Tom Ceunen

This is an interesting article from McKinsey, that is two years old already, but still gives a good overview about the migration towards #postquantumcryptography - why to migrate ? (depending on the value of your data) - when to migrate ? - how to migrate ? (adopt now, fix later or keep efforts low) https://lnkd.in/eQJAXFrz

13

1 Comment

'Dear Sirs' _ for Resilience-Resilience Steer per our Teams Security BZK SSC-ICT CISO-office it's advised to use https://signal.org/ instead of WhatsApp' 'We Advise you to inform in future state opportunities that are relevant for our business partners network updates with use of signal #Secure and aware #Policy for °formal° messenger services, go to app via your Android or IOS device , our mobile numbers are same/same and always on #Availablity plus #Online, or via text message or e-mail.' Signal : https://signal.org/install NLSERVICES public announcement [email protected] 🌐

5

I am delighted to be moderating a roundtable discussion at the Gartner Evanta event! I'll be leading an in-depth conversation on threat intelligence and third-party risk. This is a great opportunity to connect with top industry leaders and share insights on the latest trends and challenges in cybersecurity. Looking forward to a productive and insightful discussion. #Mastercard #Gartner #Evanta #Cybersecurity #CISO

115

🚀Taking #cybersecurity to the next level! We are excited to launch CSAF, our Continuous Security Advisory Framework, a new solution to help organizations become cyber resilient. "With CSAF, we help organizations map their attack surface and prioritize cyber risks, enabling them to proactively and continuously respond to cyber threats and take steps towards cyber resilience - thus also become and remain NIS2 compliant," says Fabrice Wynants, Global Director Cybersecurity & Networking at Cegeka. Read more about #CSAF in our announcement 👉 https://lnkd.in/ec2QufPp #inclosecooperation #cybersecurity #NIS2

62

2 Comments

Dutch Police Disrupt Major Info Stealers RedLine and MetaStealer in Operation Magnus The Dutch National Police, along with international partners, have announced the disruption of the infrastructure powering two information stealers tracked as RedLine and MetaStealer. The takedown, which took place on October 28, 2024, is the result of an international law enforcement task force codenamed Operation Magnus that involved authorities from the U.S., the U.K., Belgium, Portugal, and Australia. urojust, in a statement published today, said the operation led to the shut down of three servers in the Netherlands and the confiscation of two domains. In total, over 1,200 servers in dozens of countries are estimated to have been used to run the malware. As part of the efforts, one administrator has been charged by the U.S. authorities and two people have been arrested by the Belgian police, the Politie said, adding one of them has since been released, while the other remains in custody. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

1

Coming Soon. A series of bitesize presentations to show how to create a business focussed Security Strategy. It will show you what to do in the first 30, 60, 90 days of joining an organisation, what to include in your strategy, how to plan, prepare and present it to the Board and how to report progress through implementation and beyond.

42

5 Comments

CrowdStrike!! NO, I am not going to comment on this yet. It’s not the first OS-level software org or even the first AV Firm to boob-bigtime and I need more facts. For now, it seems that CS is either being  lambasted or applauded in “virtue signalling” by people mainly with no experience of operations or critical software delivery or operational AV/EDR. Sign of the times, I think.  My current stance is they were a great company that kept me safe for years plus in this case client/user-controlled settings had a bearing on the impact – that said, I did put them on our risk register for a long-series of general heinous QA issues and specific operational issues relevant to this incident in the last 6 months. Let’s  talk about CloudFlare(CF)  – another company that has kept me safe for years, who are also being lambasted . There was a major BGP Hijack. Again, not the 1st ever BGP attack. Around 2007-2009, there was a spate (probably the first) of BGP attacks. A notable one was by a middle eastern government to divert traffic for "analysis" that they did not approve of, from a video (“U-Pipe” 🤐 ) site. Another was on a big digital bookshop which sells everything  which was completely diverted to a cloned website in South America to steal$.  These are the 2 most common use-cases, but the most likely outcome of these attacks is a site outage.   Anyone who has ISP experience will know that leaks and bad advertisement are common – injection is just the malevolent form (performed by a bogus BGP daemon or so specific software that shares a heritage with HPING2) . But at the time it wasn’t well understood, so the great & good commissioned me to do some workshops and live-fire demos on the net that were easy peasy.  To raise awareness, I even included full details in one of my books (not saying which –  this aint a plug). With the Cloudflare attack, the target was ip 1.01.01.01 . This commonly used by everybody to resolve DNS. And while it mainly resulted in a DNS  resolution failure, a link going hot and eventual correction,  I can’t see a reason why the attack didn’t work for a short while for a small amount of people. It is possible that somebody’s DNS Cache was compromised – I will leave you to think of the consequences. This is not the fault of CF – BGP is, like many TCP/IP protocols, designed for simplicity and operation not security. There are features available to limit the exposure like filters, pki-like functions(RPKI)  and hash passwords to prevent peer spoofing. But you will have all seen surveys on how most peering/edge routers are poorly configured. These BGP security features, just like DnsSec, DKIM, Dmarc, SPF and a host of other features on other protocols,  are commonly not used; they provide suboptimum protection if many people don’t use them. For me, I decided a while back that I was going to implement certificate pinning and MTLS for all mobile apps that use RESTAPI. https://lnkd.in/ecfzah8f

