Simon L.

The faster we are compliant, the less trustworthy certifications and attestations seem to be. It looks like they are becoming a marketing badge/a sales enabler more than assurance of an adequate security posture. If you are fighting it, I empathise with you but don't get the bigger picture. Good auditors exist. Good SOC 2 Type 2 Reports exist. Companies with good security exist. Good ISO 27001 scopes exist. The only issue is none of these are related. Getting a thorough auditor can help but doesn't go as far anyway. Either the standard is prescriptive but broad (ISO) or you can craft your controls to a significant extent (SOC). If you care about security, it most likely won't be enough. Anything that can allow a company to sell more, they'll find the most cost-effective way to get it. Caring about security for its own sake is a luxury. For most, it's a necessary survival step to sell to enterprises. If compliant companies are just as likely to be breached, then everyone knows the assurance provided is barebones/shallow. If everyone has to be compliant, then it is not something that highlights a security posture that much higher. That's why I'm excited about the disruptions happening in this space. Trust built upon a complete overview of security, not based on a shallow and/or modulable set of controls. My take is that the Trust space will displace Compliance in non-regulated industries to let GRC focus on Risk instead.

37

14 Comments

♦️ Secure Talk: Cyber Defence Against Malicious Ads Ads are everywhere online, helping pay for free websites and apps. But some ads are bad news. They can trick you into downloading dangerous content like viruses or fake websites. It is important to know about these malicious ads and how to avoid them. ❗️What are malicious Ads? Some online ads are dangerous. They can have viruses or trick you into doing things that harm your computer. These malicious ads might even appear on websites you trust, so be careful. ❗️Some of the techniques used to trick are as follows : Malware Delivery It is a piece of ad code, that either downloads a malware when clicked or loaded and displayed in the browser. Phishing The ad leads you to a fake website that is specifically designed to compromise your data. It could be your login details or your credit card credentials. Drive-by Downloads Some Ad campaigns work on flaws in your browser or software to download malware without your permission. Scareware This ad mimics a virus scan and tells the user that the device they are using has been infected. It insists user to download an ‘antivirus software’ which is malicious. ❗️How do malicious Ads work? Click to read more … https://lnkd.in/gwxSabma

11

1 Comment

In an attempt to advocate for #privacybydesign in practice, esp. for the many applications, services and systems we use in our eco-system... My mate Kevin Kanyi and I will consider what's essentially step 1 in trying to build-in measures that support privacy in design. Taking an offensive mindset, thinking privacy threats and their consequences, through the lens of a modelling framework. Guess which one? Tune in maybe! Registration Link: lu.ma/e933pfw4 #privacyengineering #dataprotection #dataprivacy #ptm

2

Which? Has a gret list of 7 things you can do secure your social media and email accounts, but in reality it comes down to two things: Check your privacy settings  Have a good password manager So many people just don’t know to check what their settings actually are until it is too late . Using your name and the year you were born for all your accounts is just not a great idea, 1- it is so easy to guess and 2 once they know it worked for one account don’t you think they are just going to try the same password everywhere? https://lnkd.in/dpu2HBJX #cybersecurity #cybersafe  #securityeverywhere Francis West -------------------------------------------------------- Dedicated to Your Cyber Security  Our mission: To protect 1,000,000 businesses from cybercrime by 2026. Register Now: How does AI impact your Cyber Security? https://lnkd.in/dSH5kBEE Watch our previous session: Backing up your data is the last line of cyber defence! https://lnkd.in/gkMdAQjX Follow our page https://lnkd.in/edVpnGQa Book a call https://lnkd.in/efjUXeVv Visit our website https://lnkd.in/gnH8FxQw ----------------------------------------------------------

7

70% of UK businesses reported more cyber threats over the past year, according to new data. https://lnkd.in/ewRcPfhD #cyberthreats #ukbusinesses #datasecurity #cyberresilience #onlineprotection #cyberawareness #businesssecurity #dataprotection

4

1 Comment

♦️Sunday Funday: Proactive Improvement: A Lesson from a “Get Better Soon” Card 😂 Just like the lady’s proactive approach to her husband’s improvement, we need to be proactive about our cyber security measures. Waiting for a breach to happen before taking action is like waiting for someone to get sick before wishing them well! ❗️Key Takeaways: Proactive Measures: Don’t wait for a cyber attack to happen. Regularly update your security protocols and educate your team. Continuous Improvement: Just like the husband who can always get better, our cyber security practices should continuously evolve to meet new threats. Humor in Security: Finding humor in our proactive steps can make the process more engaging and less daunting. So, let’s take a page from the ‘Get Better Soon’ card and always strive to improve our cyber security measures. After all, prevention is better than cure! 🙃🙏

16

1 Comment

1. Don’t let FOMO lead you into a phishing trap 2. Stay in your shopping lane—on trusted, verified sites 3. Treat public Wi-Fi like your dodgy ex—don’t trust it with your secrets 4. Don’t reuse passwords. Seriously. 5. Two-factor authentication: The digital double-lock 6. Monitor your bank statements like you’re looking for a lost lotto ticket 7. Retailers don’t need your life story. Be stingy with data. 8. Skip the “save card” option—it’s like leaving your wallet at the store 9. Beware the dangers of “impulse apps” and clone sites 10. Use ads sparingly—like Carolina Reaper chilli on your chips Source: ITLawCo https://lnkd.in/dVzdvYPA

28

1 Comment

Understanding is first step in protection. Ethical Hacking is still the most important skill to have in cyber. It’s so much more than been able to run attack tools. It’s about understanding the attacks TTP’s and IoC’s.

