LightNews LightNews
mikemimoso.bsky.social
@mikemimoso.bsky.social
230 followers 230 following 29 posts
Posts Replies Media Videos
Pinned
mikemimoso.bsky.social
mikemimoso.bsky.social @mikemimoso.bsky.social · Oct 2
🎧 New #NexusPodcast 🎙️

If you do anything today, listen to this episode with Adm. Michael Rogers (Ret, USN) on #deterrence in cyberspace and where we're coming up short in protecting critical infrastructure.

@claroty.bsky.social

nexusconnect.io/podcasts/nex...
mikemimoso.bsky.social
🎧 New #NexusPodcast 🎙️

If you do anything today, listen to this episode with Adm. Michael Rogers (Ret, USN) on #deterrence in cyberspace and where we're coming up short in protecting critical infrastructure.

@claroty.bsky.social

nexusconnect.io/podcasts/nex...
October 2, 2025 at 1:54 PM
mikemimoso.bsky.social
If you missed Team82's Noam Moshe's talk at #BHUSA or #DEFCON, catch up with this #NexusPodcast episode recorded after his presentation on hacking video surveillance platforms.

@Claroty

hubs.li/Q03CFRh00

Also read the Team82 research blog: hubs.li/Q03CFPTw0
Nexus Podcast: Noam Moshe on Hacking Video Surveillance
Team82's Noam Moshe joins the Nexus Podcast sharing research in Axis Communications' popular video surveillance platform. The research takes on particular importance as more and more Chinese vendors a...
hubs.li
August 13, 2025 at 8:30 PM
mikemimoso.bsky.social
🎧 Listen up: New #NexusPodcast for you with @gentrylane.bsky.social
We talk about how adversaries are using "salami cuts" in cyberspace to incrementally degrade our trust in critical infrastructure and services.
nexusconnect.io/podcasts/gen...
Nexus Podcast: Gentry Lane on the Use of 'Salami Cuts' in Cyber Conflict
Gentry Lane, founder of Nemesis Global, joins the Nexus Podcast to discuss how a Cold War tactic known as Salami Cuts is being used against U.S. critical infrastructure. Adversaries who cannot operate...
nexusconnect.io
July 7, 2025 at 2:39 PM
mikemimoso.bsky.social
Episode 101: Steven Sim, chair of the OT-ISAC advisory committee, joins the #NexusPodcast to talk #OT #cybersecurity information sharing, and some of the ISAC's upcoming community activities.
@claroty.bsky.social
nexusconnect.io/podcasts/nex...
June 26, 2025 at 7:36 PM
mikemimoso.bsky.social
Episode 100 of the #NexusPodcast is available with Sarah Fluchs. She brings her insight on the EU's Cyber Resilience Act, and her experience on how to best bring #cybersecurity to engineers and other non-security teams integral to critical infrastructure protection.
nexusconnect.io/podcasts/nex...
Nexus Podcast Episode 100: Sarah Fluchs on the Cyber Resilience Act
In this episode of the Nexus Podcast—No. 100!—Sarah Fluchs joins to discuss her work as a Type-A member in the EU commission's Cyber Resilience Act Expert Group, the ongoing progress—and challenges—ar...
nexusconnect.io
June 18, 2025 at 2:18 PM
mikemimoso.bsky.social
Cybersecurity researcher Joe Slowik is my latest guest on the #NexusPodcast. He poses some great questions and discussion points on truly "critical" infrastructure and how current thinking impacts response and resource allocation.
nexusconnect.io/podcasts/nex...
@claroty.bsky.social
May 27, 2025 at 7:20 PM
mikemimoso.bsky.social
Excited to share my latest #NexusPodcast with CISA's Danielle Jablanski. We talk about all things critical infrastructure protection, and in this clip, Danielle reminds us that asset owners need to focus on predominant network security tasks to keep environments safe.
nexusconnect.io/podcasts/nex...
May 13, 2025 at 2:14 PM
mikemimoso.bsky.social
Excellent new contribution on @claroty.bsky.social Nexus from James LaBonty, former Pfizer global head of automation engineering. Jim has put together an operational checklist for securing converged IT/OT environments. Have a look:
nexusconnect.io/articles/an-...
An Operational Checklist for Securing the IT/OT Ecosystem
Former Pfizer global head of automation engineering Jim LaBonty formulates an operational checklist for securing converged IT/OT manufacturing environments. He suggests strategic governance options an...
nexusconnect.io
May 7, 2025 at 11:54 AM
mikemimoso.bsky.social
Christiaan Beek of @rapid7.com joined me last week during #RSAC to talk about #ransomware, where it's been, and in this clip, where it's going. @claroty.bsky.social #NexusPodcast
hubs.li/Q03l73dx0
May 7, 2025 at 1:46 AM
Reposted
claroty.bsky.social
🎙️ On this episode of the Nexus Podcast, @rapid7.com Senior Director of Threat Analytics Christiaan Beek explores the economics of #ransomware and the continued profitability and success of it as an attack vector. 🎧 Listen to the full episode: nexusconnect.io/podcasts/nex...
May 5, 2025 at 6:18 PM
Reposted
claroty.bsky.social
New today! The 'State of CPS Security: Healthcare Exposures 2025' is Team82’s analysis of the riskiest connected medical devices exposed to ransomware and attacks leveraging insecure connectivity. 📁 Download the report: claroty.com/resources/re...
State of CPS Security: Healthcare Exposures 2025
In this report, Team82 quantifies the riskiest and most exposed healthcare devices, by taking into consideration not only the criticality of vulnerabilities in connected devices, but also whether devi...
claroty.com
March 27, 2025 at 12:06 AM
Reposted
claroty.bsky.social
💡 New on Nexus: Expert Cristin Flynn Goodwin explains the challenges facing CISOs as they migrate to quantum-resistant encryption in the near future. nexusconnect.io/articles/the...
The Quantum Compliance Leap: Preparing for Q-Day
Quantum computing threatens the viability of current encryption algorithms at the core data protection, privacy, and cybersecurity efforts in enterprises worldwide. Expert Cristin Flynn Goodwin explai...
nexusconnect.io
April 7, 2025 at 7:21 PM
mikemimoso.bsky.social
🎙️ New Nexus Podcast available with Florence Hudson, chair of the IEEE/UL 2933 standard working group for clinical #IoT data security and interoperability. Important standards work for the #healthcare sector.

