Water plant compromise using default credentials

A critical infrastructure hack hits the headlines - involving default passwords, boasts on Telegram, and a finale that will make a few cyber-crooks wish the ground would swallow them whole. 

Meanwhile we dig into the bit we don't talk about enough: the human cost of defending companies from hackers - stress, burnout, and how better leadership culture can help make security teams safer and saner.

Plus we say a heartfelt "la di dah" to Diane Keaton, and tune in to a freshly re-released slice of pre-Fleetwood Mac history for the music-obsessed amongst us. 

All this and more is discussed in episode 439 of "Smashing Security" podcast with cybersecurity veteran Graham Cluley, and his special guest Annabel Berry.

EPISODE LINKS:

• Cyber-attacks rise by 50% in past year, UK security agency says - The Guardian.
• What does the end of free support for Windows 10 mean for its users? - The Guardian.
• Satellites found exposing unencrypted data, including phone calls and some military comms - TechCrunch.
• Anatomy of a Hacktivist Attack: Russian-Aligned Group Targets OT/ICS - Forescout.
• Caught in the act: Ransomware attack sticks to our AI-created honeypot - Forescout.
• Human Performance in Security Operations: A Survey on Burnout, Wellbeing and Flow State Among Practitioners - NDSS Symposium.
• State of the Security Profession 23/24 - Chartered Institute of Information Security.
• Leading Cyber.
• Mental Health in Cybersecurity Foundation.
• “Play it Again, Sam” - IMDB.
• “Play it Again, Sam” clip - YouTube.
• “Buckingham Nicks” - Spotify.
• Fleetwood Mac - Silver Springs (Live, 1997) - YouTube.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

If anything we've discussed today has resonated with you, or if you're going through a tough time, please know you are not alone. There is always someone ready to listen, without judgment. Here are a few of the available resources:

• Shout - text 85258 (24x7)
• Samaritans - tel 116123 (24x7)
• Suicide prevention - tel 0800 689 5652 (6pm - 3.30am)
• SANEline - tel 0300 304 7000 (4.30pm - 10.30pm)

SPONSORS:

• SecAlerts - SecAlerts makes your job easier by matching vulnerabilities to your software, using information as soon as it’s released. Use code SMASHING for 50% off a year subscription.
• ANON - Find, monitor and remove data about yourself online. Manage your digital footprint with ease. Use code SMASHING for a 25% discount.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

ENJOYED THE SHOW?

Make sure to check out our sister podcast, "The AI Fix".