Explore every episode of the podcast Boardroom Resilience: Your Weekly Security Update
Dive into the complete episode list for Boardroom Resilience: Your Weekly Security Update. Each episode is cataloged with detailed descriptions, making it easy to find and explore specific topics. Keep track of all episodes from your favorite podcast and never miss a moment of insightful content.
Rows per page:
50
1–3 of 3
Title
Pub. Date
Duration
AI-found PHP flaws took sites offline: board questions | 26 Oct 2026
25 Oct 2026
00:04:36
AI-assisted research found two critical flaws in PHP, the software behind most websites, and organisations around the world took sites offline to patch them. We also look at where Ahold Delhaize's cyber incident ended up, and at a remote-support tool that a suspected state group exploited for weeks before anyone disclosed it.
This week
PHP flaws found with AI forced emergency patching; check supplier products as well as your own sites
Ahold Delhaize restored US sites after eight-plus days; its shutdown decision hit stores and distribution
BeyondTrust remote-support flaw exploited for weeks; supplier access tools need evidence, not trust
Three questions for your board
How quickly could we find every system running PHP, including inside supplier products, and has that search actually happened since Wednesday the twenty-first?
If we pulled core systems offline as a precaution, which sites, deliveries and revenue lines would stop, and who has the authority to make that call?
Which suppliers and tools hold remote administrative access to our estate, and what evidence do we have that each is patched, monitored and still needed?
Boardroom Resilience is general information for senior leaders, not professional advice for any specific organisation. To discuss your board's position, contact Logica Security at logicasecurity.com.
Supermarket fridges hacked: what boards should ask | 19 Oct 2026
19 Oct 2026
00:04:20
A cyber attack on refrigeration controls spoiled stock and caused fires at hundreds of French supermarkets, while Ahold Delhaize spent the week recovering from a precautionary shutdown. We also cover a ConnectWise backup compromise that gave attackers a way into customers' Microsoft 365 environments.
This week
French supermarket fridges hacked remotely: building controls are now a direct operational risk
Ahold Delhaize shutdown emptied shelves: recovery time, not the breach, drives revenue loss
ConnectWise backup tool abused to reach Microsoft 365: suppliers' standing access is exposure
Three questions for your board
Which of our sites have refrigeration, building or plant controls that can be reached remotely, and who outside our organisation holds that access?
If we had to shut core systems as a precaution, how many days could our sites and distribution keep trading, and when did we last test that?
Which outside applications hold standing access to our email and files, and could we still restore our data if our backup provider went offline?
Boardroom Resilience is general information for senior leaders, not professional advice for any specific organisation. To discuss your board's position, contact Logica Security at logicasecurity.com.
Cloud provider ransomware: can you restore without it? | 12 Oct 2026
12 Oct 2026
00:04:34
A ransomware attack on a Japanese cloud provider left hundreds of customers restoring from their own backups, and a UK retailer's breach became public through its own app. Separately, US agencies warned that a campaign against Fortinet firewalls is still locking owners out of their own devices.
This week
IDC Frontier ransomware hit 495 customers, who were told to rebuild from their own backups
ASOS breach became public via its own app, and exposed more data than first stated
FBI warns FortiBleed firewall campaign continues, with lockouts leading on to ransomware
Three questions for your board
If our main cloud provider told us to restore everything from our own backups, which systems could we actually bring back, and how fast?
Which third parties can see our customer data or send messages in our name, and who has reviewed their access this year?
Have we confirmed that every internet-facing firewall and remote access gateway, including those at our sites, requires multi-factor sign-in, and have we checked them for admin accounts we didn't create?
Boardroom Resilience is general information for senior leaders, not professional advice for any specific organisation. To discuss your board's position, contact Logica Security at logicasecurity.com.