@claroty.bsky.social

nexusconnect.io/podcasts/nex...
April 2, 2025 at 5:49 PM
mikemimoso.bsky.social
❗New @claroty.bsky.social Team82 report on the #cybersecurity exposures facing #healthcare organizations, including KEVs linked to #ransomware, insecure connectivity, and more.
Get the report here: claroty.com/resources/re... (reg req.)
State of CPS Security: Healthcare Exposures 2025
In this report, Team82 quantifies the riskiest and most exposed healthcare devices, by taking into consideration not only the criticality of vulnerabilities in connected devices, but also whether devi...
claroty.com
April 2, 2025 at 5:47 PM
Reposted
claroty.bsky.social
💡 On Nexus, George V. Hulme writes about the findings in ENISA’s #NIS360 report. The report identifies gaps in the current state of #NIS2 compliance readiness and provides recommendations on what needs to be done to become NIS2 compliant. nexusconnect.io/articles/eni...
ENISA Attempts to Move NIS2 Forward with NIS360 Findings
The European Union Agency for Cybersecurity (ENISA)'s NIS360 report identifies gaps in the current state of NIS2 compliance readiness and provides recommendations to lawmakers and affected industry ve...
nexusconnect.io
March 20, 2025 at 7:51 PM
Reposted
claroty.bsky.social
🆕 Nexus Podcast: Mike Holcomb, Global Lead for ICS and #OT Cybersecurity at Fluor, discusses educating engineers and IT #cybersecurity professionals in the nuances of protecting operational technology and #industrial control systems.

