RedCircle VERIFY_TOKEN_b15ae334-bfbc-4063-9d32-55f02fa52a93 -- Rendered At Wed, 20 May 2026 00:25:49 +0000 Security Bits https://redcircle.com/shows/security-bits en Durgesh Kalya Durgesh Kalya Have you ever wondered about getting into Cybersecurity or Information Technology? Have you wondered about the latest developments in Industrial Control Systems and Security? If you are open to learning and getting familiar with Information Security and like to get the most unique stories that matter, then Security Bits is the Podcast for you. This Podcast is also available on Video Format on YouTube. Go to https://icsbits.com/simplified for more details. b15ae334-bfbc-4063-9d32-55f02fa52a93 Have you ever wondered about getting into Cybersecurity or Information Technology? Have you wondered about the latest developments in Industrial Control Systems and Security? If you are open to learning and getting familiar with Information Security and like to get the most unique stories that matter, then Security Bits is the Podcast for you. This Podcast is also available on Video Format on YouTube. Go to https://icsbits.com/simplified for more details.

]]> episodic no Durgesh Kalya durgesh.bhat@gmail.com https://feeds.redcircle.com/b15ae334-bfbc-4063-9d32-55f02fa52a93 no full InfoSec Word of The Day 02 P.A.S.T.A InfoSec Word of The Day 02 P.A.S.T.A Durgesh Kalya InfoSec WOTD is a daily dose of Cybersecurity Terms, Acronyms and Concepts. 

This PASTA is for a different kind of appetite, the one associated with threats aka #Riskappetite.

PASTA is a threat modelling methodology to identify threats in a very systematic way. It stands for Process for Attack Simulation and Threat Analysis , a 7 step risk centric method to identify threats.

#INFOSECWOTD

]]> <p>InfoSec WOTD is a daily dose of Cybersecurity Terms, Acronyms and Concepts. </p><p>This PASTA is for a different kind of appetite, the one associated with threats aka <a href="https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6813441535934283776&keywords=riskappetite" rel="nofollow">#Riskappetite</a>.</p><p>PASTA is a threat modelling methodology to identify threats in a very systematic way. It stands for Process for Attack Simulation and Threat Analysis , a 7 step risk centric method to identify threats.</p><p><a href="https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6813129653700608001&keywords=infosecwotd" rel="nofollow">#INFOSECWOTD</a></p> f159880a-7e66-419c-b562-2444e212e75b https://icsbits.com/simplified Sat, 27 Nov 2021 04:25:29 +0000 89 no full InfoSec Word of The Day 01 Sneakernet InfoSec Word of The Day 01 Sneakernet 8 1 Durgesh Kalya InfoSec WOTD InfoSec WOTD is a daily dose of Cybersecurity Terms, Acronyms and Concepts. Sneakernet, is an informal term for the transfer of information (data) by use of a physical media such as USB flash drives, optical discs, or external hard drives between computers, rather than transmitting it over a computer network. #INFOSECWOTD InfoSec WOTD is a daily dose of Cybersecurity Terms, Acronyms and Concepts. 

Sneakernet, is an informal term for the transfer of information (data) by use of a physical media such as USB flash drives, optical discs, or external hard drives between computers, rather than transmitting it over a computer network.

#INFOSECWOTD

]]> <p>InfoSec WOTD is a daily dose of Cybersecurity Terms, Acronyms and Concepts. </p><p>Sneakernet, is an informal term for the transfer of information (data) by use of a physical media such as USB flash drives, optical discs, or external hard drives between computers, rather than transmitting it over a computer network.</p><p><a href="https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6813129653700608001&keywords=infosecwotd" rel="nofollow">#INFOSECWOTD</a></p> 1dd2cc0d-9260-453c-a19f-57938690bde0 https://icsbits.com/word/ Fri, 09 Jul 2021 20:41:39 +0000 63 no full Florida Water Treatment Plant Hacked, Chrome Browser Vulnerability, Security Researchers were targeted, Social Media Etiquette, CISCO’s VPN Flaws, Happy Safe Internet Day and more! Florida Water Treatment Plant Hacked, Chrome Browser Vulnerability, Security Researchers were targeted, Social Media Etiquette, CISCO’s VPN Flaws, Happy Safe Internet Day and more! 7 1 Durgesh Kalya Hello and welcome to Simplified Security bits Episode Number 7. I am your host, Durgesh and today is Feb 9th 2021, coming to you straight from Houston Texas. 


Today is Safe Internet Day. Celebrated around the world. In the US, you can find more information for more information on how you can get involved and spread the word by going to https://saferinternetday.us/


Tags: Podcast, Cybersecurity Podcast, Durgesh Kalya, Simplified Security, 



The Florida Water Treatment Plant was hacked and the attacker managed to increase the amount of Sodium Hydroxide levels from 100 parts per million to 11,100 parts per million. The attacker was able to compromise the remote access system and managed to change parameters for the lye component. This is the worst case scenario for Industrial Control Systems which could have led to a dangerous situation. An operator was able to spot the increase in levels and was able to turn it down. 


https://www.nbcnews.com/tech/security/florida-near-miss-cybersecurity-worst-case-scenario-n1257091


Project Zero Team at Google have found a zero day bug on Chrome, Which is being actively exploited and you need to update your browser now. Both Chrome and Edge browsers use the Chromium Engine. So patch now. Simply go to your browser, and click About to initiate the update. 

https://nakedsecurity.sophos.com/2021/02/05/chrome-zero-day-browser-bug-found-patch-now/ 



Cisco reported several vulnerabilities which are tracked in various CVEs. The vulnerabilities allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. Patch them Routers Now!