3

A brilliant resource that every (small to medium sized) business should check out.

2

Cyber security is an increasingly important topic as charities, non-profit organisations and small local groups become more reliant on digital tools and online operations. While often operate with limited resources, they still manage sensitive data, including volunteer information, financial records, and personal details of vulnerable clients they serve. This makes them attractive targets for cybercriminals. As they increasingly rely on digital platforms to manage operations, communicate with volunteers, and deliver services, they become potential targets for cyberattacks. To learn more and access free Risk Assessment, Key Cyber security Challenges for Charities, Best Practices for Charities to Improve Cyber Security and Demo Cyber Security Tools visit: https://lnkd.in/eGpBGYhu This demo showcases basic cyber security tools designed for training and awareness within the charitable sector. These tools are intended to provide a foundational overview and essential understanding of various cyber security aspects, ensuring that charities are equipped with fundamental knowledge and confidence to address common security challenges. 

4

1 Comment

AI Security Cameras: Game-Changer or Privacy Nightmare? --- CYBER SECURITY DIARIES PODCAST 👉 🎙️ https://buff.ly/3AB4NmM  #ethicalhacking  #networksecurity  #dataprotection  #penetrationtesting  #technology  #innovation  #digital  #IoT  #bigdata #programming  #coding  #devops  #cloudcomputing #AI

42

3 Comments

Very useful read

2

WordPress website owners have reason to be concerned. A recent security discovery revealed a vulnerability in a popular third-party library called Polyfill.io that exposed numerous WordPress plugins to potential compromise. This article explores the details of the attack, the impacted plugins, and offers actionable advice to help website owners secure their WordPress installations. A Flaw in the Foundation: The Polyfill.io Compromise https://lnkd.in/egSCaG3A

2

♦️Cyber Crimes - Awarness Tips ! These tips have been circulating for sometime but always useful to re-circulate. A crispier version is given below 🙏🙏 ❗️Tips to Avoid Being a Victim of Fraud 1. TRAI Disconnection Calls: Ignore calls claiming TRAI will disconnect your phone. It's a scam! 2. FedEx Package Calls Don't press any numbers if FedEx calls about a package. It's a scam! 3. Aadhaar Police Calls Ignore calls from "police" about your Aadhaar. It's a scam! 4. Digital Arrest Claims: Ignore claims of being under 'digital arrest'. It's a scam! 5. Drug Package Claims: Ignore calls about drugs in packages meant for you. It's a scam! 6. Secrecy Demands: If told to keep it secret, inform Cyber Crime Police at 1930. It's a scam*. 7. WhatsApp/SMS Contacts: Ignore suspicious messages on WhatsApp or SMS. It's a scam! 8. UPI Mistake Claims: Ignore calls about mistaken UPI transfers. It's a scam! 9. Fake Buyers: Ignore buyers claiming to be from the army or CRPF. It's a scam! 10. Food Delivery Confirmations: Ignore calls from Swiggy/Zomato asking to confirm your address. It's a scam! 11. OTP Requests: Never share OTPs over the phone. It's a scam! 12. Unknown Video Calls: Don't answer unknown video calls. It's a scam! 13. Suspicious Links: Never click on unknown links. 14. Verify Notices: Verify any notices from police or government offline. Be careful it might be a trap with malicious link. ❗️Digital Hygiene Tips: - Never share personal details over the phone or messages. - Refuse to confirm your name or details on unsolicited calls. - Disconnect and block suspicious calls immediately. ❗️If Trapped: - Report to local cyber police without hesitation, even if it affects your reputation. Stay vigilant and protect yourself from cyber fraudsters!

22

5 Comments

"He is going to put you out of business..." This was (jokingly) messaged to me after Walter Haydock's post yesterday about his big announcement -- link in the comments (seriously, go check this awesome deal out!) As part of Walter's deal, he is offering free penetration testing. You know... that thing that my business relies on... That puts bread on my table... That puts clothing on my kid's back... But, that is the good and bad thing about cybersecurity these days. There is so much work to do in security to ensure the Internet is a safe place for everyone to use, I don't have to fear competition. In fact, I applaud it. We actually need MORE competition in pentesting. Then, (perhaps) vendors will have to stop selling vulnerability scans as "pentests" and the whole industry will rise as a result. So, bring it on Walter! Bring it on recent graduates and career changers! We need you in this field! Help us keep improving! #security #cybersecurity #penetrationtesting #careers

52

6 Comments

5 Types of potential Internal threats in a business: 1. Careless or Negligent Employee 2. Malicious Employee 3. External Vendors 4. Trusted Partners 5. Former employee Cybercrimes are increasing but your business doesn’t have to be the victim follow Favour Abigail Ohemu for more security tips. Happy Sunday to you 🥰 #Insiderthreats #cybersecurity #cyberawareness #businesssecurity

3