Nicolas Buache

🌐 Protecting Canada's Critical Infrastructure: New Cybersecurity Guidance from the CSE 🌐 Canada’s Communications Security Establishment (CSE) just released vital cybersecurity guidance to help critical infrastructure (CI) providers strengthen their defenses against evolving cyber threats. This new guidance offers an essential roadmap for CI organizations to navigate risks with greater resilience, offering frameworks and recommendations that address challenges specific to sectors like energy, finance, healthcare, and more. At Stratejm a Bell Canada company, safeguarding CI is a priority, and this guidance from CSE reinforces best practices we advocate in every cybersecurity engagement. With comprehensive recommendations on access management, network security, incident response, and system resilience, these insights are a crucial resource for any organization committed to protecting Canada’s infrastructure. 📌 Let's continue to fortify our security measures, foster cross-sector collaboration, and implement strong cyber defense frameworks. Together, we can build a more resilient digital Canada. #Cybersecurity #CriticalInfrastructure #Stratejm #CSE #Canada #teambell #bell https://lnkd.in/gufSNKqy

38

3 Comments

On June 5, I will share some red teaming tips during our webinar. We would love for you to join us and learn more about our tradecraft.

26

Seeing more security breaches for big businesses in the news this year than any other. I have always included a snapshot of recent breaches to help set the landscape when training businesses in Security and Privacy Awareness. Eight years ago, I had to stretch to find 10 breaches within businesses that the audience would recognize. In a session I ran last month, I had to expand this to 20 breaches, all for well-known businesses, and I had to leave another half-dozen off the list. All of these in under a year's time. Cybercriminals grow more creative. They are not going to wait for you and your business to be ready. I urge everyone to start looking into the viability of Managed Detection and Response for your business. Learn more about the this valuable tool HERE: https://lnkd.in/gsKGzkVU

4

1 Comment

October is Cyber Security Awareness Month (Cyber Month) in Canada. #CyberMonth2024 is all about working together to become part of Generation Cyber safe. Cyber Month is an important time to reflect, as individuals and as an organization, on how we can protect ourselves, our business, our audience and our loved ones online. This year’s Cyber Month theme is Generation Cyber Safe: Because online security knows no age. Online security affects all Canadians, regardless of when they were born – which is why every generation is part of Generation Cyber Safe. This month, we’re celebrating how much stronger each generation can be when they come together to stay safe online. Something all generations have in common is the need to stay connected. When it comes to being online however, there are threats that come with staying social. This week, we’ll discuss: Knowing how to spot the signs of phishing and how to avoid over sharing online can help you #GetCyberSafe. #CyberMonth2024 https://lnkd.in/greS3HcN

1

In response to an imminent ransomware threat targeting a prominent Canadian university, our #CRAForensicServices team, led by Aniket Bhardwaj, swiftly initiated comprehensive security measures. Deploying advanced endpoint solutions, alongside our proprietary historical forensic artifact collection script at scale and meticulous forensic analysis, we uncovered multiple critical vulnerabilities and unauthorized activity, including the presence of threat actors in the environment, preventing potential data breaches and financial losses. With the invaluable contributions of colleagues including Carlo Lakay, Frank Visser, Bharadhwaj Harihara Subramanian, GCIH, GCFA, MCFE, CEH, David Lee, Yung Han Yoon, Ronan Joshua R., Jacob F., Jake Nemiroff, and Leo Jones, we not only neutralized the immediate threat but also bolstered the university's long-term security resilience. Our proactive approach not only safeguards against current threats but ensures preparedness for future cyber challenges. To read the full engagement, click here: https://crai.news/rqh

29

The recent AT&T data breach serves as a stark reminder of the ever-evolving landscape of cyber threats. However, by implementing robust security measures, companies can instill a sense of security and confidence in their cybersecurity strategies and stay ahead of future threats. Key Lessons Learned: 1-The breach underscores the necessity of being proactive and implementing MFA across all systems. This is simple, yet effective measure can significantly reduce the risk of unauthorized access using stolen credentials. As reported, the lack of MFA was a critical vulnerability that hackers exploited.​ 2-Organizations must have comprehensive incident response plans that are regularly updated and tested through tabletop exercises. These plans should include clear protocols for detection, containment, eradication, and recovery to minimize the impact of a breach.​ 3-Continuous education and training programs are essential and make employees an integral part of our cybersecurity strategy. These programs equip employees to recognize and respond to potential threats. Phishing remains a prevalent attack vector, and informed employees are the first defence against such tactics.​ 4- Regular security assessments and audits can help identify and remediate vulnerabilities before they are exploited. This includes internal and external evaluations to ensure comprehensive coverage​ . These assessments involve a systematic review of systems, networks, and processes and can be conducted by internal or external security experts. They provide a detailed understanding of security posture and help prioritize security measures. ​ 5-Encrypting sensitive data at rest and in transit is critical to protecting it from unauthorized access. Even if attackers breach the network, encrypted data remains inaccessible without the decryption key​. 6- Implementing proactive threat hunting can help detect potential threats before they cause harm. Utilizing AI and machine learning for threat detection and response can enhance the ability to identify and mitigate risks in real-time​.These technologies can analyze large volumes of data, identify patterns, and predict potential threats, strengthening your cybersecurity posture. #CyberSecurity #DataBreach #LessonsLearned #MFA #IncidentResponse #EmployeeTraining #DataEncryption #ThreatHunting

