Deepak Veerasamy

To safeguard your organisation from APTs (advanced persistent threats), it's important to have a strong defence plan in place. This involves: → Focusing on basic security measures: Make sure access controls are strong, limit device access, and keep endpoint security effective to stop initial attacks. → Keeping an eye out for any unusual activity: Use reliable monitoring tools like SOC and SIEM to quickly detect and respond to suspicious behaviour. → Training your staff regularly: Teach employees about APT tactics, phishing, and social engineering to reduce the chances of successful attacks. → Staying proactive: Stay ahead of evolving threats by upgrading security tools, using advanced features like MFA and UEBA, and regularly checking for vulnerabilities and applying patches. #CyberSecurity #APTProtection #SecurityMeasures #EmployeeTraining #ThreatDetection #CyberMatters

4

CERT NZ's Latest Cyber Security Insights Report - 2024 Q2 In the face of increasingly sophisticated and frequent cyberattacks, businesses must remain proactive in their security efforts. New Zealand has taken a significant step towards bolstering its cyber defenses by merging CERT NZ with the National Cyber Security Centre (NCSC). Now the country's lead operational cyber security agency, the NCSC operates under the Government Communications Security Bureau and offers a full spectrum of cyber security services to all New Zealanders. Read the full article here: https://lnkd.in/enjy-PKC #Security #ITSecurity #CertnNZ #CyberSecurity #CyberDefenses #iT360 #NCSC

5

Some great insights from CERT NZ with their Quarterly Cyber Security Insights report released today. Highlighting Passkeys and the associated increase security and ease of use for consumers.

13

Introducing Tony Vizza, Executive Director of KordaMentha who will present at RIMPA Live 24 and will discuss Cyber Security. The presentation will focus on the fundamental security issues that exist with organisations that have failed to identify risks, protect from those risks, detect cyber risks, respond to realised risks and recover from those risk eventualities. This presentation will highlight strategies related to cyber risk management from a data management and governance perspective and will illustrate the operational costs that exist for organisations who are not ready for the inevitable cyber incident. Tony will discuss strategies that organisations can employ that will assist them minimise their cyber risk, maximise the effectiveness of their incident response approaches and achieve better operational efficiency and business risk management as a result. RIMPA Live is on 3-5 September at Adelaide Convention Centre, tickets are available now: https://lnkd.in/gNMhmi-Z Business Events Adelaide #RIMPALive24 #RIMPAglobal #adelaide #businesseventsadelaide #records #informationmanagement #conference #eventsadelaide #southaustralia #cybersecurity #cyberrisks #datamanagement

6

The NCSC is aware of a multi-stage phishing campaign currently impacting New Zealand organisations, active since at least 05 June 2024.   Compromised user accounts are being used to send phishing emails which may originate from trusted or known contacts. These are being sent via Microsoft OneDrive/SharePoint sharing invitations, in an effort to redirect users to malicious websites and harvest credentials or session tokens.   Organisations are urged to monitor for this activity and remind their staff to be vigilant of any sharing links received, especially from external domains. Additionally, consider any further security controls which may be applied to help mitigate this activity. https://lnkd.in/ga8KjDak #cybernews #cybersecurityawareness #cybersecurityisalifestyle #humanfirewall #Buildinghumanfirewall #cyber #phishing

1

New statistics from the Office of the Australian Information Commissioner (OAIC) show the number of data breaches notified to the regulator in the first half of 2024 was at its highest in three and a half years. The OAIC was notified of 527 data breaches from January to June 2024, according to the latest Notifiable Data Breaches report released on September 16, 2024. This is the highest number of notifications since the July to December 2020 period and an increase of 9% from the second half of 2023. Read more in the attached article. #DataBreaches #OAIC #Cybersecurity #InformationSecurity #Privacy #DataProtection #Australia #NotifiableDataBreaches #2024Statistics #DataBreachReport #CyberThreats #DataSecurity #RegulatoryCompliance #SecurityAwareness #CyberRiskManagement https://lnkd.in/e_B7P_K5

2

This week the Minister for Home Affairs Tony Burke introduced a suite of critical infrastructure and cyber security reforms that form the key legislative pillars of the Government’s 2023-2030 Cyber Security Strategy. These are some of the most significant pieces of legislation since the Security of Critical Infrastructure Act 2018 (SOCI Act) reforms in 2020/2021. In our latest blog, CyberCX's Grant Walsh says that while the reforms are wide-ranging and will impact organisations across the entire economy, it’s worth zeroing in on one sector in particular: Telecommunications. "The reality is that the telco sector has long been forward leaning in terms of security and cyber security," says Grant. “But with an evolving threat landscape and in the face of multiple high-profile breaches – including a number within the telco sector – this shift to SOCI Act alignment for telcos had become inevitable”. Read the blog where Grant explores the challenges this will pose for telco security teams, and provides some pragmatic steps CIOs and CISOs can take in preparation: https://lnkd.in/dUfEa3Bh

