The ransomware dilemma
mnemonic security podcast
05/30/22
•35m
About
Comments
Featured In
mnemonic, all government agencies and the majority of organisations in the security community advise against paying ransom to the criminal groups behind ransomware extortions. There are also legal considerations that need to be considered depending on the country or industry you are operating in.
There is however, a value in knowing more about how these criminal groups work. To shed some light on this, we’ve invited someone that often has been faced with the dilemma of whether or not to pay the ransom together with his clients; Rickey Gevers, Co-Founder of Responders B.V., a Dutch incident response company. These days most of the incidents he deals with are related to ransomware, and Rickey shares his experiences from negotiating with close to 30 ransomware groups on behalf of his clients – including also helping to pay them.
He shares his advice for how to prevent and prepare against ransomware threats. As well as what concerns most of his clients have when deciding how to deal with these groups, the main challenges they meet when negotiating with them, and how negotiating with ransomware groups requires a different approach than traditional negotiating tactics.
Sound production by Paul Jæger
Previous Episode
Encrypted traffic management
May 9, 2022
•34m
Encrypted traffic management
TLS, SSL, HTTP, keys, authentication, clients, servers and ciphers - encryption is complicated.
To help shed some light on how enterprises can remove the "blind spot" of encrypted network communication, we’ve invited David Wells, co-founder of Netronome, who is a pioneer in the SSL/SSH inspection space.
David explains why being able to see and analyse encrypted traffic is necessary in order to gain full security value out of your network data, and shares his experiences since he inadvertently invented a tool for SSL inspection in 2003.
Technical level: 4/5
Sound engineering by Paul Jæger
Next Episode
Security of Things
June 13, 2022
•39m
Security of things
“IoT security today is like what IT security was in the early 90s”.
This is how our returning guest introduces this episode’s topic; IoT security, and how it affects organisations and companies.
For the third time, Robby is joined by Brian Contos, serial security entrepreneur and now Chief Security Officer at Phosphorus Cybersecurity, a company providing IoT and OT defense solutions for enterprise customers.
Brian explains the meaning behind his not so uplifting statement above, and shares some of the most common IoT security issues they observe among their customers. He also discusses whether certain IoT devices pose a larger threat for organisations than others do, and why it’s so difficult for many organisations to create an inventory of their IoT devices.
Sound engineering by Paul Jæger
If you like this episode you’ll love
Promoted