The IT Governance Podcast

IT Governance Podcast 20.10.23: Casio, Cisco, MOVEit (again) and the ICC Oct 23, 2023

This week, we discuss a data breach affecting Casio users in 149 countries, two zero-day vulnerabilities in Cisco’s IOS XE web user interface, a slew of legal action against Progress Software following the MOVEit Transfer breach, and an update on last month’s cyber attack on the International Criminal Court.

IT Governance Podcast 6.10.23: TikTok, Sony and MOVEit and DarkBeam Oct 06, 2023

This week, we discuss another GDPR fine for TikTok relating to its processing of child users’ personal information, more data breaches caused by MOVEit Transfer, including Sony Interactive Entertainment, and the exposure of a mammoth 3.8 billion data records.

IT Governance Podcast 22.09.23: MGM Resorts, Microsoft Azure, International Criminal Court Sep 22, 2023

This week, we discuss a cyber attack on MGM Resorts that has allegedly cost the company millions of dollars in revenue even before it began its remediation efforts, the leak of 38 terabytes of Microsoft data and a cyber attack on the International Criminal Court in The Hague.

IT Governance Podcast 08.09.23: Electoral Commission (again), Meta, Pôle emploi Sep 07, 2023

This week, we discuss security issues at the Electoral Commission, Meta’s appeal against daily GDPR fines, and a breach affecting 10 million users of the French unemployment agency Pôle emploi.

IT Governance Podcast 25.8.23: Tesla, Duolingo, Lapsus$ trial Aug 24, 2023

This week, we discuss “insider wrongdoing” at Tesla, a data breach affecting 2.6 million Duolingo users and the conclusion of a two-month court case against members of the Lapsus$ gang.

IT Governance Podcast 11.8.23: Electoral Commission, PSNI, Capita Aug 10, 2023

This week, we discuss data breaches affecting the Electoral Commission and the Police Service of Northern Ireland, and the financial repercussions of Capita’s March ransomware incident.

IT Governance Podcast 14.7.23: EU-US DPF, UK-US data bridge, MOVEit patches and other security fixes Jul 13, 2023

This week, we discuss the new EU adequacy decision for the US, based on the Data Privacy Framework (plus Max Schrems’s inevitable reaction), and a proposed UK-US ‘data bridge’; fixes for three more vulnerabilities in Progress Software’s MOVEit Transfer app; plus this month’s Patch Tuesday and other security updates.

IT Governance Podcast 30.6.23: ChatGPT, LetMeSpy and MS Teams, plus Alan Calder on cyber security Jun 29, 2023

This week, we discuss 100,000 compromised ChatGPT credentials, a data breach affecting the LetMeSpy stalkerware app, and a potential security vulnerability in Microsoft Teams that could be exploited to spread malware. Plus, Alan Calder discusses the current cybersecurity and regulatory landscape, and how they affect organisations.

IT Governance Podcast 16.6.23: MOVEit, LinkedIn, Spotify and Google Bard Jun 15, 2023

This week, we discuss a data breach affecting users of Progress Software’s MOVEit file transfer app, GDPR fines for LinkedIn and Spotify, and the delay of Google Bard’s EU launch because of privacy concerns.

IT Governance Podcast 2.6.23: Capita, NHS, Meta, GDPR, DPDI Bill and Alan Calder on cyber regtech Jun 01, 2023

This week, we discuss more organisations affected by Capita’s security issues, the security implications of 20 NHS trusts’ use of Meta Pixel, Meta’s €1.2 billion GDPR fine and its potential effects for other organisations, and the progress of the DPDI (No. 2) Bill. Plus, Alan Calder discusses cyber regtech and how organisations can use it to manage their regulatory compliance.

IT Governance Podcast 19.5.23: Capita, USS, Colchester City Council and Alan Calder’s analysis. May 18, 2023

This week, we look at the wider repercussions of the Capita ransomware attack, and how numerous clients have been affected, including the Universities Superannuation Scheme and other pension providers. Plus, accusations of another Capita breach and Alan Calder on what all organisations can learn from the attack and Capita’s response.

IT Governance Podcast 5.5.23: ChatGPT, LockBit, T-Mobile, Alan Calder on cyber security for boards May 04, 2023

This week, we discuss ChatGPT’s restoration in Italy despite wider security concerns, an apology from the LockBit ransomware group and another breach for T-Mobile, and Alan Calder discusses what boards need to do to build their organisations’ cyber defences.

