two of industrial cybersecurity’s biggest pain points – supply chain security and the surge in ransomware attacks. Both seem to share the same underlying causality – industrial organizations simply think they’re too small or too unimportant to be attacked – something that is repeatedly, and painfully, being realized as ignorant, and far from blissful. Listen as Nick and I discuss: The surge in foreign threat actors. The right approach to handling ransom demands. How a lack of response planning is making the industrial sector a favorite target of hackers. The keys to ensuring AI is deployed and operating correctly for cybersecurity applications. How smaller, and often less secure, manufacturers are the key to supply chain security, and why audits, education and regulation are so important. The importance of MDR tools being able to function at "machine speed." As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Focus on Hitting Lower, Not Harder

Send us Fan Mail The unsexy blocking and tacking that creates more win-win cybersecurity scenarios. It struck me in putting this episode together that working in industrial cybersecurity is kind of like playing special teams in football. Regardless of how many times you do something right, all it takes is that one blocked kick, long return, or missed field goal to get you noticed in the wrong way. All the instances of flawless defense and precise execution is negated with one, single lapse that brings the whole operation down. I'd invite you to watch/listen as Richard Springer, Senior Director of Marketing for OT Solutions at Fortinet offers some insight on how we can build on those wins by: Embracing the "when", not "if" dynamic of being attacked. Not losing sight of the basics, despite all the challenges and potential tools and technological solutions. Continuing to build awareness of OT security challenges and priorities. Bringing IT and OT together with the shared mission of "keeping the lights on." Implementing Continuous Improvement strategies used in operations for security. Using AI to help establish priorities and assist with patching vulnerabilities. Learning from other sectors on how to identify, react and recover from attacks. The report Richard mentions can be found here. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

'Defense in Depth is Dead'

Send us Fan Mail I feel very fortunate to work in the industries that I do, because I get to speak with a lot of really innovative people doing really interesting work with cutting edge technology. And even though I get to have a fair number of these conversations, there are some that really stick out. This can be for reasons ranging from strongly agreeing and appreciating what is being said, to strongly disagreeing, or just respecting a different take on a familiar topic. When it comes to our guest for this episode, you might find yourself feeling a combination of all three. Watch/listen as Accenture’s Global Cyber Resiliency Management Lead, Charlie Hosner, offers his take on: The futility of trying to be perfect. Why "You don't need lasers, just lock the door.” How uncomfortable he gets with OT segmentation strategies. A different take on OT identity management. Why he feels defense in depth is dead as we know it. The "anxious truce" comprising most IT/OT working relationships. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Countering New-Age, State-Sponsored Industrial Hackers

Send us Fan Mail Cybersecurity is unlike any other Industry or environment I’ve ever covered. But more than the technology, the intriguing players and the somewhat spooky elements surrounding it, is how the things we discuss on this podcast impact nearly every element of our day-to-day lives. It’s not just how artificial intelligence is impacting email phishing schemes, but how clicking on that link could let a state-sponsored hacker steel login credentials for obtaining access to an industrial control system that is not only used by a power tool manufacturer, but by a defense contractor or water treatment facility. The interconnected nature of the industrial sector makes an appreciation for cybersecurity vital to the ongoing safety and success of manufacturing – which, again, impacts nearly every facet of every person’s daily life. That’s why I enjoy talking to people like Aaron Shraberg, Senior Team Lead at Flashpoint – a leading provider of threat landscape intelligence. The stuff Aaron talks about is frightening, which is another challenge of covering cybersecurity – balancing education with data sharing without fear mongering. But I’d encourage you to really wach/listen as Aaron talks about the evolution of threats from China, Russia and Iran, and how cyber threats are converging with physical battlefields to fuel threats thousands of miles from where the missiles are flying. The bottom line is – we’re all connected and we’re all impacted, so we need to be prepared - regardless of how far removed you think you are. There's also good news in terms of solutions, which can start with sharing some of this scary information. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Taking Down of a North Korean Remote Access Scam

Send us Fan Mail We’ve all seen or heard the reports about how hackers are using AI to elevate their attacks in obtaining funds and intellectual property from unsuspecting victims, or accessing some of their critical systems. Often, these nightmare incidents leave the names and companies out of the story to avoid any reputational fallout. However, this episode's guest takes us beyond studies and second-hand accounts of AI’s potential in the hands of hackers. I’m not going to say too much, but I do hope that after watching or listening to Ryan LaSalle’s up close and personal encounter with a North Korean scammer, you’ll appreciate the need to take all that threat intelligence regarding AI and foreign blackhat operations very seriously. Watch/listen as Ryan LaSalle, CEO of the human risk management company Nisos, describes how his company identified and disrupted this AI-fueled scam, the wide-reaching impacts such intrusions are having on key industries - especially manufacturing, and how to insulate your company from falling victim to such scams. You can also read a full report on the investigation here. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Multiple Paths to Zero Trust - Channeling D&D, LOTR and It's Always Sunny in Philadelphia

