Rebecca Cameron

With cyber security threats on the rise, there's no room to be complacent. Everyone in your organisation needs authentication tailored to their specific access needs and the risk profile of their role. Even if you have already implemented 2FA or MFA, there may still be gaps in authentication for different use cases and applications, compromising security across your organisation. Find out more about MFA best practices and improving the user authentication journey in our e-Guide where we cover, 🔐 What MFA is and its importance to security-sensitive industries 🔐 Reasons for improving security with a fully comprehensive MFA solution 🔐 Why 2FA and some MFA solutions might not be enough for full security cover 🔐 User authentication journeys for different use cases and security levels 🔐 Picking the right authentication methods 🔐 Tips to make the most of MFA across your entire workforce Read the complete guide here > https://loom.ly/q4jfdL4 #MultiFactorAuthentication #MFA #EGuide #DataSecurity

8

At Mypinpad, we are seeing a growing demand for Step-up Authentication (SA) deployments, which dynamically adjust #authentication protocols based on the assessed risk level of individual transactions. To balance security and friction, SA ensures initial access with primary credentials but prompts for more credentials when personal transaction ‘behaviour’ norms are breached.    Our CEO Barry Levett explains the fundamentals of Strong Customer Authentication and how payments authentication is evolving to mitigate increasing fraud while minimizing user friction in this article 👉: https://lnkd.in/gjWMkNsa?    #Mypinpad #payments #technology

18

Did you miss the Information Security Media Group (ISMG) interview with Stas Bojoukha and Tom Field? Listen in as they discuss how Governance, Risk, and Compliance are becoming products for the entire business, not just siloed off to compliance and security. #ciso #informationsecurity #grc

20

ISACA South Africa Chapter Attendees! Don't miss Graeme Huddy's insightful presentation on "Empowering organisations in the Battle against evolving threats using Cyber Threat Intelligence." When: Today, October 22nd, 2024, 10:30 AM - 11:15 AM Where: Emperors Palace Graeme will share valuable insights on how cyber threat intelligence can help organisations stay ahead of emerging threats and protect their valuable assets. #ISACA #Cybersecurity #ThreatIntelligence #ClearlySecure

7

Charlas MainTrack #EKO2024 🚀 📌 Dirk-jan Mollema, Security Researcher at Outsider Security 💡 “Windows Hello abuse - the sequel”: Windows Hello and its enterprise variant Windows Hello for Business are modern passwordless authentication methods, that are promoted by Microsoft as secure, hardware bound and resistant to phishing attacks. Last year, we already saw that many of the security features did not exactly hold up, and that it was possible to provision WHFB methods without MFA, use them for lateral movement on other accounts and for movement from Entra ID to on-prem AD via cloud Kerberos trust. In this talk, we will cover even more WHFB abuse, showing how WHFB keys can be provisioned during phishing scenario's, including device code phishing and credential phishing. We will also talk about how Windows Hello keys are protected and used on Windows devices, showing how we can use the keys for lateral movement and persistence once we have access to a users session. ✅ Esta charla será dictada en inglés. 📍 EKOPARTY 2024 - 13, 14 y 15 de noviembre en el CEC - Buenos Aires  🎟️ ¡Registrate! >> entradas.ekoparty.org 📅 Podés ver la agenda completa en ekoparty.org/agenda 

8

At Performanta, our Threat Intelligence Team is always on the lookout for new and evolving threats that could impact your organisation's security. Our dedicated team works tirelessly to identify the latest risks, ensuring our SOC is equipped to track and mitigate these threats in real-time. Dive into our latest Threat Intelligence Report to discover the most pressing security concerns and learn actionable steps to enhance the protection of your IT infrastructure > https://lnkd.in/eziMmDjZ Stay informed, stay secure. #CyberSecurity #ThreatIntelligence #EmergingThreats #DataProtection #ITSecurity #SOC #RiskManagement #CyberDefense #StaySecure #SecurityAwareness

13

💡 Locking Out Ransomware: A New Way to Look at Security Strategy Dymium's CEO, Denzil Wessels, recently published this insightful article in Security Magazine. We hope you enjoy! (Link in comments) #dlp #securedatasharing #datasec

