Bryson Bort
As seen in:
Forbes,
USA Today,
The Hill,
Yahoo Sports,
Yahoo,
Times Record News,
The Cipher Brief,
RealClear Defense,
Security Today,
The Parallax
and
🦄 @scythe_io @grimmcyber, Sr Advisor @IST_Org & NatSec Sr Fellow, Co-Fdr @ICS_Village, @c2_matrix co-creator, USMA Science Board, Angel Investor, US Army Offcr
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Bryson Bort
Strengthening OT/ICS incident response to address growing complexity of cyber threats, deliver business continuity
Evolving cyber threat landscapes have led to OT/ICS incident response priorities being under significant pressure. By stressing the need for fast detection, containment, and recovery methods, businesses are turning away from reactive responses and toward proactive ones to stop critical infrastructure disruptions, lower organizational downtime, assure public safety, and maintain operational continuity.
Achieving IT-OT integration emerges as critical step for industrial efficiency and security
Integrating IT and OT environments has become a critical aspect of the modern, fast-changing industrial world, supporting the drive for business goals and bolstering OT cyberinfrastructure. The move unites the digital and physical worlds, providing opportunities for organizations to optimize their operation and ultimately become more efficient and secure.
Elevating industrial cybersecurity: Insights from the 2024 RSA conference
The recently concluded 2024 RSA Conference highlighted industrial cybersecurity as a central theme, underscoring its integration into mainstream concerns. With the increasing reliance on interconnected industrial systems, the sector faces rising threats ranging from ransomware to supply chain vulnerabilities.
SEC Cyber Disclosure Requirements: CISO Summary Checklist
The SEC has adopted new regulations that require publicly traded companies to disclose “material” cybersecurity incidents within four days, as well as make periodic disclosures around their cybersecurity risk governance. The new rules take effect on December 18, 2023. This piece summarizes the key SEC regulations and corresponding requirements outlined in the new rule to help CISOs and security teams gain compliance efficiently.
IANS Faculty 2024 Cyber Predictions: Machine Learning and Security Branches Out
It is still very early in the ongoing integration of machine learning models with existing products including IAM, and there’s a long way to go before infosec, as an industry, understands what technology should and should not do. As the year draws to a close, IANS Faculty members take center stage to offer their thoughts on the trending topics in InfoSec for 2024.
Create an Actionable CISO Dashboard: Build Meaningful Metrics
CISO metrics are composed of a measure, trend and goal. These metrics support one of the three C’s: coverage, configuration and capability effectiveness. This piece provides guidance for using these principles to create meaningful metrics to populate a CISO dashboard. What Is a Security Metric? For many metrics, the problem is with their definition. Once what a metric is and how those metrics are built are defined, at least half the problems with creating those metrics vanish.
IANS Faculty 2024 Cyber Predictions: IT/OT Technology Convergence
Ensuring enterprise IT and OT are managed effectively and securely is no simple feat. With the continued convergence of digital and physical environments, organizations must take a unified approach to IT and OT across risk assessments, threat modeling, controls validation and resilience. As the year draws to a close, IANS Faculty members take center stage to offer their thoughts on the trending topics in InfoSec for 2024.
CISO SEC Incident Risk: Best Practices Checklist
On Oct. 30, 2023, the SEC charged SolarWinds and its CISO, Timothy G. Brown, with “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” On the heels of the FTC case against Uber’s former CSO Joe Sullivan, these legal cases have generated a lot of discussion and concern among CISOs and cybersecurity professionals.
The Transformation of Penetration Testing: Leveraging New Technologies for Enhanced Effectiveness
In the ever-changing cybersecurity landscape, penetration testing, while a valuable practice, may fall short of providing a comprehensive assessment of an organization’s resilience against malicious actors. Traditional BAS platforms, in part due to their limited capabilities (focusing on NIST CSF: Detect only), may also face limitations in accurately simulating modern cyber threats.
America deserves a Cabinet-level Department of Cybersecurity
As we were reminded last week, the fight about the politicization of the Department of Homeland Security (DHS) and the tight squeeze the Cybersecurity and Infrastructure Security Agency (CISA) is in is alive and well. While many, including the Cyberspace Solarium Commission, have argued to keep the CISA where it is and strengthen it, the right answer is to finally take the plunge — to separate cybersecurity from DHS and make CISA an independent agency.
