Chris M

Yesterday we announced the renewal of our 𝗖𝘆𝗯𝗲𝗿 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹𝘀 Certificate of Assurance. Cyber Essentials, A UK Government-backed scheme to help organizations improve cybersecurity defenses against common internet-based attacks. Here are 5 controls you can implement today: - Use a firewall: Create a buffer zone between your IT network and external networks. - Use secure settings: Configure devices and software with secure settings to reduce vulnerabilities. - Control access: Limit data and service access to essential personnel only. - Protect against malware: Use antivirus software and regular updates to prevent harmful software. - Keep devices and software updated: Regular updates patch vulnerabilities and protect against new threats. Our renewed certification highlights our commitment to top-notch cybersecurity. Learn more about how we can help protect your business by booking a demo at the link below ⏬ https://lnkd.in/g_5wtScu #CyberEssentials #CyberSecurity #Certification #DigitalSafety #PrivilegedAccessManagement #ZeroTrust #RemoteAccess #AdminByRequest

13

Cheltenham cyber company is first official local cyber advisor under new government scheme 🌐🔐 A managed IT service and security provider (MSP) based in Cheltenham has become the first MSP in the local area to be accredited as both a Cyber Advisor and a Cyber Essentials Certification Body. This new accreditation will place ReformIT among an elite group of cyber advisers and cyber essentials certification bodies across the UK. The Cyber Advisor scheme was launched by the Government’s official National Cyber Security Centre (NCSC) and The IASME Consortium, aimed at helping businesses to protect themselves from increasing cyber threats. Initially developed for IT products and services suppliers to the central UK government, the Cyber Essentials and Cyber Essentials Plus certification demonstrates that an organisation has an essential level of cyber protection in place. NCSC approved Cyber Advisors provide small and medium-sized organisations across a range of industries with reliable and cost-effective cyber security analysis, advice and practical support, focusing on the key areas of the Cyber Essentials criteria. Continue reading... https://lnkd.in/ePsfWJme #technology #cyber #innovation #government #advising #cybersecurity #businessnews #businessintelligence

1

1 Comment

We face real and enduring threats from hostile states and cyber criminals targeting our critical national infrastructure. Chapter 1 of our Annual Review delves into the cyber threats facing the UK. Read now⬇️ https://lnkd.in/edg8KbQ7

156

8 Comments

https://lnkd.in/eZfp59HD Schools need greater support and funding for protection and mitigation against such attacks. If a school is run as an academy can they face an ICO fine? There were 347 cyber incidents reported in the education and childcare sector in 2023, a BBC report revealed. It represented a 55% increase on 2022.

11

1 Comment

🛟 What is Incident Response and why is it now recognised as a Specialism with the UK Cyber Security Council? Incident Response is the "preparation for, handling of and following up of cyber security incidents, to minimise the damage to an organisation and prevent recurrence". Incident Response protects the security of an organisation’s information systems and data, by following defined procedures to analyse and respond to cyber security breaches. Incident Responders also design and implement measures to prevent a recurrence. Responsibilities are varied, and the applicant will be expected to demonstrate their competency in a wide range of situations, explaining how they responded to an incident, what mitigations were undertaken, how the applicant learned from experiences gained in this field, and how they aim to develop knowledge and competency further. We anticipate this to be a popular specialism due to the wide number of job roles which include it. Responsibilities include:  • Responding to alerts from monitoring/detection systems within defined SLAs  • Using configured tools and scripts to identify potential cyber security breaches  • Following detailed procedures, analyse, responding to and/or escalating cyber security incidents  • Analysing the source, nature and impact of breaches to support threat intelligence  • Monitoring security appliance health, performing basic troubleshooting of security devices and escalating severe problems to engineers  • Contributing to the development of incident response capabilities, policies and procedures  • Maintaining logs of all actions taken. The Cyber Scheme are now processing applications from Incident Responders aiming to get a Professional Title in this field, at Practitioner, Principal and Chartered levels. Find out more here: https://lnkd.in/e_EtYD4j

