SS-News-098: New CyberInsurance Requirements, Frameworks for Supply Chain Security

Episode 98 February 13, 2023 00:38:28
SS-News-098: New CyberInsurance Requirements, Frameworks for Supply Chain Security
Security Serengeti
SS-News-098: New CyberInsurance Requirements, Frameworks for Supply Chain Security

Feb 13 2023 | 00:38:28

/

Show Notes

In this episode, we discuss Ransomware affecting ships and 3rd party service organizations, new cyberinsurance requirements around MFA and service account, supply chain woes, and finally, attackers getting fancy with MS Verified Publisher status!

Article 1 - Ransomware severs 1,000 ships from on-shore servers
Supporting Articles:
The Untold Story of NotPetya, the Most Devastating Cyberattack in History
Testing Autonomous Remote Control of Ships in Singapore

Article 2 - Tackling the New Cyber Insurance Requirements: Can Your Organization Comply?

Article 3 - Have we learnt nothing from SolarWinds supply chain attacks? Not yet it appears
Supporting Articles:
Open Software Supply Chain Attack Reference (OSC&R)
OpenVEX Specification

Article 4 - Attackers abuse Microsoft’s 'verified publisher' status to steal data
Supporting Articles:
How to defend against OAuth-enabled cloud-based attacks
Protect against consent phishing
Audit apps and consented permissions

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Other Episodes

Episode 8

May 02, 2021 00:40:39
Episode Cover

SS-SUBJ-008: Security 101 - What is Attack Surface Management (ASM)?

In this episode we review Attack Surface Monitoring, discuss what it is and what you should look at if you're reviewing products. Related Webcast...

Listen

Episode 70

July 25, 2022 00:43:55
Episode Cover

SS-NEWS-070: 20 Dollar GPS Tracker with Password 123456

In this episode, we look at a $20 GPS tracker that you can add to your car to disable it if stolen, a (possibly)...

Listen

Episode 62

May 23, 2022 00:34:42
Episode Cover

SS-NEWS-062: Client Side Scanning is Not What You Think

In this episode, we discuss Client Side Scanning, which is not what you think it is, the slippery slope it leads to, and the...

Listen