34

SAFEGUARDIAN LAUNCHES IN NEW ZEALAND TO COMBAT RISING CYBER THREATS   SafeGuardian, a leading cybersecurity company, today announced its entry into the New Zealand market, offering comprehensive security solutions to protect Kiwi businesses from increasingly sophisticated cyber-attacks.   "New Zealand businesses are facing unprecedented cybersecurity challenges," said Kerry Paltridge, Product Lead at SafeGuardian. "Our mission is to provide Kiwi companies with the best global security tools and threat visibility solutions, Supported by local experts. In this environment, it is imperative to deliver solutions to organisations that effectively defend against these rapidly evolving threats."   SafeGuardian's approach addresses critical gaps in New Zealand's IT and OT security landscape:   Tailored, hands-on advisory services that offer pragmatic outcomes to, often complex, governance and compliance requirements. 24/7/365 threat detection and response, delivering global visibility and response with a local context. Enhanced visibility across both OT and IT environments, providing a single source of truth for your security posture. Advice, training and assessment of people, process and solutions to secure the full lifecycles of code development.   "Many New Zealand businesses lack the internal resources to effectively manage cyber risks," explained Paltridge. "Our team, with over 75 years of combined experience, brings world-class capabilities to the local market, wrapped with local expertise."   The launch comes at a critical time. According to CERT NZ, financial losses to cybercrime increased in the second quarter of 2024, with the majority coming from large incidents. The most common attack methods include phishing (37%), third-party cyber-attacks (28%), and cloud misconfigurations and vulnerabilities (28%).   SafeGuardian's services align with recent security guidance from the Five Eyes intelligence alliance, which emphasises the importance of robust cybersecurity measures for tech start-ups and businesses. The guidance highlights the need for strong access controls, regular security assessments, and comprehensive data protection strategies - all areas where SafeGuardian excels.   "In light of the Five Eyes security guidance, it's clear that businesses, especially tech start-ups, need to prioritise cybersecurity from day one," Paltridge added. "SafeGuardian is uniquely positioned to help New Zealand companies implement these crucial security measures, protecting not just their data, but their intellectual property and competitive edge in the global market."   Despite these challenges, 85% of businesses report confidence in their cyber security safeguards. However, SafeGuardian cautions against complacency. "Cyber security is a continuous exercise and needs to evolve to meet any operational changes," Paltridge emphasised.   FOR FURTHER INFORMATION CONTACT: Tony Jenkins Co-Founder & Director, SafeGuardian E: [email protected] M +6421556650

2

Did you know: The absence of multi-factor authentication led to the Medibank hack in 2022? This attack leaked 9.7 million current and former Medibank and AHM customers information, impacting the business and their customers significantly. Secure your business today. Invest in expert cybersecurity management, and incident prevention with ASE: https://lnkd.in/eVM_yX7w #2fa #cybersecurity #cybereducation #cybersupport #itsupport #ithelp #itsolutions #cybermanagement #digitalsolutions #ASE

14

Warning signs missed by overloaded IT - proves having the tools does not mean you are secure. Medibank had invested in a quality EPP system - that did its job. It detected risks and issued alerts. The problem was that no one read them, no one followed it down to resolution - until it was too late. This is where SMBs are most stretched, protecting their networks and cyber assets from the unknown, while managing day-to-day requirements. The sheer volume of alerts is unmanageable by most IT teams even with a dedicated SOC without advanced support tools. Very few SMBs can afford the cost of building running and maintaining a dedicated 24*7 NOC, let alone a 24*7 Cyber Certified SOC team with MDR, EPDR, and EPP tools along with EITM Threat and Deep / Darl Web analysis. For an SMB to outsource their SOC to a 24*7 MSSP generally costs less than hiring one full-time Cyber Certified SOC operative, and you would need at least 6 of them for 24* plus holiday cover - and that's if you can find them. ISC2 and EC COuncil both say the number of vacancies for Cyber Certified personnel is between 1.4 and 2.1 million vacancies - and rising. And then add the cost of the tools, and the hardware, and the hosting, and the BC Hotsite, and continuous training & cerification. A properly run SOC does the heavy lifting, handles critical events, detects and notifies immediately, manages Incident Response- and coordinates them with your in-house IT. By its very purpose, it gives you and your IT Team peace of mind to know that someone has an eye on the store 24*7. While it would cost on average 15% of setting up your own (excluding maintaining it), It will certainly be a lot less than the fine Medibank will receive for this clear case which can only be seen by the Privacy Commission as a case of negligence. https://lnkd.in/gacrevWV Consider an outsourced Managed SOC - the benefits far outweigh the costs. Rebuilding your systems is time and money. Rebuilding your reputation costs a lot more than that. #ManagedSOC #SOC #MDR #EPDR #EPP #CyberSecurity