8

1 Comment

Earlier this year we had an eye-opening talk on #CyberSecurity from Detective Inspector Michelle Ohren at The Cyber Resilience Centre for West Midlands. The threat of cyber crime on all of our organisations is serious – and increasing. The effects of cyber crime on an organisation could include: * Financial costs * Temporary loss of access to files and networks * Website disruption * Unavailability of online services and applications * Corrupted and/or damaged software and systems * Permanent loss of data * Account takeovers * Hacking * Data being exfiltrated and held to ransom * Data released on the dark web * Reputational risk * Risk to vulnerable service users. But there are many things organisations can do to mitigate the risks - and they need not be costly. We held an information event for Sandwell businesses this month, with DI Ohren sharing some key ways that people can protect their organisations from attack. If you missed the event, we have a round-up for you! And a link to a resources page we helped to create for Sandwell Council's Sandwell Business Growth website ✨

2

2 Comments

Our Head of Professional Services, Chris, walks us through the technical aspects of the application process for the Pentest People Academy programme. 👨‍💻 When we review academy applications, these are the things we look for! This video is very helpful for those looking to apply for the PP academy programme or for cyber security roles in general. 👉 Watch our video here: https://buff.ly/4cgwSO4

20

1 Comment

What's the Salary for a Cyber Security Degree? What's the Salary for a Cyber Security Degree? What is the Job Outlook for a Cyber Security Degree? How Much Can a Cyber Security Degree Earn? What Salary Benefits Come with Cyber Security Experience? How Much Can a Cyber Security Degree with Certifications Earn? What's the Salary for a Cyber Security Degree in [Location]? Cybersecurity specialists protect companies' computer networks and digital systems from malicious hackers and other threats. As a result, the job outlook for cybersecurity specialists is excellent, with salaries that reflect this high-level of expertise. A bachelor's degree in cyber security is usually the minimum requirement for entry-level positions, though master's degrees can open doors to higher salaries and more advanced job prospects. Online learning options can also assist you in reaching your objectives. To read more, go to: https://lnkd.in/ezhZPs_c

1

🔒🚨Business Email Compromise (BEC) attacks are becoming increasingly sophisticated, risking sensitive data. The UK's National Cyber Security Centre (NCSC) has released new guidance to help businesses combat these threats. Whilst the NCSC's guidance on BEC makes sense as attacks rise in number and sophistication, it is also putting pressure on stretched IT and security teams. Northdoor plc's AJ Thompson talks to the London Daily News about how companies can tighten up email security. https://ow.ly/F2AV50SvJgM #CyberSecurity #DataProtection #phishing #BEC

4

🚨 Cyber Risk: Why Are We Still Underestimating the Threat? 🚨 Richard Horne, the new head of GCHQ’s National Cyber Security Centre (NCSC), recently stated: “And yet, despite all this, we believe the severity of the risk facing the UK is being widely underestimated.” This isn’t the first warning—and it’s unlikely to be the last. For years, industry experts and government bodies have highlighted the growing dangers of cyberattacks. We’ve witnessed high-profile breaches, ransomware crippling operations, and supply chain attacks causing ripple effects across industries. Yet, here we are. A persistent gap in urgency, action, and investment. Why? Is it a lack of awareness at board level? A belief that "it won’t happen to us"? Or are organisations simply overwhelmed by where to even start? When the inevitable happens—and we all know it’s a matter of when, not if—the impacts will go far beyond financial losses. Trust will be shattered, customers lost, and reputations irreparably damaged. 💬 So, I ask you: Why does the industry remain so slow to act? What must change to shift us from complacency to resilience? Let’s spark a conversation—whether you’re in cyber security, technology, or leadership, your insights matter. Share your thoughts below. 👇 #CyberSecurity #RiskManagement #Leadership #DigitalTransformation #NCSC