 

https://thehackernews.com/2021/02/critical-flaws-reported-in-cisco-vpn.html 




Google bans the Spanish Certificate Authority (CA) -Camerfirma. CAs In cryptography are certification authority is an entity that issues digital certificates. While this is nothing new, in the past major browsers have issued warnings and requested CAs to fix issues with verification and validation of certificates. The result is that the websites and services that use certificates that were issued by Camerfirma will start to get flagged on Chrome browsers and will start showing a Certificate Error with the release of the new browser version Chrome 90 which will be available in April of 2021.

https://www.zdnet.com/article/google-bans-another-misbehaving-ca-from-chrome/



Google and Microsoft have reported various instances of ongoing attacks on security researchers. Microsoft has outlined the threat actors behind this targeted attack in their security blog. They attribute the attacks to a group called ZINC. More information is in the show notes. 


https://www.microsoft.com/security/blog/2021/01/28/zinc-attacks-against-security-researchers/


Facebook etiquette:


I am always keen to learn more about how one can improve our interactions and behaviors that can benefit the society as a whole. When it is really at a click of a button you can send communication across the wire and increasingly with very little thought or consequence. As today is Safe Internet Day, I wanted to feature an article written by ESET security blogger Amer Owaida. He very beautifully outlines some of the strategies to apply to strengthen your privacy, security and most importantly to remember the famous Vegas Line,  what happens on the internet stays on the internet. Link is in the show notes.


https://www.welivesecurity.com/2021/02/04/facebook-etiquette-behaviors-avoid/


That is it for this episode.

Please provide me your feedback by reaching out on my twitter @durgeshkalya. All the links to anything I have discussed in this episode is in the show notes of this podcast.

Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click.

]]> <p><span>Hello and welcome to Simplified Security bits Episode Number 7. I am your host, Durgesh and today is Feb 9th 2021, coming to you straight from Houston Texas. </span></p><p><br></p><p><span>Today is Safe Internet Day. Celebrated around the world. In the US, you can find more information for more information on how you can get involved and spread the word by going to </span><a href="https://saferinternetday.us/" rel="nofollow">https://saferinternetday.us/</a></p><p><br></p><p><span>Tags: Podcast, Cybersecurity Podcast, Durgesh Kalya, Simplified Security, </span></p><p><br></p><p><br></p><p><span>The Florida Water Treatment Plant was hacked and the attacker managed to increase the amount of Sodium Hydroxide levels from 100 parts per million to 11,100 parts per million. The attacker was able to compromise the remote access system and managed to change parameters for the lye component. This is the worst case scenario for Industrial Control Systems which could have led to a dangerous situation. An operator was able to spot the increase in levels and was able to turn it down. </span></p><p><br></p><p><a href="https://www.nbcnews.com/tech/security/florida-near-miss-cybersecurity-worst-case-scenario-n1257091" rel="nofollow">https://www.nbcnews.com/tech/security/florida-near-miss-cybersecurity-worst-case-scenario-n1257091</a></p><p><br></p><p><span>Project Zero Team at Google have found a zero day bug on Chrome, Which is being actively exploited and you need to update your browser now. Both Chrome and Edge browsers use the Chromium Engine. So patch now. Simply go to your browser, and click About to initiate the update. </span></p><p><a href="https://nakedsecurity.sophos.com/2021/02/05/chrome-zero-day-browser-bug-found-patch-now/" rel="nofollow">https://nakedsecurity.sophos.com/2021/02/05/chrome-zero-day-browser-bug-found-patch-now/</a><span> </span></p><p><br></p><p><br></p><p><span>Cisco reported several vulnerabilities which are tracked in various CVEs. The vulnerabilities allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. Patch them Routers Now!</span></p><p><span> </span></p><p><a href="https://thehackernews.com/2021/02/critical-flaws-reported-in-cisco-vpn.html" rel="nofollow">https://thehackernews.com/2021/02/critical-flaws-reported-in-cisco-vpn.html</a><span> </span></p><p><br></p><p><br></p><p><br></p><p><span>Google bans the Spanish Certificate Authority (CA) -Camerfirma. CAs In cryptography are certification authority is an entity that issues digital certificates. While this is nothing new, in the past major browsers have issued warnings and requested CAs to fix issues with verification and validation of certificates. The result is that the websites and services that use certificates that were issued by Camerfirma will start to get flagged on Chrome browsers and will start showing a Certificate Error with the release of the new browser version Chrome 90 which will be available in April of 2021.</span></p><p><a href="https://www.zdnet.com/article/google-bans-another-misbehaving-ca-from-chrome/" rel="nofollow">https://www.zdnet.com/article/google-bans-another-misbehaving-ca-from-chrome/</a></p><p><br></p><p><br></p><p><span>Google and Microsoft have reported various instances of ongoing attacks on security researchers. Microsoft has outlined the threat actors behind this targeted attack in their security blog. They attribute the attacks to a group called ZINC. More information is in the show notes. </span></p><p><br></p><p><a href="https://www.microsoft.com/security/blog/2021/01/28/zinc-attacks-against-security-researchers/" rel="nofollow">https://www.microsoft.com/security/blog/2021/01/28/zinc-attacks-against-security-researchers/</a></p><p><br></p><p><span>Facebook etiquette:</span></p><p><br></p><p><span>I am always keen to learn more about how one can improve our interactions and behaviors that can benefit the society as a whole. When it is really at a click of a button you can send communication across the wire and increasingly with very little thought or consequence. As today is Safe Internet Day, I wanted to feature an article written by ESET security blogger Amer Owaida. He very beautifully outlines some of the strategies to apply to strengthen your privacy, security and most importantly to remember the famous Vegas Line,  what happens on the internet stays on the internet. Link is in the show notes.</span></p><p><br></p><p><a href="https://www.welivesecurity.com/2021/02/04/facebook-etiquette-behaviors-avoid/" rel="nofollow">https://www.welivesecurity.com/2021/02/04/facebook-etiquette-behaviors-avoid/</a></p><p><br></p><p><span>That is it for this episode.</span></p><p><span>Please provide me your feedback by reaching out on my twitter </span><strong>@durgeshkalya</strong><span>. All the links to anything I have discussed in this episode is in the show notes of this podcast.</span></p><p><span>Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click.</span></p> 79a65eb6-59b7-4d2b-a884-d5c930d32093 https://icsbits.com/simplified Tue, 09 Feb 2021 09:01:43 +0000 289 no full Covid 19 Vaccine Info Leaks, Siemens releases multiple vulnerabilities, Ubiquiti tells its users to secure their account and more! Covid 19 Vaccine Info Leaks, Siemens releases multiple vulnerabilities, Ubiquiti tells its users to secure their account and more! 6 1 Durgesh Kalya Simplified Security - E6 - Covid 19 Vaccine Info Leaks, Siemens releases multiple vulnerabilities, Ubiquiti tells its users to secure their account and more!



