Tim Eichmann

Another day, another high profile data breach. In a world where complacency is a cyber criminals best friend, the best defence is a strong offence! Looking to build out a proactive defence plan and don’t know where to start? 👀 https://lnkd.in/gCQpcP_G 👀 #Netier #LetsBuildCyberResilience

11

I attended an NZISF seminar last week, where some stats from a study by Kordia were presented:  - 2/5 of the businesses surveyed that suffered an attack say cloud misconfigurations were to blame. A shift to the cloud can bring significant risks with it, as the default settings are not always secure. We frequently review configurations in cloud environments, so staying current in this area is vital. How secure is your cloud?  Side note: Even if you only have Microsoft 365, secure configuration is still very relevant. #cloudsecurity #cybersecurity #Azure

15

1 Comment

BIG NEWS for not-for-profit organisations! We've just released a FREE and easy to understand cyber security dashboard for NFPs. Plus eligible NFPs get access to the 4walls Cyber Security Dashboard. Designed for Humans, by Humans. #cybersecurity #dashboard #visualisations @4walls-cyber-advisory

26

3 Comments

Active Directory security is crucial in safeguarding against cyber threats. Attackers often target Active Directory to gain domain admin-level access, posing serious risks like executing harmful code and breaching cloud environments. The Australian Signals Directorate (ASD) has provided valuable guidance on this issue. XM Cyber stands out in the industry for its expertise in addressing Active Directory abuse within the attack path. Through a combination of attack techniques, including vulnerabilities and misconfigurations, XM Cyber can pinpoint critical risks and offer detailed prioritized remediation guidance. Reach out if you want to enhance your organization's Active Directory security and protect against evolving cyber threats. #Cybersecurity #ActiveDirectory #ASD #XMcyber

21

Cyber security awareness month, and I have a pretty cool offer. My "Links Masterclass" workshop has been revamped recently, and it's pretty slick. I'm looking for a larger sized Brisbane based company (100+ people) to test it out on, for free. I will come to you, train up to 20 people, in exchange for detailed feedback. So, if you want to find out how much your staff really know about links, then please PM me. Note that this class is about 45 minutes, it's simple, but teaches a LOT about link safety! #linksmasterclass #cybersecurityawareness #websafestaff

4

A security breach could shatter customer trust and your bottom line. Is your organisation truly secure? ADAPT's report reveals 5 key strategies Australian CISOs should be prioritising to fortify their data ecosystems and build resilience. Download the free report to gain actionable insights on aligning your security initiatives with your business goals. [Link to access report in the comments] #CyberSecurity #DataSecurity #Security Pooja Singh Aarjun Sampath Kumar

3

1 Comment

ISO 27001, NIST, CIS Controls, Essential Eight (E8), and now SMB1001. But why? Traditional cyber security frameworks present challenges for smaller organisations which is why the Cyber Security Certification Australia (CSCAU) has introduced SMB1001. It covers essential security practices without the complexity and high costs associated with larger, more comprehensive frameworks. I believe SMB1001 to be a real game-changer so check out this article which gives an overview of this new cyber security framework, delving into what makes it work and what are the key differences with the established Essential Eight. #CyberSecurity #SMB1001 #SMB #SecurityFramework

45

3 Comments

Interesting to see the Australian Signals Directorate (ASD) enter the commercial sector offering top-secret cloud services designed to safeguard the nation's most sensitive information. Aligning with Five Eyes partners for enhanced national security, this $2 billion project will safeguard Australia's digital landscape and actively monitor cyber threats targeting critical infrastructure and prominent sectors. Good initiative to enhance data security for government agencies and extend advanced cyber security capabilities to Australian businesses. Article link on comment. #Cybersecurity #DigitalTransformation #Australia #ICT #NationalSecurity

18

5 Comments

One in 200 Windows devices crash and show the dreaded Blue Screen of Death under normal use. That’s a lot. And it can mean lost time, money, even data. But around half of these crashes can be avoided if your business takes a few simple preventative steps. Here’s what I suggest… #Microsoft #BlueScreenOfDeath #ITManagement https://lnkd.in/d63YC_y8