18

Further Cyber Security Agony for the UK Government - What's Going On? 🛡️💻 The Defence Secretary, Grant Shapps, apologises to over 270,000 members of the Armed Forces impacted by a cyberattack on the UK Ministry of Defence's outsourcing partner, revealing a breach targeting banking details and personal records. Amid growing concerns over national security, suspicions point towards China, prompting calls for a reassessment of Sino-British relations and a reevaluation of cybersecurity measures to protect critical infrastructure. To read Curia's analysis, by Robert Clark, please click below 👇 https://lnkd.in/gEbWkG_C #Cybersecurity #UKPolitics #UKGovernment #NationalSecurity #CyberAttack #MoD #ArmedForces #CyberThreat #UKDefence #DigitalSecurity #CyberCrime #DataBreach #CyberDefense #CyberAwareness #InfoSec #CyberResilience #GovernmentSecurity #UKMilitary #CyberSecurityAwareness #UKNationalSecurity #DefenseSecretary #CyberSecurityStrategy #CyberSecurityAwareness #UKTech #CyberSecurityResponse #UKCyberSecurity #UKDefensePolicy #CyberSecurityMeasures

5

1 Comment

The ICO have chosen not to fine the London Borough of Hackney for the October 2020 attack and data theft, as the fine will end up impacting the people they serve. Instead the ICO have issued a reprimand. The ICO could have enforced further cybersecurity improvements, or regular external audits, but have not done that. The ICO notification does contain some good detail on the attack (somewhat redacted), showing that an RDP service with no MFA was used to gain initial access. The 15 year old account used to access had the username "kiosk" and the password "kiosk".... From the InfoSecurity article: "In the October 2020 attack, threat actors infiltrated LBoH computer systems and accessed, encrypted and exfiltrated records containing personal data. This included highly sensitive information on residents’ racial or ethnic origin, religious beliefs, sexual orientation, health data, economic data and criminal offence data. In addition, personally identifiable information (PII) such as names and addresses were accessed in the attack, which was traced to the Pysa/Mespinoza ransomware group." "Stephen Bonner, Deputy Commissioner at the ICO, commented: “This was a clear and avoidable error from LBoH, one that has resulted in a mass loss of data and has had a severely detrimental impact on many residents.” https://lnkd.in/e7KnQAmM

2

2 Comments

Black Arrow Cyber Threat Intelligence Briefing 09 August 2024: -UK Business Struggling to Prioritise Cyber Security Needs -The C-Suite Conundrum: Are Senior Executives the Achilles’ Heel of Cyber Security? -Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication -Malware-as-a-Service and Ransomware-as-a-Service Lower Barriers for Cyber Criminals -How the Theft of 40M UK Voter Register Records was Entirely Preventable -18-Year-Old Security Flaw in Firefox and Chrome Exploited in Attacks -99% of Global 2000 Companies Directly Connected to a Supply Chain Breach -Email Attacks Skyrocket 293% -Police Recover Over $40m Headed to BEC Scammers -Russia's Priorities in Prisoner Swap Suggest Cyber Focus -Point of Entry: Why Hackers Target Stolen Credentials for Initial Access -FBI: BlackSuit Ransomware Behind Over $500 Million in Ransom Demands -Survey: 78% of Ransomware Victims Paid and 74% Suffered Multiple Strikes -Finance Should Pay Much More Attention to Undersea Cables Risk #blackarrowcyber #cyber #threatintelligence #threatreport #opensourceintelligence #riskmanagement #grc https://lnkd.in/eRPYZwZ5

4

A Teacher Tapp survey found that 34% of schools & colleges in the UK are at risk of cyber attacks and that no adequate cyber security training is provided for teachers which can be critically damaging. https://buff.ly/4eKdHwY #cyberresilience #cybersecurity

2

On Day 1 of #CyberUK24 please stop by the stand and say hello to the CYSIAM team. #CYSIAM #CyberSecurity #CyberCapacityBuilding #ManagedDetectionandResponse #CyberThreatIntelligence #IncidentResponse #DigitalForensics

32

Boost your #business immunity! This is a FREE service from the National Cyber Security Centre to help you inform those important #riskmanagement decisions.

4