1

Use the Essential 8 framework to bulletproof your business against cyber threats. The Essential 8 cyber security framework is produced by the Australian Cyber Security Centre (ACSC). It is the industry standard eight essential mitigation strategies that organisations can use to improve their cyber security and achieve greater cyber security maturity. Implement these 8 strategies into your business today and harden your digital security. Download our free Essential 8 security guide here >> https://lnkd.in/gqsT4tt4 #cybersecurity #techtips #cyberguys #itsupport #smallbusiness

2

💣 Vulnerability Management Metrics: How to be effective 💣 🔒 Implementing a robust Vulnerability Management Program is a critical step in strengthening your organisation's cyber defences. But how do you determine its effectiveness? Success cannot be measured merely by the number of vulnerabilities identified or patches applied. 🔒 Key metrics can provide a clear picture of your program's performance and effectiveness. More details in the article below 👇 #cybersecurity #vulnerabilitymanagement #riskmanagement

1

Why Security Should Always Stay on Comms – Even on a Break - Part 2. When we think of security personnel, we often envision them actively patrolling, monitoring cameras, or responding to incidents. But what happens during their break? Should security stay connected, even when they are off duty for a short time? The answer is a resounding yes. Maintaining communication, even during breaks, is critical for ensuring the safety of people, property, and the security team itself. In this blog post, we’ll explore why security should always stay on Comms—even when taking a well-deserved break. Key Takeaways: 1. Emergencies Don’t Take Breaks 2. Team Coordination and Backup 3. Monitoring for Suspicious Activity without sacrificing safety. 4. Ensuring Personal Safety obligations and safety standards. 5. Maintaining Situational Awareness 6. Legal and Liability Issues 7. Customer and Public Perception Read more on our Recruitment Blog: https://lnkd.in/gHnH9CEW... #SecurityNZ #EmployeeRights #FlexibilityMatters #BreakEntitlements #SafetyFirst

2

🚨 Free Course: Maximising Cyber Resilience 🚨   Are you looking to enhance your organisation’s cybersecurity posture? Pentagram Advisory Pty Ltd and CI-ISAC Australia are inviting you to enrol in our free course: Maximising Cyber Resilience: Unlocking the Benefits of CI-ISAC Australia Membership.   This course is designed to: ⭐ Educate potential and new members on the benefits of CI-ISAC membership. ⭐ Provide a clear understanding of how to utilise Cyber Threat Intelligence (CTI) and other CI-ISAC resources. Help you take actionable steps to strengthen your organisation’s cybersecurity.   Why enrol? 📘 Learn: Gain insights into maximising CI-ISAC resources for enhanced protection. 🔑 Unlock Benefits: Understand how CI-ISAC supports members with threat intelligence. 🚀 Act: Build a stronger, more resilient cybersecurity framework.   👉 ENROL HERE: https://lnkd.in/gkTfh3sK   Don’t miss this opportunity to elevate your security capabilities. Let’s work together to safeguard Australia’s critical infrastructure. 🌐   #CyberResilience #CIISAC #FreeCourse #CyberSecurity #CriticalInfrastructure #SOCI #PentagramAdvisory #eLearningHub

11

1 Comment

Cybercrime is on the rise. Stay one step ahead with our cybersecurity courses. The cybersecurity course will provide you with skills and knowledge to fortify your digital defenses. Benefits: •Secure systems and data •Run key updates •Use a password manager •Audit access to your applications •Discover best practices for data privacy Enrol today: https://buff.ly/3TvvRYy #cybersecurity #onlinecourses #phambanotech #techsoupcourses #techsoupinsouthernafrica #nonprofits

1

The 'Compliance Enforcement' setting available to the MAS Administrator enables log-in access to MAS if the App Point Value is exceeded. If the setting is disabled, users will be able to log into the system. This can be important for unexpected emergencies when a surge of users requires access. However, consistent over usage of App Points can cause license non-compliance. Learn more ➡️ https://bit.ly/3JY1wiq #MavenTip #MavenExperience #ThatsSoMaven #DrivingEAMForward #MAS #Maximo #AssetManagement

11