37

8 Comments

Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada, in their recently released National Cyber Threat Assessment 2025-2026, says: 1. RANSOMWARE is the top threat targeting critical Canadian infrastructure. 2. State-sponsored and financially motivated cyber threats are increasing. 3. Foreign threat actors are moving beyond espionage to conduct more disruptive activities. 4. The use of AI and its impact is likely to contribute towards more sophisticated attacks. 5. Geopolitical tensions are inspiring cyber incidents from non-state groups. 7. Budget 2024 proposed $917.4 million over five years to enhance intelligence and cyber operations programs to respond to these evolving threats. 8. The People's Republic of China (PRC) has the most advanced and active state cyber threat to the country today. Ransomware or other forms of cyber attacks do not just target critical infrastructure but also small and medium enterprises. Hence, it becomes increasingly important to move away from making cybersecurity JUST a checklist and move towards making it a resilient architecture and an integral part of day to day activities. Here are some steps you can take to mitigate or prevent Ransomware attacks. 1. Security awareness training should be ramped up so that employees are aware of phishing emails and can identify a malicious email and/or link. This should not be just a one time approach but rather a continuous and regularly scheduled approach. 2. Ensure passwords are complimented with MFA (multi-factor authentication). These passwords should at least align with the recommended standards listed by National Institute of Standards and Technology (NIST). For example, lengthier passwords (12-15 characters) instead of a complex one. 3. Practice regular patching of software and company apps to mitigate the risks of exploiting software vulnerabilities. Secure software coding practices should be inculcated from the start. #Cybersecurity #CanadianCentreForCyberSecurity #ThreatAssessmentReport

2

Really excited to join a panel discussion with top security and privacy professionals on the topic of balancing security and privacy in employee monitoring. Join us at the Avanade Toronto office on July 25 for a special event hosted by ISC2 Toronto Chapter and IAPP - International Association of Privacy Professionals Toronto chapter. Get your tickets now before they're gone! #security #privacy #employeemonitoring #ethics

27

The lack of interoperability between public clouds remains one of the key challenges for Canadian organizations. Discover more insights in our report. Download now: https://dy.si/9RoNQ

4

I read the report attached and really enjoyed the invaluable insights and lessons presented in the "National Cyber Threat Assessment 2025-2026" by Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada Link: https://lnkd.in/dHUNJC2u Here are the list of lesson learned I gained from it: 1. As state-sponsored attacks intensify, proactive defense strategies must include robust monitoring and response capabilities to mitigate the risks posed by highly sophisticated adversaries targeting critical infrastructure. 2. Building resilience against ransomware requires targeted approaches, including employee training, frequent data backups, and collaboration with law enforcement. Organizations in healthcare, energy, and other critical sectors must be especially vigilant as these areas are prime targets. 3. Traditional detection methods are no longer sufficient. Continuous improvements in threat detection, such as behavioral analysis and machine learning, are essential to identify advanced persistent threats (APTs) that embed themselves within networks over extended periods. 4. Heavy reliance on major technology providers (e.g., cloud services) presents a systemic risk. Developing contingency plans and diversifying suppliers can help mitigate potential disruptions that may arise from attacks on these critical chokepoints. #cyber #cybersecurity #InfoSec #CISO #CISOS #cyberattack #Muath_CISO_Bag #informationsecurity #ISO27001 #CyberThreats #NationalSecurity #CyberDefense #StateSponsoredAttacks #CriticalInfrastructure #CyberResilience #Ransomware #CyberCrime #ProtectCriticalInfrastructure #AdvancedThreats #ThreatDetection #CybersecurityInnovation #DigitalChokepoints #CloudSecurity #SupplyChainRisk #PublicPrivatePartnerships #CyberAwareness #CyberPreparedness #CyberEcosystem #DigitalResilience

71

3 Comments

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

24

#CrowdStrike is considered the largest IT outage in history...so what did we learn and how do you prevent yourself from the same fate? Register for our #Cybersecurity Workshop Series and we'll show you how. Todd Smith Roddy Bergeron, CISSP, CCSP, CSAP Sherweb

33

5 Comments

The Canadian Cybersecurity Network launched their #newsletter and I love it. It is exactly what we needed to centralize Canada’s #cybersecurity information. I will make sure research related articles are included. In this edition I described the crucial role of #academic research in cybersecurity and I also explain the difference between research and R&D. https://lnkd.in/dS6Y8G8x

16

"As a Canadian business, you should regularly audit your IT environment, ensuring that sanctioned and unsanctioned applications are properly secured and aligned with organizational policies." 💭 Jon Marler shares his thoughts on what Canadian businesses need to do as a shift to hybrid work models accelerates. Read the full blog now! #Cybersecurity #CyberDefense #Cybercrime

1

The Ontario government has introduced the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024, aiming to enhance cyber resilience and safeguard critical public services such as health care and education. The legislation seeks to prevent and respond to cyber threats, protect children's data, modernize privacy protections, and establish robust artificial intelligence governance. By supporting these measures, the government ensures the security, privacy, and efficiency of public services, positioning Ontario at the forefront of AI innovation while safeguarding the digital participation of its citizens.

7