Critical Infrastructure Security

"The United States and like-minded nations will explore options for advancing affirmative cybersecurity standards and coordinating other possible policy measures to mitigate risks," said the U.S. State Department in a statement regarding the meeting, which did not specify attendance by automakers.

Aside from failing to perform risk assessments for the water and wastewater sector, the EPA has not also determined cybersecurity-related objectives, goals, activities, and performance measurements, as well as key roles and efforts coordination measures for the industry.

Attackers could deploy DDoS attacks to disrupt voter look-up systems and unofficial results reporting but not compromise election processes and internal systems to prevent the casting of votes.

Gain insights into the CISA KEV straight from one of the folks at CISA, Tod Beardsley. Learn how KEV was created, where the data comes from, and how you should use it in your environment. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Resource: https://cisa.gov/kev

OneBlood said it is struggling to get its IT network back online following a ransomware attack.

John is one of the foremost experts in UEFI and joins us to talk about PK Fail! What happens when a vendor in the supply chain accidentally loses a key? It's one of the things that keeps me up at night. Well, now my nightmare scenario has come true as a key has been leaked. Learn how and why and what you can do about it in this segment!

While achieving 100% security is an impossible task, organizations can strive to reach a level of security that effectively exhausts their attacker’s resources.

It is a coordinated effort involving multiple threat clusters, each with toolsets and tactics to maintain long-term access.