IT Governance Podcast 21.4.23: Capita, Chrome, LockBit for Macs and Alan Calder on cyber security Apr 20, 2023

This week, we discuss the apparent sale of exfiltrated Capita data by the Black Basta ransomware group, a zero-day Google Chrome vulnerability and the development of a new LockBit ransomware variant targeting macOS, and Alan Calder analyses the new US National Cybersecurity Strategy and explains what all organisations should learn from it.

IT Governance Podcast 2023-7: Capita, ChatGPT and TikTok (yet again) Apr 05, 2023

This week, we discuss a cyber attack on the outsourcing giant Capita, Italy's ban on OpenAI's ChatGPT chatbot and further bad news for TikTok: a £12.7 million fine from the ICO for breaching UK data protection law.

IT Governance Podcast 2023-6: Ferrari, Dole, TikTok (again), Android Mar 23, 2023

This week, we discuss ransomware attacks on Ferrari and the Dole Food Company, another TikTok ban – this time by the BBC – and vulnerabilities that allow some Android phones to be hacked with only the victim's phone number.

IT Governance Podcast 2023-5: WH Smith, the Data Protection and Digital Information Bill, TikTok Mar 09, 2023

This week, we discuss a data breach affecting WH Smith, the latest proposals to reform data protection law in the UK, TikTok's response to being banned by the European Commission and European Parliament, and the proposed US RESTRICT Act, and a woman who has been sentenced for defrauding Luton Borough Council in a cyber attack.

IT Governance Podcast 2023-4: EU-US Data Privacy Framework, Twitter 2FA, GoDaddy, HardBit 2.0 Feb 23, 2023

This week, we discuss the European Parliament Committee on Civil Liberties’s opinion of the EU-US Data Privacy Framework, Twitter’s decision to disable free text-based 2FA, a series of attacks on GoDaddy’s infrastructure and the HardBit 2.0 ransomware group’s negotiation tactics.

IT Governance Podcast 2023-3: Bank security flaws ranked, ION ransom paid, MP hacked Feb 09, 2023

This week, we discuss a Which? investigation into basic security flaws on banks' websites and apps, a ransomware attack on the financial firm ION Cleared Derivatives, and a phishing attack that compromised the emails of Stewart McDonald MP.

IT Governance Podcast 2023-2: Mailchimp, fast food, T-Mobile, ice rinks, iOS update and ISO 27001 Jan 26, 2023

This week, we discuss the fallout from the latest Mailchimp breach, a ransomware attack on KFC, Pizza Hut and Taco Bell's parent company, another T-Mobile data breach, an incident affecting Planet Ice, and an update for older Apple devices. We also talk to the ISO 27001 expert Steve Watkins about his new pocket guide to the Standard.

IT Governance Podcast 2023-1: more ransomware attacks on the education sector, and DPC and Meta sued Jan 12, 2023

This week, we discuss a series of ransomware attacks on 30 schools and colleges in the UK, legal action against both Meta and the Irish Data Protection Commission following last year’s massive Facebook GDPR fine, and the third stage of a cyber-defence-in-depth strategy: management.

IT Governance Podcast Episode 14: Rackspace, Citrix and EU-US adequacy decision Dec 15, 2022

This week, we discuss a ransomware attack on Rackspace, a Citrix zero-day vulnerability, the forthcoming EU adequacy decision in respect of the EU-U.S Data Privacy Framework, and the second stage of a cyber-defence-in-depth strategy: protection.

IT Governance Podcast Episode 13: $100 million ransomware, Westmount City, Suffolk Police, AI Nov 24, 2022

This week, we discuss the Hive ransomware as a service, the latest developments following the Medibank breach, a Canadian city shut down by ransomware, Suffolk Police's leak of sensitive data and the ethical implications of AI.

IT Governance Podcast Episode 12: Interserve, Medibank, UPS and Patch Tuesday Nov 10, 2022

This week, we discuss a £4.4 million GDPR fine for the construction company Interserve, a data breach affecting 9.7 million customers of Medibank, an unusual GDPR fine for UPS, and Microsoft’s latest software updates.

IT Governance Podcast Episode 11: EU-US Data Privacy Framework, ransomware & cyber detection Oct 27, 2022

This week, we discuss the new mechanism for transferring EU residents’ personal data to the US, the first GDPR Data Protection Seal, a new ransomware attack targeting Ukraine and its allies, and the first layer in a defence-in-depth approach to cyber security: detection.

