Lucas Catranis

The Netherlands - Champion Facilitating Cybercrime? Yesterday I had the pleasure of commenting on recent research, showing a whopping 🍰 41% of "Cyber Incidents" run through (or via) servers in Dutch IP space. Yes, the Netherlands is the Suez Canal of the Internet, but there are some subtleties... ⛑️ We don't know what the researchers mean with "Cyber Incidents" - although we can hypothesise they mean the IP addresses found in malware, of C2s, Proxies, Phishing websites, exploit kits, and other transient services... 🦹‍♀️ A lot of contraband flows through the Suez canal, that doesn't make Egypt the smuggler capital in the world... Most if not almost all criminals operating these services are from outside the Netherlands 🦺 Yes, Bullet Proof hosting is indeed an issue... Dutch Lawmakers have it on their radar - not only for cybercrime... 🛣️ Should the government do more? How do we do that without draconic measures like breaking encryption...? 🥫 Lots of sides to this, but as the Dutch say... "The soup is not eaten as hot as it is served"...

37

1 commentaar

This is yet another proactive service that Trend Micro can provide to help you and your company to be better protected and helping you to identify where you should increase your security posture. Ping me if you like to know more !

6

🥋 Defend Against Volt Typhoon with SCYTHE 🦄 Understanding and predicting an adversary's moves is critical to defense strategies. With Volt Typhoon targeting critical infrastructure, these defensive strategies are more important than ever ❗ ❗ 🤔 How are you ensuring your defense strategies are strong and working properly? 🤔 SCYTHE has created an emulation focusing on the behaviors of the treat actor group. #technology #CTI #CISO 👇 Read more and learn about SCYTHE's cyber adversary simulation here 👇 https://lnkd.in/gzzR_ygt

6

Mimecast CEO Marc van Zadelhoff recently spoke with the Financial Times for their Tech for Growth Forum on #cybersecurity. Get insights on attack trends and best practices for defense here:

3

New High Severity Alert issued by NHS England today, relates to Critical vulnerability in Veeam's Backup and Replication product and CVE-2024-40711 is being actively exploited by ransomware groups. Review the Veeam Security Bulletin (September 2024) "KB4649" and update Veeam Backup & Replication to version 12.2 (or above) as a matter of urgency. For more information please see https://lnkd.in/eASabSgP #Veeam #NHS #CyberSecurity #Critical #CSOC #NHSEngland #CyberAlert

59

Fascinating podcast from my Check Point colleagues Antoinette Hodes and Ard de Goede who reveal the Dark Web's IoT army: their goals, tactics and most importantly - what can be done to stop them! Tune in! #cybersecurity #iot

10

Are you attending Cloud Expo Netherlands, 4-5 December? Join Mark Troyer, LastPass VP Global Solutions Consulting, for our speaking session 'Mind The Gap! MFA + SSO Is Not Enough' on 5th December at 10:30 CET (Theater 3). Your business likely has a security stack in place. While that lays the foundation for your security strategy, there are often gaps, which can lead to unauthorised and unmanaged apps and the vulnerabilities that follow, such as compromised credentials, data breaches, account takeovers and loss of data.  -Discover the perils of insecure credentials sharing and the impact on your organisation.  -Learn how you can manage logins not covered by SSO through IDPs like Microsoft Entra. If you’re not covered on every login, you’re not fully protected.  -Traditional passwords are becoming a bottleneck and inconvenient. Uncover the solution to this pain!  Cloud Expo offers an extensive program of sessions on cloud technologies and the latest innovations, providing a perfect balance between learning and networking. Register here today! https://lnkd.in/g5K4qgFs

5

Very pleased to have contributed to Kristian McCanns article on #ExposureManagement #CTEM in Cyber Magazine. The piece explores the the expansion in #attacksurface many companies are suffering and introduces some key concepts for dealing with the changes. Read more here: https://lnkd.in/eJJEvcui

