WELCOME BACK TO CHEDDAR NEWS
ONE OF THE LARGEST MEAT
PROCESSORS IN THE WORLD
SUFFERED FROM A CYBER ATTACK
THIS WEEK. THE INCIDENT
PROMPTING JBS TO SHUT DOWN ITS
5 BIGGEST
PLANTS IN NORTH AMERICA AND
AUSTRALIA, THIS COMES LESS THAN
A MONTH AFTER HACKERS TARGETED
THE COLONIAL
PIPELINE HOME FUEL DISTRIBUTION
ALONG THE EAST COAST FOR
SEVERAL DAYS AND JUST THIS
AFTERNOON, A FERRY SERVICE IN
MASSACHUSETTS FELL VICTIM TO A
RANSOMWARE ATTACK.
THESE HEADLINES ONLY BEGINNING
TO UNDERSCORE THE IMPORTANCE OF
ADDRESSING OUR
BOEHNER ABILITIES SO JOINING US
NOW FOR MORE IS GLENN PENDLEY
DEPUTY CHIEF TECHNOLOGY OFFICER
OF ANNABELLE AND CEO
AND CO-FOUNDER AT SECURITY
SCOREBOARD, ALEKSANDR YOUNG
POLSKY IT'S GREAT TO HAVE YOU
BOTH HERE GLENN I WANT TO START
WITH YOU WHAT DO YOU, WE KNOW
RIGHT NOW ABOUT THE CYBERATTACK
ON JBS.
>> SO AT THIS POINT WHAT'S
BEING WIDELY REPORTED IS YOU
KNOW WE DON'T REALLY KNOW THE
EXACT ATTACKED ACTOR AND HOW
THE ATTACK INITIALLY CAME IN,
BUT WE DO KNOW BASED ON
PUBLISHED REPORTS THAT IT WAS A
RANSOMWARE
VERY SIMILAR AND SPOKE TO WHAT
WE SAW WITH THE CORNEA
PIPELINE. WHERE
IT WAS ATTACKING YOU
KNOW THE THUS ORGANIZATIONS I
CAN FOR A STRUCTURE IN AN
ATTEMPT TO SHUT DOWN THE BACKS
OF MICE. A POTENTIAL THE GRANTS
THAT THEY'RE GETTING.
>> AND I WONDER IF YOU HAVE ANY
INSIGHT ON WHAT MAY JBS SO EASY
TO IT PACK AND WHAT
VULNERABILITIES THERE ARE
YOU KNOW FOR THE FOOD INDUSTRY.
>> SO WE'LL LIVE IN A WORLD
WHERE ALL THE INFORMATION
BECAME GOOD ICE AND SECURITAS
CORP WITH WE WANT TO THROW
5 MILLION COMPANIES AND
COMPUTER RATINGS FOR THEM.
EVERY SINGLE DAY.
IN THE FOOD INDUSTRY ACCORDING
TO THE RESEARCH THAT WE'VE
CONDUCTED EVERY 5TH COMPANY SO
ONE IN
5 COMPANIES BECAUSE OF
VULNERABILITY IN THE CIRCUS
THAT COULD BE EXPLOITED BY THE
PACKERS AND SO
OF 55,000 PLUS COMPANIES WITH
SERVING WITH THEM 1000 COULD BE
EXPLOITED AND GPS WAS ONE OF
THEM AND EVEN TODAY WITH THE
SURBAN MULTIPLE GROUPS ON THE
DARK WEB. DISCUSSING THE FACT
THAT THE REACH OF THE COMPANY'S
ENOUGH WITH THEM PROCESSING
SEPTA.
>> WHILE ONE IN 5 COMPANIES
OVER 10,000 THAT'S A STAGGERING
NUMBER FOR A LOT OF INVESTORS
AND JUST PEOPLE IN GENERAL TO
HEAR TIMES OF
OUR VULNERABILITIES.
>> YOU KNOW, GLENN I WONDER IF
YOU HAVE ANY INSIDE THOUGH HOW
HOW RANSOMWARE AND THESE
ATTACKS BECOME A BIG BUSINESS.
