Oscar Sánchez Montaner

Check your website to see if it is GDPR and privacy compliant with a free assessment tool

8

Coming Soon. A series of bitesize presentations to show how to create a business focussed Security Strategy. It will show you what to do in the first 30, 60, 90 days of joining an organisation, what to include in your strategy, how to plan, prepare and present it to the Board and how to report progress through implementation and beyond.

42

5 comentarios

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝘀𝗲𝗰𝘂𝗿𝗶𝗻𝗴 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗮𝗴𝗮𝗶𝗻𝘀𝘁 𝗗𝗖𝗦𝘆𝗻𝗰 𝗮𝘁𝘁𝗮𝗰𝗸𝘀 🖥   Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are exploring the most prominent Active Directory (AD) threats, describing the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.     In the next instalment of this series, they are exposing the sinister tactics behind DCSync attacks - a stealthy technique that can bring your entire Active Directory to its knees.     Find out more here 👉 https://lnkd.in/enQAkfBv #cybersecurity #activedirectorythreats #DFIR #dcsyncattacks

19

INCIBE demonstrates value of ransomware simulation The Spanish cyber institute presented to the press an example of its red-team exercises, which it uses not only to prepare its teams for real threats but also to educate Spanish companies the importance of preparing theirs. In León last week, the Spanish National Cybersecurity Institute (INCIBE) hosted a live demonstration of its capabilities for detecting, mitigating, and responding to cyber incidents. INCIBE, which operates under the Ministry of Digital Transformation and Civil Service through the State Secretariat for Digitalization and Artificial Intelligence, invited CSO Spain to observe the high-impact simulation, which was aimed at training personnel and testing and improving the security of its information systems and digital services. “It is very important for every organization to be trained and educated so that when they are suffering a cyberattack they know how to act,” Patricia Alonso, manager of INCIBE, told CSO Spain. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

2

1 comentario

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝗰𝗼𝗺𝗯𝗮𝘁𝗶𝗻𝗴 𝗸𝗲𝗿𝗯𝗲𝗿𝗼𝗮𝘀𝘁𝗶𝗻𝗴 𝗶𝗻 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 🖥️ In our latest technical blog series, two of our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are highlighting the most prominent Active Directory (AD) threats. The series describes the tell-tale signs that your AD might be at risk, with experienced insight into the best prevention and mitigation strategies.     Up first, let’s dive deep into the nefarious world of kerberoasting 👉 https://lnkd.in/ebspRwJy #cybersecurity #kerbercoasting #activedirectorythreats #DFIR 

22

📃 Read the latest #OSM blogpost by Pedro Escaleira (Instituto de Telecomunicações) on CVE-2022-35503 disclosure for Remote Code Execution in LCM/N2VC. The vulnerability was analyzed during OSM#15 Hackfest and the patch, which will prevent the injection of malicious code by an attacker, was developed by Daniel Arndt (Canonical). Congratulations and big thanks to him! The patches, which include changes in NBI and N2VC, have been delivered in OSM Release FIFTEEN and backported to Release FOURTEEN LTS and Release TWELVE LTS. https://lnkd.in/eZSfeSJy

22

🔐 Teamwork Makes the Dream Work: NIST CSF GV.SC-08 🔐 Cybersecurity isn’t just a solo mission—it’s a team sport! That’s what NIST CSF Subcategory GV.SC-08 is all about: getting your suppliers and third-party partners in on the action when it comes to incident planning, response, and recovery. Why is this important? Imagine your organization is a superhero squad. You wouldn’t leave your sidekicks in the dark during a crisis, right? By involving your suppliers in your security game plan, you ensure that everyone’s ready to leap into action together when it counts. This not only helps squash potential threats faster but also keeps your business (and theirs) running smoothly. For those just tuning in, the NIST Cybersecurity Framework is like a playbook for managing and reducing cybersecurity risks. GV.SC-08 reminds us that when it comes to security, we’re all in this together—so let’s make sure our partners are ready to join the fight. 🌐 Strong partnerships and a coordinated defense? That’s how you win the cybersecurity game and keep your customers cheering. #Cybersecurity #NISTCSF #Teamwork #IncidentResponse #SupplyChainHeroes

2

Interested in Cybersecurity Compliance/Standards in the EU region?? Make sure you grab a bit on the below GDPR: Data protection regulations of EU region giving more stress on information privacy. Covers all core aspects on how data is identified, collected and processed. Makes clear demarcation on data owner, processors, controllers roles. NIS: Stands for Network and Information Systems with the latest version 2. This directive is a key item practiced in the EU region aimed at enhancing the cybersecurity posture among EU member states. They follow some key aspects or canons that forms the basis of any organization's cyber security stand. Aims to strengthen resilience against cyber threats and helps protect your digital infrastructure DORA: Digital Operational Resilience Act. Aims to enhance the IT security of mainly financial entities. Ensures operational resilience. Enhances on ICT risk management, third party risk amanagement TPRM, resileince testing and incidence reporting. CyClone: Cyber Crisis Liasion Organization NEtwork forms a cooperation network for EU member states national authorities in charge of CyberCrisis Management. Aims to collaborate and develop timely information sharing and situational awareness in CyberSecurity  👁

8

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝗳𝗼𝗿𝘁𝗶𝗳𝘆𝗶𝗻𝗴 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗮𝗴𝗮𝗶𝗻𝘀𝘁 𝗟𝗗𝗔𝗣 𝗶𝗻𝗷𝗲𝗰𝘁𝗶𝗼𝗻 𝘁𝗵𝗿𝗲𝗮𝘁𝘀 🖥   Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are exploring the most prominent Active Directory (AD) threats. In this series, they describe the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.     In the latest blog, we're stepping into the world of LDAP-based attacks - where the very protocol designed to streamline directory access can become an attacker’s playground 👉https://lnkd.in/eF88HT73   #cybersecurity #activedirectorythreats #dfir #ldap #cyberattacks 

