CyberWire Daily Beware of BADBOX.
12 snips
Jun 6, 2025 
In this discussion, Ian Bramson, the Global Head of Industrial Cybersecurity at Black & Veatch, tackles the pressing issue of cyberattack readiness in industrial settings. He highlights the dangers of BADBOX 2.0 malware targeting IoT devices and exposes the vulnerabilities found in Chrome extensions. Ian emphasizes the need for organizations to transition from compliance-driven practices to a more proactive cybersecurity approach. With threats evolving, he underscores the urgency of foundational security measures and board commitment to safeguard critical infrastructure.
AI Snips
Chapters
Transcript
Episode notes
Cyberattack Readiness Varies Widely
- Cyberattack readiness varies greatly across companies and sectors, with some advancing faster than others.
- This variability is due to a mix of increased attacks, digitalization, and regulatory changes.
Compliance vs. Genuine Security
- Compliance alone doesn't ensure security in industrial environments.
- True security requires going beyond regulations to address evolving attack surfaces.
Foundations of Successful Security
- Secure organizations have board-level commitment recognizing cybersecurity's impact on safety and uptime.
- They also answer foundational questions on asset inventory, vulnerability management, and monitoring to build strong defenses.