Russell Harrison CSMP M.ISMI’s Post

On 19 July, a cyber specialist updated their software – and global havoc ensued. The story’s a good read, but we believe it reveals an important question for any business: how do you get urgent information out to key or all people in your organisation, if there’s a crisis event like this in flow? Contact one of our team and find out how AtlasNXT will transform your approach to risk management today. https://lnkd.in/er8AR9qi #CyberSecurity #CrisisManagement #TechRisks

It has been over a month since the CrowdStrike outage, but it will take many more months before we fully understand the impact and where all the pieces will fall. 🕒 Lawsuits and claims against CrowdStrike are already underway, and the upcoming congressional hearing on September 24th, where CrowdStrike will testify, will further shape the narrative. ⚖️ Beyond the legal ramifications, companies are reassessing the technologies they use across their tech stacks—not just in security. This incident serves as a stark reminder and catalyst for evaluating the risks associated with all vendor and partner choices. 🔍 As time passes and the dust settles, this event may fade from memory—until the next one. ⏳ Now is the time to take extra care in vetting the third parties you work with. Doing so will not only provide a deeper understanding of their operations but also enable you to implement stronger steps, procedures, and checks and balances, offering greater certainty in uncertain times. ✅ #freeze #cybersecurity #security #vendorrisk #techstack #riskmanagement #infosec #risk #outage #crowdstrike #ai #data #privacy #dataprivacy #thirdpartyrisk #technology https://lnkd.in/ed6ytBFp

If someone isn't researching how to create a digital twin of a digital ecosystem... They should. Today's widespread CrowdStrike outage underscores why. As the launch of new tools and updates to digital capabilities continues to accelerate, and the integration of those capabilities becomes more global, understanding the upstream and downstream impacts will become crucial. This isn't just a matter of quality control—it's about resilience, business continuity, and societal function. Consider this: - A cybersecurity provider's software update left businesses worldwide vulnerable. - The ripple effects touched countless industries and individuals. - Government services, including driver's license renewals, ground to a halt (I just put this in because of personal experience today!) This incident highlights our deep dependence on interconnected digital systems. To navigate this complexity, we need: 1. Digital twins of our ecosystems to model and predict cascading effects. 2. Enhanced visibility into dependencies across services and providers. 3. Robust contingency plans that account for wide-scale disruptions. The question isn't if another major outage will occur, but when. Are we prepared to respond, recover, and learn? Let's start the conversation. Is there someone out there researching how far we can stretch the digital twin concept? I’d love to know…. #DigitalResilience #CyberSecurity #Innovation #digitaltwin

A huge 😮 global IT outage that occurred in mid-July 2024 disrupted services in a number of industries, including media📰, banking🏦, and aviation✈️. A bug in CrowdStrike's endpoint protection software, which impacted Microsoft systems, was found to be the primary cause. CrowdStrike: What is it? CrowdStrike is a cybersecurity firm specializing in endpoint protection, threat intelligence, and cyberattack response services. Their flagship product, Falcon, is a cloud-based endpoint protection platform that utilizes artificial intelligence and machine learning to detect and prevent security breaches. Problems:- For companies that relied on mission-critical functions, such as hospitals, this presented a particular challenge because it was not feasible to carry out the required system reboots to resolve the issue without running the risk of serious operational ramifications. CrowdStrike has quickly rolled back the problematic update, and affected customers are advised to reboot their systems in order to restore regular functionality. Since then, by improving their testing procedures for updates, the company has been collaborating with clients to lessen the effects and stop similar incidents in the future. This incident also emphasizes how crucial it is to thoroughly test software updates, particularly in settings where dependability and high⬆️ availability are essential. #problem #crowdstrike #IT #software #industry

Is your business prepared for a data breach? A well-structured response plan is critical to protect sensitive information and maintain customer trust. Learn the key steps to quickly identify, contain, and recover from breaches, ensuring your organization stays resilient in today’s digital landscape. Read more: https://lnkd.in/gbk_cxRW #TransV #TransVirtualSolutions #TechTV #TransSmartSolutions #TransITSolutions #TechSolution #DataSecurity #BreachResponse #CyberResilience #ProtectYourData #DataProtection #DigitalSafety #BusinessSecurity #CyberAwareness #DataBreachResponse