IT Governance Podcast Episode 10: Data protection reform, Easylife fine, Uber conviction and work Oct 13, 2022

This week, we discuss yet more planned changes to UK data protection law, a £1.35 million GDPR fine for “predatory marketing”, the conviction of Uber’s former chief security officer, and a new book about how to establish an enjoyable career.

IT Governance Podcast Episode 9: TikTok, American Airlines and Morgan Stanley Smith Barney Sep 29, 2022

This week, we discuss a potential fine of £27 million for TikTok, a data breach caused by a phishing attack on American Airlines and a $35 million penalty for Morgan Stanley Smith Barney LLC after ”extensive” security failures.

IT Governance Podcast Episode 8: Twitter, Instagram, InterContinental and Cloud security Sep 15, 2022

This week, we discuss allegations of data security failures at Twitter, a €405 million fine for Instagram, a cyber attack on InterContinental Hotels Group, and why Cloud security is so important.

IT Governance Podcast Episode 7: Apple zero-day, NHS ransomware update and 0ktapus phishing campaign Sep 01, 2022

This week, we discuss two zero-day vulnerabilities affecting Apple devices, the further effects of a ransomware attack on an NHS digital services provider and a large-scale phishing campaign affecting users of secure services such as Okta, Authy and Signal.

IT Governance Podcast Episode 6: NHS ransomware, Ukraine, Digital Protection and Information Bill Aug 18, 2022

This week, we discuss a ransomware attack on an NHS digital services provider and a huge increase in cyber attacks as a result of the war in Ukraine, and provide an overview of the main reforms to UK data protection law proposed by the Digital Protection and Information Bill.

IT Governance Podcast Episode 5: Facebook, Twitter, VW, Digital Protection and Information Bill Aug 04, 2022

This week, we discuss a malware campaign targeting Facebook Business users, a breach apparently affecting 5.4 million Twitter users, a €1.1 million GDPR fine for Volkswagen, the new Digital Protection and Information Bill, and why it’s so important to maintain your cyber security through a recession.

IT Governance Podcast Episode 4: Ransomware advice, MFA phishing and The Art of Cyber Security Jul 21, 2022

This week, we discuss NCSC and ICO advice to the legal profession, a new phishing campaign that bypasses multifactor authentication, and the huge increase in the number of ransomware and phishing attacks this year. Plus, we talk to Gary Hibberd about his new book, The Art of Cyber Security.

IT Governance Podcast Episode 3: NCSC guidance, Amagasaki breach, Maastricht Uni and the metaverse Jul 07, 2022

This week, we discuss new NCSC guidance on avoiding cyber security “staff burnout”, a data breach affecting a Japanese city's entire population, good news for the ransomware-hit Maastricht University, and the privacy implications of the metaverse.

IT Governance Podcast Episode 2: Yodel, ransomware, the Data Reform Bill and cyber defence in depth Jun 23, 2022

This week, we discuss a cyber attack that’s disrupted Yodel’s deliveries, new tactics from a ransomware gang, the government’s plans for reforming UK data privacy law, and the importance of a defence-in-depth approach to cyber security.

IT Governance Podcast Episode 1: Twitter, Beeple, QuickBooks and Hybrid Working Security Jun 09, 2022

This week, we look at a $150 million fine for Twitter, phishing attacks affecting the Twitter followers of the digital artist Beeple and users of the accounting platform QuickBooks, and a massive data breach affecting Pegasus Airlines – plus we talk about security issues facing organisations with a remote or hybrid workforce.

Brexit And Schrems II | Practical Implications For UK - EU Data Transfers 1 Mar 16, 2021

The Schrems II ruling and Brexit mean that UK organisations are required to reconsider the legal basis for the transfer of personal data to and from Europe. The webinar recording covers: The Schrems II decision regarding transfers of data; The implications for UK and EU data controllers regarding data transfers; The types of data transfers organisations should consider; Data flows and the legal basis for UK–EU data transfers; Practical steps organisations can take now; and What the future holds following Schrems II and Brexit.