16

8 Comments

Stay ahead in the evolving world of cyber risk! Download our Cybersecurity Resilience 2024 report for a comprehensive analysis and key insights. Proud of so many experts colleagues at Allianz Commercial, who put together such an essential report to support to safeguarding the future. #Cybersecurity #RiskManagement #Resilience #CyberResilience #2024Insights #ExpertCollaboration #FutureReady #allianz

21

1 Comment

The #human aspects of #cybersecurity are really poorly adressed in most security #frameworks. Neither #ISO27002, #NIST CSF, #PCI-DSS, #DORA, nor our Belgian NIS2 framework #cyfun, go further than making #securityawareness and cybersecurity #trainings mandatory. Ok, it is not bad, it is just not enough. If you stick to this only, it won't change your risk posture as we need to change behaviours to reduce risks. The only standard that seems to really grasp the importance of human risk management and how to make a positive impact on it is the #ECB (European Central Bank) "Cyber resilience oversight expectations for financial market infrastructures" (#CROE). That is, up to my current knowledge (and I would be glad to discover other ones), the only regulatory requirement in Europe that address cybersecurity #culture and #behaviour: Just one example - Requirement 36 of the Role of the Board and senior management: "Senior management should validate the effectiveness of its cyber resilience training programme (e.g. social engineering or phishing tests) and assess whether training and awareness programmes positively influence behaviour. Based on the lessons learned from its training programme, the FMI should improve the employee awareness programmes." Centre for Cybersecurity Belgium, it would be great if you could include some of their wisdom in the next version of your fabulous CyFun. It would confirm again Belgium as leader in Cybersecurity.

28

2 Comments

Microsoft, Privacy and Security... The next keylogger (?) What do you think about it? Will you use it? This is #&-$_#! " For those who aren’t aware, Microsoft have decided to bake essentially an infostealer into base Windows OS and enable by default. From the Microsoft FAQ: “Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers." Info is stored locally - but rather than something like Redline stealing your local browser password vault, now they can just steal the last 3 months of everything you’ve typed and viewed in one database." https://lnkd.in/gEWEqWx9

45

7 Comments

🚨 𝗔𝘁𝘁𝗲𝗻𝘁𝗶𝗼𝗻 𝘁𝗲𝗰𝗵 𝗼𝗽𝘀 𝗮𝗻𝗱 𝗿𝗶𝘀𝗸 𝗽𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹𝘀! 🚨 Azure, the cloud computing giant, recently faced a massive global outage due to a powerful DDoS attack. 😱💥 The incident affected multiple Microsoft services, including Azure, Office 365, Teams, and even the Azure status page itself! 📉 𝗧𝗵𝗲 𝗿𝗼𝗼𝘁 𝗰𝗮𝘂𝘀𝗲?  A breakdown in 𝘼𝙯𝙪𝙧𝙚'𝙨 𝘿𝘿𝙤𝙎 𝙥𝙧𝙤𝙩𝙚𝙘𝙩𝙞𝙤𝙣 𝙨𝙮𝙨𝙩𝙚𝙢𝙨, which failed to mitigate the attack effectively. 🛡️❌ This left countless businesses and users worldwide unable to access critical services and applications. 🌍🔌 The impact was far-reaching, with companies across various industries experiencing disruptions to their operations. 🏭💼 This incident highlights the inherent risks associated with relying on a single cloud provider and the importance of having robust DDoS mitigation strategies in place. ☁️🔒 To mitigate such risks, organizations should consider:   𝗜𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗶𝗻𝗴 𝗺𝘂𝗹𝘁𝗶-𝗰𝗹𝗼𝘂𝗱 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗲𝘀 𝘁𝗼 𝗱𝗶𝘀𝘁𝗿𝗶𝗯𝘂𝘁𝗲 𝗿𝗶𝘀𝗸 🌐   𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗻𝗴 𝗶𝗻 𝗮𝗱𝘃𝗮𝗻𝗰𝗲𝗱 𝗗𝗗𝗼𝗦 𝗽𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝘀𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀 🔐   𝗥𝗲𝗴𝘂𝗹𝗮𝗿𝗹𝘆 𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗮𝗻𝗱 𝘂𝗽𝗱𝗮𝘁𝗶𝗻𝗴 𝗶𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗿𝗲𝘀𝗽𝗼𝗻𝘀𝗲 𝗽𝗹𝗮𝗻𝘀 📋   𝗘𝗻𝘀𝘂𝗿𝗶𝗻𝗴 𝗰𝗹𝗲𝗮𝗿 𝗰𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗰𝗵𝗮𝗻𝗻𝗲𝗹𝘀 𝗱𝘂𝗿𝗶𝗻𝗴 𝗼𝘂𝘁𝗮𝗴𝗲𝘀 📣 𝘓𝘦𝘵 𝘵𝘩𝘪𝘴 𝘴𝘦𝘳𝘷𝘦 𝘢𝘴 𝘢 𝘳𝘦𝘮𝘪𝘯𝘥𝘦𝘳 𝘵𝘩𝘢𝘵 𝘦𝘷𝘦𝘯 𝘵𝘩𝘦 𝘣𝘪𝘨𝘨𝘦𝘴𝘵 𝘱𝘭𝘢𝘺𝘦𝘳𝘴 𝘪𝘯 𝘵𝘩𝘦 𝘤𝘭𝘰𝘶𝘥 𝘤𝘰𝘮𝘱𝘶𝘵𝘪𝘯𝘨 𝘴𝘱𝘢𝘤𝘦 𝘢𝘳𝘦 𝘯𝘰𝘵 𝘪𝘮𝘮𝘶𝘯𝘦 𝘵𝘰 𝘵𝘩𝘳𝘦𝘢𝘵𝘴. 🎯 𝗙𝗼𝗿 𝗺𝗼𝗿𝗲 𝗶𝗻𝗳𝗼: https://lnkd.in/gbihDckt #AzureOutage #DDoSAttack #CloudSecurity #TechOpsRisks #RiskMitigation Tim Wei Teena Christina Eugene Alyssa ISACA New York Metropolitan Chapter

