Mike Heredia

🚨 NEWS ALERT 🚨 - Another season of WITHSECURE CONSULTING UK ASSOCIATE PROGRAMME confirmed. So, earlier this week, it was the WithSecure Consulting Summer Internship Programme 2025 that made the headlines... and loads of you saw it and responded 👍. Today, we have announced the return of another season of the WITHSECURE CONSULTING UK ASSOCIATE PROGRAMME for 2025. What is it? Well, it is our answer to a graduate scheme, but you don't have to be a cyber graduate or a graduate at all. You do have to make an impression with your skills, though. So, don't slouch... MAKE YOUR MOVE!! Take your first career steps with us. Check out the details in William Jardine's post below. #growingtalent #startwithus

6

1 Comment

Seven prime cybersecurity threats were identified in 2024, with threats against availability topping the chart and followed by ransomware and threats against data, and the report provides a relevant deep-dive on each one of them by analysing several thousand publicly reported cybersecurity incidents and events. 19.9.2024, last report

26

1 Comment

Early warning is one of the most cost-efficient and proven methods for reducing cyber risk. The best part is that there’s an abundance of data available to get started, especially from private sources like The Shadowserver Foundation, The Spamhaus Project, and others. With some automation tooling in place, you can swiftly protect your constituents in no time. Arctic Security Ltd #earlywarning #cyberhygiene #cyberriskreduction

10

1 Comment

Will you join us for Mimecast's next #ThreatIntelligence webinar? Our security experts will discuss “How to operationalise risk events" and how to create a clear, contextual picture of risk events before it becomes an incident. Our team will display how they turn risk events into practical actions. Register today!

11

📧 Mail Check is changing: What UK public sector organisations must know about DMARC and email security. 📧 The National Cyber Security Centre (NCSC) has suggested a change to Mail Check services starting on 24 March 2025. This change mainly involves ending DMARC aggregate reporting. This change comes as a measure to expand the services provided by Mail Check to any UK based organisation, while also limiting the cost and complexity of the existing service. The NCSC notes this will further allow for the creation of new services in the future. To assist with this transition, Red Sift is offering affected organisations an extended free trial, including beyond the service end date for Mail Check up to 31 March 2025. Read more in our blog - link in the comments.

11

1 Comment

Join our 'Armis Cyber Insights- Leveraging AI to Predict and Preempt Your Next Attack' webinar on Thursday, September 26 at 4:00 PM BST. Speakers: Michael Rothschild , Andrew Grealy, Michael F. Tailored for security leaders, this session offers actionable insights to help revolutionise your defence strategy. Don't wait for attacks. Discover how AI can predict and preempt cyber threats before they strike. Register now: https://lnkd.in/eHePCTBA #Armis #Cybersecurity #Security

13

Are we witnessing a shift towards a Robin Hood-like justification for hacking? Hackers target vulnerabilities and seize opportunities, regardless of the rationale, target, or outcome. Pen testing, having an Incident Response plan in place, working with a proactive Managed Service Provider, and conducting Cyber Incident Response tabletop exercises are crucial steps to safeguard your organization against cyber threats. Stay vigilant! 🔗 Read more: [BBC Article](https://lnkd.in/ef6A-57b)

7

🗣️ Don’t miss our panel discussion, “How a Proactive Cyber-Security Strategy Improves Your Detection and Response Efforts” at #teissLondon2024. 🗓  Tuesday, 17 September from 10:30 - 11:00 💡 Join industry experts along with Cyware's very own Dan Bridges, as they dive into how proactive cyber-security measures can transform your defence strategy. From leveraging proactive threat hunting to addressing vulnerabilities with cutting-edge penetration testing, this panel will explore advanced techniques to fortify your cyber defences. #Cybersecurity #ThreatHunting #ThreatIntelligence

12

Do you think your organisation needs NIST compatible, fit-for-purpose incident response playbooks? Are you looking to analyse and optimise your existing IR Playbooks? Our NCSC Assured Training in Building and Optimising Incident Response Playbooks has helped numerous organisations ensure continuity and consistency in their response during cyber events and attacks. Find out more about this globally-recognised training here. #informationsecurity #incidentresponse #cyberattack https://hubs.li/Q02PDV_v0