Data Flow Audit And Data Mapping For GDPR Compliance Mar 16, 2021

We take a look at Data Flow Audit And Data Mapping For GDPR Compliance in this webinar recoding

Introduction To Data Mapping Mar 16, 2021

We take a look at Data Flow Mapping in this webinar recording

Data Protection By Design And By Default Under The GDPR Mar 16, 2021

The EU General Data Protection Regulation (GDPR) highlights how the principles of ‘privacy by design’ and ‘privacy by default’ are fundamental to ensuring that organisations protect the rights of data subjects. We take a look at Data Protection By Design And By Default Under The GDPR in this webinar recording

The First Steps Towards GDPR Compliance Mar 16, 2021

Alan Calder, Founder and CEO of IT Governance discusses the first steps towards GDPR compliance in this webinar recording.

Weekly podcast: Goodbye! Mar 14, 2019

In our last ever podcast, we discuss Citrix’s data breach, the GDPR and cookie walls, data breach notification, and Patch Tuesday.

7th March Weekly podcast: Reports galore! DCMS, Microsoft and Cisco Mar 07, 2019

This week, we delve into the government's FTSE 350 Cyber Governance Health Check report, Microsoft's Security Intelligence Report Volume 24, and Cisco's latest Data Privacy Benchmark Study

28 February Weekly podcast: ICANN, DNS and DNSSEC; credential stuffing, and passwords managers Feb 28, 2019

This week, we discuss ICANN's warning about DNS attacks, the extent of credential stuffing attacks on the retail sector, password managers' responses to recent research into security flaws, and the European Data Protection Supervisor's annual report for 2018.

21 February Weekly podcast: Password managers, unpatched vulnerabilities, formjacking and Wendy's Feb 21, 2019

This week, we discuss a security flaw affecting 1Password, Dashlane, KeePass and LastPass; the prevalence of historic vulnerabilities in corporate IT systems; the increase in formjacking attacks; and Wendy's $50 million data breach settlement.

14 February Weekly podcast: Mumsnet, OkCupid and Apple Feb 14, 2019

This week, we discuss a data breach at Mumsnet, no data breach at OkCupid, and a lawsuit against Apple for implementing security measures.

7 February Weekly podcast: Metro Bank, Student Loans Company, GDPR breaches and seals Feb 07, 2019

This week, we discuss the compromise of Metro Bank's two-factor authentication system, nearly one million cyber attacks on the Student Loans Company, nearly 60,000 GDPR breaches and a surprising discovery for some marine biologists

31 January Weekly Podcast: Facebook VPN, FaceTime bug, and Internet Explorer 10 Jan 31, 2019

31 January Weekly Podcast: Facebook VPN, FaceTime bug, and Internet Explorer 10 by IT Governance

24 January Weekly podcast: Google GDPR fine, EU-US Privacy Shield and US DNS hijacking attacks Jan 24, 2019

This week, we discuss Google's €50 million GDPR fine, GDPR complaints against eight streaming services, Facebook’s Supreme Court appeal and its potential effects on the EU-US Privacy Shield, and an Emergency Directive from the US Department of Homeland Security.

17 January Weekly podcast: US government websites, Liberia DDoS attacker and no-deal Brexit Jan 17, 2019

This week, we discuss how the US government shutdown is affecting federal websites' security, the sentencing of a man who knocked Liberia's Internet offline with a botnet, and what a no-deal Brexit means for data protection

11 January Weekly podcast: German data breach, poor passwords, Marriott, NHS Digital & Patch Tuesday Jan 10, 2019

This week, we discuss a high-profile German data breach, the top worst passwords of 2018, the resignation of NHS Digital’s CISO, and Microsoft’s latest patches.

14 December Weekly Podcast: 2018 end-of-year roundup Dec 13, 2018

This week, in our last podcast of the year, we revisit some of the biggest information security stories from the past 12 months

30th November Weekly podcast: Uber, Google, and City of York Council vs RapidSpike Nov 29, 2018

This week, we discuss the latest fines for Uber in connection with its 2016 data breach, GDPR complaints against Google, and the other side of the City of York Council 'hack' story.

23 November Weekly podcast: Amazon, TalkTalk and City of York Nov 22, 2018

This week, we discuss Amazon's exposure of customer names and addresses, jail sentences for two TalkTalk hackers, and a data breach affecting a City of York rubbish app.