Headlines:

Leaked information surfaces from the December attack on European Medicines Agency on COVID-19 Vaccine.


EMA Original Post:

https://www.ema.europa.eu/en/news/cyberattack-european-medicines-agency


Bleeping Computer’s Post

https://www.bleepingcomputer.com/news/security/hackers-leak-stolen-pfizer-covid-19-vaccine-data-online/ 


Siemens releases multiple Vulnerabilities in Web Server for Scalance X Products and Solid Edge.


Siemens Scalance X Advisory:

https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf 


Siemens Solid Edge Advisory:

https://cert-portal.siemens.com/productcert/txt/ssa-979834.txt 



SEPA, Scottish Environment Protection Agency attacked on Christmas Eve.


https://www.sepa.org.uk/about-us/cyber-attack/ 


Ubiquiti News,  

https://community.ui.com/questions/Account-Notification/96467115-49b5-4dd6-9517-f8cdbf6906f3 


Naked Security article for Homeschooling and how to stay secure. https://nakedsecurity.sophos.com/2021/01/13/home-schooling-how-to-stay-secure/ 


Symantec, Threat Intelligence Blog article on Solar Winds Attack.

https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence 


---


Connect with me:

Simply follow me on LinkedIn or Twitter.


Subscribe to my Podcast Simplified Security:

Google Podcast

https://podcasts.google.com/feed/aHR0cHM6Ly9mZWVkcy5zb3VuZGVyLmZtLzk3NTgvcnNzLnhtbA 


Apple Podcast

https://podcasts.apple.com/us/podcast/security-bits/id1542309317 


For all other platforms such as Spotify, TuneIn, Amazon,

Go to  https://icsbits.com/simplified/ 


Do not forget to Subscribe to my YouTube Channel and Enable Notifications:

https://www.youtube.com/channel/UC9gRPRXg3s3ZPZZafouzOWA?sub_confirmation=1

]]> <p><span>Simplified Security - E6 - Covid 19 Vaccine Info Leaks, Siemens releases multiple vulnerabilities, Ubiquiti tells its users to secure their account and more!</span></p><p><br></p><p><br></p><p><strong>Headlines:</strong></p><p><span>Leaked information surfaces from the December attack on European Medicines Agency on COVID-19 Vaccine.</span></p><p><br></p><p><strong>EMA Original Post:</strong></p><p><a href="https://www.ema.europa.eu/en/news/cyberattack-european-medicines-agency" rel="nofollow">https://www.ema.europa.eu/en/news/cyberattack-european-medicines-agency</a></p><p><br></p><p><strong>Bleeping Computer’s Post</strong></p><p><a href="https://www.bleepingcomputer.com/news/security/hackers-leak-stolen-pfizer-covid-19-vaccine-data-online/" rel="nofollow">https://www.bleepingcomputer.com/news/security/hackers-leak-stolen-pfizer-covid-19-vaccine-data-online/</a><span> </span></p><p><br></p><p><span>Siemens releases multiple Vulnerabilities in Web Server for Scalance X Products and Solid Edge.</span></p><p><br></p><p><strong>Siemens Scalance X Advisory:</strong></p><p><a href="https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf" rel="nofollow">https://cert-portal.siemens.com/productcert/pdf/ssa-139628.pdf</a><span> </span></p><p><br></p><p><strong>Siemens Solid Edge Advisory:</strong></p><p><a href="https://cert-portal.siemens.com/productcert/txt/ssa-979834.txt" rel="nofollow">https://cert-portal.siemens.com/productcert/txt/ssa-979834.txt</a><span> </span></p><p><br></p><p><br></p><p><strong>SEPA, Scottish Environment Protection Agency attacked on Christmas Eve.</strong></p><p><br></p><p><a href="https://www.sepa.org.uk/about-us/cyber-attack/" rel="nofollow">https://www.sepa.org.uk/about-us/cyber-attack/</a><span> </span></p><p><br></p><p><strong>Ubiquiti News,  </strong></p><p><a href="https://community.ui.com/questions/Account-Notification/96467115-49b5-4dd6-9517-f8cdbf6906f3" rel="nofollow">https://community.ui.com/questions/Account-Notification/96467115-49b5-4dd6-9517-f8cdbf6906f3</a><span> </span></p><p><br></p><p><strong>Naked Security article for Homeschooling and how to stay secure. </strong><a href="https://nakedsecurity.sophos.com/2021/01/13/home-schooling-how-to-stay-secure/" rel="nofollow">https://nakedsecurity.sophos.com/2021/01/13/home-schooling-how-to-stay-secure/</a><span> </span></p><p><br></p><p><strong>Symantec, Threat Intelligence Blog article on Solar Winds Attack.</strong></p><p><a href="https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence" rel="nofollow">https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence</a><span> </span></p><p><br></p><p><span>---</span></p><p><br></p><p><strong>Connect with me:</strong></p><p><span>Simply follow me on </span><a href="https://www.linkedin.com/in/durgeshkalya/" rel="nofollow">LinkedIn</a><span> or </span><a href="https://twitter.com/durgeshkalya" rel="nofollow">Twitter</a><strong>.</strong></p><p><br></p><p><strong>Subscribe to my Podcast Simplified Security:</strong></p><p><span>Google Podcast</span></p><p><a href="https://podcasts.google.com/feed/aHR0cHM6Ly9mZWVkcy5zb3VuZGVyLmZtLzk3NTgvcnNzLnhtbA" rel="nofollow">https://podcasts.google.com/feed/aHR0cHM6Ly9mZWVkcy5zb3VuZGVyLmZtLzk3NTgvcnNzLnhtbA</a><span> </span></p><p><br></p><p><span>Apple Podcast</span></p><p><a href="https://podcasts.apple.com/us/podcast/security-bits/id1542309317" rel="nofollow">https://podcasts.apple.com/us/podcast/security-bits/id1542309317</a><span> </span></p><p><br></p><p><span>For all other platforms such as Spotify, TuneIn, Amazon,</span></p><p><span>Go to  </span><a href="https://icsbits.com/simplified/" rel="nofollow">https://icsbits.com/simplified/</a><span> </span></p><p><br></p><p><span>Do not forget to Subscribe to my YouTube Channel and Enable Notifications:</span></p><p><a href="https://www.youtube.com/channel/UC9gRPRXg3s3ZPZZafouzOWA?sub_confirmation=1" rel="nofollow">https://www.youtube.com/channel/UC9gRPRXg3s3ZPZZafouzOWA?sub_confirmation=1</a><span> </span></p> 4ec1ea87-ce48-4065-9e2e-9d1505fa63e8 https://icsbits.com/simplified Sat, 23 Jan 2021 11:01:53 +0000 301 no full Simplified Security Bits - Ticketmaster agrees to pay $10 million to Crowdsurge, Microsoft release details on SolarWinds Hack, Veritas released a handful of CVEs and Free Boot camp for CISSP Candidates and more! Simplified Security Bits - Ticketmaster agrees to pay $10 million to Crowdsurge, Microsoft release details on SolarWinds Hack, Veritas released a handful of CVEs and Free Boot camp for CISSP Candidates and more! 5 1 Durgesh Kalya Public document from the court TicketMaster Lawsuit:

https://www.justice.gov/usao-edny/pr/ticketmaster-pays-10-million-criminal-fine-intrusions-competitor-s-computer-systems-0 


What is Egregor?

https://www.trendmicro.com/en_us/research/20/l/egregor-ransomware-launches-string-of-high-profile-attacks-to-en.html 


Veritas Advisory:

https://www.veritas.com/content/support/en_US/security


SANs institute is offering a Free Virtual Summit:

https://www.sans.org/event/ics-security-summit-2021?utm_medium=Social&utm_source=LinkedIn&utm_content=ICS+Summit+Training+December+2020&utm_campaign=SANS+Solution+Forum+Vendor


Join the Certification Station Discord Group here:

https://discord.gg/cD2EgtyQ


New to Discord and this community? Check out this video to get started::

https://youtu.be/le_CE--Mnvs 


---


Connect with me:

Simply follow me on LinkedIn or Twitter.


Subscribe to my Podcast Simplified Security:

Google Podcast

https://podcasts.google.com/feed/aHR0cHM6Ly9mZWVkcy5zb3VuZGVyLmZtLzk3NTgvcnNzLnhtbA 


Apple Podcast

https://podcasts.apple.com/us/podcast/security-bits/id1542309317 


For all other platforms such as Spotify, Tune IN, Amazon,

Go to https://icsbits.com/simplified/ 


Do not forget to Subscribe to my YouTube Channel and Enable Notifications:

https://www.youtube.com/channel/UC9gRPRXg3s3ZPZZafouzOWA?sub_confirmation=1

]]> <p><strong>Public document from the court TicketMaster Lawsuit:</strong></p><p><a href="https://www.justice.gov/usao-edny/pr/ticketmaster-pays-10-million-criminal-fine-intrusions-competitor-s-computer-systems-0" rel="nofollow">https://www.justice.gov/usao-edny/pr/ticketmaster-pays-10-million-criminal-fine-intrusions-competitor-s-computer-systems-0</a> </p><p><br></p><p><strong>What is Egregor?</strong></p><p><a href="https://www.trendmicro.com/en_us/research/20/l/egregor-ransomware-launches-string-of-high-profile-attacks-to-en.html" rel="nofollow">https://www.trendmicro.com/en_us/research/20/l/egregor-ransomware-launches-string-of-high-profile-attacks-to-en.html</a> </p><p><br></p><p><strong>Veritas Advisory:</strong></p><p><a href="https://www.veritas.com/content/support/en_US/security" rel="nofollow">https://www.veritas.com/content/support/en_US/security</a></p><p><br></p><p><strong>SANs institute is offering a Free Virtual Summit:</strong></p><p><a href="https://www.sans.org/event/ics-security-summit-2021?utm_campaign=SANS+Solution+Forum+Vendor&utm_content=ICS+Summit+Training+December+2020&utm_medium=Social&utm_source=LinkedIn" rel="nofollow">https://www.sans.org/event/ics-security-summit-2021?utm_medium=Social&amp;utm_source=LinkedIn&amp;utm_content=ICS+Summit+Training+December+2020&amp;utm_campaign=SANS+Solution+Forum+Vendor</a></p><p><br></p><p><strong>Join the Certification Station Discord Group here:</strong></p><p><a href="https://discord.gg/cD2EgtyQ" rel="nofollow">https://discord.gg/cD2EgtyQ</a></p><p><br></p><p><strong>New to Discord and this community? Check out this video to get started::</strong></p><p><a href="https://youtu.be/le_CE--Mnvs" rel="nofollow">https://youtu.be/le_CE--Mnvs</a> </p><p><br></p><p>---</p><p><br></p><p><strong>Connect with me:</strong></p><p>Simply follow me on <a href="https://www.linkedin.com/in/durgeshkalya/" rel="nofollow">LinkedIn</a> or <a href="https://twitter.com/durgeshkalya" rel="nofollow">Twitter</a><strong>.</strong></p><p><br></p><p><strong>Subscribe to my Podcast Simplified Security:</strong></p><p>Google Podcast</p><p><a href="https://podcasts.google.com/feed/aHR0cHM6Ly9mZWVkcy5zb3VuZGVyLmZtLzk3NTgvcnNzLnhtbA" rel="nofollow">https://podcasts.google.com/feed/aHR0cHM6Ly9mZWVkcy5zb3VuZGVyLmZtLzk3NTgvcnNzLnhtbA</a> </p><p><br></p><p>Apple Podcast</p><p><a href="https://podcasts.apple.com/us/podcast/security-bits/id1542309317" rel="nofollow">https://podcasts.apple.com/us/podcast/security-bits/id1542309317</a> </p><p><br></p><p>For all other platforms such as Spotify, Tune IN, Amazon,</p><p>Go to <a href="https://icsbits.com/simplified/" rel="nofollow">https://icsbits.com/simplified/</a> </p><p><br></p><p>Do not forget to Subscribe to my YouTube Channel and Enable Notifications:</p><p><a href="https://www.youtube.com/channel/UC9gRPRXg3s3ZPZZafouzOWA?sub_confirmation=1" rel="nofollow">https://www.youtube.com/channel/UC9gRPRXg3s3ZPZZafouzOWA?sub_confirmation=1</a></p> 59cb6d04-2192-4d77-aba9-d4d57388ccbe https://icsbits.com/simplified Thu, 07 Jan 2021 09:44:58 +0000 653 no full Expert in Security - Full Featured Interview with Marco Ayala on various ICS Cybersecurity Topics Expert in Security - Full Featured Interview with Marco Ayala on various ICS Cybersecurity Topics 3 Durgesh Kalya Very excited to share with you our cybersecurty community an interview with ICS Cybersecurity Expert Marco Ayala (Twitter: @ics_scada)&nbsp; We discuss various topics, such as how he got started, why defense in depth is criticle in Industrial systems and my favorite, #snickernet using USB drives in ICS.&nbsp; 00:10 - Introduction to Marco Ayala 02:45 - What is your story and how did you get into Industrial Control Systems Security? 14:01 - What are your thoughts on Virtualization in OT Environments?&nbsp; 17:48 - What are the key elements of an OT Incident Response Plan 22:58 - What is InfraGard? 26:49 - FSO and Cybersecurity Awareness&nbsp;&nbsp;&nbsp; 33:12 - What is the place of USB Drives in OT Environment?&nbsp; Very excited to share with you our cybersecurty community an interview with ICS Cybersecurity Expert Marco Ayala (Twitter: @ics_scada) 

We discuss various topics, such as how he got started, why defense in depth is criticle in Industrial systems and my favorite, #snickernet using USB drives in ICS. 

00:10 - Introduction to Marco Ayala

02:45 - What is your story and how did you get into Industrial Control Systems Security?

14:01 - What are your thoughts on Virtualization in OT Environments? 

17:48 - What are the key elements of an OT Incident Response Plan

22:58 - What is InfraGard?

26:49 - FSO and Cybersecurity Awareness   

33:12 - What is the place of USB Drives in OT Environment? 

]]> <p>Very excited to share with you our cybersecurty community an interview with ICS Cybersecurity Expert Marco Ayala (Twitter: @ics_scada) </p><p>We discuss various topics, such as how he got started, why defense in depth is criticle in Industrial systems and my favorite, #snickernet using USB drives in ICS. </p><p>00:10 - Introduction to Marco Ayala</p><p>02:45 - What is your story and how did you get into Industrial Control Systems Security?</p><p>14:01 - What are your thoughts on Virtualization in OT Environments? </p><p>17:48 - What are the key elements of an OT Incident Response Plan</p><p>22:58 - What is InfraGard?</p><p>26:49 - FSO and Cybersecurity Awareness   </p><p>33:12 - What is the place of USB Drives in OT Environment? </p> 991aea4f-363a-4c9f-aca4-1b7c9a140bef https://securitybits.sounder.fm Fri, 25 Dec 2020 14:41:27 +0000 2977 no full Simplified Security - Supply Chain Bust with Sunburst, Interview with Marco Ayala, Cybersecurity Expert where we discuss several different topics from his humble beginnings in Industrial Control Systems Security, USB Drive in ICS Environment and International Society of Automation and their certification and training. Simplified Security - Supply Chain Bust with Sunburst, Interview with Marco Ayala, Cybersecurity Expert where we discuss several different topics from his humble beginnings in Industrial Control Systems Security, USB Drive in ICS Environment and International Society of Automation and their certification and training. 3 Durgesh Kalya Simplified Security - E3 - Supply Chain Bust with Sunburst, Interview with Marco Ayala, Cybersecurity Expert where we discuss several different topics from his humble beginnings in Industrial Control Systems Security, USB Drive in ICS Environment &amp; More! Full Interview with Marco is on YouTube Ayala https://youtu.be/gdfftCZEn28 &nbsp; Folllow Marc on Twitter: @ICS_SCADA Many of the Solarwinds products are built on this common technology platform, the SolarWinds® Orion which enables an organization, their customers to implement their various products whether individually or as a group. This makes it possible for their customers to have a single dashboard or a management for the products they have implemented. While there are certain solarwinds products that do not leverage this platform, their security advisory shows about 18 products. Some of which include IP Address Manager (IPAM) Log Analyzer (LA) Network Automation Manager (NAM) Network Configuration Manager (NCM) Network Performance Monitor (NPM) Etc. For a full list of affected products, check the link https://www.solarwinds.com/securityadvisory Microsoft &amp; FireEye are continuing to investigate the solarwind hack, which they call Solorigate, Sunburst Backdoor respectively. For more information check out Microsoft’s and FireEye’s Security Blogs, links are in the description. https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/ https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html Special Feature: Expert in Security Interview with Marco Ayala, Cybersecurity Expert. Please provide me your feedback by reaching out on my twitter @durgeshkalya. All the links to anything I have discussed in this episode is in the descriptions of this podcast. Make sure you subscribe to simplified security episodes available as podcast and on youtube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or youtube, until then be safe and think before you click. Simplified Security - E3 - Supply Chain Bust with Sunburst, Interview with Marco Ayala, Cybersecurity Expert where we discuss several different topics from his humble beginnings in Industrial Control Systems Security, USB Drive in ICS Environment & More!