Send us Fan Mail One of my least favorite tasks of Basic Training was weapons maintenance. I didn’t really mind cleaning my M-16A2 rifle, but sometimes it just felt pointless. We’d spend hours stripping, cleaning, reassembling, inspecting and, ultimately, being told it still wasn’t clean enough by the drill sergeant or armor. It took me a while, but eventually, I realized that the benefits of this process went beyond just a clean weapon. Although there are obvious lessons there, I also got to know that rifle down to its firing pin retaining pin. So, if it misfired during field training exercises, I knew exactly how to correct the issue in the moment and perform more extensive actions in an expediate manner when time allowed. I wasn’t just cleaning a rifle, I was gaining insight into all aspects of an essential battlefield tool. I think there are some parallels to my training experience and your approaches to implementing Zero Trust frameworks. While the upfront benefits are pretty straightforward, my guest for this episode lays out a number of other gains that organizations realize while implementing Zero Trust. Watch/listen as Kam Chumley-Soltani, Managing Director, OT Security at Armis, discusses: How Zero Trust initiatives can lead to greater cyber hygiene by demanding greater scrutiny of visibility, vulnerability management and threat detection capabilities. Managing the need to patch versus the realities of operational downtime. Defining and establishing priorities around your crown jewels. How Dungeons & Dragons can help improve tabletop training exercises. Why new Department of War regulations are having a far-reaching impact on Zero Trust. Avoiding common segmentation mistakes. Why the foundation for successful AI implementation is still being built. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

The Bad Guy's Different Set of Rules

Send us Fan Mail Not to continue to beat our collective heads into the same wall, but by now everyone knows that manufacturing leads the way in targeted cyberattacks, as well as year-over-year increases in areas like ransomware attacks, DDoS shutdowns and data breaches. Yet, the industry continues to demonstrate some troubling behaviors in the face of these realities. Kiteworks recently found that only 36% of organizations have visibility into where their data is utilized by external partners. So, think supply chains, distributor fulfillment agreements and technology contractors that have access to your data, but may not be applying the appropriate security strategies. This means you could be the victim of an attack, but remain in the dark about its origins, enabling the intrusion to happen again and again. Fortunately, we do have some good guys working to correct these vulnerabilities, and we’ll talk with one in this episode. Watch/listen as Tim Freestone, the Chief Strategy Officer at the aforementioned Kiteworks, discusses: How attackers are leveraging new technology more quickly than the white hats, and why AI might be the tool that evens the playing field. Why response plans need to focus more on "the big rocks than the little ones." The difference between input from "champions" versus "complainers." How CMMC could have an impact beyond just the defense supply chain. The continued use of IT and OT silos that might might make sense from a business perspective, but demand a paradigm shift when dealing with cybersecurity. Why regulations might be the most important agents of change. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

• Transcript
• Chapters

Finding the Soul of a Pirate

Send us Fan Mail We all know that cybersecurity, and industrial cybersecurity in particular, is facing a huge talent deficit. Finding an individual who not only understands the technical elements of cybersecurity, but also appreciates the dynamics of keeping a manufacturing operation up and running is extremely difficult, as they need to balance security with uptime, defense with productivity, and investment with implementation timelines. Our guest for today’s episode can empathize. Watch/listen as Yaniv Kapluto, the Chief Revenue Officer at Nukudo, offers insight on the unique ways his company trains cybersecurity talent, including: Why he looks for individuals who work with the precision of a Navy SEAL and the soul of a pirate. The challenges of placing someone who sees how to break things amongst organizations charged with creating new products every day. The value in viewing tests or challenges as games or puzzles. The importance of developing and contributing to a culture focused on cybersecurity. Making training fun in order to keep people engaged. The unique impacts of artificial intelligence on cybersecurity. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Analyzing, Responding to the Inevitable Uptick in Iranian Cyberattacks

