What happens when waiting becomes the biggest cybersecurity risk?

In this week’s episode of What Matters in Cyber, Steve examines the decisions organizations make when threats are developing, information is incomplete and the consequences of getting it wrong can be significant.

We look at Kiteworks’ unusual decision to recommend a precautionary shutdown following intelligence about a possible imminent attack, and why acting before a breach is confirmed may sometimes be the responsible choice.

Also in this episode:

• ShinyHunters returns with renewed attacks against Oracle PeopleSoft
• How attackers bypassed temporary firewall protections with one encoded character
• The actively exploited vulnerabilities that deserve attention this Monday
• Why aircraft communication systems remain vulnerable to interception, spoofing and jamming
• A new proposal for strengthening US telecommunications security
• Whether voluntary cybersecurity standards are enough for critical infrastructure

Steve also shares his take on the common thread connecting these stories: the cost of waiting.

What security risk is your organization currently containing, postponing or accepting that it should actually be fixing?

Subscribe to What Matters in Cyber and join the conversation.

Send us Fan Mail

Who has access to your business through the apps and services you trust?

In the first full episode of What Matters in Cyber, Steve looks at how a stolen third party app key exposed customer information, what Boston Scientific’s cyber incident reveals about operational disruption, and why CISA is changing how it prioritizes vulnerabilities. He also shares his take on a new AI security testing service and whether it could help teams find and fix the weaknesses that matter most.

Four stories, one practical question: would you know quickly if a trusted connection was being misused?

Send us Fan Mail

Welcome to What Matters in Cyber. I’m Steve, and in this short introduction, I share why I started the podcast and what you can expect each week.

We’ll look beyond the headlines at cyberattacks, emerging threats, new technology, and changes across the industry. I’ll explain what happened, why it matters, and what you might want to watch or do next, drawing on my experience working with security teams and business leaders.

Have a story I should cover or a perspective I should hear? Join the conversation, and subscribe for new episodes every Monday.

Send us Fan Mail