Full Interview with Marco is on YouTube Ayala https://youtu.be/gdfftCZEn28 

Folllow Marc on Twitter: @ICS_SCADA

Many of the Solarwinds products are built on this common technology platform, the SolarWinds® Orion which enables an organization, their customers to implement their various products whether individually or as a group. This makes it possible for their customers to have a single dashboard or a management for the products they have implemented. While there are certain solarwinds products that do not leverage this platform, their security advisory shows about 18 products. Some of which include

IP Address Manager (IPAM)

Log Analyzer (LA)

Network Automation Manager (NAM)

Network Configuration Manager (NCM)

Network Performance Monitor (NPM)

Etc.

For a full list of affected products, check the link https://www.solarwinds.com/securityadvisory


Microsoft & FireEye are continuing to investigate the solarwind hack, which they call Solorigate, Sunburst Backdoor respectively. For more information check out Microsoft’s and FireEye’s Security Blogs, links are in the description.

https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/

https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html

Special Feature: Expert in Security Interview with Marco Ayala, Cybersecurity Expert.

Please provide me your feedback by reaching out on my twitter @durgeshkalya. All the links to anything I have discussed in this episode is in the descriptions of this podcast.

Make sure you subscribe to simplified security episodes available as podcast and on youtube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or youtube, until then be safe and think before you click.

]]> <p>Simplified Security - E3 - Supply Chain Bust with Sunburst, Interview with Marco Ayala, Cybersecurity Expert where we discuss several different topics from his humble beginnings in Industrial Control Systems Security, USB Drive in ICS Environment &amp; More!</p><p>Full Interview with Marco is on YouTube Ayala <a href="https://youtu.be/gdfftCZEn28" rel="nofollow">https://youtu.be/gdfftCZEn28</a> </p><p>Folllow Marc on Twitter: <a href="https://twitter.com/ICS_SCADA" rel="nofollow">@ICS_SCADA</a></p><p>Many of the Solarwinds products are built on this common technology platform, the SolarWinds® Orion which enables an organization, their customers to implement their various products whether individually or as a group. This makes it possible for their customers to have a single dashboard or a management for the products they have implemented. While there are certain solarwinds products that do not leverage this platform, their security advisory shows about 18 products. Some of which include</p><p>IP Address Manager (IPAM)</p><p>Log Analyzer (LA)</p><p>Network Automation Manager (NAM)</p><p>Network Configuration Manager (NCM)</p><p>Network Performance Monitor (NPM)</p><p>Etc.</p><p>For a full list of affected products, check the link <a href="https://www.solarwinds.com/securityadvisory" rel="nofollow">https://www.solarwinds.com/securityadvisory</a></p><p><br></p><p>Microsoft &amp; FireEye are continuing to investigate the solarwind hack, which they call Solorigate, Sunburst Backdoor respectively. For more information check out Microsoft’s and FireEye’s Security Blogs, links are in the description.</p><p><a href="https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/" rel="nofollow">https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/</a></p><p><a href="https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html" rel="nofollow">https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html</a></p><p>Special Feature: Expert in Security Interview with Marco Ayala, Cybersecurity Expert.</p><p>Please provide me your feedback by reaching out on my twitter @durgeshkalya. All the links to anything I have discussed in this episode is in the descriptions of this podcast.</p><p>Make sure you subscribe to simplified security episodes available as podcast and on youtube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or youtube, until then be safe and think before you click.</p> 0d4c20bc-9bc9-4536-ae03-50cbacdd3fb5 https://securitybits.sounder.fm Mon, 21 Dec 2020 19:00:00 +0000 898 no full Simplified Security - Google Play Core Library Code Execution Vulnerability, Trickbot Evolves to new low levels and Fireeye Breached More! Simplified Security - Google Play Core Library Code Execution Vulnerability, Trickbot Evolves to new low levels and Fireeye Breached More! 2 Durgesh Kalya Hello and welcome to Simplified Security Episode Number 2. Links: Vulnerability in Google Play Core Library: https://blog.oversecured.com/Oversecured-automatically-discovers-persistent-code-execution-in-the-Google-Play-Core-Library/&nbsp; TrickBot Malware gets a creepy feature: https://www.advanced-intel.com/post/persist-brick-profit-trickbot-offers-new-trickboot-uefi-focused-functionality&nbsp; CVE-2020-8539. https://nvd.nist.gov/vuln/detail/CVE-2020-8539 Kia Motors Head Unit CVE: Italian National Research Council Research Paper: https://sowhat.iit.cnr.it/pdf/IIT-20-2020.pdf&nbsp; What When and Why In Security: Windows 98 End of Life https://www.informationweek.com/windows-98-presents-security-problems-as-it-ends-lifespan/d/d-id/1022187?piddl_msgorder=asc&nbsp; Please provide me your feedback by reaching out on my twitter @durgeshkalya. All the links to anything I have discussed in this episode is in the descriptions of this podcast. Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click. Hello and welcome to Simplified Security Episode Number 2.

