➡️ Emmanuel NICAISE

🔒 Dive into the evolving world of #Malware with insights from the frontlines of #Cybersecurity. Discover how attackers innovate to bypass security in the new blog by SANS Certified Instructor and #DFIR expert Xavier Mertens! Read the blog → https://lnkd.in/edst3rgN

3

🇧🇪 Cybersecurity Risks for the 2024 Elections in Belgium 🇪🇺 As #Belgium gears up for its federal, European, and regional elections on June 9, 2024, the digital landscape poses significant challenges to the democratic process. #Cybersecurity threats are multifaceted and evolving, from #deepfake manipulation and disinformation campaigns to #databreaches and foreign-backed cyber intrusions. 🏛️ The Centre for Cyber Security Belgium outlines these risks and strategic responses in their #CybersecurityStrategy 2021-2025, emphasizing the need for vigilance against #cybercrime, #hacktivism, and #terrorism. As we move closer to election day, understanding these threats and enhancing our defenses is crucial to safeguarding our democratic institutions. Explore how SOCRadar's comprehensive threat intelligence solutions can help protect against these risks and ensure the integrity of the electoral process. 👇 https://lnkd.in/dpTCQJGb #BelgiumElections #ElectionSecurity #ThreatIntelligence #EU2024BE #electionBelgie2024 #Belgium #UseYourVote

8

🚀Taking #cybersecurity to the next level! We are excited to launch CSAF, our Continuous Security Advisory Framework, a new solution to help organizations become cyber resilient. "With CSAF, we help organizations map their attack surface and prioritize cyber risks, enabling them to proactively and continuously respond to cyber threats and take steps towards cyber resilience - thus also become and remain NIS2 compliant," says Fabrice Wynants, Global Director Cybersecurity & Networking at Cegeka. Read more about #CSAF in our announcement 👉 https://lnkd.in/ec2QufPp #inclosecooperation #cybersecurity #NIS2

62

2 Comments

The European Council has adopted two new laws that are part of the legislative “package” on #cybersecurity, namely the so-called “cyber solidarity law” and a specific amendment to the cybersecurity law. The new regulation establishes EU capabilities to make Europe more resilient to #cyberthreats, while strengthening cooperation mechanisms. It establishes, among other things, a “cybersecurity alert system” – a pan-European infrastructure composed of national and cross-border cyber centres across the EU. These are entities tasked with sharing information and tasked with detecting and responding to cyber threats. The new regulation also provides for the creation of a cyber security emergency mechanism to increase preparedness and improve response capacity to incidents in the EU. This mechanism will support: ▪️ preparedness actions, including testing entities in highly critical sectors (healthcare, transport, energy, etc.) for potential vulnerabilities, based on common risk scenarios and methodologies, ▪️ a new EU cybersecurity reserve composed of private sector incident response services ready to intervene at the request of a Member State or EU institutions, bodies and agencies, as well as associated third countries, in the event of a significant or large-scale cybersecurity incident, ▪️ mutual technical assistance. https://lnkd.in/dGJRte7c #sccybersecurity #sccssummit #tprm #supplychainsecurity #cyberrisk #AI #grc #riskmanagement #riskcompliance #duediligence #vendorrisk

7

[#CYBERSECURITY] 🔐 European e-commerce is booming, and the growing number of SMEs contributing to it are also more vulnerable than large groups when it comes to #cybersecurity. The European ENSURESEC project has tackled this challenge, offering both the companies concerned and consumers cutting-edge cyber defense tools.   With European e-commerce reaching €899 billion in 2023, cybersecurity is more important than ever. At the same time, around a third of European SMEs were confronted with cybercrime in 2021. 🛡 The ENSURESEC project was therefore designed to provide e-commerce SMEs with technological knowledge and adequate defenses against hackers and fraudsters. Indeed, as e-commerce platforms are complex objects involving a large number of players with very different constraints and hardware and software architectures, they have to meet stringent requirements in terms of access control and cope with a wide range of threats.   ✅ In this project, the CEA-List's contribution focused on integrating its Frama-C tool, dedicated to the verification of C programs, into a technical platform for the protection of e-commerce software and its consumers. To achieve this, significant technical developments have been added to Frama-C in order to facilitate the user experience and the adaptation of the tool to the web: a new graphical interface, specific memory models, adaptation of the runtime verification module to concurrent programs and to the Windows operating system. Frama-C was then validated in the ENSURESEC platform on the project's e-commerce use cases.   Overall, the platform developed by ENSURESEC will help e-commerce providers, often SMEs, to design, monitor and mitigate threats to their e-commerce systems, as well as to train and sensitize their users and employees.   In addition to the success of the project, ENSURESEC has enabled new academic collaborations to be established on highly innovative and promising subjects, such as security issues specific to applications using multiple programming languages (University of Greenwich, UK), and the modeling and verification of access control policies at source code level.   Read more in the Horizon EU Research & Innovation magazine 👉 https://lnkd.in/ebaG-dB6   #ResearchImpactUE Augustin Lemesle CEA | Le Réseau des Carnot | Université Paris-Saclay | Université Grenoble Alpes