60

2 commentaren

Tyler J. Farrar CISOs should have a "seat at the table" because cyber risk is business risk. However, to earn this seat, CISOs need a process and tools to align their security programs with business goals. This requires a credible risk-driven process for sizing the security budget and allocating that budget across people, processes, and technologies.   By risk-driven, I mean identifying the cyber-related loss events of concern to business leaders and driving the cybersecurity program to reduce the probability of material impact from those events to a level acceptable to the executive team and the board.   This requires tools that credibly connect security metrics to business risk expressed in dollars. I call this "Moneyball for Cybersecurity."   The book and the movie Moneyball were about increasing the probability of winning baseball games by using analytics to improve player selection in a budget-constrained environment.   Moneyball for Cybersecurity is about reducing cyber risks by using analytics to improve control* selection in a budget-constrained environment.   *By control, I mean any combination of people, processes, and technologies that reduce the probability of material impact due to cyber-related loss events. See my Comment for a link to my LinkedIn article on Moneyball for Cybersecurity. #moneyball4cybersecurity #cybersecurity #informationsecurity #infosec #CISO #risk

6

1 commentaar

IPv4 prices are *declining* partly due to IPv6 adoption (now 45%) via Risky Biz https://lnkd.in/eVDZERSD

2

Big thanks Computable.nl for featuring me in their latest piece on the hacking of 2,700 Dutch #IoT devices. This incident clearly demonstrates the urgent need for preventative security controls, especially with IoT. We need a Zero Tolerance approach to secure our devices and the entire supply chain, ensuring a safe and resilient ecosystem. Imagine the scale of threats if these operations are combined with AI (strong defences are is essential). We have entered an era where everyday IoT devices, like routers and webcams are being weaponized in international cyber conflicts. It also outlined that what still haven’t learned from Mirai (from 2020 and is still going strong today), RSOCK proxy botnet or even more recent threats regarding Ubiquity cameras. The malicious actors behind the botnet are Flax Typhoon (and partner Volt Typhoon). Both presented themselves as experts, an information security group called the Integrity Technology Groups. They were able to fly under the radar for an extended period. They blended into the crowd, looking like one of the "good guys," while pulling off some of the most advanced cyber espionage operations seen in recent years. They were able to steal data, get valuable intelligence and gain access to critical infrastructures, government agencies, enterprises and universities. Trust in cybersecurity must be earned and continuously verified. You can read the article here: https://lnkd.in/en6_tbmF Check Point Software Technologies, Ltd. - Benelux #iot #iotsecurity #zerotolerance #threatprevention #supplychainsecurity #ai #cyberwarfare #internetofthings #iiot #iotecosystem #embeddedsecurity #youdeservethebestsecurity #xiot #ciot

18

There are pros and cons to AI, but the impact on Dutch consumers can’t be ignored! Especially as, according to our latest research on consumer attitudes towards their digital footprint, digital identity, AI and login experience, nearly two thirds (65%) believe that AI is making the online environment less safe. But how do we solve this problem, create compelling and seamless consumer experiences, and ensure that the online environment remains secure? Find out more in our latest piece in TechZine and why companies need to move quickly to ensure they have the security strategy and robust culture to protect their data! Techzine.eu: https://lnkd.in/dMF7mA7A

50

1 commentaar

📢 In the first episode of Alert Enterprise *Locked In On Security*, hosts Willem Ryan and Reta Booij, joined by experts Yogesh Ailawadi and Lou Caputzal, ask the tough questions: Can a #fragmented approach to security still work in today’s threat landscape? 💡 Is the real roadblock to #convergence a cultural divide between #cyber and #physical security? ❓ Is physical security ready to have a seat at the boardroom table? Through eye-opening use cases, they reveal how a #unified security approach isn't just a luxury—it’s a necessity. Are we ready to face the uncomfortable truth about #legacy security measures? Tune in to find out. https://lnkd.in/eJ2AeC_8

16

1 commentaar

This blog does a great job explaining the pivotal role Software Bill of Materials (SBOMs) play when it comes to #CloudSecurity. 💡 In today's dynamic app development landscape, understanding the nuances of open-source components, licensing, and security is crucial. Explore how SBOMs offer a comprehensive solution to these challenges, shedding light on code dependencies and enhancing #AppSec. Read on to learn how Sysdig integrates SBOMs into the vulnerability management process for its #CNAPP and how this contributes to a more secure cloud-native ecosystem. ⤵️

4

"Cybersecurity has changed everything about the managed services space, from the services partners can offer to the complexity of the solutions delivered to customers." A fantastic article written by Robin Ody at Canalys. 34% of partners expect over 20% year-on-year growth in their cybersecurity revenue in 2024!!! #ChannelPartners #MSPs #Cybersecurity

13

Faster, more accurate with more cost-effective mitigation techniques…the answer to today’s short-lived, damaging ddos attacks - https://lnkd.in/eWr5A-Ub #ddos #networksecurity

11