Send us Fan Mail Although discussing the military activities currently taking place in Iran runs the risk or bringing up polarizing political views, the cybersecurity realities simply can’t be ignored. And they absolutely have to be discussed. One of these realities is that Iran has a legacy of supporting organizations involved with cyberattacks on networks, infrastructure and companies in Israel and the United States. Companies that utilize industrial control systems. Companies like yours. In light of current events, there is absolutely no question that these groups will escalate their efforts. Although the bombs are falling thousands of miles beyond U.S. borders, know that U.S. manufacturing is a primary target. Historically, many of the groups carrying out these types of cyberattacks were hacktivists or outliers, operating independent of any government or country. They followed their own agenda in realizing personal or political goals. However, as highlighted by the war in Ukraine, these groups have begun to pick sides. They’re embracing financial support from nation states and successfully executing attacks meant to shut down, steal data, extort money and/or disrupt critical production or infrastructure operations – regardless of size, sector or location. Thankfully, there are also guys like our guest for today’s episode. JP Castellanos is the Director of Threat Intelligence at Binary Defense. Watch/listen as he discusses: The evolving hacktivist community and what recent events could mean for industrial cybersecurity. How manufacturers can prepare and respond to an inevitable uptick in attacks. How IT/OT silos perpetuate these attacks and make manufacturing a more lucrative and appealing target. The motives and operational strategies of state-sponsored Iranian hacker groups. The soft spots in your defenses that these groups take advantage of in targeting the industrial sector. The simple solutions that can have far-reaching and extremely positive impacts on your defenses. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Hybrid Warfare is Upon You

Send us Fan Mail Last December the Cybersecurity and Infrastructure Security Agency, or CISA, issued an advisory warning manufacturers, operators of critical infrastructure, and really anybody associated with industrial control systems about the threats being presented by pro-Russian hacktivist groups. The advisory, issued in conjunction with numerous federal and international agencies, called out groups like the Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057 and Sector16 for taking advantage of insecure connection points and other vulnerabilities that allowed these state-sponsored actors to infiltrate, shut down, and ransom their targets in the United States. Historically, many manufacturers would find it hard to believe that their mid-size business in the heartland of America would be on the radar of foreign terrorist groups, but as our guest for today’s episode explains, that is exactly the case. Will Dixon is a senior executive of Government & Law Enforcement at Intel 471 – a leading authority on the OT threat landscape. Watch/listen as he explains: How these group’s initial plans to disrupt water treatment and other critical infrastructure has evolved into the strategic targeting of the U.S. manufacturing sector. Why hacktivist no longer applies to these "strategically aligned state groups." Why AI will not be as impactful for either side as many think. How these groups are part of Russia's bigger plans against the West. The important role vendors and suppliers can play in establishing cyber defenses. The ongoing challenges of breaking down IT-OT silos, and how hackers are using this dynamic against you. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Security Breach: Strengthening Your Weakest Links

Send us Fan Mail When we talk about the challenges presented to those trying to secure the operational landscape of manufacturing, it’s tough to avoid what I’d call the usual suspects - endpoints, connection points, credentials, vulnerabilities, silos and, of course, the impact of artificial intelligence. And just as there are benefits to discussing these individual aspects, it’s equally important to look at things from a bigger picture in tying them all together. This not only helps us strengthen the chain, but appreciate the significance of reinforcing each of those links. Perhaps no one has helped tie all of these different players together better than our guest for this episode. Vinod D’Souza leads the manufacturing and industry vertical for Google Cloud’s Office of the CISO. Watch/listen as we discuss: Emerging vulnerabilities and response plans. Segmentation challenges in the era of constant technological expansion. New-age approaches to patching. The connected fibers of artificial intelligence and the human factors of cybersecurity. Addressing IT and OT silos. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

Clarifying the Big-Picture Impacts of CMMC

Send us Fan Mail Back in 2020, the Department of Defense, as it was called at the time, introduced the Cybersecurity Maturity Model Certification (CMMC). It carried the goal of ensuring companies would be able to protect sensitive information when working on government contracts. The program requires contractors handling Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) to meet specified cybersecurity standards. Prior to CMMC, DoD contractors were required to self-attest cybersecurity compliance with frameworks set up by the National Institute of Standards of Technology (NIST). Fast forward to September 10 of last year and the Department of War as it’s now known, published an update to the CMMC – basically launching a three-year rollout of elevated cybersecurity requirements. To help clarify some of the challenges and benefits associated with CMMC, I invited Mark Knight to the program. He's a Partner and Cybersecurity Risk Advisory Leader at Armanino. Listen as he offers: Details on what the updated CMMC is all about. The challenges of meeting these new compliance standards. Embracing the good and bad of government ambiguity in complying with CMMC. The impact this certification could have on all manufacturers, regardless of whether or not you’re going after DOW contracts. The good and bad of utilizing AI for compliance work. How CMMC could spur M&A activity within the cybersecurity tool sector. The potential supply chain impacts of companies deciding against pursuing CMMC compliance. As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor. To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.