Warren Atkinson

Black Arrow Cyber Threat Intelligence Briefing 09 August 2024: -UK Business Struggling to Prioritise Cyber Security Needs -The C-Suite Conundrum: Are Senior Executives the Achilles’ Heel of Cyber Security? -Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication -Malware-as-a-Service and Ransomware-as-a-Service Lower Barriers for Cyber Criminals -How the Theft of 40M UK Voter Register Records was Entirely Preventable -18-Year-Old Security Flaw in Firefox and Chrome Exploited in Attacks -99% of Global 2000 Companies Directly Connected to a Supply Chain Breach -Email Attacks Skyrocket 293% -Police Recover Over $40m Headed to BEC Scammers -Russia's Priorities in Prisoner Swap Suggest Cyber Focus -Point of Entry: Why Hackers Target Stolen Credentials for Initial Access -FBI: BlackSuit Ransomware Behind Over $500 Million in Ransom Demands -Survey: 78% of Ransomware Victims Paid and 74% Suffered Multiple Strikes -Finance Should Pay Much More Attention to Undersea Cables Risk #blackarrowcyber #cyber #threatintelligence #threatreport #opensourceintelligence #riskmanagement #grc https://lnkd.in/eRPYZwZ5

4

Only one week to go until our Global Threat Outlook H1 2024 webinar! On Wednesday 24th April 2024 at 4:30pm BST, join Yvette Essen and William Altman as they deep dive into: - Potential cyber threats to be aware of and the impact they could make - The latest ransomware trends - A review of recent attacks and lessons learned It's not too late to sign up - https://hubs.ly/Q02s_3s90 #CyberRisk #CyberThreat

14

🔒🚨Business Email Compromise (BEC) attacks are becoming increasingly sophisticated, putting sensitive data at risk. The UK's National Cyber Security Centre (NCSC) has released new guidance to help businesses combat these threats. Whilst guidance on BEC from the NCSC makes sense as attacks rise in number & sophistication, it is also piling on the pressure on stretched IT & security teams. Northdoor plc's AJ Thompson talks to Professional Security Magazine about how firms can tighten up email security. https://ow.ly/jFSN50S8he7 #CyberSecurity #DataProtection #phishing

2

Ransomware on the rise…and new guidance for data recovery! Cybersecurity threats are always evolving but so too is the approach to data recovery according to recent reports. Our latest blog post explores the potential new guidance on ransomware attacks and data recovery. It aims to strengthen the UK's cybersecurity posture and protect its economy from the devastating effects of ransomware attacks. Check it out: https://lnkd.in/eTya_DXB

1

📣 Calling all CISOs! Don't miss our latest blog in techUK from Mark Jow, discussing cyber risk and how CISOs are addressing cybersecurity gaps ➡️ https://ow.ly/ikv250Ukc5T #cybersecurity #CyberStrategy #TechUK

52

In case you missed it, last month, our own Wayne Proctor and Frank Raimondi joined Tim Golden (Compliance Scorecard) to discuss the role of penetration testing, the value of independent third-party testing, and how CISOs can help drive robust defense strategies. Click here to watch the recording: https://hubs.ly/Q02zRGtt0 #PenTesting

2

From Transport for London (TfL) being targeted by a cyber attack to Blackpool Trust Schools data being held for ransom, September 2024 marked a diverse range of cyber attacks and data breaches. Here’s the other top #cyber stories you need to read: https://lnkd.in/ez5t9ZDs #CyberSecurity #CyberNews #CyberUpdates #GlosBiz #BusinessRisks

8

The annual DSIT workforce survey continues to show there is a cyber security skills gap in many organisations. While the government’s longer-term work focuses on closing that gap, the NCSC offers a range of digital and industry provided cyber services to help organisations protect themselves. https://lnkd.in/ecxvCAwE #NCSC #CyberSecurity #CyberTools

