Felix A. Barrio (PhD, CISM)

🛡 We commend the National Cybersecurity Directorate (DNSC) for their initiative to strengthen cybersecurity in Romania by implementing the NIS 2 Directive into national legislation. This draft law is a significant step towards ensuring a high common level of security in the national and European cyber space.

14

How to prepare, create and implement impactful national #cybersecurity strategy? Drafted strategy is not an end station, but a starting point for continuous improvement.   Today we organised a workshop for #Honduras 🇭🇳 with Dirección de Gestión por Resultados (DIGER) to offer concise and practical guidance on how to move forward with national cybersecurity strategy as a whole of nation approach, and offered our insight in:   ✅ practical lessons from Europe and across the world on success factors,  ✅ common pitfalls to avoid and strategies for overcoming,  ✅ identifying risks,  ✅ stakeholder engagement and governance,  ✅ impact evaluation that help to ensure timely delivery of a comprehensive and tailored strategy.   This workshop, our first official bilateral activity with #Honduras after they became #LAC4 member, launched the consultation process for the first national cybersecurity strategy for Honduras.   Thank you, minister Marcio Sierra Discua, Dennis Vásquez, Unión Europea en Centroamérica, and #EUCyberNet experts Kadri Kaska and Liis Rebane for training.

34

I share with you the announcement of the webinar "𝗘𝘃𝗼𝗹𝘃𝗶𝗻𝗴 𝗳𝗿𝗼𝗺 𝗢𝗽𝗲𝗻 𝗗𝗮𝘁𝗮 𝘁𝗼 𝗔𝗿𝘁𝗶𝗳𝗶𝗰𝗶𝗮𝗹 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝗳𝗼𝗿 𝗠𝘂𝗻𝗶𝗰𝗶𝗽𝗮𝗹𝗶𝘁𝗶𝗲𝘀" Thursday, 14 November 2024 (10:00 –12:30, Madrid GMT +1) The European Union is fostering the creation of Data Spaces at all levels. These data spaces in many different sectors aim to promote an ecosystem of secure re-use of data for the common good. Local and regional public bodies have great potential for the creation of data spaces that serve the community. Unlike open data repositories, these spaces aim to have the capacity to process data that is protected by the right to privacy, intellectual property or trade secrets. Municipalities have a wide range of powers and services that enable them to generate high-value datasets. Its re-use will support the development of research, help to promote entrepreneurship and will be essential for designing data-driven public policies. The Data Governance Regulation and the future European Health Data Space Regulation regulate the essential characteristics that should govern the creation of these data spaces. 𝗧𝗵𝗲 𝗨𝗿𝗯𝗮𝗻 𝗛𝗲𝗮𝗹𝘁𝗵 𝗖𝗹𝘂𝘀𝘁𝗲𝗿 organises with the support of the 𝗪𝗘𝗟𝗟𝗕𝗔𝗦𝗘𝗗-𝗣𝗥𝗢𝗝𝗘𝗖𝗧 this practical workshop aimed at providing the audience with information on the essential elements for the design of these information systems and data spaces. Information in the attached file. Registration at: https://lnkd.in/dwBD52X3

