Small Targets: Big Impact

Описание: EPISODE 3: SMALL TARGETS, BIG IMPACT: THE RANSOMWARE WAKE UP CALL WITH MATTHEW WADDELL




Host: Kenneth Johnson

Guest: Matthew Waddell, Incident Response Expert & Author of Survive Ransomware

Duration: ~19 minutes

Keywords: Ransomware, Small Business Cybersecurity, Incident Response, Backups, Generative AI, Phishing, Tabletop Exercises, Managed Service Providers, AI in Cyber Defense





EPISODE SUMMARY




In this episode of _Secured with Dr. KJ_, I sit down with Matthew Waddell—an incident response veteran with over 25 years of experience defending governments, military operations, and private sector organizations. We focus on the ransomware epidemic hitting small businesses and explore why they’re often seen as low-risk, high-reward targets for cybercriminals.




Matthew shares practical, budget-friendly strategies small businesses can implement today—from running internal tabletop exercises and building relationships with law enforcement to creating effective playbooks and developing a culture of vigilance. We also dive into the critical role of offline, tested backups and how poor backup practices can turn an incident into a full-scale disaster.




The conversation takes a forward-looking turn as we discuss generative AI—how it’s making ransomware attacks more convincing and sophisticated, and how defenders can leverage AI-driven tools, such as virtual SOCs, to match the attackers’ speed and precision. Matthew closes by previewing his upcoming book, _Survive Ransomware_, designed to give non-technical leaders the tools and knowledge to respond effectively to an attack.





WHAT YOU’LL LEARN




Why ransomware gangs target small businesses as “practice grounds” for larger attacks
The importance of employee awareness as the first line of defense
How tabletop exercises can uncover gaps before an incident strikes
Why backups must be offline, air-gapped, and regularly tested
How generative AI is being weaponized by attackers—and how defenders can fight back
How to build strong relationships with law enforcement and managed service providers before you need them





KEY TAKEAWAYS




*Small businesses aren’t immune*—they’re often easier and more appealing targets for attackers.
Incident response planning doesn’t require a huge budget, but it does require time, communication, and documentation.
*Backups are only as good as your last test*—and ransomware actors actively seek to destroy them.
Generative AI is reshaping the threat landscape, producing more believable phishing campaigns and faster attacks.
Proactive relationships with service providers and law enforcement can be invaluable during an incident.





MEMORABLE QUOTES




“It doesn’t take a large budget to be secure—just a team willing to think through ‘what if?’ scenarios.” – Matthew Waddell

“If your backups aren’t offline and tested, they might as well not exist when ransomware hits.” – Matthew Waddell

“Attackers are using AI to get faster and smarter—so defenders must do the same.” – Matthew Waddell





CONNECT WITH THE GUEST




🔗 https://www.linkedin.com/in/matthew-waddell/




Secured with Dr. KJ – Securing tomorrow, one episode at a time.

----------------------------------------