Ransomware attacks put everything we depend on at risk. What's next, foamy coffee lattes?
Cybercriminals may soon cross a true red line for humanity – or maybe we should call it a brown line. If we don't take away their profits and stop them, our coffee could be next. The past few weeks have seen a veritable explosion in ransomware attacks. Americans lost access to gasoline as the Colonial Pipeline shut down. The Irish health care system was violated. Our national barbecue obsession was threatened when the largest meat packing corporation in the world was temporarily offline.
Ransomware attacks put everything we depend on at risk. What's next, foamy coffee lattes?
Cybercriminals may soon cross a true red line for humanity – or maybe we should call it a brown line. If we don't take away their profits and stop them, our coffee could be next. The past few weeks have seen a veritable explosion in ransomware attacks. Americans lost access to gasoline as the Colonial Pipeline shut down. The Irish health care system was violated. Our national barbecue obsession was threatened when the largest meat packing corporation in the world was temporarily offline.
Ransomware attacks put everything we depend on at risk. What's next, foamy coffee lattes?
Russia won't punish or extradite cyber criminals to face justice in the West. But we have ways to expose gangs dealing in anonymous digital currency. Bryson Bort and Paul Rosenzweig Opinion contributors Cybercriminals may soon cross a true red line for humanity – or maybe we should call it a brown line. If we don't take away their profits and stop them, our coffee could be next. The past few weeks have seen a veritable explosion in ransomware attacks.
DoD Needs to Invest More in Innovation
DoD Needs to Invest More in Innovation By Bryson Bort May 20, 2021 An old Navy way of saying something is a dumb idea is to say, “that makes as much sense as a screen door on a submarine.” While the Navy is smart enough not to use them on submarines, the way that DoD runs its acquisitions makes about as much sense as putting a screen door on a submarine. And, it’s costing us in the taxpayer’s wallet and the country in national security.
Maintaining Voluntary Measures for Critical Infrastructure Cybersecurity Could be Deadly
Rob Knake is a Senior Fellow at the Council on Foreign Relations and a non-resident fellow at Harvard’s Belfer Center. Bryson Bort is CEO, of SCYTHE an attack emulation platform and co-founder of the ICS Village. OPINION — A water system in Florida has been accessed by an unknown intruder who made an attempt to alter the chemical balances used to treat water in a way that could have been deadly if not caught. Thankfully, it was.
Hack the Plant on Apple Podcasts
5 episodes Electricity. Finance. Transportation. Our water supply. In Hack the Plant, podcast host Bryson Bort looks for answers to the question: Does connecting these systems, and others, to the internet leaves us more vulnerable to attacks by our enemies? We often take these critical infrastructure systems for granted, but they’re all becoming increasingly dependent on the internet to function.
Hack the Plant
ABOUT THIS PODCAST Electricity. Finance. Transportation. Our water supply. In Hack the Plant, podcast host Bryson Bort looks for answers to the question: Does connecting these systems, and others, to the internet leaves us more vulnerable to attacks by our enemies? We often take these critical infrastructure systems for granted, but they’re all becoming increasingly dependent on the internet to function.
Trump and Barr are making false claims about mail-in ballots to scare us out of voting
President Donald Trump votes by mail. As does Vice President Mike Pence, and so do more than a dozen senior Trump officials. Nearly 80% of voters in Arizona and over 60% in Montana — not known as liberal bastions — cast ballots by expanded mail-in voting. Nevertheless, last month, when he wasn’t busy ineffectually trying to replace the U.S. Attorney in Manhattan with a Trump loyalist, Attorney General William Barr took out after voting by mail as rife with fraud.
Trump and Barr are making false claims about mail-in ballots to scare us out of voting
President Donald Trump votes by mail. As does Vice President Mike Pence, and so do more than a dozen senior Trump officials. Nearly 80% of voters in Arizona and over 60% in Montana — not known as liberal bastions — cast ballots by expanded mail-in voting. Nevertheless, last month, when he wasn’t busy ineffectually trying to replace the U.S. Attorney in Manhattan with a Trump loyalist, Attorney General William Barr took out after voting by mail as rife with fraud.
