Jamie Cowper

This should offer some great insights for those looking at NIS2 or outside of the context of regulation, are aligning to the NCSC's CAF. Register ➡https://lnkd.in/eZa7vhG4 Scott H., Principal Consultant, and Emran A, Principal Lead Consultant, will outline the main requirements for each of the CAF's Objectives, which Microsoft technologies you can use to address them, and how they should be configured to build a ‘defence-in-depth’ approach. #CAF #Microsoft

3

I have seen a preview of some of the content and talking points in this discussion and they're good. Bringing the "what" and "how" to life with real examples of how fraudsters are attempting to break in through the front door, and the pace at which they will evolve their criminal identity to achieve it!

13

Hear from Andy Mckay-hubbard, Cyber Defense Lead at abrdn, on how they have achieved "near-perfect" visibility on all of their assets and vulnerabilities. Find out how Qualys #vmdr, #csam, and #patchmanagement work together to help Aberdeen avoid cyber threats and reduce its cyber risk. https://lnkd.in/es73atiB.

10

1 Comment

Unsure whether your Data Loss Prevention (DLP) strategy is up to task for today's challenges? We have the session for you. On September 17th, 16:00 BST / 17:00 CET / 11:00 EST, we'll be hosting a webinar providing "A Guide to Implementing a Modern DLP Program that Actually Works." Hosted by Metomic CEO Rich Vibert, and Michael Ivey, Staff Security Engineer at Modern Health. If you're needing to build and or develop a DLP program that secures you against modern problems, don't leave your data protection to chance, tune in. https://lnkd.in/ehcTzWFU #DataSecurity #DLP

31

🔥❗ PAN-OS RCE UPDATE: tl;dr: somehow it's getting worse For those of us just waking up and getting going in the UK, if you're tracking the RCE in PAN-OS (CVE-2024-3400), please be advised: Telemetry is no longer a pre-requisite for exploiting this vuln for RCE. This is being exploited in the wild by motivated threat actors right now. It has been for ages. Stop messing about and get patched.

11

Check out these stats.

9

Thank you Oliver T. and sohrob kazerounian for what I am sure is the first of many conversations we will have on Attack Signal Intelligence and what it is, does and means for #SOC teams. We first launched Attack Signal Intelligence in October 2022 centered on the use of AI to detect, triage and prioritize attacks, but is that really all it is? Oliver, Sohrob and I tackle that question in our latest Vectra AI Prodcast - check it out.

39

🔐 As we enter European Cybersecurity Month, it’s critical to talk about how technology is facilitating new forms of abuse in relationships. Intimate image abuse, stalkerware, and deepfakes are not science fiction—they are today’s reality, impacting millions of people. In our recent blog post, supported by EU-wide research, we break down these threats and provide resources that can help people protect themselves. At Kaspersky, we believe that while our software can block many threats, some dangers need awareness and education to truly address. Let’s come together to make our digital lives safer. Stay informed. Stay protected. Read more here ▶️ https://kas.pr/q5sm #CyberSecMonth

7

Thanks for commenting in Chasing Cyber on the QRNG Framework we published last week (https://lnkd.in/etETiMGZ), Duncan Jones. As my colleague, Itan Barmes, Quside's Carlos Abellan, and I worked through the drafts we did indeed strive to make the point that you highlight: that such frameworks can help provide a degree of assurance and market differentiation. I look forward to seeing how this type of activity evolves as industry requirements for quantum cyber readiness continue to crystallize. As Itan Barmes consistently points out, topics like this are, of course, more broadly applicable than the quantum threat. Adnan Amjad, Mark Nace, Emily Mossburg, Scott Buchholz, Deborah Golden, Clare Harding, Duleesha Kulasooriya, Robert Hillard, Dana Spataru, Marc Verdonk, Niels van de Vorle, Itan Barmes, Casper Stap, Ben Shapiro, Vikram M., Rita Gatt, Julie Gleeson #Deloitte #CyberRiskManagement #QuantumCyberReadiness https://lnkd.in/eNiQaMxN

28

3 Comments

I've been working a lot with clients recently on finding the right balance between reducing risk and maintaining compliance with #cyberessentials. Sadly, Cyber Essentials is fairly binary and doesn't really take the complexity of the business and mitigating controls or processes into account. How do you all tackle all the critical and high CVEs in 14 days?

22

An interesting & insightful policy paper from the Chatham house proposing principles for state behavior with commercially-available cyber Intrusion products and services. The topic is complex & the objective set by the writers - a set of agreed principles for governments to follow - is ambitious. However, it’s clear that the paper is a result of a multi-stakeholder discussion. Every suggested principle is presented with sometimes contradictory impacts. Author is not shy to describe “corner cases” where principles face a tough reality. Its a coolheaded analysis calling for solutions rather then moratoriums; acknowledges that while technologically challenging, CCIC’s are here to stay; and that states, not only companies, should take responsibility. As the UK-French Pall Mall Process on responsible cyber behavior reconvenes, we can expect more policy papers to set the stage, and terms of reference.

7

Did you get a chance to check out our Second Quarter Ransomware Research Report? Our Manager of Security Research, Connor Jackson, comments on the findings by stating, "The initial six months of 2024 have revealed an alarming trend in cybersecurity. We're seeing an increase in ransomware incidents, especially extortion-based attacks, which underscores an escalating weakness within our digital frameworks that must be addressed promptly." Ensure you download the report and tune into our most recent audio blog interview: https://gag.gl/LLCtwu #ransomware #research

1

UK signs first legally-binding treaty governing safe use of artificial intelligence. The new agreement signed yesterday (5th Sept 24) has 3 over-arching safeguards: protecting human rights, including ensuring people’s data is used appropriately, their privacy is respected and AI does not discriminate against them protecting democracy by ensuring countries take steps to prevent public institutions and processes being undermined protecting the rule of law, by putting the onus on signatory countries to regulate AI-specific risks, protect its citizens from potential harms and ensure it is used safely The government say they will work closely with regulators, the devolved administrations, and local authorities as the Convention is ratified to ensure it can appropriately implement its new requirements. Let's see what this means in real world terms ! https://lnkd.in/eUFBsuTf #privacybydesign #aigov #UKPrivacy #DataGuard #ai #dataprotection

8

Pssssst-NISsssssT - are you ready for the future because it is here now? #NIST is close to making one of their most #monumental announcements in decades. #Cybersecurity is at the precipice of a global game changing moment. A critically relevant #quantum computer (#CRQC) is nearly upon us and QuSecure is the leading company that can help #protect you and your #data. Reach out to QuSecure to learn more about how you can be prepared with our QuProtect #PQC #crypto agile software today. https://lnkd.in/gpdXmmBJ.

23