Hardware Podcasts

How cyber attacks could threaten the energy transition [partner content]

Catalyst · 10 Dec 2024 · 23m

What this episode covers

Bilal Khursheed, executive director of Microsoft's global power and utilities business, discusses the escalating cyber threats facing the energy transition, driven by the proliferation of IoT devices and sophisticated state-sponsored actors. He highlights the Colonial Pipeline and Oldsmar water treatment attacks as examples of systemic risks and explains how utilities are struggling with compliance to standards like NERC CIP and IEC 62443 due to legacy infrastructure. Khursheed outlines Microsoft's response, including a $200 billion investment in security tools like Security Copilot and Sentinel, and cites Uniper as a partner leveraging these technologies for resilience.

Most relevant to

large enterprises

Topics

Mentioned

Companies
Microsoft, Colonial Pipeline, Oldsmar, Uniper
Products
Microsoft Defender for IoT, Microsoft Security Copilot, Microsoft Sentinel, Azure IoT Edge
Also
NERC CIP, IEC 62443

Related episodes from other shows

Other shows on the same ground, closest first.

  • IoT For All Podcast · 28m

    The Current State of Connected Device Security in 2021 | Ordr's Greg Murphy

    Greg Murphy, CEO of Ordr, discusses the critical challenges of securing the billions of agentless IoT devices in enterprise environments. He explains that traditional IT security tools fail because many IoT devices run outdated operating systems and cannot support security agents, creating massive visibility gaps. Murphy highlights the Colonial Pipeline ransomware attack as a wake-up call for the industry and emphasizes that the Chief Information Security Officer (CISO) is ultimately responsible for securing both IT and OT assets. He advises organizations to prioritize network visibility and behavioral analysis to detect anomalies in devices like MRI machines or access control gates.

    Security & privacyConnected products & IoT
    8 chapters

  • EE Times Current · 44m

    Can We Get Serious About Cybersecurity Now?

    Damon Small, a technical director at the cybersecurity firm NCC Group, discusses the Colonial Pipeline ransomware attack and the broader implications for critical infrastructure security. He explains how the breach of a billing IT system, rather than operational technology (OT), forced a shutdown due to federal regulations requiring a bill of lading, highlighting the dangerous convergence of IT and OT. Small argues that cybersecurity must be viewed as a business enabler rather than a cost center and calls for stricter government regulation to compel organizations to protect their information assets.

    Security & privacyPolicy, trade & tariffs
    7 chapters

  • IoT For All Podcast · 20m

    Taking IoT Security Seriously | Kyndryl's Paul Savill | Internet of Things Podcast

    Paul Savill, Global Practice Leader for Network and Edge Computing at Kyndryl, discusses the critical security challenges facing IoT adoption in large enterprises. He highlights the IT/OT divide and the significant risk posed by legacy hardware, noting that approximately 44% of managed infrastructure is at end-of-life. Savill emphasizes the need for strict policy enforcement, employee training, and staying updated on emerging threats to protect critical infrastructure from geopolitical and cyber risks.

    Security & privacyConnected products & IoT
    8 chapters

  • IoT For All Podcast · 32m

    The State of Cybersecurity in IoT | IP Services' Scott Alldridge | Internet of Things Podcast

    Scott Alldridge, CEO of IP Services, discusses the escalating state of IoT cybersecurity, highlighting the rise of ransomware franchises and the limitations of cyber insurance. He advocates for a Zero Trust security model, emphasizing identity management, micro-segmentation, and immutable backups to protect against sophisticated threats. Alldridge also addresses the dual role of AI in both enabling attacks and enhancing defense, while warning about the looming threat of quantum computing breaking current encryption standards.

    Security & privacyConnected products & IoT
    8 chapters

  • Coredump Sessions · 58m

    #008: Navigating the Changing IoT Security Landscape: A Survival Guide for Product Leaders

    Giovanni Alberto Falcione, CTO at Exine, joins Memfault's François Baldassari and Thomas Sarlandie to discuss the impact of the EU's Cyber Resilience Act (CRA) on IoT security. They analyze the shift from voluntary standards like NIST 800-53 to mandatory compliance, highlighting the critical need for runtime security monitoring and Software Bill of Materials (SBOM) tracking. The conversation details how eBPF technology enables low-overhead anomaly detection and how OTA updates are essential for mitigating vulnerabilities in the field.

    Security & privacyEmbedded firmware
    6 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Catalyst. The episode itself belongs to its publisher.