Cyber Threat Intelligence: Not for the Faint of Heart
3d rendering of human brain on technology background represent artificial intelligence and cyber space concept Getty Cyber threat intelligence (CTI) offers real value to security teams. I established that in my last article, Introduction to Cyber Threat Intelligence: What Can It Do For You? But I would be remiss if I didn’t highlight the challenges companies encounter as they attempt to tap that value.
Should private companies be drafted in the cyber war?
Moody’s recently announced a rating outlook downgrade for Equifax, linking the decision to spiraling costs from the massive 2017 data breach that topped $690 million last quarter and are anticipated to remain high as the company continues investing in cybersecurity infrastructure. In today’s modern cyber threat environment, the impacts of a fumbled incident response are beginning to manifest themselves in new, costly ways.
Introduction to Cyber Threat Intelligence: What Can It Do for You?
Cyber security concept with shield hologram over working cpu in background. Digital protection, firewall, cyberspace and computer safety abstract animation. Futuristic circuit board 3d illustration. Getty Security organizations are stuck between a rock and a hard place. They’re trying to reduce the time it takes to detect and respond to security threats, even as they suffer from a skills and resource shortage. Can threat intelligence help?
Using Herd Immunity to Protect the Internet of Things
Wireless communication network concept.Panorama of Modern CityGetty The Internet of Things is everywhere, and it continues to grow as manufacturers add computing capacity to more and more of their products. All of these Internet-connected devices present a security risk, and it’s a lot bigger than an intruder adjusting a homeowner’s Nest thermostat a couple of degrees. We can all help reduce the security risk associated with IoT by adopting the concept of herd immunity.
The Chinese Dragon Is a Hydra
The China problem is bigger than you think. It's bigger than Huawei, bigger than 5G, and bigger than simmering trade wars. It's bigger, even than China. Recent developments have brought China’s aggressive policy of state-sponsored cyber espionage back into the spotlight: The Justice Department (DOJ) filed charges against Huawei, the Chinese telecom giant, and its CFO for industrial spying.
Getting Your Daily Value Of Data Privacy
It’s common knowledge that consumer data has monetary value. Unfortunately, consumers rarely understand what that means or how it impacts them. With the Internet of Things (IOT) becoming ubiquitous, and licensing agreements being abstruse, it’s time the industry standardize on a data privacy label akin to the nutritional label used by the food industry. Ignorance as a Revenue Model These days, everything connects to the Internet.
A civilian’s guide to military jargon for cybersecurity
Snafu. Fubar. Charlie Foxtrot. These are among more than a handful of colloquial phrases military forces coined to describe incredibly messed up states of affairs. One might be tempted to ascribe such words to the current state of consumer cybersecurity. Is it even possible to avoid having your Social Security or credit card number stolen? Acknowledging and describing a problem is just the first step to addressing it.
A civilian’s guide to military jargon for cybersecurity
Snafu. Fubar. Charlie Foxtrot. These are among more than a handful of colloquial phrases military forces coined to describe incredibly messed up states of affairs. One might be tempted to ascribe such words to the current state of consumer cybersecurity. Is it even possible to avoid having your Social Security or credit card number stolen? Acknowledging and describing a problem is just the first step to addressing it.
There are no IOUs with the Internet of Things
There are no IOUs with the Internet of Things As consumers connect more and more devices to their home networks, their homes become more and more vulnerable to cyberthreats. And while many people are aware that these devices, collectively known as the Internet of Things, generally lack strong security, few seem to understand how a lack of protection could personally affect them.
How to protect what your car knows about you
Connected cars do more than stream Internet radio, and that data about you is valuable to car makers and marketers. Photo by Seth Rosenblatt/The Parallax Most of today’s newer automobiles are “connected,” with dozens of electronic sensors and other digital technologies tracking everything from where a vehicle is located, to how it’s being driven, to its level of performance, to who is driving it.
How to reduce 'collateral damage' from blockbuster cyberattacks - The Parallax
Spring is a time of rebirth, but for cybersecurity last year, it delivered a crippling blow that continues to have serious ramifications. Thanks to a couple computer exploits stolen from the U.S. government, the WannaCry cyberattack in May affected hundreds of thousands of computers worldwide, and caused estimated collateral damages of up to $4 billion.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Bryson
Contact Bryson, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack