Rashid Siddiqui

ACCC bolsters its #cybersecurity as it becomes Australia’s Digital ID regulator To deal with the increased security workloads following the establishment of the National Anti-Scam Centre and the launch of #DigitalID, the Australian Competition and Consumer Commission (ACCC) has launched a new program to bolster its cyber security. “The ACCC’s #cyber #security uplift program is focused on #compliance and maturity uplift against the ASD’s #Essential8 and Protective Security Policy Framework primarily,”. “The program is ongoing. One primary reason for the posting is the increased cyber security workload with the recent inclusion of the Digital Identity regulatory role and the National Anti-#Scam Centre being established in the ACCC". #infosec Talenza The Transformation Group

4

#CyberSecurity #PCIDSS4.0 #ContinuousLearning #Deepaksecurity 📚🔒 In PCI DSS Version 4.0, Requirement 9 holds paramount importance. It emphasizes the need for robust controls to restrict physical access to cardholder data and systems. Join Deepak as he explores how continuous learning about Requirement 9 enhances cyber resilience and fortifies your organization's security posture. 🛡️💡

3

Excellent guidance document which also covers how threat actors are often to easily elevate their privileges.

7

Vanessa gets right to the heart of why ITIL is a Cyber super power helping build knowledge of your infrastructure, knowing what has changed, detecting and responding to Incidents and recovering what matters. Thanks for sharing with the AISA Perth chapter Prashant!

8

1 Comment

💥 Did you know the Australian Government has proposed a comprehensive Scams Prevention Framework (𝐒𝐏𝐅) imposing broad obligations on businesses to protect consumers from being scammed, with tough consequences for non-compliance. 💥 𝐒𝐮𝐦𝐦𝐚𝐫𝐲 𝐨𝐟 𝐰𝐡𝐚𝐭'𝐬 𝐡𝐚𝐩𝐩𝐞𝐧𝐢𝐧𝐠 The Government has initially proposed to designate telco providers, banks and digital platform providers, and will consider other sectors as the regime develops. So if you are a business providing services in any of these regulated sectors, you will need to: ➡️ Proactively take reasonable steps to detect, prevent and disrupt scams ➡️ Comply with additional steps that may be required under sector specific codes to be developed later ➡️ Report to the ACCC about actionable scam intelligence that you have and scam disruption actions you have taken ➡️ Implement detailed governance policies in relation to scams and comply with related reporting requirements. This includes filing an annual compliance certificate in relation to policies and procedures signed by a senior officer   ➡️ Establish internal dispute resolution processes and join an external dispute resolution (EDR) scheme to resolve customer complaints for scams. The Government has proposed that the Australian Financial Complaints Authority (AFCA) to oversee this. 𝐅𝐨𝐫 𝐭𝐞𝐥𝐜𝐨𝐬 𝐚𝐧𝐝 𝐝𝐢𝐠𝐢𝐭𝐚𝐥 𝐩𝐥𝐚𝐭𝐟𝐨𝐫𝐦 𝐩𝐫𝐨𝐯𝐢𝐝𝐞𝐫𝐬 𝐭𝐡𝐢𝐬 𝐢𝐬 𝐚 𝐬𝐢𝐠𝐧𝐢𝐟𝐢𝐜𝐚𝐧𝐭 𝐧𝐞𝐰 𝐫𝐞𝐪𝐮𝐢𝐫𝐞𝐦𝐞𝐧𝐭.   𝐖𝐡𝐚𝐭 𝐢𝐟 𝐲𝐨𝐮 𝐝𝐨𝐧'𝐭 𝐜𝐨𝐦𝐩𝐥𝐲? You may face significant civil penalties! Similar to the Data Privacy reforms, civil penalties are proposed to apply on a two-tier basis.  💥 The maximum penalty for more serious contraventions starts at $50 million. 💥 The maximum penalty for lesser breaches starts at $10 million. 𝐌𝐲 𝐓𝐡𝐨𝐮𝐠𝐡𝐭𝐬 It's a shame that this proposal of civil penalties does not include Political Parties! I don't know about you but I'm annoyed whenever I receive an SMS message near voting time from a political party. Did I opt in to receive these, NO. Can I do anything about it, other than block them on my phone apparently not! They can allegedly generate and cycle through random mobile phone numbers to forward their political message to who ever they feel like! 👹 #Cybersecurity #InformationSecurity #Australia

4

So, what does it take to get 'Domain Admin' for a #hacker? In this episode, I sat down with Prashant Mahajan, Director at Payatu Australia & OzHack, to uncover the techniques and challenges behind #DomainAdmin - level access in a realistic #network. From initial entry points to stealth tactics and the rise of #evasion technologies, Prashant shares eye-opening insights from the field. We discuss everything including- 🔒 How "Castle" #infrastructure designs can be breached 🔒 Advanced #EDR & #XDR evasion techniques 🔒 The "Defender’s Dilemma"—what controls matter most 🔒 And a fascinating deep dive into #Cloud infra testing dynamics and zero-day risks! If you're in #cybersecurity, this episode has something for you! Watch now and see what might be lurking in your own infrastructure. 📺 Watch Full Episode - Live Now!! Youtube: https://lnkd.in/gttgeRfp Apple: https://apple.co/3Yme9ux Spotify: https://spoti.fi/3UnW0LR Buzzsprout: https://bit.ly/3NHRcwX If you like the episode, please subscribe and share :)

6

#CyberSecurity #PCIDSSv4 #Requirement11 #ContinuousLearning Requirement 11 of PCI DSS Version 4.0 focuses on regular security testing and monitoring to ensure that systems are protected against potential vulnerabilities and threats. Join Deepak's Continuous Learning sessions to gain expert insights and practical guidance on implementing and maintaining compliance with Requirement 11. Stay ahead in the ever-evolving landscape of cybersecurity! 🚀

7

1 Comment

🚨 Top 3 IAM-Related Security Breaches Last Week 🚨 Last week highlighted the crucial role of Identity and Access Management (IAM) in cybersecurity. Here are the top three IAM-related breaches: 1. Major Retailer Data Exposure: A major retail chain faced a data breach from a compromised employee account, exposing millions of customer records. Robust multi-factor authentication (MFA) and continuous access monitoring are crucial to prevent such incidents. 2. Healthcare Provider Insider Threat: A leading healthcare provider experienced an insider threat where a disgruntled employee misused privileged access to steal sensitive patient data. Strict access controls, audits, and behavior analytics are vital to detect and prevent insider activities. 3. Financial Institution Phishing Attack: A prominent financial institution encountered a phishing attack targeting executives, resulting in unauthorized transactions and data theft. Robust IAM strategies, user education, advanced phishing detection, and AI-driven threat response systems are essential in such scenarios. These breaches underscore the importance of reevaluating and strengthening IAM frameworks. Solid IAM practices are key to mitigating risks and safeguarding sensitive data. #CyberSecurity #IAM #DataBreach #Infosec #MFA #AccessControl #InsiderThreat #Phishing #CyberAwareness #SecurityBreach

14

NOW! The most famous article around the Sri Lankan Cyber Security Sector is in our Blog. Give it a Read. https://lnkd.in/gUGFC3jv

9

Big news for the Australia cybersecurity landscape! The Australian Cybersecurity Bill 2024 has been passed on 25th Nov 2024, bringing in some significant changes: 1.      Mandatory Cybersecurity Standards for Smart Devices: Say goodbye to the Wild West of IoT security. Manufacturers and suppliers will need to ensure that devices meet specific security standards before hitting the shelves. 2.      Ransomware Reporting: Certain businesses will be required to report ransomware payments to help authorities better understand the threat landscape. 3.      Enhanced Information Sharing: The Act facilitates faster and more open sharing of information between the National Cyber Security Coordinator (#NCSC), the Australian Signals Directorate (#ASD), and relevant entities during cyber incidents. 4.      Cyber Incident Review Board (#CIRB): This independent body will conduct no-fault post-incident reviews of significant cyber incidents to identify lessons and improve future response. This comprehensive legislation aims to bolster Australia's cybersecurity posture and protect businesses and individuals alike. Stay tuned for more updates on how this Act will shape the future of cybersecurity in Australia. #Cybersecurity #Australia #CybersecurityAct #CybersecurityBill https://lnkd.in/gFS3HF8V

74

3 Comments

Interesting read: Australian official praises Taiwan on cybersecurity What are your thoughts (and takeaways) from this article? #cyber #cybersecurity #Taiwan #Australia https://lnkd.in/eKaQGpVm

7

The #BSNL data breach highlights the critical need for service providers to prioritize the protection of customer personal data. In an era where digital threats are ever-evolving, robust cybersecurity compliance is essential to safeguard sensitive information. Service providers must implement strong security measures, conduct regular audits, and ensure continuous staff training to protect their customers and maintain trust. This incident is a stark reminder that cybersecurity is not just an IT issue but a fundamental aspect of responsible business operations. #CyberSecurity #DataProtection #CustomerSafety #BSNL #InfoSec Department of Telecommunications ( DOT ) #nationalsecurity #meity #government #cii #criticalinformationinfrastructure