1

📢 Data Breach at Optus: A Lesson in API Security and Oversight In a recent court filing, Australia's Communications and Media Authority (ACMA) detailed the significant data breach at Optus, which exposed the personal information of over nine million customers. This breach, traced back to a coding error that broke API access controls, highlights critical gaps in security practices and oversight. 🔍 The Incident: --Cause: The API had two entry points, each secured in 2017. In 2021, a coding error broke one of the access control lists (ACLs). Unfortunately, the defect was only detected in one of the entry points, despite both being impacted by the same flaw. --Detection: Optus identified and fixed the issue on the Main domain in 2021, but the Target domain remained vulnerable. --Impact: In September 2022, an attacker exploited this vulnerability, accessing customer information via Target APIs. The attack was not sophisticated, relying on simple trial and error. 💡 Key Takeaways: --Single Entry Point Strategy: While the obvious move was to ensure that the same fixes were applied to all entry points, the better move for future security is to have only one entry point, one set of security controls, and one instance to support, secure, document, and implement. --Segregation and Security: Ensuring that API traffic is segregated and properly secured is crucial. --Regular Audits: Continuous monitoring and auditing of all domains and access points can prevent prolonged vulnerabilities. --Timely Response: Rapid identification and rectification of security issues are essential to protect customer data. 🔍 Broader Implications: --API Vulnerabilities: APIs remain a common source of security flaws, reminiscent of web hacking from the early 2000s. It's critical to delve into API security and recognize their susceptibility to traditional attacks. --Reasonable Cybersecurity: This incident is the second recent determination by an Australian authority that a commercial business failed in implementing reasonable cybersecurity measures. While guides like the CIS framework are very specific and useful, defining and achieving reasonable cybersecurity is a global imperative. This incident serves as a stark reminder of the importance of robust security protocols and vigilant oversight in safeguarding sensitive customer information. 🔗 Stay informed and vigilant! #CyberSecurity #DataBreach #API #TechNews #ACMA #InfoSec #DataProtection #ReasonableCybersecurity

10

🚨Attention Directors: Cybersecurity Just Got Added to Your Job Description! 🚨 The proposed Cyber Security Legislative Package 2024 is coming in hot, and it’s bringing new responsibilities with it. Think you can just keep an eye on finances and leave cyber to IT? Not anymore! Now, directors are officially on the cyber frontlines. This isn’t your average compliance update. We’re talking: > Reporting every “oops” moment with client data > Beefing up risk management so hackers swipe left 🚫💔 > Taking privacy from “nice-to-have” to “must-have” Ready to dive in? We’ve put together a whitepaper that’ll break down everything you need to know—and maybe even save a few headaches later. 😎 👉 Get the download here and make sure you’re ready to tackle the cyber curveball: https://smpl.is/9thlr Because nothing says “I’m a responsible director” like being one step ahead of the cyber cops! 👮‍♂️

8

No IT team? No problem! I'll be speaking about cyber security for SMEs and NFPs at Australian Information Security Association (AISA) CyberCon in Melbourne in November. You don't need to have a big in house team to get the cyber security basics sorted. I'll be speaking about what actions boards and executive teams at SMEs and NFPs can take, when to get help, and where to find it. Hope to see you there! #cyber #tech

39

2 Comments

Do you know where your customer data is stored? For Australian businesses, understanding where customer data is stored is critical. Not only is it a best practice, but it’s also a legal necessity under the Privacy Act of 1988 and the Australian Privacy Principles \

15

20 Comments

𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹 𝗘𝗶𝗴𝗵𝘁 𝗳𝗼𝗿 𝗜𝗧 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 ＆ 𝗦𝗲𝗿𝘃𝗶𝗰𝗲 𝗣𝗿𝗼𝘃𝗶𝗱𝗲𝗿𝘀 Discover the power of the Essential Eight cybersecurity strategy developed by the Australian Signals Directorate (ASD), a cornerstone framework for managed service providers (MSPs) to combat cyber threats effectively. 📌𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗽𝗮𝘁𝗰𝗵𝗶𝗻𝗴: Patching software addresses vulnerabilities, boosting cybersecurity defenses; while automated patching streamlines the process, fortifying against threats. 📌𝗢𝗦 𝗽𝗮𝘁𝗰𝗵𝗶𝗻𝗴: Regularly updating operating systems is essential to address security vulnerabilities. MSPs must assess and prioritize critical fixes to maintain network integrity. 📌𝗠𝘂𝗹𝘁𝗶-𝗳𝗮𝗰𝘁𝗼𝗿 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻: Adding additional authentication layers beyond user credentials strengthens security and mitigates risks in today's evolving threat landscape. 📌𝗥𝗲𝘀𝘁𝗿𝗶𝗰𝘁 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗶𝘃𝗲 𝗽𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲𝘀: Limiting access to authorized users minimizes the risk of lateral movement in the event of a network breach, enhancing data security. 📌𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗰𝗼𝗻𝘁𝗿𝗼𝗹: Vigilant monitoring and security protocols for third-party applications prevent unauthorized access to corporate data, reducing vulnerabilities. 📌𝗥𝗲𝘀𝘁𝗿𝗶𝗰𝘁 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗢𝗳𝗳𝗶𝗰𝗲 𝗺𝗮𝗰𝗿𝗼𝘀: Careful management of Microsoft Office macros—coupled with security protocols—mitigates risks associated with deprecated or vulnerable services. 📌𝗨𝘀𝗲𝗿 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗵𝗮𝗿𝗱𝗲𝗻𝗶𝗻𝗴: Strengthening user-based applications, particularly browsers, fortifies against potential exploitation by hackers targeting user accounts. 📌𝗕𝗮𝗰𝗸𝘂𝗽𝘀: Regular backups not only protect client data but also mitigate risks associated with ransomware attacks, safeguarding client reputation and data integrity. In conclusion, implementing the Essential Eight cybersecurity strategies outlined here is essential for MSPs to safeguard their clients' digital assets. This helps service providers stay vigilant and proactive in cybersecurity, upholding client trust and resilience in the face of evolving cyber threats. P.S: If you want to know more about ManageEngine MSP and how our partnership elevates your business, please read about us here: https://lnkd.in/g3vFEAKW #msp #mssp #cybersecurity #managedservices

