Jon Clay's guest appearances

Jon Clay

Risky Business

The Industrial Talk Podcast with Scott MacKenzie

Kevin Clark

Todd Palmer

Tim Fargo

Chris Davis

Kirk Borne

Robert Burton

Scott Drake

John Burton

Tom Williams

Justin Foster

Andrew Jackson

Gleb Tsipursky

Brian Miller

Jaime Jay

Steve Miller

OwlTail

On this week's Industrial Talk we're talking to Jon Clay, VP of Threat Intelligence with Trend Micro about "Securing your Digital Transformation Strategy ".  Get the answers to your "Cybersecurity" questions along with Jon's unique insight on the “How” on this Industrial Talk interview!Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2022. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy!JON CLAY'S CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/jon-clay-0880512/ Company LinkedIn: https://www.linkedin.com/company/trend-micro/ Company Website: https://www.trendmicro.com/en_us/business.html PODCAST VIDEO: https://youtu.be/Wt1YNi3y6QQ THE STRATEGIC REASON "WHY YOU NEED TO PODCAST":  OTHER GREAT INDUSTRIAL RESOURCES: NEOM:  https://www.neom.com/en-us Hitachi Vantara: https://www.hitachivantara.com/en-us/home.html Industrial Marketing Solutions:https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ We the 15: https://www.wethe15.org/ YOUR INDUSTRIAL DIGITAL TOOLBOX: LifterLMS: Get One Month Free for $1 – https://lifterlms.com/ Active Campaign: Active Campaign Link Social Jukebox: https://www.socialjukebox.com/ Industrial Academy (One Month Free Access And One Free License For Future Industrial Leader):  Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES!  Reserve My Copy and My 25% Discount PODCAST TRANSCRIPT:Thu, 6/30 6:51PM • 44:47SUMMARY KEYWORDSnetwork, work, cybersecurity, organization, trend micro, companies, attack, tx, scott, backdoors, digital transformation, industry, threat, cyber, targeting, people, systems, critical infrastructure, build, ransomware00:00Hey industrial Talk is brought to you by CAP logistics. You want to minimize downtime. Absolutely increase reliability, you bet ensure operational profitability. Yes you do. That means you need 24/7 365 insights into your supply chain look no further cap logistics go to cap logistics.com Or just call them they're great people 800-227-2471 also TX one now you know cybersecurity is important if you're on this digital transformation journey, TX one networks has the solutions for you. And you're saying to yourself, Scott, they're going to be complex, they're going to be difficult. No TX one's taken that into consideration. And they provide a suite of solutions that truly meet your cybersecurity needs. Go out to TX, one dash networks.com and find out more, you're not going to be disappointed.01:05Welcome to the industrial talk podcast with Scott Mackenzie. Scott is a passionate industry professional dedicated to transferring cutting edge industry focused innovations and trends while highlighting the men and women who keep the world moving. So put on your hard hat, grab your work boots, and let's get01:23our right welcome to industrial talk the ever expanding industrial ecosystem that is dedicated to solving problems. It is featuring people that are bold like you brave like you, you dare greatly you, and you're solving problems, and you are just making the world a better place. That's not hyperbole. That is a scientific fact. All right, in the hot seat, we got Jon Clay. He is the VP of threat intelligence at Trend Micro, but I'm looking at a stat guard 26 years at Trend Micro he's seen it all. And I'm telling you right now, you need to know and you need to bone up on on definitely cybersecurity. Let's get cracking. Yeah. Yeah. So, yeah. If you're in digital transformation, you know, the buzz out there? How do we secure it? Yep. Manufacturing, how do we secure it? Everything industry? How do we secure it? Jon brings an this, I'm just telling you right now, this podcast is a notetaking podcast. So you listen, you take notes. And if you didn't get it, you rewind, you take notes more, because he's just, I mean, he's rifling through I mean, so many, just challenges and solutions that you just need to be aware of whether you like it or not. And if you have to take a breather, you put it on pause, because he is not letting up. He's has seen so much, it's an exciting time. And I've been wanting to have a real meaty conversation around cybersecurity, what to do, how to do it, because I think personally, Scott Mackenzie, ever so humble, I believe if we don't do this, right, if we don't protect our digital transformation, you know, this journey, then it's at risk, because then you're gonna get companies that are gonna say, I hear you, I see the importance of digital transformation. But the risk of somebody coming into my business and wreaking havoc, far outweighs the benefit. And I've just got so we've got to do this, right. It's important because digital transformation is important. This stuff is important. All right, I want you to go out to industrial talk outside of the fact that it's got a lot of great content. It is a massive collection of great thinkers, but we're going to be gearing up some we've got two webinars series, six parts, maybe seven looking for it. One is going to be in the state of energy and utilities. And it's going to just its state of, it's not going to dive deep to to a certain extent, but I we came back from distributech and and there was just so much buzz going on a lot of changes taking place within the energy and utility space. That's that, you know, we're going to focus in on now and we're gonna we're gonna bring in these great thinkers and, and you're just gonna, you're gonna