16 November Weekly podcast: Bank of England, the OPM, Patch Tuesday and Japanese minister Nov 16, 2018

This week, we discuss a Bank of England cyber resilience exercise, the latest cyber security news from the US Office of Personnel Management, the highlights of this month's Patch Tuesday, and a surprising admission by a Japanese cyber security minister

9 November Weekly podcast: HSBC, Evernote and Apache Struts Nov 08, 2018

This week, we discuss a data breach affecting HSBC's US customers, a XSS vulnerability in Evernote and a critical RCE vulnerability in Apache Struts

2 November Weekly podcast: Planes, trains and online learning Nov 01, 2018

This week, we discuss BA's update about its recent data breach, the 9.4 million victims of Cathay Pacific's data breach, Eurostar's password reset, and an indictment for the criminals behind an extortion attempt at lynda.com

26 October Weekly podcast: Supermicro, federal data privacy law and Morrisons Oct 25, 2018

This week, we discuss the stalemate between Bloomberg Businessweek and Supermicro, Apple and Facebook’s call for a federal data privacy law in the US, and what the Morrisons Appeal Court ruling means for every organisation

19 October Weekly podcast: US Defense Department, MOD and NHS Oct 18, 2018

19 October Weekly podcast: US Defense Department, MOD and NHS by IT Governance

12 October Weekly Podcast: Google+, Supermicro and Heathrow Oct 11, 2018

This week we discuss the end of Google+, allegations of Chinese motherboard interference, and a £120,000 fine for Heathrow Airport

5 October Weekly Podcast: Russian cyber crimes, Facebook breach and Tory conference app Oct 04, 2018

This week, we discuss Russian cyber crime, the Facebook breach affecting 90 million users and the Conservative Party's conference app breach

28 September Weekly podcast: SHEIN, Tesco Bank, UK cyberwarfare unit and Uber Sep 27, 2018

Big numbers this week: we discuss a data breach affecting 6.42 million SHEIN customers, a potential £30 million FCA fine for Tesco Bank, the UK's new £250 million cyberwarfare unit, and a $148 million settlement for Uber

21st September Weekly podcast: Equifax once more, Bristol Airport, Smeg and Mirai creators Sep 20, 2018

This week, we discuss a record ICO fine for Equifax, cyber attacks on Bristol Airport and Smeg, and the sentencing of the creators of the Mirai botnet

14th September Weekly podcast: BA, Npower, Lazarus Group and Patch Tuesday Sep 17, 2018

This week, we discuss the continuing fallout from the BA breach, the compromise of 5,000 Npower customers' details, DoJ charges against a North Korean computer programmer, and this month's Microsoft updates

7 September Weekly podcast: Plusnet, TV Licensing, BEC scams and data breach causes Sep 06, 2018

This week, we discuss a data breach at Plusnet, poor security at tvlicensing.co.uk, why most BEC scams succeed, and what causes most data breaches

The Periscope Podcast Sep 03, 2018

Welcome to the IT Governance Periscope Podcast: This week’s episode is an investigation into the DPO’s role – who needs one, what they do and their role in a data breach.

31 August Weekly Podcast: Air Canada, Huazhu Hotels, and West Ham FC Aug 30, 2018

In this week's podcast, we discuss the data breach at Air Canada, Huazhu Hotels, and West Ham Football Club

24 August Weekly Podcast: Weekly Podcast: Superdrug, Facebook and Twitter, and the ICO Aug 23, 2018

In this week's podcast, we discuss the data incident at Superdrug, Facebook and Twitter removing accounts, and the ICO website being down.

The Periscope Podcast Aug 20, 2018

Welcome to the IT Governance Periscope Podcast: This week’s episode is an investigation into reporting on staff training, awareness and IT Governance products and solutions for organisations that suffer a data breach

17 August Weekly podcast: Intel Foreshadow attack, Cosmos cash-out scheme, TLS 1.3 and Patch Tuesday Aug 17, 2018

This week, we discuss a new flaw affecting Intel processors, a $13.5 million cyber attack on an Indian bank, the release of version 1.3 of the Transport Layer Security protocol and the highlights from this month's Microsoft patches.

August 10 Weekly podcast: ICS attacks, Reddit and SIM swap arrests Aug 10, 2018

This week, we discuss new research into attacks on industrial control systems, Reddit's recent breach, and an apparent crackdown on SIM swap fraud

3 August Weekly podcast: Dixons Carphone, Fashion Nexus, Yale and Alaska Aug 03, 2018

This week, we discuss the 10 million affected by Dixons Carphone's 2017 data breach, the exposure of hundreds of thousands of clothes shoppers' details, Yale University's ten-year old data breach, and a return to typewriters for government workers in Matanuska-Susitna Borough in Anchorage.

