Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance Exploring Cyber Warfare: Risks, Strategies, and Solutions | Interview with Steve Winterfeld
Nov 18, 2025
In this conversation, Steve Winterfeld, a seasoned security consultant and author, dives into the complexities of cyber warfare. He discusses the evolving landscape of cyber threats that affect businesses of all sizes, from espionage to sabotage. Steve emphasizes the need for risk assessments and strategic frameworks like MITRE ATT&CK to enhance cybersecurity. He outlines the roles of various actors and the importance of active defense over mere attribution. His insights into balancing innovation with security are especially relevant for today’s digital landscape.
AI Snips
Chapters
Books
Transcript
Episode notes
Blurred Lines Between State And Criminal Actors
- Cyber warfare blends state and non-state actors, creating blurred attribution and hybrid threats.
- Commercial entities face collateral damage from espionage, sabotage, and hacktivists.
High-Profile Sabotage Examples
- Steve cites real-world attacks like the Aramco wiper and Sony Pictures to show political motives.
- These incidents illustrate how cyber operations cause large commercial and reputational harm.
Map Adversaries And Build Playbooks
- Start threat modeling by mapping who would target you and why, then rank those risks on your register.
- Build crisis playbooks for high-profile escalation scenarios even if risk seems low.