enjoy it. You just are, I just I guarantee it. It's a guarantee. I'm not going to send you anything, but it is a guarantee. And the other one is in manufacturing. Now we're going to do stuff in cybersecurity, but, but the reality is, just like in in energy and utilities, right? There's a cyber component. What does that look like in manufacturing, all of the great stuff that's taking place in manufacturing, there's a cyber compute component. So we're going to also address that where it links in and all that good stuff. All right. Now you need to go out, you need to reach out to Jon Clay. Yep. And it's J ONCLAY. And it's Trend Micro Well, good luck. And Jen, we go to the same barber by the way, and you're not gonna be disappointed reach out Connect. Is this is an excellent conversation. So here's Jon and enjoy the conversation. All right, Jon, welcome to industrial talk. Thank you very much for finding time here to look at. He's waving his hands here. We're out on video. He's a nice guy, too. How are you doing? Jon, thank you for joining us.05:23It's got doing great. Happy to be here. And looking forward to our conversation.05:28We've been working on this for some time. It's it's one of those passionate to be able to be able to talk about cyber security, digital transformation, how it all works together. And I know listeners you said I don't want to talk about you have, we have to secure our assets, we have to secure our networks and and Jon brings a wealth of knowledge. And so there you go, Jon, for the listeners out there, give us a little background for one, one on who you are.05:59Yeah, so I am vice president of threat intelligence at Trend Micro, I've been in the cybersecurity industry, Scott for 25 years, almost 26. Now, all with Trend Micro I did a number of different roles. But most recently, what I do is I work with our threat research teams to understand what threats we're seeing out there in the world that are targeting our customers, and help bring that information and educate the population out there about cybersecurity about the threat landscape, about the criminal actors and the malicious actors that are targeting them.06:31I've got to ask the questions. What do you see it? What are some of the things that are happening? Because that is just great fodder for conversations? You're gonna make it simple, but what are what are you seeing out there?06:43Well, you know, the, the big one that we're seeing right now is obviously the crisis between Russia and Ukraine, and the fact that Russia has been targeting the Ukraine critical infrastructure for quite a long time, you know, a number of years ago, we saw them target one of the power plants and bring that down. And a lot of that was actually them learning how to target critical infrastructure, and the networks that that created, the systems that run the the operations and all that. And they learned very well, obviously, because now we're seeing in a cyber warfare, hybrid warfare, that they're actually targeting those types of industries. And you know, when we think about critical infrastructure, Scott, one of the things we don't think about is the misinformation, disinformation campaigns that Russia has been doing against Ukraine, as part of targeting the news, and the government agencies and websites that provide information to citizens. And that's a key part of the infrastructure that we have to think about as well. It's not always, you know, power plants and water plants, it's news stations, and, and even social media vendors that could be targeted as part of this. So, you know, it's a very broad, unfortunately, a broad issue that that these organizations can get targeted, we certainly see a lot of nation state activity. But one of the things that we're seeing in this in this actual conflict is the use of cyber mercenaries. And if you're not familiar with what a cyber,08:16because that's a new term,08:18Santa yes scenario.08:20These are essentially non combatants, who picked up the support of a nation state and hack for the for the country. So you saw it with the Conte group, which is a ransomware as a service or group that pledged their allegiance to Russia and said, We will target anybody who goes after Russia. And then on the flip side, we saw anonymous come out of the woodwork. Anonymous is a you know, a big hacktivist group, they came out and started targeting Russian networks. So you've got these, these all these players out there now that are working for and against the nation state. And that's an interesting development that we hadn't seen much in the past, and we're gonna have to deal with that type of situation to now in the future.09:05The learning that I Okay, so I'm still stumbling on cyber mercenaries. It makes sense, right? Yeah, it makes sense is as so these individuals, they're being are they being paid? Are they paid mercenaries? Are they saying09:27that easily? Not usually, again, they play well, part of the one of the models that Russia had brought to the table years ago was that, that you have all these cyber criminal gangs that go and launch attacks against, you know, other countries, businesses and stuff, and they get profit from those. And Russia goes, Hey, we won't arrest you. As long as when we call you to ask for your support in a nation state type activity. Oh, way we're gonna let you we're gonna let you slide. So and that's one of the things that's one of the challenges you have With the cyber mercenaries is that it's kind of a gray area in cyber right now is are they combatants? Are they non combatants? Are they criminals? Are they not criminals? It could be all of the above. So it's really