24

📚 Two new publications from #TILT members: ➡ In her paper "European cybersecurity standardisation: a tale of two solitudes in view of Europe’s cyber resilience", Dr. Irene Kamara focuses on how appropriate is the European #Standardisation system to support the goals of the Cyber Resilience Act. She argues that the standards development process must be inclusive and open. https://lnkd.in/ghHvDKYP ➡ Prof. Panos Delimatsis, in his TILEC discussion paper titled "From TikTok to Uber to the Metaverse: Digital Services, Servicification and International Investment Law" discusses trade and investment in digital services in an increasingly polarized international economic order and elaborates what challenges arise for international investment law. https://lnkd.in/giuBR_96

27

🚀 Is your company ready for #NIS2? From stricter reporting requirements to #SupplyChain security, learn how to prepare for the #EU's latest #Cybersecurity directive. Get expert tips from SANS Instructor, Carlos Fragoso on achieving compliance. Read the blog → https://lnkd.in/e-chiEuf

10

🚀 Is your company ready for #NIS2? From stricter reporting requirements to #SupplyChain security, learn how to prepare for the #EU's latest #Cybersecurity directive. Get expert tips from SANS Instructor, Carlos Fragoso on achieving compliance. Read the blog → https://lnkd.in/e-chiEuf

2

The #CyberResilienceAct is Here! The Cyber Resilience Act (CRA) was published in the European Union Official Journal, today, 20th November 2024. Twenty days later, on 11th December 2024, the CRA will enter into force across all EU member states. The 11th December 2024 will also mark the start of the 36-month transition period, meaning that manufacturers, distributors and importers of products with digital elements will need to be fully compliant with the new CRA legislation by 11th December 2027. The clock has started ticking for all businesses implicated by the new legislation. What is the Cyber Resilience Act? The CRA is a new EU legislation that aims to improve baseline cybersecurity standards for products with digital elements made available on the EU internal market. Products with digital elements are defined as products with hardware and/or software components and any associated remote data processing solutions. This encompasses a breadth of product types including internet of things (IoT) devices. This is a horizontal legislation, meaning it is not specific to one business sector. The CRA will implicate all products with digital elements bar a few exceptions such as medical devices and motor vehicles. The CRA legislation sets out essential requirements for cybersecurity and vulnerability handling of products with digital elements. Manufacturers of products with digital elements must implement these essential requirements and show proof of compliance by completing a conformity assessment. Once the product with digital elements has passed the conformity assessment, the CE mark must be affixed to the product. This shows customers that the product has met the CRA legislation requirements. Next Steps Manufacturers of products implicated by the CRA should start researching what they need to do to incorporate the CRA into their product lifecycle process. The CRA expects cybersecurity to be taken into account across all stages of the product lifecycle and this may be a change for some manufacturers. Start your CRA journey by checking out our blog posts on the CRA, such as information on product scope: https://bit.ly/4el2Mco and CRA product categories: https://bit.ly/3Ux7b51 . Follow Cyber Cert Labs on LinkedIn for more information and updates on the CRA. Have questions? Need more specific advice about the CRA? Reach out to us at our website: https://lnkd.in/ezGHFnuM

13

CYBER SECURITY RISK HANDBOOK: KEY TOOLKITS - Internet Security Alliance / ecoDa a.s.b.l - The European Confederation of Directors Associations Tool A: #Ransomware Readiness Tool B: Assessing the Board #Cyber #Risk - Oversight Effectivenees Tool C: #Insider #Threats Tool D: #Supply #Chain and Third - Party Risks Tool E: #Incidents #Response Tool F: #Board - Level Cybersecurity #Metrics Tool G: Mergers and #Acquisitions Tool H: Building a #Relationship with the CISO Tool I: Enhancing #Cybersecurity oversight disclosures: 10 questions for boards Tool J: Securing #Cloud #Services Tool K: Supporting #national #security and five triangulation questions for boards members to ask their CISOS Tool L: Tool for the #board of #Directors to decide general use of #artificial #intelligence Centro de Investigación de Ciberseguridad IoT - IIoT

