Attacking Power Grids - BTS #68

From Below the Surface (Audio) - The Supply Chain Security Podcast Eclypsium

In this episode, the hosts discuss various cybersecurity threats, including Russian cyber attacks on critical infrastructure, the vulnerabilities in firewalls and VPNs, and the implications of AI in cybersecurity. They explore the increasing trend of using Python for malicious purposes and the challenges posed by gaming anti-cheat drivers. The conversation also touches on the escalation of cyber warfare and the confused deputy problem in AI, highlighting the need for better security measures and awareness in the industry.

Chapters

00:00 Introduction to Cybersecurity Threats

02:52 Russian Cyber Attacks on Poland's Power Grid

10:33 The Flaws in Firewall Security

15:02 AI and the Future of Cybersecurity

22:22 Exploiting Vulnerabilities in Gaming Anti-Cheat Drivers

29:47 Driver Attestation and Security Transparency

35:17 Critical Infrastructure and Cybersecurity Threats

39:50 Linux Malware and Python Exploits

45:47 Firmware Complexity and Security Risks

51:19 Cyber Insurance and Responsibility in Cybersecurity

56:52 Confused Deputy Attack and AI Security Risks