going to be a challenge. I10:14don't even know where to go with that. One that that is that's interesting and frightening all at once. Yeah, right. It just is one10:22of the things. Scott, one thing I want to bring up, as I mentioned that the the early attack on the Ukraine power grid. Yeah. And one of the things we're seeing now is this idea of let's go hack into a network, but not to any kind of damage, let's not do any kind of cyber criminal activity, we're not trying to profit, all's we're doing is actually going in and trying to find out, can I get into an OT network? Can I get into an HMI system? Can I get into an industrial robot, and they will just do that to educate themselves on what is possible. And that's one of the thing where we've been seeing over the last several years, where a lot of companies may not even realize that they've been infiltrated. Because the the actors behind it aren't necessarily trying to do any, any specific activity like ransomware, for example, or, or exfiltrate, critical data, they're just in there to learn what's possible. And that scares the heck out of me, because that, and then on the on the flip side, what they can do at the end, is dropped some backdoors that can be accessed at a later date. So their backdoors sit on these networks for potentially even years, and then they get activated when they're needed. And that's, that's one of my biggest concerns with the Russian Ukraine conflict right now, that Russia or one of these nation states is dropping these backdoors into our critical infrastructure, and just letting them sit there and and basically sit and be resident and not be found,11:56and just formatted. And they they at that time, give them a tap on the shoulder saying, all right, I'm calling you into action and do whatever is necessary. And, and we or others don't even know they exist, right? How does somebody with that with that reality? You know, what's happening? You know, what's happening with that reality? How does? How does an organization we will get into digital transformation, but this is a better conversation right now. It's just FYI. How does? How does a company just say, Okay, I'm going to take the position that I've been hacked in some way, shape or form? I've got some backdoors. I, let's just take that. That approach? What are some of the things that can be done from a company's perspective to say, Okay, I haven't, but I'm blocked. I'm creating a wall.12:47Yeah, I mean, there's a few things that you can you can think about doing. One is that command and control infrastructure, which is what keeps them giving, having access into the network, you can try and identify that. So you look for, you know, you look for communications, outside outbound communications to command and control servers, or servers and other areas of the world that maybe you don't do business in. And that because that's where they've they've put their infrastructure. The other thing is, you look for files and certain types of have executables, that may be not typically resident on those systems. So you're looking for anomalies. And that's, that's the hard part. Because, you know, unless you know exactly what files and applications are supposed to run on those systems, and you look for anything that's out of out of sync, so to speak. That's the only way to really try to identify them. The other option, obviously, is if they do get activated, then you find you try to find that activity and identify it. But it's going to be difficult, because they do try to they hide their tracks very well. They put a lot of obfuscation and a lot of these files and executables that they drop on these systems. But yeah, it's that big one, I look for that kind of stuff.14:03That begs the question. And the question is, you your organization Trend Micro, it, you're constantly and you have in 2526 years, have got to be you've got to have your fingers on the pulse of all of the things that are taking place, and all the things that are changing and all of the and and to try to keep current as much as you possibly can. I don't know how you do it. Seriously, that's a huge job.14:32I mean, we've been in this industry for 34 years now. And the one thing that we know is that change will happen regularly. And so we've been able to innovate over the years, and we have these you know, we have people on staff that all's they look at is command and control servers and that infrastructure and that's their whole job is to go and find these systems out there in the world and then add them to our protection capabilities. And the same is true with backdoors. Same is true with you know botnets all that kind of stuff are new, you know, TX one, which is our new venture with Moxa that we've done recently, they're fully dedicated to the ICS SCADA ot network protection and, and understanding what are the threats that are targeting that type of infrastructure, and then coming up with technologies, and we're using a ton of artificial intelligence, machine learning, you know, whatever technologies needed. The nice thing is, because we are such a big organization and have so much resources and capabilities, we're able to build a lot of proof of concept engines and technologies to detect these threats. And we take the ones that work best, and then we move on to the next one. So, you know, over the years, we've been able to innovate tremendously in giving back to the community, giving back to the industry with some some stuff, we've got a number of open source technologies that are in there and open source now that we've we've provided and so it is, but it is a difficult...

Jon Clay with Trend Micro