2

1 Comment

Boards are to lead by example, also in relation to Cyber Security

2

At the panel yesterday, a crucial topic we discussed was how important the role of supply chain is in the security of the Technology ecosystem. Of all cybersecurity risks, I’m most worried about supply chain threats. And today, crowdstrike happened.. Availability is one of the principles of cybersecurity #Crowdstrike #supplychain #thirdparty

31

4 Comments

That’s an important insight provided by Alexandre Pluvinage on how to positively impact people’s behaviour and attitude. Most passive awareness and trainings solutions have a very low impact in terms of memorisation and attitude and behaviour change. Interactive and active interventions, on the contrary, foster long term learning and increase the likelihood of behaviour change. Flipped classrooms, as explained by Alexander, is doing that. Yes, it is more expensive and requires more time from your people, but it works. And as the saying goes, if you pay peanuts, you get monkeys. The same goes with training. #cybersecurityawareness #humanrisksmanagement

4

1 Comment

#ProjectOverwatch 28th Edition is out! Discover the critical steps to implement AI Red Teaming in your organization, a process that not only safeguards against harmful outputs but also builds trust for your users and stakeholders. I'll also be touching based on the CrowdStrike incident, the odd story of a North Korean IT worker that tried (and failed) to penetrate KnowBe4, a great CISO report from Bugcrowd and last but not least a mention of the latest project from the Center for Threat-Informed Defense that cover Threat Modelling with the MITRE ATT&CK framework. The Project Overwatch community is growing. However there is still a majority of readers that don't subscribe. If the cybersecurity and AI content has helped you, subscribing would mean the world to me! The larger our community, the more we can share knowledge and experience to better manage cyber risks and adopt AI in a safe way. #cybersecurity #AI #AIRedTeam #newsletter #subscribe https://lnkd.in/dgTfNz9d

12

1 Comment

Interesting document to consider some improvements in #Security architecture

5

🚀 Boost Your Security Skills: Crash Course in Bash Scripting 🔒 Are you a security expert looking to level up your automation game? Say hello to Bash scripting, the Swiss Army knife every security professional needs in their toolkit. Whether you're extracting suspicious IPs, monitoring file integrity, or automating incident response, Bash makes it all possible—and now, you can learn it FAST. I just came across this fantastic Crash Course on Bash Scripting for Security Experts that breaks down: ✅ How to extract actionable data from logs ✅ Automating port scans and detecting open ports ✅ Verifying file integrity to detect unauthorized changes ✅ Real-time monitoring and alerting for suspicious activity Here’s the kicker: it’s written specifically with security professionals in mind. 🛡️ If you’ve ever struggled to script a quick fix during an incident, this guide is your new best friend. 💡 Pro Tip: The article even includes scripts you can start using TODAY. Why reinvent the wheel when you can copy, paste, and adapt? 👉 Dive into the full article here: Crash Course: Bash Scripting for Security Experts.[https://lnkd.in/gZxZRicf] Have you ever used Bash to solve a security challenge? Let’s share tips and scripts in the comments! 👇 #Cybersecurity #BashScripting #SecurityAutomation #SkillBuilding #ContinuousLearning

8