104

1 Comment

Eventful days in Strasbourg, as on the margins of the Cybercrime Convention Committee (#TCY) also our #CyberSEE colleagues organised the first Steering Committee meeting of the project, in the framework of the Launching event. The meeting gathered representatives from the European Commission, the Council of Europe and delegates from Public Prosecution Offices, Ministries of Justice, Police Cybercrime Investigation Units, Financial Investigation Units, Computer Emergency Response Teams and training institutions from all priority countries/areas. Presenting the project’s concept and workplan, while providing a platform for sharing developments and regional priorities for criminal justice actions on cybercrime and electronic evidence was on the agenda. New concepts such as the 𝐒𝐤𝐢𝐥𝐥 𝐒𝐡𝐚𝐫𝐢𝐧𝐠 𝐏𝐫𝐨𝐠𝐫𝐚𝐦𝐦𝐞, 𝐂𝐲𝐛𝐞𝐫 𝐎𝐥𝐲𝐦𝐩𝐢𝐜𝐬 and 𝐜𝐫𝐢𝐦𝐞 𝐬𝐜𝐞𝐧𝐞 𝐢𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧 𝐰𝐨𝐫𝐤𝐬𝐡𝐨𝐩𝐬 were introduced, along with the project’s objectives. The European Commission emphasised the project's relevance, the significant progress in the region, and their commitment to supporting the future project action. Through CyberSEE, we will continue supporting South-East Europe and Türkiye in addressing the challenges of cybercrime and achieving stronger compliance with the 𝐂𝐨𝐧𝐯𝐞𝐧𝐭𝐢𝐨𝐧 𝐨𝐧 𝐂𝐲𝐛𝐞𝐫𝐜𝐫𝐢𝐦𝐞 (Budapest Convention) through #capacitybuilding actions. Newsroom: https://lnkd.in/dGA85DAk More about our joint EU-CoE CyberSEE project: https://lnkd.in/dW_7J4xd

100

1 Comment

October 17, 2024 marks a major milestone for #cybersecurity in Europe. TODAY is the official deadline for EU countries to implement local laws based on the #NIS2 Directive. NIS2 is the second European Network and Informations Systems directive. It aims to improve the cyber resilience of critical and important companies and organizations in Europe. However, not every country will meet the deadline. As reported in DIGITALEUROPE’s NIS2 Transposition Overview (https://lnkd.in/ee3ZY9wK), each country is progressing at its own pace, with some nations still in the process of finalizing their NIS2 legislation. 🟢 Countries with Adopted NIS2 Laws: - Belgium: Adopted on May 17, 2024. - Hungary: Partial compliance through the Cybersecurity Certification and Supervision Act; full law expected by September 2024. - Lithuania: Adopted in July 2024. - Croatia: In effect since February 15, 2024. 🟠 Countries with Draft Laws in Progress: - Germany: Expected to take effect in early 2025. - Sweden: Anticipated effective date of January 1, 2025. - Netherlands: Projected implementation by 1 July 2025. - Poland: Aiming for timely compliance, though the timeline is ambitious. - Finland: Expected to meet the October 18, 2024 deadline. - Italy, Latvia, Czech Republic, Austria, Denmark, Luxembourg, Slovenia, Cyprus, and Slovakia are also progressing with draft legislation. 🟠 Countries Awaiting Draft Legislation: - France and Romania are actively preparing drafts. - Ireland plans to include NIS2 in its National Cyber Security Bill. - Greece aims to meet the October deadline, though the draft is not yet published. - Estonia anticipates publishing its draft by the end of August 2024. 🔴 Countries without Draft Legislation: - Spain - Malta - Bulgaria - Portugal These varied timelines may lead to some regulatory differences across borders, but collectively, they represent a stronger, safer digital Europe. How far is your company or organization with implementing NIS2? If you are wondering whether NIS2 applies to you, or if you need support with NIS2, check out our NIS2 page: https://lnkd.in/eNHHcDSH It’s time to strengthen your cybersecurity posture. Source image: NIS2 transposition overview, DigitalEurope.

47

1 Comment

The U.S. Cybersecurity and Infrastructure Security Agency (#CISA), the Federal Bureau of Investigation (#FBI), Europol’s European Cybercrime Centre (#EC3), and the Netherlands’ National Cyber Security Centre (#NCSC-NL) issued a joint #cybersecurity advisory about the Akira ransomware. This advisory includes information about how Akira ransomware operates, such as its tactics, techniques, and procedures, as well as indicators of compromise. The advisory recommends various measures that organizations can take to protect themselves from Akira ransomware attacks, such as implementing multi-factor authentication, keeping software up to date, and maintaining offline backups of data. It is important to monitor and detect abnormal network activity and some recommendation is about disabling certain permissions and activities to prevent ransomware attacks.

6