>> WELL IT'S ACTUALLY A YOU
KNOW IT TO PRE OBVIOUS OR
EVOLUTION AND
HOW TAX
ATTACKS A DEFAULT WITHIN
SECURITY OVER THE LAST FEW
DECADES THESE HACKERS AREN'T
STUPID. YOU KNOW, AND THEY WANT
TO TRY TO MAXIMIZE THEIR
INVESTMENT. AND YOU SEE THEM
GOING AFTER. YOU KNOW MORE LIKE
ORGANIZATIONS THAT ARE PLAYING
A MORE CRITICAL ROLE
IN HER A FIREMAN AND WE'RE
SEEING THINGS WHETHER IT'S THE
FLORIDA WATER ATTACK WHEN
THERE'S COLONIAL PIPELINE, THE
HEALTH SYSTEM. IN OUR LONDON
NOW WITH JDS
YOU KNOW A LOT OF THESE
ORGANIZATIONS HAVE SYSTEMS THAT
ARE RESPONSIBLE FOR
CONTROLLING DIFFERENT. ASUS
SOME THINGS THAT DIRECTLY
IMPACT HOW PEOPLE
WITH WEATHER SCOTT ASKED
WHETHER SMOKING PLACES WHETHER
IT'S THE FOOD WE EAT THE WATER
WE DRINK. THOSE ARE VERY
COMPLEX SYSTEMS.
AND ATTACKERS
THESE ORGANIZATIONS. THEY CAN'T
THEY CAN'T STAY DOWN. SO
THEY'RE FORCED INTO EITHER
PAYING
THE RANSOM OR YOU KNOW
IMPACTING MILLIONS OF PEOPLE
WATCH WHICH FORCES THERE AND A
LITTLE BIT
SO THERE. MANY CASES FORCED TO
PAY THE MONEY WHICH IS WHAT THE
HACKERS WILL.
>> SO IS THE MOTIVE JUST MONEY
OR ARE THERE OTHER MOTIVES WITH
SOMETHING LIKE THIS.
>> IN MANY CASES, IT'S MONEY
AND IN MY EXPERIENCE,
IT'S THAT USUALLY COMES DOWN TO
MONEY IN THE COLONIAL PIPELINE
ATTACK YOU
KNOW THE THE ORGANIZATION THAT
TOOK RESPONSIBILITY FOR THE
ATTACK, YOU KNOW THEY THE KIND
OF FANCY THEMSELVES LIKE.
ROBIN
HOOD FOR. HACKERS AND YOU KNOW
THE THE RANSOM THAT THEY GET
FROM DIFFERENT ORGANIZATIONS
THAT YOU CAN TRY TO DONATE SOME
OF THE MONEY BACK BECAUSE THEY
THINK THEY'RE DOING GOOD BY
EXPLOITING CORPORATIONS AND
TAKING ADVANTAGE OF SOME OF
THESE COMPANIES.
>> YOU ASKED THAT QUESTION
BECAUSE I HAVE HEARD THAT KIND
OF ANECDOTAL REFERENCE THAT YOU
KNOW IT'S ACTIVISTS HACKING AND
WHAT NOT YOU KNOW, GLENN, I
WONDER
WHAT THOSE WHAT THIS REVEALS
ABOUT THE FLAWS IN OUR
INFRASTRUCTURE OVERALL.
>> YOU KNOW LIKE I CAN MENTION
A LITTLE BIT EARLIER ONE OF THE
SYSTEMS ARE YOU KNOW VERY
COMPLEX
IN NATURE AND THE CONVERSION OF
SPEECH CRITICAL SYSTEMS WITH
YOUR TYPICAL EVERY DAY I KEESUS
AND YOU'RE STARTING TO PERCH
AND THE COMPLEXITY THAT IT
TAKES IS JUST NOT ONLY GET
VISIBILITY INTO THOSE VERY
SPECIAL I SORT OF.
EQUIPMENT BUT EVEN SECURING A
LOT OF THESE THINGS YOU CATCH
US. HATCH SAID YOU CAN'T JUST
DO SORT OF A SORT OF THINGS
THAT YOU DO FOR YOUR TYPICAL, I
T SORT JUST
SO THAT THE ABILITY FOR PEOPLE
TO TRY TO REALLY SECURE GETS
EXTRA LIKE JUST SO MUCH MORE.
