Jason Dance

MY WEEKLY WRAP #15 - Back to positivity Word of the week - progress SUMMARY: ✅ We had 5 sales meetings this week for managed services and we also had 3 meetings for ISO 27001. Both services attract different types of customers which is interesting and refreshing. ✅ The folks ar Clevero wowed us, thanks Lez Yeoh. ✅ Attended Deep Tech Melbourne and while I had to leave early, super interesting world out there! TRYING/FAILS/LEARNING: 🔥I failed at financial forecasting correctly and due to a lost contract, I’ve had to make changes around how we spend money. Never nice remembering your own business mortality. 🔥I am learning that my sales style to educate then sell, is actually a good method. After a few ghosts and lost deals it was hard to see that. 🔥 We are moving our ticketing to Intercom to make our customer service more than two dimensional (phone and email) and instead 5 dimensional (Teams, Slack, WhatsApp, and chat bot). 🔥 Failed to get this post up on time! THOUGHTS: 🧠 having a friend help you start a business is pretty good, unless they don’t pay their bills, then it’s just slowing your business down. Purpose: I'm sharing these weekly updates to allow people to participate and share in KAVIRA IT's journey from start-up to full-service IT and cybersecurity firm protecting and empowering SMBs. Please share in the mission - making the world a better place one business, employee, user and endpoint at a time - by tagging someone that is worried about cybersecurity, having a poor experience with technology, or wants a technology provider who cares, is accountable and communicates effectively. #weeklyupdate #growth #journey #empower #protect

14

1 Comment

#Office365 is an ever-evolving powerhouse, and with Soteria - Security Solutions & Advisory Inspect, you no longer have to speculate where vulnerabilities might lie in your tenant. We're thrilled to introduce Inspect to the #CaymanIslands, enhancing security for all our clients. Discover how we can help safeguard your operations—contact us today! #CyberSecurity #DataProtection

4

Do you have #cyber, #data or #ITManagedServices requirements? Check out the ScotlandIS #Capability #Directories. It houses all the #capabilities of #Scotlands #cyber #data #ITMSP companies #nationwide #wide supported by The Scottish Government It’s easy to use, you can filter depending on service required You can find all the #capability #directories on the ScotlandIS website Www.scotlandis.com #ScotlandISSupporting #Capabilities #cyber #data #itmsp #services #directory #Scotland

20

📢 Our COO Sarah Blundell has written an insightful blog for Operational Technology Security Impact Day with techUK How to navigate the crucial link between cyber security and operational technology. You can read it 👉 https://lnkd.in/d8_Ca5nJ For more info on the day and the rest of the #techUKOTSecurity Hub: https://lnkd.in/dGx8nvz5 #techUKCyber #CyberSecurity #OTCyberSecurity

4

🎙️ Surfacing Security Podcast: Shadow Exposure - The Hidden Risks in Enterprise Software What if the most critical vulnerabilities aren't where you expect them? In our podcast, we dive deep into 'shadow exposure' - the hidden security risks lurking in widely-deployed enterprise software. We explore: 🔍 Key Insights: - Why brand recognition doesn't guarantee security - How pre-auth vulnerabilities pose the greatest real-world risk - Why traditional vendor assessment methods often fall short - The critical importance of continuous monitoring At Assetnote, our security research team specialises in discovering these issues before they become public. When we find new vulnerabilities, our customers get immediate alerts and mitigation guidance - often months before disclosure. Real security isn't about theoretical vulnerabilities. It's about identifying and addressing the issues that pose genuine risk to your attack surface. 🎧 Listen to the full discussion: Apple Podcasts: https://buff.ly/3BgRuYO Spotify: https://buff.ly/3XHxeXW YouTube: https://buff.ly/3THKD0U What's your take on shadow exposure in enterprise software? How does your organization approach this challenge? #informationsecurity #cybersecurity #securityresearch #attacksurface #ASM #ResponsibleDisclosure

5

Here again, we are seeing calls for the Government to reduce the October 7th PSR regulation reimbursement limits to prevent "stifling innovation". However, It can be argued that reducing reimbursement limits would also stifle innovation in fraud prevention. It is true that the PSR's Regulation sets high targets, but we must also accept that this is in order to reduce crime and the proceeds of crime in our financial systems. https://lnkd.in/gjaEtuG2 #APPFraud #PSR #reimbursment

7

Faster and better with Cellusys . . .

