Advertise on podcast: Ransomware Battleground

Decrypting The Good Doctor Thanks for tuning in to Check Point ReelTalk, a podcast for security folks who want less FUD and more F-U-N. Each episode, we’ll join forces with other security pros, and react to how the industry is portrayed in film and TV. This time, we’ll be reacting to an intense medical-action mashup of "The Good Doctor" where the hospital is hit by ransomware and the IT Director has hours to outsmart the hackers. Host, Syya Yasortornrat, will be joined by Check Point Product Marketer, Diana Polansky, and Avid CISO, Dmitriy Sokolovskiy, who bring their knowledge of the cybersecurity industry to react to "The Good Doctor" Season 4, Episode 10: Decrypt. Find out: What was accurate? What wasn’t? And what can you apply to real world cyber events? ***** Special Thanks! Video clips and sound tracks are provided by YouTube and Envato creators. Listen/Watch Here: Lea is Doing a Surgery | The Good Doctor 04x10 HD CLIP     • Video   The Good Doctor - Lea Being A Hacker For 2 And A Half Minutes Straight     • Video   The Good Doctor 4x10 (Lea Gets The Hospital Back Online)     • Video   Lea Saves the Hospital Network - The Good Doctor     • Lea Saves the Hos...   Hospital is Attacked By Hackers | The Good Doctor 04x10 HD Scene     • Video   The Good Doctor 4x10 Promo "Decrypt" (HD)    • The Good Doctor 4...   Connect With Us: Syya Yasotornrat: https://www.linkedin.com/in/syyayasot... Diana Polansky: https://www.linkedin.com/in/dianamika... Dmitriy Sokolovskiy: https://www.linkedin.com/in/dmitriy-s... Website: https://checkpoint.com/ Facebook: https://www.facebook.com/checkpointsoftware Linkedin: https://www.linkedin.com/company/check-point-software-technologies/ Twitter: https://twitter.com/checkpointsw YouTube: https://www.youtube.com/user/CPGlobal ReelTalk Podcast: a...

No one likes to be told that their baby is ugly. Magnify that sentiment with a multi-billion dollar corporation with a reputation at stake. THIS is the challenge that ethical hackers face when they are able to breach environments and report it to these businesses. Are they received well? Sometimes yes, and mostly, no. No one is taking anything or charging for the services. It's a hobby for most of these researchers and the thrill of finding vulnerabilities is often a reward in itself. Case in point: We had an awesome opportunity to speak with Higinio "W0rmer" Ochoa and two of his collaborators, Robert "Rej_ex" Willis and "Wabafet," all members of the research collective, "Sakura Samurai." Sakura Samurai has gained a reputation for successfully breaching multiple high-profile government targets. Most recently, we discuss the story of their involvement with John Deere, as highlighted in the Forbes article by contributer Paul F. Roberts, "Under Scrutiny, Big Ag Scrambles To Address Cyber Risk." Chat with W0rmer, Regex, Wabafet Below: Twitter: W0rmer: @0x686967 Regex: @rej_ex Wabafet: @wabafet1

We know Ransomware attacks have blown up in recent years and targets are as diverse as the type of attacks. We've discussed the challenges for businesses, small and enterprise, but what about for the public at large? Who is at risk? What percentage of the population is security savvy to know what to look for in attacks or attempts? This week's Ransomware Battleground chat features special guest, Karen Rhodes, Chief Technologist at Hewlett Packard Enterprise to share her insights and guidance on educating family on friends on the very real threats affecting everyone. Highlights: Stay up to date on updates and practice good discipline on scheduling and checking for updatesPassword storage tools may be convenient, but understand the risk if those applications are compromised.ASK FOR HELP

What is it about mainstream entertainment that makes the general population suddenly pay attention? Ransomware has grown exponentially in the last year and though it feels like attacks are daily occurrences, the majority of folks haven't changed behaviors, enacted additional security measures or seem to notice the impact that the headline attacks are a fraction of the overall number of attacks. This week, Syya and Paul briefly chat on a recent episode of Last Week Tonight where the host, John Oliver, lays out the very real threats that ransomware poses and the repercussions with Ransomware as a Service, Double Extortion and let's cringe together - toys. Ransomware is Mainstream! But will anything change?

Red team and blue team play an important role in defending against advanced cyber attacks that threaten business communications. In this special episode of Ransomware Battleground, we talk through the flow in incident response per cyber kill chain. Ransomware Kill Switch™ can be used by the incident response to control/contain the blast radius in real time using the preventive and proactive zero trust approach. However, when the detections failed on zero day exploits, how can you use Ransomware Kill Switch™ in the post exfiltration mitigation phase? Airgap provides an agentless Anti-Ransomware platform to stop the spread of malware in the enterprise network. Our industry’s first Ransomware Kill Switch™ locks down your most critical network assets at the first indication of compromise with complete control and policy enforcement over the device-to-device and device-to-application communication.

Where does time go when the heat of summer turns up and families can enjoy a little vacation time? Well hopefully ransomware attacks aren't tied to soaring temperatures because it's looking like over 120% increase in attacks from 2020. No one is immune and it's up to educating the broader population to understand that ANYTHING can be suspect. Even if it's "just" a clickbait website. Poul Frederiksen and Syya Yasotornrat catch up and let off a little steam on how much hackers really chaps Syya's hide. It's no longer a question of what is ransomware. The question is now: How many people do you know that has been a victim of ransomware?