WE'RE GOING TO GET HARDER AND
HARDER TO MORE PEACE THIS
CRITICAL SYSTEMS AND IT'S QUITE
THE SYSTEM SNAP CONTINUE TO
COME FROM.
>> I ANNOUNCE, AND I THINK THE
RESEARCH IN THE INSIDE THE JUST
A FEW MOMENTS GOES REALLY FAST.
I WONDER WHAT ARE YOUR THOUGHTS
ON THE ROLE THAT GOVERNOR IT
HAS TO PLAY IN PROTECTING OUR
CYBERSECURITY.
>> SO A LOT OF THE TIME
COMPANIES DO NOT FOCUS ON THE
BASICS FOR EXAMPLE WE OBSERVED
THAT OF THE SODIUM
OF COLBY RANSOMWARE WHICH WAS
USED TO DIRECT THE GPS OF THE
COMPANY AND HAS BEEN IN THE
SYSTEM FOR ALMOST 2 MONTHS FROM
MARCH 1ST
THE MAY 29TH 2 MONTHS LONGER
THAN THE
COMPANY KNEW AND THE PACKERS
EXPROPRIATED ALMOST 5 TERABYTES
OF WHICH IS EQUIVALENT TO OVER
750,000. PICTURES LIKE THEY'RE
A BUNCH OF DATA SO THE CAR
COMPANIES NEED TO MAKE SURE
THAT THAT CONTINUES MONITORING
IN PLACE AND THE ROLE THAT THE
GOVERNMENT
COULD PLAY IS THEY CAN
INSTITUTE THE MINIMUM STANDARD
DO CARE THAT COMPANIES NEED
TO FOLLOW IN TERMS
OF CYBERSECURITY LEGEND AND
REALLY SET THE FLOOR IN TERMS
OF A MINIMUM OF WHAT NEEDS TO
BE DONE AND THE MINIMUM BEING
DONE 2 NEW SLEEP RATHER THAN A
POINT IN TIME.
>> YOU KNOW YOU HAVE TO BOTH
THE QUESTION IS GOING TO HAVE
THEIR IN TERMS OF THE
GOVERNMENT SIDE IN THE PRIVATE
COMPANY SIDE. BUT A QUICK
QUESTION TO BOTH OF YOU HERE
WILL HAVE ABOUT A
MINUTE LEFT, YOU KNOW WHAT'S
MAY BE THE NUMBER ONE THING
THAT YOU KNOW COMPANIES ARE ARE
THE KEY WE DON'T IN GENERAL TO
MITIGATE FUTURE ATTACKS BECAUSE
WE ARE SEEING THEM MORE AND
MORE AND I'LL START ALEXANDER.
>> COMPANIES NEED TO
UNDERSTAND THEIR ATTACK SURFACE
THE ADVERSARIES KNOW THAT
EXCERPT WAS BETTER THAN THE
COMPANIES DO. AND THEN YOU HAVE
A SET OF SECURITY METRICS THAT
THEY USE TO QUANTIFY WHAT ARE
THEY GETTING BETTER OR NOT IF
YOU CANNOT MEASURE IT YOU
CANNOT IMPROVEMENT ON THIS
AND THE TECH CIRCLES AND
INSTITUTE SECURITY METRICS AND
THEN GLENN REALLY QUICKLY WHAT
ARE YOUR THOUGHTS THERE.
>> I AGREE WITH OUT
BE CONTINUOUSLY MONITOR YOUR
ENVIRONMENT AND UNDERSTANDING
THE STATE IN THE SECURITY
POSTURE UP FRONT AND NOT BEING
REACTIONARY OF JUST LOOKING FOR
ACTIVE ATTACKS. BUT BEING
PROACTIVE AND PROTECT YOURSELF
BEFORE LUNCH.
>> I THINK WE'RE ALL LEARNED
THAT REACTIONARY IS NO LONGER
THE WAY THAT ANY COMPANY OR
EVEN GOVERNMENT STATION CAN BE