2

UK launches 'world 1st' cyber laws to protect consumers from weak internet connected devices.. Common or easily guessable passwords like ‘admin’ or ‘12345’ will be banned to prevent vulnerabilities and hacking  Manufacturers will have to publish contact details so bugs and issues can be reported and dealt with Manufacturers and retailers will have to be open with consumers on the minimum time they can expect to receive important security updates https://lnkd.in/eSYFUkEK

12

https://lnkd.in/dX_RSB9b 12th September - Breakfast at Duck and Waffle. Key topics of discussion: ·        Ransomware threat landscape  ·        Fostering a culture of cybersecurity  ·        Resilience and recovery ·        Best practices and response strategy 

7

Jake Ives our Head of Security at Intersys Ltd would like to inform you about an important vulnerability: PowerShell Web Access (PSWA) When PowerShell Web Access (PSWA) is unintentionally installed on a host with port 443 open to the internet, it could expose the system to significant security risks, effectively inviting hackers in. The U.S. government recently highlighted an ongoing attack campaign leveraging PSWA to gain persistence. PSWA is a feature in Windows Server that provides administrators with a web-based PowerShell console, enabling remote server management from any device with a web browser. While it offers convenience, it also presents security vulnerabilities if not correctly configured. A recent Cybersecurity Advisory from the U.S. highlighted Iran-based cyber actors exploiting PSWA to gain unauthorized access to networks, often collaborating with ransomware groups to deploy malicious software. These actors use PSWA to execute commands, move laterally through networks, and extract sensitive data. PSWA can sometimes be accidentally installed during Windows PowerShell setup if administrators are not cautious. In Server Manager, administrators may inadvertently select the “Windows PowerShell Web Access” feature under the “Add Roles and Features” wizard, often due to being rushed or unfamiliar with the specific components. Once installed, PSWA becomes accessible via a web browser, potentially exposing the system to unauthorized access if proper authentication and authorization measures are not implemented. To mitigate these risks, follow best practices for securing PSWA. This includes configuring strict access controls, regularly monitoring for unusual activity, and ensuring only authorized personnel can enable or access the feature. Additionally, tools like AppLocker or Windows Defender Application Control (WDAC) can restrict unauthorized scripts and commands, providing further protection against potential exploitation. Contact us to discuss how we can conduct a brief security audit to ensure your systems are protected against this “backdoor” vulnerability. https://intersys.co.uk #CyberSecurity #PSWA #PowerShell #VulnerabilityAlert #NetworkSecurity #RemoteAccessSecurity #CyberThreats #SecurityAudit #IntersysSecurity m #DataProtection #ITSecurity #CyberAwareness #ThreatMitigation #SecurityBestPractices

7

4 Comments

See how we helped one of the UK's largest port groups enhance their data protection and compliance in this latest case study. In 2023, we helped a major port group deploy a Microsoft Purview labelling solution, securing their sensitive data and ensuring compliance with relevant data protection legislation. 🚢 Discover more in our latest case study ➡ https://lnkd.in/de6NmiBk #MicrosoftPurview #DataProtection

37

Questions for NIS Compliance interest... We are helping many organisations with  NIS compliance work and have an interest in other organisations' experiences. Vibert Ltd advises NIS and NIS2 compliance as an ex- NIS Regulator and have many common findings. What do you experience? NIS and NIS2 are driving cyber/resilience improvements across many industries. Some are responding faster than others. Which industries are slowest and how can we all help them better? NIS2 will be a tidal wave starting in 2024 with addition of thousands of organisations, many new sectors, and accountabilities of Essential and Important entities. NIS V1.2.x UK may also do similar in future..... How will CAs and CSIRTs manage this mega wave? Our typical services may comprise, for example: NIS Advisory to CxOs/Boards/Senior Staff and NRO/DNROs etc. on NIS importance. NIS Advisory to OES for Inspection Readiness walk arounds and workshops. NIS Advisory to OES as Dummy Inspections. NIS Advisory regards Regulatory Enforcement. Teams calls with Seniors. Other possibilities.. Suggestions? Our NIS visits offered typically discuss topics like : - The Inspection Schedule across each phase. Interactions with Regulator during Inspections. Site visits: Where, how, and what is looked for. Each day of an Inspection. CAF discussions. Typical topics of an Inspection. What to prepare and how to present. What will be the outcome of each day and each phase. Who will attend from the Regulator and the OES. What will be asked and what won’t be said. Timelines. Outcomes. Information Notices and Fines. How to be best prepared. Etc. What topics are we missing? As an Ex-OFGEM NIS Inspector, we offer customers a unique insight into NIS Inspection preparedness that teams might find a useful differentiator. Some Consultants add us into their CAF programmes, just for a handful of days, which gives them a strong sales boost. We currently assist several OES in preparation for NIS Inspections. We trained many of the other Competent Authorities Inspectors in “our way” as we were leading UK (and probably EU) in NIS Inspections. E.g. OFGEM, ICO, DfT, CAA, HSE, DWI, etc. Suggested USPs… :- "Ex-NIS Regulator Principal Inspector Advisor"!!.. "Led the UKs 1st NIS Inspections"... "Developed the UKs NIS Inspection and Enforcement Programmes".... "Trains NIS Inspectors"... "Covers IT, OT, Cyber, Physical Security, Process, GRC, etc.".... !! We look forward to hearing from Operators and from Consultancies so we can develop the right SOW and Proposal for all our needs. How can we all help to assist more compliance as it will benefit society as a whole. Cevn Vibert CITP CEng FIET FInstMC FBCS 27kLA GICSP Global Director NIS Advisory and OT Industrial Security. [email protected] Vibert Ltd. www.vibert.ltd.uk #QuestionForGroup