2

Our latest blog delves into the importance of #CyberEssentials. Throughout its tenure in the UK cyber market, the importance and prevalence of Cyber Essentials have only grown, making it an essential certification that organisations across numerous industries strive to achieve. Learn more ⬇️ https://lnkd.in/eK9uMeyY #cybersecurity #infosec #informationsecurity

8

Cyber Threat Warning for the UK 🚨 The UK is underestimating rising cyber threats, warns the National Cyber Security Centre. In the past year, severe cyber-attacks tripled, targeting healthcare, infrastructure, and supply chains. The NCSC urges urgent action to boost defenses as threats grow in scale and sophistication, with AI amplifying risks. Stay protected: Strengthen cyber security, update response plans, and train teams. Read more from @SkyNewshere: https://bit.ly/4f4RVnp #CyberSecurity #DigitalDefense #AI

4

Are you struggling to stay ahead of the changing threat landscape? Then don’t miss this great session at UK Gartner Security & Risk Management Summit with Stephen Owen, CISO at IQUW and Caroline Paddle, Regional Director at XM Cyber, where they’ll explore how to effectively quantify and communicate business risk using Continuous Threat Exposure Management (CTEM). ⏱️Tuesday, 24 September, at 2:30 PM 📍UK Gartner Security & Risk Management Summit https://hubs.li/Q02QBqkF0 See you there! #riskmanagement #CTEM #cyberresilience

28

Data protection meets Cloud security in this two day course 👇 Become a Certified ISO 27018 Cloud Privacy Specialist with our training course where you'll be able to learn how to protect Personally Identifiable Information in the Cloud. Save 25% on training in Cloud security this autumn https://ow.ly/PWu750TZpCj #CloudSecurity #DataProtection #ISO27018 #CloudPrivacy #CyberSecurityTraining #CloudComputing

7

🫥 UK CYBER RISK UNDERESTIMATED 🙄 National Cyber Security Centre CEO Richard Horne describes the cyber risks facing the UK as “widely underestimated” and calls for collective action for citizens and industry to protect themselves against evolving threats. 🗣️ At the launch of the #NCSC Annual Review 2024, he said: ➡️ “We need all organisations, public and private, to see cyber security as both an essential foundation for their operations and a driver for growth. To view cyber security not just as a ‘necessary evil’ or compliance function, but as a business investment, a catalyst for innovation and an integral part of achieving their purpose.” Here's the review ➡️ https://lnkd.in/e6rdEYn8 #cybersecurity #cyberrisk #cyberthreat #ITsupport #Zhero #london Izak Oosthuizen Natasha Botha Kathy Meyer Louis Oosthuizen Ryan O'Connor Macwhill Hanse Pieter Koen Elizabeth Roux Alan Ntini Christopher Dahwa Christopher Haverly Louise Niemand (De Bruin) Jacolene Haasbroek

18

UK Faces Growing Cyber Security Threat Despite Strong Industry Key Statistics: The UK is a top target for cybercriminals, with businesses and individuals at high risk. Despite robust cybersecurity efforts, challenges persist: Over 80% of UK organizations experienced cyber attacks in 2021/2022. 73% faced ransomware attacks, costing an average of $1.08 million per incident. Despite £10.1 billion spent on cybersecurity, only 11.3% of IT budgets are allocated to security. 400,000+ fraud and cybercrime reports in 2021 resulted in £3 billion in losses. Positive Trends: Increasing cybersecurity spending. Thriving industry with 50,000+ employees. Competitive salaries averaging £60,000. Areas for Improvement: Boosting cybersecurity budget allocations. Enhancing public awareness of online threats. Protecting vulnerable demographics. UK Government Actions: National Cyber Force launched in 2020. Leading GDPR enforcement. Guard N Watch, safeguarding since 2014 with unmatched security services and commitment to excellence. Join us for a safer digital future. #CyberSecurity #UKCyberThreats #Ransomware #DataProtection #GuardNWatch #SecurityServices #CyberAwareness #ProtectYourBusiness #OnlineSafety

6

1 Comment