17

1 comentario

The Government of #Malta have finally decided to start discussing legal protection for #whitehat hackers (a.k.a. ethical #hackers or #security researchers) which is definitely a step in the right direction and I'm extremely happy that this is high enough on the agenda to get special mention. However, I think a proper #legal framework is required for not only the protection of these individuals, but also for the responsible disclosure of #vulnerabilities and encouraging organisations to design and implement #bugbounty programs, or utilise the services of third-party bug bountry platforms. Self-regulation is not always the best way and sometimes we need other people with more hunting experience and a different perspective to call us out and find issues that we may have missed. This is one of the most effective way of detecting issues and resolving them. https://lnkd.in/d7pwsZ3Y #ethicalhacking #infosec

4

IT and cybersecurity risks – key observations in 2024 / Banco Central Europeo Deficiencies in cyber resilience and IT outsourcing continue to be a key vulnerability and will be addressed by #ECB #Banking #Supervision as a priority in the period 2024-26. Continuous improvements to cybersecurity controls, effective management of IT outsourcing and change risks, robust incident management and business continuity plans, and strong #IT #governance are all essential in order to safeguard the integrity and stability of the banking sector in 2024 and beyond. Key observations in 2024 – IT security 💢 Numbers of #cyberattacks and significant cyber incidents have increased considerably, with #ransomware attacks on service providers soaring. 💢On-site inspections and the targeted review of #cyber #resilience have consistently revealed shortcomings 💢IT outsourcing expenses increased by about 7% in 2023, exceeding the general level of inflation, which indicates that the banking industry’s #reliance on third-party service providers has increased further. 💢However, on-site inspections identified specific weaknesses in change #management #processes, including inadequate documentation, testing and approval of the relevant changes prior to deployment. 💢#Banks #report that the unplanned downtime of critical IT systems has stabilised since 2022. Losses due to disruption totalled €72 million in 2023, returning to their longer-term trend after a peak in 2022. 💢On-site inspections and the targeted review of cyber resilience identified numerous issues in the area of #business #continuity #management. 💢Deficiencies were also identified in the areas of #incident and #problem management and crisis communication, with weaknesses. 💢Only 28% of banks report that all data used by #critical #functions are derived from golden sources, while 10% do not derive any of their critical data from golden sources. 💢Data quality management remains the area with the least mature #risk #controls according to banks’ self-assessments, with limited progress made in 2023 relative to the previous year. 💢Some banks still #report #gaps in #IT #asset #management, which is considered fundamental for proper management of IT risk. Several banks have not yet implemented basic IT risk identification measures. 💢In some cases, on-site inspections in 2023 indicated that IT strategy-related #key #performance #indicators were not sufficiently monitored or reviewed. 💢IT expertise at #board #level is still lacking in several cases, with 8% of institutions reporting that they have no non-executive MB members with IT expertise. Centro de Investigación de Ciberseguridad IoT - IIoT

38

2 comentarios

EU’s DORA regulation explained: New #riskmanagement requirements for financial firms https://buff.ly/3M6woyh #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance

1

EU’s DORA regulation explained: New #riskmanagement requirements for financial firms https://buff.ly/3M6woyh #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance

2

Threat modeling in Dutch organizations involves systematically identifying and assessing potential threats to an organization’s assets and operations, with the goal of improving overall security posture. Dutch organizations employ threat modeling to understand potential vulnerabilities in their systems and processes, considering specific national and industry-related risks. By analyzing various threat vectors, such as cyber-attacks, insider threats, and physical security breaches, organizations can prioritize their security measures and implement targeted defenses. This proactive approach helps in designing resilient systems that align with Dutch regulations and standards, ensuring robust protection against evolving threats and enhancing overall risk management strategies.

6

𝗗𝗲𝗳𝗲𝗻𝗱𝗶𝗻𝗴 𝘆𝗼𝘂𝗿 𝗱𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆: 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁 𝗴𝘂𝗶𝗱𝗲 𝘁𝗼 𝗺𝗶𝘁𝗶𝗴𝗮𝘁𝗶𝗻𝗴 𝗽𝗮𝘀𝘀-𝘁𝗵𝗲-𝗵𝗮𝘀𝗵 𝗮𝘁𝘁𝗮𝗰𝗸𝘀 𝗶𝗻 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 🖥   Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Muñoz Scannone, are exploring the most prominent Active Directory (AD) threats. They describe the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.     Read our latest blog, as we crack open the enigma of pass-the-hash attacks - where the currency of your network's trust becomes a counterfeiter's dream👉 https://lnkd.in/eAbxcfuU   #cybersecurity #activedirectorythreats #dfir #passthehash  

15

CVE Delay at NIST is causing a crisis with a major slowdown in populating the NVD. Updates to the CVE scoring process and resource constraints are creating a backlog, impacting open source tools and VPM programs relying on CVE metrics. While NIST struggles, vendors like Qualys are stepping up, offering valuable risk analysis tools that go beyond Severity/CVE scores. Even though Qualys doesn't cover company-specific threats extensively, they excel in including industry-oriented ones. This approach proves more comprehensive than just relying on CVE Scores. Understanding the exposure a company faces from the "known exploited vulnerabilities catalog" is crucial. Exploits leveraging these vulnerabilities can make significant headlines for larger companies. For more insights on the NIST vulnerability backlog and Qualys's response, check out these links: https://lnkd.in/eSgVHcrg https://lnkd.in/eFtN2PEM https://lnkd.in/enindptC https://lnkd.in/e_3rCSUY

2