1

This week in cyber - 20th July ->26th July 1. The post incident report (PIR) for the Crowdstrike BSOD event has been released. Crowdstrike delivers configuration content to their EDR in 2 different ways formats, Sensor content (which is used to update capabilities expected to be used long term on the CrowdStrike solution) and Rapid Response content (used to respond to immediate threats at operational speed). The PIR details the event was caused by an issue stemming from a Rapid Response content push which was allowed to be pushed out to all sensors after passing a content validator. A bug in the content validator allowed this content to be pushed out with problem content data which caused the associated Microsoft operating systems to crash. Crowdstrike have now put in preventative measures in place to avoid a similar issue in future. 2. Knowbe4 have released a statement detailing how they employed a North Korean hacker as an IT personnel. A North Korean Hacker was able to steal a real American identity and create a deepfake that passed their internal checks around background, history, video interviews and references. Post the "IT" staff receiving their MacBook laptop, KB4's internal SOC were instantly alerted to an attack happening on the device, it appears the MacBook had been plugged into an IT mule farm and was exhibiting unusual behaviour such as manipulating history files and executing unknown executables. FBI were alerted and Mandian is now involved in digital forensics. Applauds to Knowbe4 for their full transparency. 3. IDC's research into Cybersecurity show that there will be a significant increase in expenditure prior to the Paris Olympics. This olympics will be the most technologically advanced and interconnected Olympics to date with significant advances in cyber defence and offence capabilities since the last olympics. In France, a national service (ANSSI) was created specifically to prepare the strategy around cybersecurity attack prevention at the games and it is believed that French enterprises are wholly prepared for the unprecedented attack amounts that are to come. 4. Wiz has walked away from the $23B acquisition offer from Alphabet. In an internal memo to the business the Wiz Founder, Assaf Rappaport, detailed his confidence in the company reaching $1b ARR before pursuing sales of shares to the public. This is indeed a very bold statement by the company that has been the fastest growing cybersecurity organisation to reach unicorn status. It will be seen how fruitful this play is.

24

3 Comments

Thanks for commenting in Chasing Cyber on the QRNG Framework we published last week (https://lnkd.in/etETiMGZ), Duncan Jones. As my colleague, Itan Barmes, Quside's Carlos Abellan, and I worked through the drafts we did indeed strive to make the point that you highlight: that such frameworks can help provide a degree of assurance and market differentiation. I look forward to seeing how this type of activity evolves as industry requirements for quantum cyber readiness continue to crystallize. As Itan Barmes consistently points out, topics like this are, of course, more broadly applicable than the quantum threat. Adnan Amjad, Mark Nace, Emily Mossburg, Scott Buchholz, Deborah Golden, Clare Harding, Duleesha Kulasooriya, Robert Hillard, Dana Spataru, Marc Verdonk, Niels van de Vorle, Itan Barmes, Casper Stap, Ben Shapiro, Vikram M., Rita Gatt, Julie Gleeson #Deloitte #CyberRiskManagement #QuantumCyberReadiness https://lnkd.in/eNiQaMxN

28

3 Comments

If you're coming to RSA next week and you care about stopping attacks Bfore they happen, then we really need to find a way to connect next week! Everyone has a multitude of strategies and options to combat attacks - from reactive responses to threat blocking. However, in the ever-evolving landscape of cybersecurity, there exists a game-changing approach to proactively thwart attacks, eliminating the need to wait for incidents to strike. If you're ready to embrace the next generation of protection, intelligence, and mitigation – If you are done with waiting for attacks to happen and feel like you're always ten steps behind those who are attacking you, then maybe it’s time for you to come meet with us at BforeAI. We are committed to taking proactive measures to safeguard organizations and their customers, prioritizing speed, accuracy, and the preservation of their reputation. BforeAI, a Cybersecurity & Intelligence company backed by SYN Ventures. If you're seeking to enhance your security posture, fortify your defenses, and crater the ROI for adversaries coming after you, BforeAI is the solution you've been searching for. Both myself and BforeAI's Co-Founder & CEO, Luigi LENGUITO will be present at RSAC (May 6th – 9th) with a few open slots available. Reach out to us if you're interested in connecting and exploring how we can prevent attacks Bfore they even Begin. Let's fortify your defenses together with BforeAI! #RSAConference #BforeAI #Mitigation #PreCrimeBrand #PreCrimeIntelligence #PreCrimeTechnology

23

The MSSP market is badly broken. This has been unfolding for some time now, increasing cost pressures combined with the lack of any meaningful performance measures have created a worrying 'race to the bottom' situation. The key warning sign is a strong focus on reactive security. There are now a multitude of low-end EDR/XDR solutions that can be paired with a very low cost SOC. The level of real-world protection provided by these solutions tends to be massively oversold, in reality they often just create a single fragile layer of defence. At Secmatics we put a strong focus on proactive threat-driven risk reduction, I see far too many organisations that believe they are safe because they have '24x7 security monitoring', and yet have easily discoverable actively exploited vulnerabilities in their infrastructure. Good security starts at home. You need a cohesive threat-informed technical strategy along with the right combination of proactive and reactive defences. If your security parter is not actively working with you to identify and proactively mitigate threats and vulnerabilities then it is probably time to look elsewhere. Caveat Emptor.

1

What do you need to know about the proposed mandatory reporting in the UK? OpenText's Stan Wisseman breaks down the proposal and what it means for businesses and the challenges it brings in his latest blog. Check it out.

3

Need help with #NIST, or #ISO27001 compliance? I've seen a rapid rise in businesses demanding these accreditations from their suppliers and Punk Security Limited has a lot of experience in performing Gap analysis and implementation for both.

8

There is lots of information out there on Vulnerability Management, it's all typical textbook stuff. But at the Cyber Engage Events, the panelists and you the audience share what works for you, what you've learnt in your years of experience, but also ask your peers the questions you have wanted to understand will enable you to do things better.

3