Getting Serious: Critical Disruptions/Thinking/Responses (& Rumors of War)
summary
Criminal attacks are already degrading water, food, power and hospitals, with Change Healthcare’s outage affecting 94% of US hospitals surveyed and a reported $22M ransom that drains cash flows for weeks; a CISA Covid task force is stood up, produces peer‑reviewed analysis linking pandemic-era care disruptions to excess deaths — e.g. ICU >75% → ~18,000 excess deaths in two weeks — and finds ~750 hospital ransom incidents per year; evidence of Chinese pre‑positioning (Volt Typhoon) raises 2027 risk; practical fixes advance: fix KEVs nightly, remove exposed assets from Shodan, eliminate EOL OS and hardcoded passwords, adopt CISA cyber performance goals.
AI-written summary · about
chapters (20)
- 0:00Critical cyber threats intro
- 3:11Cavalry not coming
- 5:21Public vs private good
- 7:06Societal blast radius
- 8:29Pandemic cyber disruptions
- 11:22Cyberattacks in healthcare
- 17:42Real-world cyber impact
- 23:00Systemically Important Critical Infrastructure
- 24:45China's cyber warfare
- 31:09Global conflicts and cyber warfare
- 33:41Gray rhinos vs black swans
- 35:06Challenge constraints
- 37:32Critical infrastructure failures
- 40:00Bad practices in critical security
- 42:27Smashing resilience assumptions
- 45:01Supply chain limits
- 46:28Crisis simulations
- 47:31You are the cavalry
- 48:35Logistics risks
- 50:23Actionable steps
related talks
40mPublic Health Cyber War Games: How Hackers are Exploiting Healthcare
28mHealthcare and IoT cybersecurity in the new age
40mOne Step Ahead: Keeping Security at the Forefront
48mRansomware: From the Boardroom to the Situation Room
29mFighting Back Without Hacking Back: Why “Risk Management” Isn’t Enough In The Era of Cyber War
51mCode Blue! Medical Devices Under Attack
20mConnecting the Dots in a Cyber Pandemic Era
37mMore Than a CSIRT: Lessons Learned from Supporting a National Response to COVID-19