The Anatomy of a Targeted Ransomware Attack with SCADAfence CTO Ofer Shaked

Manufacturing Happy Hour · 19 Jan 2021 · 48m

What this episode covers

Ofer Shaked, Co-Founder and CTO of SCADAfence, details a targeted ransomware attack on a pharmaceutical manufacturer and the incident response process. He explains why manufacturing is a prime target due to legacy systems, flat networks, and the high cost of downtime, and outlines how attackers exploited a third-party vendor's unpatched remote access. Shaked advises leaders to implement strict vendor access controls, multifactor authentication, and robust detection systems to mitigate supply chain risks.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
SCADAfence, Steamchain
Products
GE Simplicity, SolarWinds
Also
Unit 8200, Unit 81, NIST, IEC 62443, CMMC

Other shows on the same ground, closest first.

  • IoT For All Podcast · 28m

    The Current State of Connected Device Security in 2021 | Ordr's Greg Murphy

    Greg Murphy, CEO of Ordr, discusses the critical challenges of securing the billions of agentless IoT devices in enterprise environments. He explains that traditional IT security tools fail because many IoT devices run outdated operating systems and cannot support security agents, creating massive visibility gaps. Murphy highlights the Colonial Pipeline ransomware attack as a wake-up call for the industry and emphasizes that the Chief Information Security Officer (CISO) is ultimately responsible for securing both IT and OT assets. He advises organizations to prioritize network visibility and behavioral analysis to detect anomalies in devices like MRI machines or access control gates.

  • EE Times Current · 44m

    Can We Get Serious About Cybersecurity Now?

    Damon Small, a technical director at the cybersecurity firm NCC Group, discusses the Colonial Pipeline ransomware attack and the broader implications for critical infrastructure security. He explains how the breach of a billing IT system, rather than operational technology (OT), forced a shutdown due to federal regulations requiring a bill of lading, highlighting the dangerous convergence of IT and OT. Small argues that cybersecurity must be viewed as a business enabler rather than a cost center and calls for stricter government regulation to compel organizations to protect their information assets.

  • IoT For All Podcast · 29m

    Best Practices for IoT Security | Optiv Security's Sean Tufts

    Sean Tufts, Practice Director for OT/IoT at Optiv, discusses the critical importance of visibility and security in IoT deployments, noting that many organizations lack awareness of the devices on their networks. He highlights the risks of cheap, unvetted hardware, citing examples of spyware in retail TVs and breached smart dolls, and emphasizes that security must be integrated into digital transformation rather than treated as an afterthought. Tufts explains how the pandemic accelerated remote access vulnerabilities, leading to incidents like SolarWinds, and advises companies to engage marketing and sales leaders to justify security budgets by aligning them with business goals.

  • EE Times Current · 46m

    Self-Protecting Data | How to Bring Back U.S. Manufacturing | Galvanized

    Elliot Lewis, CEO of Keyavi, explains his company's 'self-protecting data' technology, which embeds security policies and encryption directly into data files to control access regardless of location or device. Dan Breznitz, a professor at the University of Toronto, discusses the challenges of bringing manufacturing back to the U.S., citing the loss of supply chains, skilled labor, and financial incentives that favor offshoring. The episode highlights the fragility of global supply chains exposed by the pandemic and the trade war with China.

  • Go/No-Go · 41m

    Headlines | OpenAI Devices, Data Centers, Brightline

    Hosts John Brunner and Alex How discuss recent manufacturing and technology headlines, starting with a Bloomberg investigation into the failure of a $1 billion US federal initiative to produce medical gloves domestically. They then analyze the ransomware attack that halted production at Fairlife, the Coca-Cola-owned dairy brand, highlighting the security risks of legacy industrial systems. The conversation shifts to the AI hardware landscape, covering OpenAI's first consumer device, a screen-free AI companion, and its existing Codex Micro keypad, before examining the bottleneck of traditional power transformers in AI data centers and the safety and financial crises facing Brightline railroad.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Manufacturing Happy Hour. The episode itself belongs to its publisher.