The IT Governance Periscope Podcast #1 Aug 02, 2018

Welcome to the IT Governance Periscope Podcast: This week’s episode is an investigation into cyber incident response management and IT Governance products and solutions for organisations which suffer a data breach.

27 July Weekly podcast: Chrome and HTTP, British Airways, and Level One Robotics Jul 27, 2018

This week we discuss Google Chrome flagging sites that use HTTP as not secure, BA's GDPR fail, and a massive data breach affecting more than 100 manufacturing companies.

Client X #2: Physical Technology – Hardware Jul 20, 2018

Welcome to the IT Governance Technology & Media Podcast: Client X. Account Manager Zak Rush joins us again for our second episode. Zak is a Technology & Media sector specialist at IT Governance. It’s his job to identify client obligations, discuss project scope and generally facilitate any and all client needs in the Technology & Media sector.

20th July Weekly podcast: the IICSA, the EU-US Privacy Shield, data breach costs and Lotto hackers Jul 19, 2018

This week, we discuss a £200,000 fine for the IICSA, a move to suspend the EU-US Privacy Shield, how much a data breach might cost your organisation, and the sentencing of two National Lottery hackers.

13th July Weekly podcast: banks, Thomas Cook, London cyber court and Facebook Jul 13, 2018

This week, we discuss operational resilience in the banking and financial market infrastructures sectors, a data breach affecting Thomas Cook subsidiaries, London's proposed new court building and the latest development in the Facebook/Cambridge Analytica scandal

Client X #1: The Information Technology Sector Jul 12, 2018

Welcome to the IT Governance Technology & Media Podcast: Client X. Account Manager Zak Rush joins us for our first episode. Zak is a Technology & Media sector specialist at IT Governance. It’s his job to identify client obligations, discuss project scope and generally facilitate any and all client needs in the Technology & Media sector.

6 July Weekly Podcast: NHS Digital Breach, Typeform Data Breach, and Noble Design Fine Jul 06, 2018

This week, we discuss the unauthorised sharing of 150,000 patients' confidential health data, the first ripples from the Typeform data breach, and a £4,500 fine for a company that didn't register with the ICO

29 June Weekly podcast: Exactis, BetVictor, Ticketmaster, and GDPR complaints Jun 29, 2018

This week, we discuss the apparent leak of 340 million data records, a vulnerability that exposed sensitive BetVictor data, a data breach affecting up to 40,000 Ticketmaster customers, and the number of GDPR complaints since 25 May.

22 June Weekly podcast: BT, Bithumb, Islington Council and World Cup phishing Jun 22, 2018

This week, we discuss a £77,000 fine for BT, Bithumb's loss of £24 million, Islington Council's PCI DSS fail and some topical phishing campaigns.

8th June Weekly podcast: MyHeritage, PageUp, Rochester Grammar School and, yes, the GDPR Jun 08, 2018

This week, we discuss the compromise of 92 million MyHeritage users' credentials, “unauthorised activity” at PageUp, a missing memory stick at Rochester Grammar School, and the first couple of weeks of the GDPR

1 June Weekly podcast: Yahoo hacker sentenced, acoustic DoS attack and GDPR compliance fails Jun 01, 2018

This week, we discuss the sentencing of one of the perpetrators of the 2013 Yahoo breach, a new type of denial-of-service attack that can crash computers just using sound and how not to email your customers

25 May Weekly podcast: the GDPR is here May 25, 2018

The General Data Protection Regulation is now in force. Don't panic.

18 Weekly podcast: myPersonality, train Wi-Fi and Kaspersky Lab May 17, 2018

This week, we discuss the exposure of millions of Facebook users' data, security failings in train passenger networks and Kaspersky Lab's relocation to Switzerland

11 May Weekly podcast: Twitter, Spectre-NG, NIS Directive and patches May 10, 2018

This week, we discuss Twitter's password reset, new Spectre CPU flaws, the implementation of the EU's NIS Directive, and patch Tuesday's highlights

4th May Weekly podcast: NHS upgrade, $242m Equifax loss and prison hacker jailed May 03, 2018

This week, we discuss a new deal between the NHS and Microsoft, the financial cost of Equifax's massive data breach, and a jail sentence for a hacker who altered prison records

26 April Weekly podcast: TSB, hotel locks and NATO exercise Apr 27, 2018

This week, we discuss TSB's chaotic system upgrade, a security flaw in electronic hotel locks and a major NATO cyber security exercise

Weekly discussion podcast #13: Security in the Digital World Apr 26, 2018