Links:


Vulnerability in Google Play Core Library:

https://blog.oversecured.com/Oversecured-automatically-discovers-persistent-code-execution-in-the-Google-Play-Core-Library/ 

TrickBot Malware gets a creepy feature:

https://www.advanced-intel.com/post/persist-brick-profit-trickbot-offers-new-trickboot-uefi-focused-functionality 

CVE-2020-8539.

https://nvd.nist.gov/vuln/detail/CVE-2020-8539

Kia Motors Head Unit CVE:

Italian National Research Council Research Paper:

https://sowhat.iit.cnr.it/pdf/IIT-20-2020.pdf 

What When and Why In Security:

Windows 98 End of Life

https://www.informationweek.com/windows-98-presents-security-problems-as-it-ends-lifespan/d/d-id/1022187?piddl_msgorder=asc 

Please provide me your feedback by reaching out on my twitter @durgeshkalya. All the links to anything I have discussed in this episode is in the descriptions of this podcast.

Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click.

]]> <p><strong>Hello and welcome to Simplified Security Episode Number 2.</strong></p> <p>Links:</p> <p><br></p> <p><strong>Vulnerability in Google Play Core Library:</strong></p> <p>https://blog.oversecured.com/Oversecured-automatically-discovers-persistent-code-execution-in-the-Google-Play-Core-Library/ </p> <p><strong>TrickBot Malware gets a creepy feature:</strong></p> <p>https://www.advanced-intel.com/post/persist-brick-profit-trickbot-offers-new-trickboot-uefi-focused-functionality </p> <p><strong>CVE-2020-8539.</strong></p> <p>https://nvd.nist.gov/vuln/detail/CVE-2020-8539</p> <p><em>Kia Motors Head Unit CVE:</em></p> <p><strong>Italian National Research Council Research Paper:</strong></p> <p>https://sowhat.iit.cnr.it/pdf/IIT-20-2020.pdf </p> <p><strong>What When and Why In Security:</strong></p> <p>Windows 98 End of Life</p> <p>https://www.informationweek.com/windows-98-presents-security-problems-as-it-ends-lifespan/d/d-id/1022187?piddl_msgorder=asc </p> <p>Please provide me your feedback by reaching out on my twitter @durgeshkalya. All the links to anything I have discussed in this episode is in the descriptions of this podcast.</p> <p>Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click.</p> a64517da-e6b9-4b6f-8f82-1416a81b0536 https://securitybits.sounder.fm Thu, 10 Dec 2020 14:10:12 +0000 787 no full Simplified Security -Wordpress Plugins, Fortinet FortiOS System File Leak, Interpol and more! Simplified Security -Wordpress Plugins, Fortinet FortiOS System File Leak, Interpol and more! 1 Durgesh Kalya Welcome to the ICSBits.com's Simplified Security Episode 1: Wordpress Plugins, Fortinet Forti System File Leak, Interpol and more! Video Podcast: https://youtu.be/zNsWFASXYoE Text Blog: https://icsbits.com/2020/12/01/simplified-security-e1/. Digitally Signed Malware which goes by the name Bandook Story: https://research.checkpoint.com/2020/bandook-signed-delivered/ Wordpress Story: https://www.webarxsecurity.com/wordpress-vulnerability-news-september-2020/ Fake News and Disinformation: https://www.nytimes.com/2020/10/14/technology/personaltech/how-to-deal-with-a-crisis-of-misinformation.html Interpols News: https://www.interpol.int/en/News-and-Events/News/2020/Three-arrested-as-INTERPOL-Group-IB-and-the-Nigeria-Police-Force-disrupt-prolific-cybercrime-group Fortinet FortiOS System File Leak: https://www.fortiguard.com/psirt/FG-IR-18-384 https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13379 Drupal Releases Security Updates for Tar and other vulnerabilities: https://www.drupal.org/sa-core-2020-013 VMware Releases Workarounds for their command injection vulnerability: https://www.vmware.com/security/advisories/VMSA-2020-0027.html# These episodes are available in Text, video and audio formats. Check out icsbits.com/simplified for more details. In every episode we will look at some of the security highlights especially the ones that made it to the news and also find out about any new security events that are happening around the world this week in our NEWS In Security segment. Then we will cover vulnerabilities that scored a CVE score of 10 & discuss any countermeasures that may be available in our Patch or Latch segment. And finally, we will go into the past and learn about some interesting security topics and discover how it has transformed or influenced our present in our What When & Why in Security segment. Make sure you subscribe to simplified security episodes available as podcast and on Youtube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or Youtube, until then be safe and think before you click. Wordpress Plugins, Fortinet Forti System File Leak, Interpol and more! Video Podcast: https://youtu.be/zNsWFASXYoE

Text Blog: https://icsbits.com/2020/12/01/simplified-security-e1/.
Digitally Signed Malware which goes by the name Bandook Story:
https://research.checkpoint.com/2020/bandook-signed-delivered/


Wordpress Story:
https://www.webarxsecurity.com/wordpress-vulnerability-news-september-2020/
Fake News and Disinformation:


https://www.nytimes.com/2020/10/14/technology/personaltech/how-to-deal-with-a-crisis-of-misinformation.html
Interpols News:
https://www.interpol.int/en/News-and-Events/News/2020/Three-arrested-as-INTERPOL-Group-IB-and-the-Nigeria-Police-Force-disrupt-prolific-cybercrime-group
Fortinet FortiOS System File Leak:
https://www.fortiguard.com/psirt/FG-IR-18-384
https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13379
Drupal Releases Security Updates for Tar and other vulnerabilities:
https://www.drupal.org/sa-core-2020-013
VMware Releases Workarounds for their command injection vulnerability:
https://www.vmware.com/security/advisories/VMSA-2020-0027.html#
These episodes are available in Text, video and audio formats. Check out icsbits.com/simplified for more details.
In every episode we will look at some of the security highlights especially the ones that made it to the news and also find out about any new security events that are happening around the world this week in our NEWS In Security segment.
Then we will cover vulnerabilities that scored a CVE score of 10 & discuss any countermeasures that may be available in our Patch or Latch segment.
And finally, we will go into the past and learn about some interesting security topics and discover how it has transformed or influenced our present in our What When & Why in Security segment.


