Hardware Podcasts

Common Cybersecurity Threats and What to Do about Them with Dana Mantilia

Manufacturing Happy Hour · 9 Nov 2021 · 34m

What this episode covers

Dana Mantilia, founder of Identity Protection Planning, explains that 85% of cybersecurity failures stem from non-technical employees clicking malicious links or sharing credentials, rather than technical firewall breaches. She outlines immediate steps for manufacturers, including creating digital asset inventories and enforcing basic cyber hygiene, to prepare for the Department of Defense's CMMC certification requirements. Mantilia also details her content strategy of using humor and props in short videos to simplify complex security topics for small businesses.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Identity Protection Planning, Grubhub, Colonial Pipeline
Also
CMMC, NIST 800-171

Related episodes from other shows

Other shows on the same ground, closest first.

  • The Manufacturing Executive · 29m

    Cyber Security in Manufacturing w/ Jason Ray

    Jason Ray, Co-Founder and CEO of Paperless Parts, discusses the critical importance of cybersecurity in the manufacturing sector, particularly for companies serving the defense industrial base. He explains the evolution from ITAR self-certification to the rigorous CMMC compliance framework, detailing how digital transformation has blurred data boundaries and increased risk. Ray outlines a five-step checklist for shops to prepare for CMMC audits and highlights how secure data handling has become a competitive selling tool for OEMs.

    Security & privacyCertification & compliance
    6 chapters

  • IoT For All Podcast · 59m

    How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027

    Terry Dunlap, Co-Founder & CEO of ReFirm Labs, explains how his background in offensive cyber operations at the NSA led to the creation of a platform for proactive IoT firmware security. He details the discovery of hard-coded credentials in IoT devices that enabled the Mirai botnet and discusses how low-cost manufacturers often ignore security until faced with legal liability. Dunlap highlights ReFirm Labs' work with telecom providers like AT&T and Charter to vet firmware before deployment, and explores emerging markets like cyber insurance and automotive security, including a demonstration of vulnerabilities in an OBD-II dongle.

    Security & privacyEmbedded firmware
    10 chapters

  • Embedded.fm · 1h 14m

    219: Not Obviously Negligent

    Kelly Shortridge, a Product Manager at SecurityScorecard, discusses the intersection of behavioral economics and information security, arguing that human cognitive biases drive many security failures. She explains how defenders often focus on complex, high-value threats while ignoring 'low hanging fruit' like unpatched servers or default passwords, a phenomenon she links to prospect theory and risk aversion. Shortridge advocates for 'resilience' over static hardening, suggesting strategies like Chaos Monkey, deception technology, and raising the cost for attackers through basic hygiene like 2FA and password managers. She emphasizes that security must be designed with usability in mind to overcome user inertia and cognitive load, moving the industry from a state of 'depression' to 'acceptance' by making security habits easier to maintain.

    Security & privacyEmbedded firmware
    14 chapters

  • Embedded.fm · 1h 21m

    229: Slinky with a Lot of Math

    Nick Kartsioukas, an information security engineer known as ExplodingLemur, discusses the practical application of threat modeling, the mechanics of Spectre and Meltdown vulnerabilities, and essential user-level security hygiene. He explains how speculative execution and cache timing attacks allow user-space processes to leak kernel memory, highlighting the difficulty of patching legacy industrial and medical systems. For general users, he recommends using password managers, two-factor authentication, and ad blockers, while emphasizing the importance of data backups and mental health resources.

    Security & privacyMicrocontrollers & dev platforms
    8 chapters

  • Making It · 1h 08m

    428: Free Chocolate & HACKZ

    Jimmy Diresta, Bob Clagett, and David Picciuto discuss recent projects, including Diresta's custom whiskey boxes for Bulleit Bourbon and Picciuto's record player stand, before diving into a detailed discussion on cybersecurity. The hosts share personal experiences with phishing scams, explain how hackers bypass two-factor authentication via malicious PDFs, and recommend tools like One Password and physical security keys to protect accounts. They also cover the hack of YouTuber Matthias from Woodgears and offer advice on verifying online transactions to avoid fraud.

    Security & privacyPrototyping & iteration
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Manufacturing Happy Hour. The episode itself belongs to its publisher.