24

📚 Cybersecurity Economics for Emerging Markets 📅 September 2024 👥 Vergara Cobos, Estefania 🌐 https://lnkd.in/dCriDUtW "Cybersecurity Economics for Emerging Markets is a pioneering research work that delves into the drivers and profound consequences of cyber incidents worldwide. From economic setbacks that can destabilize entire economies to interruptions of vital services and impediments to social and economic development, the impacts of cyber incidents are far-reaching." As anticipated in the abstract of the latest publication from The World Bank Group the focus is the #CyberSecurity on #EmergingMarkets with all the related side effects. ✅️ Let's start from here. #Methodology The research analyzed over 30K publicly disclosed cyber incidents across 190 countries, from news articles, academic papers, and institutional reports in 98 languages: data were data focused on cyber incidents, sector-specific impacts, and regional variations. 📌 Focus on the emerging markets, such as: ➡️ Latin America and the Caribbean (LAC): especially #Brazil, #Mexico, #Argentina, and #Colombia; ➡️ Southeast Asia: #Indonesia and #Vietnam, directly mentioned due to their high growth in digitalization but with substantial cybersecurity challenges; ➡️ Sub-Saharan Africa: with the highest cybersecurity workforce gaps, particularly #Nigeria and #SouthAfrica. ➡️ Eastern Europe with #Ukraine, where war illustrated how cyber incidents have become an integral part of modern conflicts. 📌 The #consequences have wide-ranging impacts on various aspects of society, the economy, and public infrastructure. A not fully inclusive list might be: ➡️ #Economy: Massive GDP loses with high indirect costs such as disruptions in supply chains, decreased trust in digital systems, loss of productivity, and reputational damage; ➡️ #SectorImpacts: Target core services like healthcare, utilities, and transportation, leading to disruptions that affect millions of people but also power outages, fuel shortages, or even interrupt medical services and financial services; ➡️ #Social & #Human With the disruption of public services and government structures, of course, critical healthcare structures are impacted; ➡️ #Politic & #War Cyberattacks can be used to disrupt elections, manipulate political processes, or even be part of modern conflicts, as seen during the Russia-Ukraine war. ✅️ #Policy and #Recommendation Isn't easy at all and there is not a magic wizard especially where the focus are emerging countries but the proposed strategies are: ➡️ Setup safe data collection practices to support evidence-based tailored policies; ➡️ Promoting the development of a national cybersecurity industry; ➡️ Drafting action plans that involve different sectors and stakeholders; ➡️ Prioritizing resilience in critical sectors; ➡️ Supporting cybersecurity awareness and training programs; ➡️ International collaboration and information sharing; ➡️ Support for SMEs. 💡 See ⬇️

35

14 comentarios

Hello everyone! I would like to share Issue 03 of the Ind.Cyber.Sec Letters, an initiative dedicated to disseminating research and analysis on incidents within the field of industrial #Cybersecurity. In this edition, the report "The Global State of CPS Security 2024: Business Impact of Disruptions" by Claroty is explored, with a special focus on #Ransomware attacks targeting organizations that own assets related to operational technology (#OT), Internet of Things (#IoT), Internet of Medical Things (#IoMT), and building management systems (#BMS). Adding to the discussion, data from two other reports are presented to the reader: "Cyber Attacks on Infrastructure: The New Geopolitical Weapon" by KnowBe4 and "The State of Ransomware 2024" by Sophos. To read Issue 03, please visit: https://lnkd.in/eNE87zRV Ind.Cyber.Sec Letters is an initiative linked to university extension/outreach projects, coordinated by myself and conducted at the Universidade Federal de Santa Maria, in collaboration with external institutions. #CriticalInfrastructure #CyberIncident #CybersecurityAwarenessMonth #Energy #IndCyberSecLetters #IndustrialCybersecurity #InfoSec #Malware #PLC #PowerGrid #SCADA #SecureOurWorld

12

🦑 Food for thought from the amazing lecture and talk with Kristin M. Gilkes, Ph.D. from EY at Democritus University of Thrace - (D.U.Th.) today. 💻 Artificial Intelligence (General?), Quantum Computing, Ethics, Diversity, Cybersecurity and Defense were the topics discussed. Too much to think about. #artificialintelligence #quantumcomputing #defense #cybersecurity #ethics

17

1 comentario

We were delighted to have the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH join our #Code4Dev series to share insights on how governments can implement #openIMIS! This digital public good is transforming health financing and social protection programs worldwide. 🌍 If you missed the session, catch up on the webinar here: https://lnkd.in/eP2TwDVn Let’s continue to push the boundaries of what’s possible together! 💡🚀 #HealthFinancing #SocialProtection #DigitalPublicGood #openIMIS #Code4Dev #DPG