Make sure you subscribe to simplified security episodes available as podcast and on Youtube. Go to icsbits.com/simplified for more details.

]]> <p>Wordpress Plugins, Fortinet Forti System File Leak, Interpol and more! Video Podcast: https://youtu.be/zNsWFASXYoE<br><br>Text Blog: https://icsbits.com/2020/12/01/simplified-security-e1/.<br>Digitally Signed Malware which goes by the name Bandook Story:<br>https://research.checkpoint.com/2020/bandook-signed-delivered/</p> <p><br>Wordpress Story:<br>https://www.webarxsecurity.com/wordpress-vulnerability-news-september-2020/<br>Fake News and Disinformation:</p> <p><br>https://www.nytimes.com/2020/10/14/technology/personaltech/how-to-deal-with-a-crisis-of-misinformation.html<br>Interpols News:<br>https://www.interpol.int/en/News-and-Events/News/2020/Three-arrested-as-INTERPOL-Group-IB-and-the-Nigeria-Police-Force-disrupt-prolific-cybercrime-group<br>Fortinet FortiOS System File Leak:<br>https://www.fortiguard.com/psirt/FG-IR-18-384<br>https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html<br>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13379<br>Drupal Releases Security Updates for Tar and other vulnerabilities:<br>https://www.drupal.org/sa-core-2020-013<br>VMware Releases Workarounds for their command injection vulnerability:<br>https://www.vmware.com/security/advisories/VMSA-2020-0027.html#<br>These episodes are available in Text, video and audio formats. Check out icsbits.com/simplified for more details.<br>In every episode we will look at some of the security highlights especially the ones that made it to the news and also find out about any new security events that are happening around the world this week in our NEWS In Security segment.<br>Then we will cover vulnerabilities that scored a CVE score of 10 &amp; discuss any countermeasures that may be available in our Patch or Latch segment.<br>And finally, we will go into the past and learn about some interesting security topics and discover how it has transformed or influenced our present in our What When &amp; Why in Security segment.</p> <p><br>Make sure you subscribe to simplified security episodes available as podcast and on Youtube. Go to icsbits.com/simplified for more details.</p> <p></p> ce5e1910-5a0f-499b-88ba-0116c0b69f66 https://securitybits.sounder.fm/episode/simplified-security-e1-wordpress-plugins-forti Wed, 02 Dec 2020 02:13:19 +0000 762 no trailer Simplified Security - Trailer Simplified Security - Trailer Durgesh Kalya Welcome to the ICSBits.com's Simplified Security Episodes. These episodes are available in Text, video and audio formats. Check out icsbits.com/simplified for more details. &nbsp; In every episode we will look at some of the security highlights especially the ones that made it to the news and also find out about any new security events that are happening around the world this week in our NEWS In Security segment. &nbsp; Then we will cover vulnerabilities that scored a CVE score of 10 &amp; discuss any countermeasures that may be available in our Patch or Latch segment. &nbsp; And finally, we will go into the past and learn about some interesting security topics and discover how it has transformed or influenced our present in our What When &amp; Why in Security segment. &nbsp; Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to icsbits.com/simplified for more details. &nbsp;I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click. Welcome to the ICSBits.com's Simplified Security Episodes. These episodes are available in Text, video and audio formats. Check out icsbits.com/simplified for more details.   

  • In every episode we will look at some of the security highlights especially the ones that made it to the news and also find out about any new security events that are happening around the world this week in our NEWS In Security segment.
  •  
  • Then we will cover vulnerabilities that scored a CVE score of 10 & discuss any countermeasures that may be available in our Patch or Latch segment.
  •  
  • And finally, we will go into the past and learn about some interesting security topics and discover how it has transformed or influenced our present in our What When & Why in Security segment.

Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to icsbits.com/simplified for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click.

]]> <p>Welcome to the ICSBits.com&#39;s Simplified Security Episodes. These episodes are available in Text, video and audio formats. Check out icsbits.com/simplified for more details.   </p><ul><li>In every episode we will look at some of the security highlights especially the ones that made it to the news and also find out about any new security events that are happening around the world this week in our <strong>NEWS In Security segment.</strong></li><li> </li><li>Then we will cover vulnerabilities that scored a CVE score of 10 &amp; discuss any countermeasures that may be available in our <strong>Patch or Latch segment. </strong></li><li> </li><li>And finally, we will go into the past and learn about some interesting security topics and discover how it has transformed or influenced our present in our <strong>What When &amp; Why in Security segment. </strong></li></ul><p>Make sure you subscribe to simplified security episodes available as podcast and on YouTube. Go to <a href="http://icsbits.com/simplified" rel="nofollow">icsbits.com/simplified</a> for more details. I am your host Durgesh Kalya. Catch me on my next episode on your favorite podcast app or YouTube, until then be safe and think before you click.</p> 5d7b295a-8926-4f9b-b98b-67d43b622310 https://securitybits.sounder.fm Fri, 27 Nov 2020 05:48:57 +0000 143 no