Kaseya Ltd. is a Miami-based company that provides software to help other businesses manage their networks. The hackers targeted Kaseya’s virtual systems/server administrator (VSA), a type of software that large companies and technology-service providers use to manage and send out software updates to systems on computer networks. The hacks are caused by cybercriminals who acquired and used zero-day vulnerabilities. What do we know about REvil's behavior pattern in this incident? What can you do when your detection solution failed? In this episode, we will demonstrate the post-ransomware incident use cases and how you can automate in-network detection and Ransomware incident response to isolate inside the enterprise network. The integrated Zero Trust enterprise access solution provides organizations an advanced level of visibility and turns every connected endpoint into a Zero Trust endpoint to stop Ransomware lateral movement before they spread. Hear how our joint solution can provide your organization: * Advanced Ransomware detection and incident response with of Ransomware Kill Switch™ * Consolidated SOC threat intelligence and analytics * End to end visibility and intelligence into malware behaviors Thanks to sponsor Airgap Networks! Airgap provides an agent-less Anti-Ransomware platform to stop the spread of malware in the enterprise network. Our industry’s first Ransomware Kill Switch™ locks down your most critical network assets at the first indication of compromise with complete control and policy enforcement over the device--device-application communication. Visit them at Black Hat 2021 USA in Vegas or Virtual. For expo passes, contact [email protected].

In 2021, the global eSports market was valued at just over 1.08 billion U.S. dollars.(Source) Online games and specifically the Massive Multiplayer (MMO) games, experience multiple attacks from hackers, platform competition that try to block players’ access to the gaming platforms, as well as cheating players that can attack other players slowing their connection, while gaining a competitive advantage. These attacks can take the entire game offline. Can you visualize losing $400,000 dollars per hour (Source). In this series of Ransomware Battleground, we will try to: - Know the eSports industry and the leading MMO game developers - Understand where the “crown jewels” assets such as in-game currency, identity information, and gaming development resources…are hosted - Who is Egregor Ransomware Crew? Is it as RaaS? And how do they hack into corporate networks and deploy the ransomware? - What is their extortion behavior and ransom demand and Crypto tracing? - Is it too far fetched to say Zero Trust is needed for eSports development? - Got Ransomware Kill Switch for eSports? Let's close the final round of this Battleground series with Syya and Nigel. Join us!

In 2021, the global eSports market was valued at just over 1.08 billion U.S. dollars.(Source) Online games and specifically the Massive Multiplayer (MMO) games, experience multiple attacks from hackers, platform competition that try to block players’ access to the gaming platforms, as well as cheating players that can attack other players slowing their connection, while gaining a competitive advantage. These attacks can take the entire game offline. Can you visualize losing $400,000 dollars per hour (Source). In this series of Ransomware Battleground, we will try to Know the eSports industry and the leading MMO game developers Understand where the “crown jewels” assets such as in-game currency, identity information, and gaming development resources…are hosted Who is Egregor Ransomware Crew? Is it as RaaS? And how do they hack into corporate networks and deploy the ransomware? What is their extortion behavior and ransom demand and Crypto tracing? Is it too far-fetched to say Zero Trust is needed for eSports development? Let’s open up a new conversation series with Syya, Poul, Nigel and Big-Time Higgs. Join us!

Online games and specifically the Massive Multiplayer (MMO) games, experience multiple attacks from hackers, platform competition that try to block players’ access to the gaming platforms, as well as cheating players that can attack other players slowing their connection, while gaining a competitive advantage. These attacks can take the entire game offline. Can you visualize losing $400,000 dollars per hour (Source). In this series of Ransomware Battleground, we will try to - Know the eSports industry and the leading MMO game developers - Understand where the “crown jewels” assets such as in-game currency, identity information, and gaming development resources…are hosted - Who is Egregor? Is it as RaaS? And how do they hack into corporate networks and deploy the ransomware? - What is their extortion behavior and ransom demand and Crypto tracing? - Is it too far-fetched to say Zero Trust is needed for eSports development?

Tesla, Cloudflare, Halifax Health, and Equinox are among the victims involved in a breach of more than 150,000 Verdaka's security cameras by a group of hackers known as Advanced Persistent Threat 69420 Arson Cats. The hackers used a "super admin account," which allowed them to peer into the cameras of all of Verdaka's customers. The group found the user name and password for the administrator account publicly exposed on the internet. (Source:https://www.foxbusiness.com/technology/hacker-group-breaches-security-cameras-at-tesla-equinox-cloudfare) Are there reasons to believe that an incident involving office security cameras can impact your customers? How do you defend Device Cybersecurity? In this Battleground, we will dig into the cybersecurity implication of unmanaged devices in organizations and how zero trust isolation policies can be put in practice to prevent lateral threats from propagating in the network.

In this episode of Ransomware Battleground, we will be talking about Ransom DDoS attacks. Unlike a ransomware attack, a DDoS Ransom attack does not encrypt a company's systems; it mainly aims to stress and halt them offline. It also does not require the attacker to gain access to a business's internal systems before it can be carried out. So, how would a zero trust isolation solution work to stop this type of attacks. We will discuss: What is a ransom DDoS attack? What is a DDoS attack? How does a ransom DDoS attack work? What is the difference between a ransom DDoS attack and ransomware? How you can stop the attacks with identity-based segmentation and Zero Trust Isolation?