Sophos Lounge

Increasing collaboration between red and blue teams is a vital step in improving cybersecurity. Join this session to hear from a member of the team responsible for keeping Sophos safe from cyberthreats. Michelle will share how the red team vs. blue team mindset has evolved, how to get ‘purple’ teaming conversations started, and why, her team find thinking like an attacker makes them better defenders.

No one suggests that compulsory motor insurance is a bad idea because it encourages people to drive with less care. But when it comes to cyber insurance, sceptics aren't so sure: some people insist that cyber insurance is a major driver behind ransomware attacks, by encouraging lax habits in companies that assume "the insurance will cover it" and emboldening the crooks to demand ever-higher payments. Paul Ducklin talks to Dr Jason Nurse to find out how you can turn cyber insurance to everyone's advantage by using it as a driver to improve your cybersecurity posture.

The well-documented cyberattacks on Kaseya and SolarWinds continue to highlight just how unprepared many organizations are when it comes to defending against supply chain attacks. In this session, Paul and Chet discuss the critical steps organizations need to take to minimize the risk to their supply chain.

Malware isn’t going anywhere. Get under the enemy’s skin with fascinating insights from SophosLabs’ director of threat research. Fraser deep dives into how threats work, shares fresh discoveries from the Sophos Labs team and explores the latest malware trends. Watch this session to get the latest threat updates and to know what you’re up against.

This week, our hosts Wana Tun and Aaron Bugal are discussing the importance of using network data for understanding an attack and how to utilize this data to look for indicators of compromise. They discuss how by combining network operations teams and security operations teams, we can have a better protection and detection capability within an organization.

Our hosts Hywel Morgan chats with Andrew Brandt discuss the impacts of Covid-19 on the cybersecurity industry one year on. As the workforce shifted the techniques and targets of attackers also shifted. In recognition of this changing threat landscape and increase in criminals leveraging on Covid-19 to insight attacks - IT professionals around the world banded to together to share live threat intelligence.

Our hosts Ben Verschaeren and Aaron Bugal discuss some recent data attacks against multinational companies, in one attack 10 Terabytes of data was exfiltrated out from the cloud undetected. They discuss how understanding your baseline is key this will help you detect anomalies and therefore help to prevent nefarious attacks.

Our hosts Aaron Bugal and Hywel Morgan discuss the State of Ransomware 2020 report. They discuss, the ransomware problem touching on how; there are fewer headlines than in 2017 but the problem is still very much real, most attacks result in data being encrypted, and how paying ransom doubles the total incident remediation costs. They conclude with some possible solutions to the ransomware problem.

Our hosts Aaron Bugal and Wana Tun discuss the vulnerabilities within IOT devices in the healthcare industry. Often with these devices cybersecurity is an afterthought and they can therefore be vulnerable to attacks. We have seen examples of this depicted in TV shows and movies, but now we are starting to see real life incidents, is life imitating art?

The recent ACSC report released on Friday 19th June highlighted that there has been a wave of sophisticated cyber attacks against the NSW government. Our hosts Ben and Aaron discuss whether it's something to be alarmed about or is it just bringing to the public eye an average day in cyber-security. Also discussed, are the learning's from these attacks and what are the simple and safe things to thwart against such attacks.