🎧 Full episode here: nexusconnect.io/podcasts/nex...
March 24, 2025 at 7:30 PM
Reposted
claroty.bsky.social
💡 On Nexus, read about proactive and predictive approaches to #cybersecurity and how they act as early warning systems that alert organizations before disaster strikes. nexusconnect.io/articles/the...
‘The Boiled Frog’: A Cybersecurity Lesson for Organizations
Reactive cybersecurity programs are destined for a fate similar to the story of the boiling frog, one that doesn’t know it’s in trouble until it’s too late. Proactive and predictive approaches to cybe...
nexusconnect.io
March 19, 2025 at 4:42 PM
mikemimoso.bsky.social
Excellent data on weaknesses in #OT and #ICS, that include #KEVs, insecure connectivity, and other exposures.
March 11, 2025 at 3:53 PM
Reposted
claroty.bsky.social
🚨 An update to Team82's research on the Contec CMS8000 patient monitor: CISA has updated its advisory to reflect a vulnerability reported by #Team82. ⚠️ More info: claroty.com/team82/resea...
Do the CONTEC CMS8000 Patient Monitors Contain a Chinese Backdoor? The Reality is More Complicated…
Team82 investigated what CISA labeled a backdoor in the Contec CMS8000 patient monitoring system and concluded that instead, the decision to include a hardcoded IP address is instead an insecure and r...
claroty.com
March 6, 2025 at 7:00 PM
mikemimoso.bsky.social
ICYMI: My discussion with former NSA Director Adm. Michael S. Rogers is available on @claroty.bsky.social Nexus. We cover a bit about CI protection, the "Typhoons," and more. Mike is always worth listening to.
nexusconnect.io/videos/adm-m...
Adm. Michael S. Rogers on Protecting Critical Infrastructure
Former National Security Agency Director Adm. Michael S. Rogers (Ret. USN) explains how nation-state threat actors have evolved beyond reconnaissance and espionage in their activities, to a more offen...
nexusconnect.io
March 11, 2025 at 3:52 PM
Reposted
claroty.bsky.social
💡 New on Nexus, Alessio Rosas writes about the need to protect building management or automation systems as they are increasingly being connected online. nexusconnect.io/articles/red...
Reducing the Cybersecurity Risks of Connected BMS
Building management or automation systems are increasingly being connected online. Each connection to the internet introduces a new risk. Attackers looking for an entry point onto an internal network ...
nexusconnect.io
March 10, 2025 at 6:14 PM
mikemimoso.bsky.social
Ron Fabela is my latest guest on the @claroty.bsky.social Nexus Podcast. We talked about low-skilled #OT and #ICS hackers, and how their marketing is probably better than their technical chops. Get the full episode here: nexusconnect.io/podcasts/nex...
Also available wherever you get your podcasts.
Nexus Podcast: Ron Fabela on Low-Skilled OT/ICS Threat Actors
Ron Fabela joins the Nexus podcast to discuss his research into low-skilled threat actors targeting operational technology and industrial control systems. Many of these groups operate as hacktivists a...
nexusconnect.io
February 27, 2025 at 2:10 PM
Reposted
claroty.bsky.social
On the latest episode of the 🎙️ Nexus Podcast, Munish Walther-Puri, adjunct professor at the Center Global Affairs at NYU, describes a homegrown scale for #OT #cybersecurity incidents called the Infrastructure Cyber Incident Scale. 🎧 Full episode: nexusconnect.io/podcasts/nex...
February 20, 2025 at 11:08 PM
mikemimoso.bsky.social
Lots of interesting data in this report; helps asset owners prioritize vulnerable systems by a lot more than CVEs.
claroty.bsky.social Claroty @claroty.bsky.social · Feb 25
⚠️ In this report, #Team82 analyzes close to one million #OT devices within 270 organizations and reveals the greatest risks. The data spans a number of industries, including: #Manufacturing, #Logistics, #Transportation, and #NaturalResources. 📁 Download your copy here: claroty.com/resources/re...
February 26, 2025 at 2:43 PM
Reposted
claroty.bsky.social
⚠️ Medixant recommends users update implementations of the RadiAnt #DICOM Viewer to address a certificate validation vulnerability disclosed by #Team82. More info: claroty.com/team82/discl...
February 25, 2025 at 8:38 PM