47

6 Comments

CLOUDS ARE RISKS TOO At one time clients believed they had beaten the security risk by deploying a firewall. Nowadays they say "oh we are in the cloud" and go back to that happy feeling. Let us not forget that the cloudy planets are man made and man managed. Whether the planet is named Google or Amazon Web Services (AWS) or Microsoft Azure or any other we have to take care of our data without reposing any trust in the promises and certifications they display. Check this case with Google and Unisuper - the lesson is simple. Backup and up and up.. use alternate providers and air gap each. While you are doing this maybe you should also look at your cost and calculate whether cloud did really save you money (as the planet owners claim). What happens is that you are handcuffed and chaines to the service. One guys email system does not talk to the other.One guys data store is different from the other and you will ask for a rebirth when you want to change ships. Oh there is a lot more.. but for the weekend please focus on the eff-up in the clouds in your IT infrastructure. #cloud #risks #backup #CloudFail https://lnkd.in/dfFiU3SG

19

8 Comments

In need of an LGA Cyber 360 Implementation Partner? Look no further. Unsure what the LGA Cyber 360 Framework is? You probably don't work in Local Government. That said, many of the recommendations in the LGA Cyber 360 Framework are NOT Local Government specific. Recognising the changing digital threats to your council is the first step in protecting your residents. Implementing solutions to remediate gaps in your armoury is the next logical step and there are quick wins to be had. #identitymanagement #mfa #pam #lgacyber360

12

I would suggest everyone that sits on boards of SME organisations reviews this post from the NCSC (National Cyber Security Centre) and in respect of those boards, determine exactly who amongst them is responsible for Cyber Security within their organisation. https://lnkd.in/eetAVApa There are often considerable skills gaps on boards regarding this subject matter due to its complexity and far reaching scope, and taking responsibility for something one doesn't completely understand can be dangerous. If the answer is either: no-one is solely responsible for Cyber Security or "we have an IT support company that takes care of all that for us", then a rethink is definitely needed. A virtual (or fractional) CISO - a Chief Information Security Officer, with appropriate qualifications and experience can be engaged for as little as a day a month, and would immediately be able to provide organisations with the right assurances - from an individual who can communicate the “jargon free / board friendly” facts on the topic of cyber risk, relative to the organisation. Please do not hesitate to get in touch to learn more about Economit's vCISO services. #ciso #vciso #cybersecurity #cyberrisk #riskmanagement #fractionalciso #fractional #itconsulting #infosec #informationsecurity Economit Ltd Ryan Connolly Peter Stubley Cassandra Mayfield

22

Reposting this for broader coverage, if you have young folks of High School age, or know of some that are interested in Cybersecurity here is a great opportunity to get more of an idea of what this might look/feel like. Please reshare with others

17

As a #businesscontinuity professional, I have always recommended offline #backups - that is, backups that are nowhere near your primary on-cloud or off-cloud environment. UniSuper, a $135 billion pension firm, learned this lesson the hard way when a Google Cloud "event" wiped out everything - their compute environment, data, and backups. While I recommend OpenText Carbonite cloud-to-cloud backup software, the important point here is that you need something, anything -- that works -- to take and maintain immutable backups as far away from your primary compute environment as possible. https://lnkd.in/gjBurbEm

4

2 Comments