OT Security/business resilience, lack of incentives for securing software & the news - Ben Worthy - ESW #448
嗯,用户让我帮忙总结一篇文章,控制在100字以内,而且不需要特定的开头。首先,我需要仔细阅读文章内容,抓住主要信息。 文章是关于Ben Worthy在Airbus Protect的采访,讨论了OT安全和业务韧性。提到了网络安全攻击的增加,比如勒索软件、GPS欺骗和供应链问题。还举了几个案例,比如Boeing、Jaguar Land Rover和SITA的数据泄露事件。Ben还提到了监管变化,比如EASA的截止日期和ENISA的趋势报告。 接下来,用户要求总结在100字以内,所以我要提炼关键点:OT安全、业务韧性、网络安全威胁、案例分析、监管变化。然后把这些点连贯地组织起来,确保不超过字数限制。 最后,检查一下有没有遗漏的重要信息,并确保语言简洁明了。 </think> 文章探讨了工业控制系统安全与业务韧性在关键行业的现状及挑战,分析了勒索软件、GPS欺骗等网络安全威胁对企业运营的影响,并讨论了航空等关键基础设施如何应对安全风险与业务连续性问题。文中还提到监管机构对网络安全的要求变化及最新趋势。 2026-3-2 10:0:0 Author: sites.libsyn.com(查看原文) 阅读量:28 收藏

Mar 2, 2026

Interview - Ben Worthy from Airbus Protect

The current state of OT security and business resilience

In this episode of Enterprise Security Weekly, we sit down with Ben Worthy, OT Security Specialist at Airbus Protect, to explore the evolving landscape of business resilience in safety-critical sectors. With over 25 years of experience across aerospace, nuclear, water, oil & gas, and other industries, Ben shares insights on how organizations are adapting to the surge in disruptive cyberattacks—from ransomware targeting operational technology to GPS spoofing and supply chain incidents. We discuss major cases including the Boeing/LockBit ransom demand, the Jaguar Land Rover production shutdown, and the SITA passenger data breach, examining how aviation and other critical infrastructure sectors are separating safety risk from business continuity risk.

Ben also breaks down the regulatory changes reshaping the industry, including EASA's October 2025 and February 2026 deadlines that tie cyber assurance directly to safety oversight, and what ENISA's latest numbers reveal about hacktivism and ransomware trends. Whether you're in aviation, nuclear, or any safety-critical sector, this conversation offers practical lessons on building resilience that keeps operations moving while addressing threats in real time.

This segment is sponsored by Airbus Protect. Visit https://securityweekly.com/airbusprotect to learn more about them!

Topic: Where are the business incentives to build secure products and software?

"It's the right thing to do," so of course businesses will make their products secure, right? Well, it turns out that breaches and vulnerabilities don't traditionally hurt financial performance all that much. Stocks recover, insurance covers the bulks of the losses, fines are paid, and lawsuits are settled. Most businesses can comfortably absorb the impact, so the threat of reputational harm or financial losses just aren't slowing them down.

In the case of Ivanti, where the reputational harm was extreme, the company's companies continue to get hacked as critical vulnerabilities keep getting discovered in their products.

https://www.bloomberg.com/news/features/2026-02-19/vpn-used-by-us-government-failed-to-stop-china-state-sponsored-hackers

In this topic segment, we don't aim to provide solutions to this problem, just the awareness that ethics, doing the right thing, and even signing the Secure by Design pledge don't seem to be enough to change vendor behavior when it comes to securing products.

The Weekly Enterprise Security News

Finally, in the enterprise security news,

  1. RSA Innovation Sandbox hot takes
  2. Did AI solve cyber?
  3. fundings and acquisitions
  4. a free app to warn you about smart glasses
  5. deep thoughts about OpenClaw
  6. replacing US tech with EU equivalents is hard
  7. should you turn off dependabot?
  8. accidentally taking over 7000 robot vacuums
  9. the director of AI Safety at Meta loses her email somehow
  10. should you go back to using a blackberry?

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-448


文章来源: http://sites.libsyn.com/18678/ot-securitybusiness-resilience-lack-of-incentives-for-securing-software-the-news-ben-worthy-esw-448
如有侵权请联系:admin#unsafe.sh