Week in Review: Healthcare admin breach, China and Rockwell fallout, Military cyber service
May 24, 2024
auto_awesome
Mike Lockhart, CISO, discusses healthcare breaches, Chinese hackers targeting military networks, cybersecurity challenges in OT roles, SEC fine on ICE, and the importance of mental health awareness and automation in hospital security. The podcast covers various topics including military cyber service, mandatory ransomware reporting, and the need for defining business problems before AI integration.
Collaboration between organizations and regulatory bodies is crucial for robust cybersecurity solutions in the healthcare sector, addressing alert fatigue and enhancing consumer protection measures.
The proposal for a military cyber service in the defense bill highlights concerns about government cyber agencies' capabilities, the need for coordination, and potential bureaucratic risks in cybersecurity operations.
Deep dives
Healthcare Breach and Third-party Vendor Security Concerns
A Texas-based healthcare provider announces a breach impacting over 2.4 million individuals, revealing a variety of exposed information, including social security numbers and insurance data. With healthcare breaches becoming common, the discussion delves into the challenges of alert fatigue and the need for accountability, urging organizations and regulatory bodies to collaborate for robust cybersecurity solutions and consumer protection measures.
Proposal for Military Cyber Service
Bipartisan lawmakers are pushing for a military cyber service amendment in the defense authorization bill, aiming to study the establishment of a dedicated military cyber service. Despite differing opinions on the necessity of a new service, the discussions raise concerns about the existing government cyber agencies' capabilities, the need for coordination, and potential risks of excessive bureaucratic involvement in cybersecurity operations.
Proposed UK Ransomware Reporting Law
UK officials are set to propose mandatory ransomware reporting and a ban on ransom payments by critical national infrastructure providers. While the regulations aim to enhance visibility on ransomware attacks, questions arise about private sector compliance and decision-making during critical infrastructure incidents, emphasizing the complexities of ransomware response strategies and the impact of government policies on cybersecurity practices.
Heightened Cybersecurity Warnings for Industrial Control Systems
Rockwell Automation issues a warning advising customers to disconnect online-operating industrial control systems due to geopolitical tensions and potential cyber threats. The alert, aligning with previous warnings from cybersecurity agencies, underscores the importance of mitigating security risks in critical infrastructure and the evolving landscape of cyber threats targeting operational technology systems.
This week’s Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guest Mike Lockhart, CISO, EagleView. Make sure also to check out Mike's charity, the Grady Foundation for mental, physical and economic health. You can learn more and donate here.
Thanks to our show sponsor, Tines
Break away from traditional SOAR with Tines. Trusted by security teams at McKesson, Canva, and Mars, Tines is scalable and accessible for the whole team. Use Tines to automate security team toil, enrich alerts with data from across your tech stack, and foster a culture of cybersecurity. Start building for free at tines.com/ciso
All links and the video of this episode can be found on CISO Series.com
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode