Peter Brittliff

Towards a Unified Framework with ISO 27001:2022 Various standards enable companies to implement cyber security, each with its unique features tailored to specific needs. Achieving certification, attestation, and compliance post-implementation can increase costs and workload in the long term. This may lead to confusion and unnecessary burdens that hinder effective cyber security implementation and risk assessment. In New Zealand and Australia, companies adopt various attestation or certification schemes like ISO 27001, NZISM, ISAE 3402, and PCI DSS. While each scheme offers benefits, opting for ISO 27001, a standard with a proven track record, can streamline certification processes, harmonize requirements, strengthen management systems, and mitigate risks using controls from other standards. This presentation will also highlight lessons learnt from the audit to improve company's cybersecurity posture. You can join at https://lnkd.in/ghRGss4f

35

Join me on the webinar ! Understanding Quantum-Enabled Cyber Risks: Prepare A Plan Now 🛡️ 📅 Date and Time: 24th May, 2:30 PM - 3:00 PM (NZT) / 10:30 AM – 11:00 AM (HKT) I’ll be talking about quantum computing’s impact and strategies for transitioning to quantum-resistant encryption. Don't miss out on this important discussion! Register here for more details: https://lnkd.in/gnuEXn4T (https://lnkd.in/gnuEXn4T) #QuantumComputing #CyberSecurity #Webinar #Encryption #DataProtection

5

3 Comments

🗞 It seems like data breaches are in the news every day at the moment. 👀 Today's victim is Ticketmaster (although they are yet to confirm it) who have experienced a HUGE data breach affecting over 560 MILLION customers. 💻 The data is being held to ransom by the notorious hacker group ShinyHunters, who claimed the personal details it had for sale included names, addresses, emails, phone numbers, and the last four digits and expiration date of credit cards. 🔐 Incidents like these underscores the urgent need for robust cybersecurity measures to protect user data in an increasingly digital world. Read more about the attack https://lnkd.in/gABGfdYm #cybersecurity #databreach #cyberattack #datasecurity #dataprivacy #data #personaldata

4

1 Comment

Gathid | Gathered Identities WINS START-UP OF THE YEAR 🏆 for bringing unique, innovative cyber security solutions to market. The Gathid Identity Graph and Gathid Digital Twin Approach Awarded: 👉 Official Press Release: https://lnkd.in/g-WdxP2w 👉 Discover how Gathid can resolve your identity challenges and refine access management: https://lnkd.in/guZ7mX3r 👉 Learn more about Role Based Access Control features: https://lnkd.in/gyiStm5V As Australia’s leading industry body for information and cyber security, the Australian Information Security Association (AISA) awards program is designed to showcase excellence, innovation, integrity, leadership and outstanding achievements in the cyber security sector. Now in its 12th year, the awards are judged by a panel of senior leaders, academics and entrepreneurs, ensuring peer-reviewed recognition of an organization’s accomplishments. The award acknowledges the innovative spirit that drives us. Our patented approach is fundamentally different from traditional identity approaches. Most organizations have significant identity debt and find it difficult to easily trace their identities (including non-human) and their access. By using knowledge graph technology to generate daily digital twins of an enterprise’s identity ecosystem, Gathid delivers complete, actionable visibility over their identity landscape in ways never seen before. #DigitalTwin #IdentityGovernance #Identity #KnowledgeGraph #security #GathidGraph #GathidIdentityGraph #Gartner #IdentityGraph #GartnerIAM #IAM #GartnerIAM2024 Australian Information Security Association (AISA) #CES2025 #CES -#AI

23

2 Comments

This morning's keynote at CyberCon 2024 Melbourne by Nina Schick on responsible generative "AI" (quotes are mine) left me disappointed, frustrated, and frankly angry. I didn't find any vision, nor critical analysis. The key word "responsible" wasn't touched at all. There was a lot of justification, likely related to purely US cultural centric view and deep involvement in US based corporations. It was ok for LLMs to simply reflect the warped data corpus that's out on the net even beyond the warped aspects of our society that negatively affect women, minorities, and other cultures on a daily basis. Only threat risks were mentioned, not societal. Research on synthetic datasets was a positive thing, and using LLMs for supporting the elderly or people dealing with mental health challenges is a great solution. Unsurprisingly, that is not how I see things, in fact pretty much the opposite. A teddy bear is great, but no substitute for an empathic fellow human who listens to your concerns, and gives you a hug. And an LLM is not a teddybear. It's really not too much to ask for a human to review an application for something, rather than have a decision be made purely by a computer model. The latter is, at best, a good intern: you can send it on some tasks, but you always check everything. We can and just do better. ML and LLMs can be useful, but not just running loose.

5

11 Comments

And that’s a wrap for our latest quarterly roundtables, where we bring together CISOs and security leaders from the largest and most critical organisations across Australia and New Zealand. Throughout the many insightful conversations across the CISO Lens community, there were several common themes best summed up by the 5 B’s: 🗣️ Boards - the importance of continually educating board members on strategic cyber risk, while balancing active interest against over-reach. 💰Budgets – maximising the value of existing tools and services against a backdrop of reducing security budgets. 📱Basics – the relentless (and ongoing) pursuit of basic cyber hygiene across the organisation.  🔥 Burnout - protecting ourselves and team members from burnout at a time when we’re all being asked to do more with less, and when the expectations placed upon us only continue to grow.  🗺️ Business continuity – testing whether the organisation can operate without access to essential platforms and technology.   Thanks to everyone who contributed to the fantastic conversations!

150

2 Comments

TOP ATTACK AND BREACHES - 26th July 2024 Australian healthcare firm MediSecure has suffered a ransomware attack that resulted in the theft of 6.5TB of data belongs to approximately 12.9M Australians. The data includes names, contact information, and healthcare details. No ransomware group has claimed responsibility yet. Apace HugeGraph A recently disclosed critical remote code execution vulnerability, CVE-2024-27348, impacts Apache HugeGraph-Server and is actively exploited in the wild. This flaw, present in the Gremlin graph traversal language API, affects all versions before 1.3.0 and allows attackers to bypass sandbox restrictions, gaining complete control over the server. Paris Olympics 2024 Threat researchers have tracked Increase in cyber threats targeting the Paris 2024 Olympics, revealing a significant rise in darknet activity related to French organizations, with a notable 80% to 90% increase in threats since the second half of 2023. Key concerns include phishing schemes, fraudulent ticket sales, and the use of infostealers like Raccoon, which accounts for 59% of detections in France. Cisco SSM On-Prem and SSM Satellite products are affected by a critical vulnerability, CVE-2024-20419, which allows attackers to change any user or admin password. Rated 10 on the CVSS scale, this flaw demands no user interaction or privileges. Successful exploitation involves sending crafted HTTP requests to access the web UI or API with the compromised user’s privileges. Ukrainian defense enterprises: ....were attacked by the UAC-0180 threat group. The attacks involve emails with ZIP file attachments containing a malicious PDF link. In the end of the infection chain, a bootloader facilitates the download and execution of the ATERA remote control program. SolarWinds  has released security updates for Access Rights Manager (ARM) software to address 13 vulnerabilities. Eight flaws rated as critical, including CVE-2024-23472, CVE-2024-28074, and CVE-2024-23469, could allow attackers to read, delete files, and execute code with elevated privileges. #security #OT #healthcare #cyber #preventionfirst #checkpoint #quantumforce #harmony #technology #CISO

11

Most people know that I don't spruik products too often, rather I like to focus on the business problem. In the VM space; security and IT are often at logger heads and as one CISO said to me "throwing chairs across the room at each other" in reference to VM reports vs the actual status of the environment. How does this get reconciled and reported on? What if your vulnerability reporting tool was able to accurately report on the real status of the IT estate; convert this to value at risk for reporting (and insurance premium adjustment and strategy) and give the IT team a tool that can patch/mitigate or isolate an at risk asset so everyone is on the same page?

5

Several NSW Government, Queensland Government departments and Commonwealth agencies are starting to leverage Microsoft Azure Sentinel for their SIEM & SOAR requirements. This whitepaper outlines the Strategies for success in data ingestion and incident response. Here is the TL;DR version 1. 𝗗𝗮𝘁𝗮 𝗜𝗻𝗴𝗲𝘀𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗦𝗼𝘂𝗿𝗰𝗲 𝗖𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝘃𝗶𝘁𝘆: Ensure that all relevant data sources, including both Microsoft and non-Microsoft products, are connected to Azure Sentinel. This includes leveraging built-in connectors, Syslog, Common Event Format (CEF), and APIs for seamless integration across diverse environments​.     2. 𝗖𝗼𝘀𝘁 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 𝗮𝗻𝗱 𝗟𝗼𝗴 𝗜𝗻𝗴𝗲𝘀𝘁𝗶𝗼𝗻 𝗣𝗹𝗮𝗻𝗻𝗶𝗻𝗴: Carefully plan which logs and alerts to ingest to control costs, as certain logs (e.g., Azure Active Directory) may incur additional charges. Utilize free logs, such as Azure Activity and Office 365 Audit Logs, where possible​.     3. 𝗜𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲 𝗮𝗻𝗱 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻: Set up advanced alert rules and automated incident creation within Azure Sentinel to streamline response times and ensure that incidents are automatically created from high-priority alerts.     4. 𝗧𝗵𝗿𝗲𝗮𝘁 𝗛𝘂𝗻𝘁𝗶𝗻𝗴 𝗖𝗮𝗽𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀: Leverage Azure Sentinel’s built-in hunting queries, real-time investigation tools like Livestream (in public preview), and Jupyter notebooks for advanced threat hunting. This enhances proactive security monitoring.     5. 𝗦𝗰𝗮𝗹𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗮𝗻𝗱 𝗩𝗶𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝘆 𝗔𝗰𝗿𝗼𝘀𝘀 𝗪𝗼𝗿𝗸𝘀𝗽𝗮𝗰𝗲𝘀: Utilize Azure Sentinel’s capacity to scale automatically across multiple environments and workspaces, making it ideal for organizations with complex or segmented security setups​.

15

The Essential Eight continues to be a key baseline set of strategies used by many orgs in Australia to shore up their cyber defences. We have some terrific speakers lined up for this webinar! It is ideal for practitioners looking to build their understanding of HOW the Essential Eight maps against common threats and the important role identity security plays in meeting its requirements. #EssentialEight #BeyondTrust #Compliance #IdentitySecurity #APJ

2

🚨Attention Directors: Cybersecurity Just Got Added to Your Job Description! 🚨 The proposed Cyber Security Legislative Package 2024 is coming in hot, and it’s bringing new responsibilities with it. Think you can just keep an eye on finances and leave cyber to IT? Not anymore! Now, directors are officially on the cyber frontlines. This isn’t your average compliance update. We’re talking: > Reporting every “oops” moment with client data > Beefing up risk management so hackers swipe left 🚫💔 > Taking privacy from “nice-to-have” to “must-have” Ready to dive in? We’ve put together a whitepaper that’ll break down everything you need to know—and maybe even save a few headaches later. 😎 👉 Get the download here and make sure you’re ready to tackle the cyber curveball: https://smpl.is/9thlr Because nothing says “I’m a responsible director” like being one step ahead of the cyber cops! 👮‍♂️

8

Explore the cybersecurity challenges that ANZ organisations are currently facing in this exclusive webinar from the security experts at Arctic Wolf.

15

Thank you @securitybrief.com.au and @Melaniawatson for sharing some of my thoughts/predictions for 2025. If you have a chance, please check out the following article that included some valuable insight from my colleague Austin Berglas. Some of the highlights: 🔷 AI powered threats - sophistication in phishing campaigns, social engineering, and malware 🔷 AI risks- over reliance on AI could amplify errors and and bias without human oversight 🔷 Evolving regulations - expect stricter compliance standards and more harmonized international regulations 🔷 Critical Infrastructure vulnerabilities - as digitization grows, so do threats, underscored by sophisticated attacks like those from Volt Typhoon 🔷 Talent shortages - lack of skilled professionals demanding more automation and AI incorporation, a potential reshape of the industry's workforce 🔷 Decline in ransomware - proactive measures and stronger incident response programs could be aiding in the reduction of ransomware incidents One thing that is certain is the continued need for vigilance, innovation, and strategic planning in the face of the evolving cyber threats. https://lnkd.in/exqRG7iP #supplychaindefense #tech2025predictions #cybersecuritypredictions2024 #cybersecurity #cyberdefense

10

4 Comments

Recommended 3 minute read! For those seeking more awareness on major league cyber threats (industry term is APT = Advanced Persistent Threat) and what to do to mitigate it.

3

Only 20 minutes til I give my webinar calming cyber threats for over 2000 aussie small businesses. It'll be recorded too! https://lnkd.in/g2KfBxag Fingers crossed

50

1 Comment

The Security of Critical Infrastructure Act 2018 (the SOCI Act). outlines the legal obligations you have if you own, operate, or have direct interests in critical infrastructure assets. #FinancialServices is one of 11 sectors covered by the SOCI Act. Join DXC Technology and Darktrace on Thursday July 18 at 1 pm AEST as our industry experts Dr Pierre Tagle, PhD and Mark Verbloot demystify the SOCI act and how Darktrace’s self learning AI and sovereign autonomous response can help you become proactive and stay ahead of novel threats. Seelan Nayagam Kylie Watson Denise Walter Sushant Arora Dan Monahan Joel Dane Eugene Low Shannon Bodnar Bianca Edgar Russell Hatton Richard James Bernice Muncaster Jim Naumovski Matt George Michael Nedelkos TM Ching Nick Jackson Daniel Biondi SF Fin Dr Michael Neary Ajith Lobo Victor Lal Hema Malhotra T Indranil Mukherjee Declan Coffey Rob Kohler Victor Lal Martin Clarke Elham Ghourbandi Aakassh S Ragunathan Rajendran Alex Ratkovsky Ashok Kumar Anand Haveri Scott Kennedy Kevin Sharp

29

2 Comments

⚕⚕ MediSecure ⚕⚕the victim of 'large-scale ransomware data breach incident’. A ransomware attack on any Australian healthcare provider is devastating but should not be surprising. This incident highlights the severe implications for patient care, data privacy, and overall confidence in healthcare systems. Healthcare providers prioritise availability-of-service over security control to ensure positive patient outcomes, but this leaves them more vulnerable to larger attacks and longer outages. Something must change. The massive impact on patients and their privacy makes healthcare a soft target to ransomware attacks. This attack raises critical questions about the robustness of cybersecurity controls in the healthcare sector. As providers increasingly rely on digital systems, the necessity for stringent cybersecurity protocols and rapid threat detection and response strategies becomes paramount to safeguard against future attacks and to ensure the resilience of vital healthcare services. Evan Davidson, Dave Bernhardt, David Gold, Jan Tietze, Keith Weisman, Lloyd Webb, Gary Gardiner, Aravind Vasudevan, Jason Duerden, Brett Williams, Trevor Van Essen, Robert Collins, Michael Francis, Laurel Martin, Rohit Ravi, ▫️Ben Estens, Tracey Reed, Liz Drysdale, Joe McPhillips, Luke Sillars, Shabeel Shah, Diwa Dayal, Jay Shah, Jeremy Ho, Leh Tee Teo, Eran Ashkenazi, Nir Kenzy, Prateek Bhajanka, Rajiv Taori, Ryuichi Tomita, Tom Martin, Jungsu Park

26