Ian Bowell

The UK’s consumer connectable product security regime comes into effect today. Perhaps not the slickest named policy but some good security guidance which could be applied for more general purposes: 🗝 Passwords should be unquie and not easy to guess. 📋 Security issues should be reported. ⏱️ Security updates should be installed in a timely manner. https://lnkd.in/dscqhQde

4

Ransomware is an ever-present threat for UK businesses, but irrespective of whether the ransom is paid, an attack means organisations have lost control of their information. An interesting read from the NCSC 👇 #Ransomware #DataSecurity #BusinessRisks

4

Majority of Government Bodies Refuse to Buy into Cyber Insurance Despite Increasing Breach Risks bit.ly/3YAVivT Apricorn the leading manufacturer of software-free, 256-bit AES XTS hardware-encrypted USB drives, has today announced new findings from its annual survey and FoI (Freedom of Information) requests, revealing a concerning disregard for cyber insurance across both public and private sectors…. #cybersecurity #security #cyberInsurance #SecurityIndustry

1

HTNI Awards: start-up of the year Dasera Overview: Dasera aims to empower organisations to manage risk across the entire data lifecycle from creation to deletion, by automating data discovery, classification and access control. Why? Historically organisations have tended to categorise data security as a budget line item, Dasera notes, leading stakeholders to “prioritise spending over reasoning” and leading to challenges around decreased cyber security spending. Dasera highlights the “indispensable value” of cyber security solutions and chose to strategically pivot and align its offering with emerging needs around generative AI. To find out more about our finalists and their work click here: https://lnkd.in/eUKTVJrn DATE FOR THE DIARY - We’ll be announcing the winners in a digital ceremony on 21 November ! Keep up-to-date with what's happening in hashtag #digitalhealthcare on an international level: https://htn.international Subscribe to our newsletter here 👉 https://lnkd.in/eEMK7hJG

9

Our client discusses the lack of Cybersecurity funding mentioned in the Autumn Budget. "Failing to prioritise cybersecurity weakens our defences and leaves us vulnerable against increasingly sophisticated cyberattacks". https://lnkd.in/eWrPbAFC 🙌 #Thestack #Budget #AutumnBudget #UKGovernment #Cybersecurity #TheStack

3

🚨 Yesterday the National Cyber Security Centre's Richard Horne warned that the UK is underestimating the severity of online threats from hostile states and criminal gangs, including major supply chain attacks. He referenced this year's ransomware attack on Synnovis, which caused a critical IT incident across two NHS Trusts and seven hospitals. Supply chain cyber risks extend beyond your organisation's third-party vendors. Fourth-party risks introduce hidden vulnerabilities that could compromise your data and operations. Learn more how to identify, manage and mitigate fourth-party risks, to ensure your organisation remains resilient from threat: https://lnkd.in/gsyRTC7V #CheckPointUKI #riskmanagement #cyberresilience

7

Deloitte UK Faces Massive Cybersecurity Crisis as Brain Cipher Claims 1TB Sensitive Data Breach. Brain Cipher invited Deloitte representatives for private negotiations, suggesting a potential ransom demand. Read more on: How About Tech 👇 https://lnkd.in/dCg3YkcX

1

Why should everyone prioritise data integrity? In a world driven by data, compromised data can lead to severe consequences- from security breaches to financial losses. In the Spring edition of the Sunday Times Scotland Business Magazine CEO Innes Auchterlonie and Major General Martin Smith CB MBE DL of CyberPrism discuss why organisations across industries should focus more on data integrity, and the key challenges they face in maintaining it.   Read the full article on page 11 here: https://lnkd.in/eYxthqss   

57

New Report on Cyber Security Budgets reveals 37% of Large Firms will increase Budget in ‘24 Full Report = https://lnkd.in/ejSBf-E9     Bravo all to RSM including Edgar Carreon & Taha Parekh, CSM for their great work on #CyberSecurity

3

TFL Confirms Data Breach In Recent Cyber Incident🚊 You may have received an email from TFL yesterday, updating customers on the activity that has arisen over the last week involving a Cyber incident. I've summarised it below, in case you missed it: Transport for London is handling a cyber security incident that has impacted systems and operations. Suspicious activity was detected on September 1st, prompting swift action and a thorough investigation with the National Crime Agency and National Cyber Security Centre. Some customer data, including names, contact details, and bank information for around 5,000 Oyster card users, has been accessed. TfL is contacting affected customers and has implemented measures such as suspending live Tube arrival information and halting new Oyster photocard applications. Customers using contactless payment are also facing disruptions in accessing journey history and refunds. Limited system access for staff is causing delays, and TfL is conducting an internal IT identity check, potentially leading to temporary service disruptions. TfL assures the public it is taking steps to secure systems and minimise the impact on journeys. More info can be found here: https://lnkd.in/etVYQd8a #CyberSecurity #DataBreach #TFLUpdate #DigitalSecurity #CyberIncident #TransportForLondon #NCSC #CyberThreats #PublicTransport #TechNews #SecurityBreach #DataPrivacy #ITSecurity

35

It's concerning to see vulnerabilities like this in widely used SSH clients. The move towards non-mathematically linked tokenisation and randomised approaches could indeed provide more robust security against quantum threats. There too many key vulnerabilities and is not slowing down. https://lnkd.in/emj6Riri

9

1 Comment

ICO urges organisations to strengthen cyber security amid rising attack risks The ICO reports a sharp increase in cyber attacks, urging sectors like finance, retail, and education to bolster cyber security.

1

A introductory post (https://lnkd.in/eNZg6vFf) from Mark Starling on our approach to application security as an integral, continuous aspect of solution delivery at Storm ID with the Secure Software Development Lifecyle we have introduced, including: - Threat modelling as part of discovery and technical design - Software Composition Analysis (SCA) of the solution dependency graph - Static Application Security Testing (SAST), manual and via continuous integration tasks - Dynamic Application Security Testing (DAST), manual and via continuous integration tasks - Centralised analysis and management of vulnerabilities using a Vulnerability Management System

27

📢 Our COO Sarah Blundell has written an insightful blog for Operational Technology Security Impact Day with techUK How to navigate the crucial link between cyber security and operational technology. You can read it 👉 https://lnkd.in/d8_Ca5nJ For more info on the day and the rest of the #techUKOTSecurity Hub: https://lnkd.in/dGx8nvz5 #techUKCyber #CyberSecurity #OTCyberSecurity

4

Cybersecurity, AI and the NHS 🚀 📢 Since the autumn of 2022, AI has been at the centre of much public discussion, focused on its potential to revolutionise how we live our lives, solve problems and overcome the challenges of the 21st century. It has played a role in transforming health and social care for much longer, but with an increased reliance on new technology come new risks and new challenges. I am conducting a research study as part of my MSc at Imperial College London, exploring the cybersecurity challenges and implications of adopting artificial intelligence in the NHS. If you, a colleague, or your organisation is thinking about, or has, implemented an AI solution in the NHS, please complete my survey and consider participating in a follow-up interview. #cybersecurity #artificialintelligence #GenAI #NHS #research

22

4 Comments