6

Feature: Helping SMBs navigate the cyber security challenge: By Martin Simpson, principal at Node4 Security Practice. There can be little doubt that the volume, scale and sophistication of cyber attacks is on the rise. According to the recent UK government’s Cyber security breach survey 2024 report, half of UK businesses experienced some sort of cyber security breach or attack in the past 12 … #Features #Highlight #Node4

2

CrowdStrike ...the key questions 1. Why was the update issued on Friday ... one of the busiest days of the year in all client areas? 2. Was the update tested in a 'sandbox' type environment before release? If not why not? If so how did it pass? Useful to listen to the Crowdstrike CEO on this one! 3. Why did MS allow it...did they test it independently? If not why not? If so why was it signed off? 4. Why did MS clients just allow it...this is contrary to.proper practice? 5. Although this does not appear to be an act of cyberwarfare...were any other events e.g. short selling of related parties/major client stock noted? These few questions clearly open a Pandora's box, but emphasise once again the importance of the University of Buckingham's Mixed Reality Leadership Model and book on 'The Invisible Apocalypse' See previous posts. Additionally all insurers and insured alike need to check the wording of their cybersecurity contracts. All affected need to review Resilience and third party contracts. https://lnkd.in/eu3yNDkK #crowdstrike #Microsoft #windows11 #isostandards #supplychaincontracts #shortselling #cybersecurity #mixedreality #universityofbuckingham #insurance #resilience #cybercontracts

12

2 Comments

The Payment Systems Regulator is reportedly planning to drop the APP fraud loss coverage to £85,000 - down from the originally planned £415,000. This comes after building pressure from government ministers and industry bodies called on the regulator to lower the limit of their upcoming reimbursement scheme. To me, the logic behind the high-value cap was clear: prevent fraud or be prepared to pay the consequences. My concern is that dropping the value of reimbursement takes away a big part of banks' financial motivation to prevent fraud. With no motivation, financial institutions will push back the timelines on investing in robust fraud detection and prevention systems, which will ultimately be paid for by the consumer. There is a desperate need for banks to protect their customers. But instead of this, I fear the reductions focus on protecting banks. The Financial Ombudsman Service reports that fraud and scams have hit their highest level for at least 6 years. 8,700 cases reported in a three-month period. What are your thoughts on the news? Thanks to Payment Expert for the write up. https://lnkd.in/g-7T_kKM

14

Are you Reactive or Proactive when it comes to Cyber Security? When it comes to cyber security, are you reactive or proactive? If you're proactive, the first step you should have taken is to do a cyber risk assessment. Cyber risk assessments help identify potential risks and vulnerabilities so you can take steps to mitigate them. Cyber 365 provides CERT Information Security risk assessment training that is SEI-level quality. With this training, you'll be able to conduct your own cyber risk assessments and understand how to interpret the results. By taking a proactive approach to cyber security, you can help reduce the chances of an incident occurring and safeguard your organization's data. https://lnkd.in/gsbAkpjx #cyber365 #cyberriskassessment 

3

My good friend, colleague, IP and security expert, and as an ex CTOI do not use that word lightly, Daniel Baird has posted this video a few times and for any exec or board member concerned about security it is well worth watching! Enjoy! :-)

2

HelloID offers a range of different modules to provide a modern and secure cloud-based Identity and Access Management solution. One of these is HelloID Access Management. HelloID Access Management provides employees, partners and, as an option, customers with easy and consistent access to cloud applications. Authentication occurs through a username and password login. Two-factor authentication can be implemented as an additional security measure. HelloID's Access Management offers Single Sign-On (SSO) which enables seamless and secure access to multiple applications with just one login action. HelloID's multi-factor authentication (MFA) adds an extra layer of security. Users are verified through multiple methods, providing protection against unauthorised access, even in the case of compromised passwords. Interested in learning more? Visit our website today or reach out to a member of the team who'll be happy to discuss how HelloID can meet your organisation's needs. #HelloID #Tools4ever #AccessManagement

1