As is not surprising, data breaches spiked in 2023 and the #HarvardBusinessReview closes this article with three things that can be done to thwart these attacks. But it's missing the fourth thing an organization can do... contact us. Why #LTIGlobal? Because we specialize in providing cutting-edge solutions for critical infrastructure, healthcare, maritime and retail sectors. Get answers to your questions, here: https://lnkd.in/eV_gushG https://lnkd.in/gZ9CarFr

More organisations are beginning to realise that #insiderrisk is a serious threat. In my recent blog post, I explain how to prevent it at scale without breaking your budget. Grab a coffee and read here: https://bit.ly/43zl9qe #InsiderRisk #DataSecurity #ThreatIntel

Scammers often try to scare their targets by taking advantage of something urgent. We see this even more during a crisis, such as the recent CrowdStrike outage. Attackers are pushing fake CrowdStrike fixes that infect your computer. When reading emails or text messages during these events, stay calm and ensure that the message comes from the trusted source. If in doubt, reach out using a different contact method. For example, if you got an email, make a phone call. Remember to NEVER CLICK LINKS in suspicious messages. Tech Tip Tuesday: Here at LinkTech, we deploy an assortment of trusted tools and defenses, as well as help keep your team aware of the threats that are happening. Call us at 605-644-7360 to learn more about how we can help protect your business.

The recent global IT crash underscores an essential lesson: robust quality assurance is non-negotiable. When a major player like CrowdStrike faces issues, it highlights the ripple effects that can impact countless users and businesses. We see this as a call to action for the entire industry. This recent disaster is a stark reminder that we need to prioritize thorough testing, continuous monitoring, and proactive measures to prevent such disruptions because we can never be too careful or too prepared. And it's about more than just preventing failures—it's about building trust and resilience. What are your thoughts on this? How do you ensure your systems are resilient and reliable? We'd love to hear your thoughts and experiences. #QualityAssurance #SoftwareTesting #ITSecurity #TechResilience #GlobalITCrash #CrowdStrike https://lnkd.in/edKqjHHV

Here is why we (Zafehouze) have created Zafepass Prevent & Protect and why it's misunderstood by infrastructure and Cyber-security professionals. We share - we're all vulnerable, cyber-criminality is a major economic issue, it erodes personal privacy, a threat to national security - and a major challenge is the ever-changing nature or cyber-threats. But there are two fundamentally different ways you can take as an org. - the first one has adoption - today you buy Cyber-defense solutions. It's manual, labor intensive, complex, cost A LOT OF MONEY - and is doing a poorly job. It's called detect and respond - once you detect a vulnerability, your IT-team do something about it. But this 'Tom & Jerry show' will just continue. Jerry always get free. Tom is getting the beating. Chasing adversaries around the network has come too far - it's not working - just read the daily hacker-news. Then there is another model - it's called PREVENT & PROTECT. In this model, cyber-criminal activity will not be able to be executed with success. Cyber-security and infrastructure professionals can't understand how - because they've never experienced anything like it. They can't add any security feature that makes this model more secure? They can't take anything out that makes it less secure. @Zafehouze - we are one of the global leading vendors of PREVENT & PROTECT platforms - build on SOLID TECHNOLOGY - eliminating if not all - then most attack vectors ... and you won't get anything like it from the large tech vendors in the market. A shift is on its way - start your transformation, save cost and frustrations. Zafepass Prevent & Protect - salutes The Jericho Forum's deperimeterization manifest as well as Black Core / Transport by DoD. You probably don't know what that is .. so here is a snip! Zafepass Prevent & Protect - leaves nothing for any adversary to compromize. Your data/communication can be "stolen" - but it's not compromized. The licensee is in full control - upon install, we can't even compromize it.