19

2 Comments

Catch the must-see moments from Wolfpack Information Risk and SailPoint’s webinar, From The Boardroom to the War Room, where we explored crucial cybersecurity topics. We gained valuable insights on the South African cyber threat landscape, essential protection strategies, and real-world defence techniques. Stay ahead of cyber threats with expert insights! Watch now: https://ow.ly/h8ks50Rx4bc #Cybersecurity #SouthAfricaCyberThreats #RiskManagement #ExecutiveLeadership #PrivacyProtection #Resilience #ThreatMitigation #IdentitySecurity #DataProtection #InformationSecurity #RiskMitigation #BreachPrevention #SecurityAwareness #DigitalSecurity #IdentityManagement #SecuritySolutions #EnterpriseSecurity #CyberDefense #ITSecurity #DataPrivacy #SailPoint #WolfPack The Marketing Hub Tara-Anne Yates Georgia Hammond Hans-Robert Vermeulen Craig Rosewarne

25

Today Oliver King-Smith was the main speaker at the Cyber Security COP, Gauteng e-Gov, South Africa, November 20, 2024. Oliver presented a detailed analysis of the increasing threat posed by AI-enabled cybercrime, highlighting a notable case where a Lithuanian fraudster defrauded Facebook and Google of $120 million through deceptive invoicing. He emphasized the evolution of cyber-attacks, particularly how AI has enhanced traditional methods like phishing, spear phishing, and shared examples of successful defenses against AI-enhanced attacks. #cybersecurity #southafrica #government #responsibleai #ethicalai #gpt4 #smartRAI #SCOTi #technology #slm #LLM #privacy #generativeai #machinelearning #enterpriseai #greenAI #innovation #management #security #analytics

13

4 Comments

🚀 What a phenomenal session at RSA Conference last week! Jacqueline N. and Eward Driehuis took us on an insightful journey through the "Canary in the Coalmine of Cybersecurity." They unveiled crucial insights about the early warning signs of fraud and how it shapes our digital defenses. Here are some highlights: Key Takeaways: There's work to do: mobile threats are evolving fast, and scams are increasing in volume. We lack a common vocabulary, so we're not always speaking the same language Audience Engagement: It was fantastic to see so many engaged attendees asking insightful questions Looking Forward: The discussion highlighted the importance of staying vigilant and adaptive in the ever-evolving cybersecurity landscape Thank you to everyone who attended and participated. To view the slides, log in here: https://hubs.ly/Q02x4VDz0 #RSAC204 #ThreatFabric #FraudPrevention #FraudDetection #MobileMalware

71

2 Comments

Imagination is now an authorised CVE Numbering Authority (CNA). The CVE Program is a collaborative initiative that allows authorised partners from around the world to identify, define and catalogue cybersecurity vulnerabilities within one publicly available database. Authorisation as a CNA strengthens our cybersecurity credentials and highlights the maturity of our vulnerability management practices. More details are available at: https://hubs.ly/Q02KydVC0 CVE Program #cybersecurity #CVE #vulnerabilities

49

🔒 Strengthening Cybersecurity Through Compliance: The Impact of the EU's NIS2 Directive on African Trade Partners 🌍 As the EU’s NIS2 Directive sets a higher standard for cybersecurity, it’s crucial for African businesses engaging with European Union member states to recognize the importance of compliance. With potential fines reaching up to €10 million or 2% of global turnover for non-compliance, the stakes are undeniably high. This directive not only emphasizes operational resilience and robust cybersecurity measures but also introduces personal liability for executives in the event of a cyber incident. As pointed out by Ahmore Burger-Smidt, the shift from GDPR’s privacy focus to NIS2’s operational cybersecurity requirements signifies a comprehensive approach to safeguarding against cyber threats. The implications for African businesses are significant. While adapting to these stringent regulations may increase cybersecurity spending, it also presents an opportunity to enhance security frameworks and foster greater trust with EU partners. This investment in cybersecurity not only protects organizations from potential fines but also strengthens their overall operational integrity. As we navigate this evolving landscape, it’s imperative that African companies prioritize cybersecurity initiatives and embrace compliance as a pathway to better security resilience. Let’s work together to bolster our defenses and ensure a safer digital ecosystem for everyone involved. #Cybersecurity #NIS2Directive #Compliance #Trade #Africa #EU #securityresilience #operationalintegrity #cybersecuritymeasures

3