4

🌐 Google Cloud Accidentally Deletes UniSuper’s $125 Billion Pension Account – An Urgent Lesson in Cybersecurity & Cloud Backup 🛡️ In a startling incident, Google Cloud accidentally deleted the account of UniSuper – a major Australian pension fund valued at $125 billion. This misstep left around 600,000 users without access to their accounts for nearly two weeks. UniSuper's choice of cloud service aimed at streamlining processes ended up becoming a nightmare due to unforeseen data deletions caused by a misconfiguration issue. 1. Importance of Redundant Backups: Even as a reputable organization, Google Cloud's incident underscores the necessity of maintaining backups across multiple platforms. 2. Risk Mitigation Strategies: Companies should adopt a multi-cloud strategy to prevent reliance on a single provider and ensure swift recovery in the event of data loss. 3. Consistent Vigilance: Regular audits and compliance verifications could help identify and rectify all potential risks before causing significant disruptions. 4. Recovery Preparedness: Having diverse and readily accessible backup solutions determines the efficiency of recovery processes amid unexpected data loss. This incident epitomizes why merely using cloud services like Microsoft, Google, or Dropbox isn't ample protection. You must have a robust cybersecurity strategy, including third-party cloud backup to secure your private practice, hospital, specialty pharmacy, or any other healthcare enterprise's email and cloud storage systems. 🥅 Read the full article initially posted in SPICEWORKS to gain deeper insights into the UniSuper debacle and enhance your organization’s cybersecurity stance - https://bit.ly/454QAJU 🔒Act Now! Secure your data with ICU Computer Solutions – your go-to experts for cloud backup and network security assistance. Visit our website https://bit.ly/3dG5ZK2 or request your FREE Cybersecurity Scan Report via this link > >> https://bit.ly/49hvaJP #CloudBackup #Cybersecurity #DataProtection #CloudComputing #Misconfiguration #DisasterRecovery #DataRecovery #ITSecurity #UniSuper #GoogleCloud #RiskMitigation #ITConsulting #CloudServices #CyberThreats #DataLossPrevention #TechNews #BusinessContinuity #CloudMigration #TechIndustry #InformationSecurity #DataManagement #BackupSolutions #NetworkSecurity #SecurityBreach #ITSupport #CloudInfrastructure #DigitalTransformation #BusinessSecurity #TechSupport #CyberAwareness

1

🌐 Google Cloud Accidentally Deletes UniSuper’s $125 Billion Pension Account – An Urgent Lesson in Cybersecurity & Cloud Backup 🛡️ In a startling incident, Google Cloud accidentally deleted the account of UniSuper – a major Australian pension fund valued at $125 billion. This misstep left around 600,000 users without access to their accounts for nearly two weeks. UniSuper's choice of cloud service aimed at streamlining processes ended up becoming a nightmare due to unforeseen data deletions caused by a misconfiguration issue. 1. Importance of Redundant Backups: Even as a reputable organization, Google Cloud's incident underscores the necessity of maintaining backups across multiple platforms. 2. Risk Mitigation Strategies: Companies should adopt a multi-cloud strategy to prevent reliance on a single provider and ensure swift recovery in the event of data loss. 3. Consistent Vigilance: Regular audits and compliance verifications could help identify and rectify all potential risks before causing significant disruptions. 4. Recovery Preparedness: Having diverse and readily accessible backup solutions determines the efficiency of recovery processes amid unexpected data loss. This incident epitomizes why merely using cloud services like Microsoft, Google, or Dropbox isn't ample protection. You must have a robust cybersecurity strategy, including third-party cloud backup to secure your private practice, hospital, specialty pharmacy, or any other healthcare enterprise's email and cloud storage systems. 🥅 Read the full article initially posted in SPICEWORKS to gain deeper insights into the UniSuper debacle and enhance your organization’s cybersecurity stance - https://bit.ly/454QAJU 🔒Act Now! Secure your data with ICU Computer Solutions – your go-to experts for cloud backup and network security assistance. Visit our website https://bit.ly/3dG5ZK2 or request your FREE Cybersecurity Scan Report via this link > >> https://bit.ly/49hvaJP #CloudBackup #Cybersecurity #DataProtection #CloudComputing #Misconfiguration #DisasterRecovery #DataRecovery #ITSecurity #UniSuper #GoogleCloud #RiskMitigation #ITConsulting #CloudServices #CyberThreats #DataLossPrevention #TechNews #BusinessContinuity #CloudMigration #TechIndustry #InformationSecurity #DataManagement #BackupSolutions #NetworkSecurity #SecurityBreach #ITSupport #CloudInfrastructure #DigitalTransformation #BusinessSecurity #TechSupport #CyberAwareness

2