11

📃 Read the latest #OSM blogpost by Pedro Escaleira (Instituto de Telecomunicações) on CVE-2022-35503 disclosure for Remote Code Execution in LCM/N2VC. The vulnerability was analyzed during OSM#15 Hackfest and the patch, which will prevent the injection of malicious code by an attacker, was developed by Daniel Arndt (Canonical). Congratulations and big thanks to him! The patches, which include changes in NBI and N2VC, have been delivered in OSM Release FIFTEEN and backported to Release FOURTEEN LTS and Release TWELVE LTS. https://lnkd.in/eZSfeSJy

22

🇪🇺🛡️ 𝐑𝐞𝐢𝐧𝐟𝐨𝐫𝐜𝐢𝐧𝐠 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 🛡️🇪🇺 The #Cybersecurity Act #CRA introduces, for the first time, #EU wide rules for the cybersecurity certification of ICT products, processes and services.

1

Are you wondering how to fund and guarantee #cybersecurity to all stakeholders of your #products, #services or in general activities you provide? One member of my group named #SPDP has just suggested the last post by European Union Agency for Cybersecurity (ENISA) here https://lnkd.in/dSzS2C7Q

1

"Artificial Intelligence and Organised Crime", published now in December 2024 by the AI Action Summit & EL PAcCTO. 👇 This study examines the interplay between #AI and #organizedcrime across Latin America, the Caribbean, and the European Union. The document highlights legislative developments, #AI-driven #criminal activities, and #justice system tools. It maps current #strategies, analyzes #ethical and social impacts, and proposes actionable measures for combating #AI-enabled #crime. It acknowledges rapid #AI advancements and regional #crime variations, emphasizing the rising threat posed by #AI use in high-risk #criminal #networks. Link: https://lnkd.in/dymA7nGA #artificialera #web3 #web4 #web5 #fintech #digitalera #digitaltransformation #ailaw #machinelearning #deeplearning #generativeAI #trustworthyAI #explainableAI #aiethics #artificialintelligence #explainableAI #responsibleAI #foundationmodels #GPAI #GAI #LLMs #NLPs #GenAI #frontierAI #narrowAI #AGI #ethicalAI #adversarialAI

24

1 comentario

"G7 Mapping Exercise of Digital Identity Approaches - Report prepared for the 2024 Italian G7 Presidency and the G7 Digital and Technology Working Group", published now in October 2024 by the OECD - OCDE. 👇 This report presents a mapping exercise identifying commonalities in #digitalidentity approaches among #G7 members to support #future #interoperability. It highlights shared concepts, technical standards, and assurance levels. Link: https://lnkd.in/dvx9Avff #web4 #web5 #digitalera #digitaltransformation #web3 #atificialera #digitalidentity #eID

25

To all my wonderful cybersecurity evangelists is Spain, will you be attending VI Cyber Defense ESPDEF-CERT? Please feel free to reach out to me if you would like to book some 1:1 time for more of personalized discussion on Attack Simulation and how you can start a BAS research project for 2025. How are you validating your company’s security controls? #Cymulate

3

In this increasingly regulated world, Testing, Inspection and Certification (TIC) services play an intrinsic role to provide assurance, safety, compliance and trust to stakeholders. If you are in the cyber industry, this white paper presents a good overview of the different market regulations and how TIC companies are involved. If your company plans to export IoT products, do take some time to read this article as your product may have to comply with minimum standard requirements. The Cyber Security Agency of Singapore has a range of certification and labeling schemes. If you need help, let me know! https://lnkd.in/geBYgxUN

9

📊 Key fact: According to the Agencia Española de Protección de Datos - AEPD, 85% of companies that handle large volumes of data consider anonymization as one of the most important security measures to protect privacy in their databases🗂️. However, many organizations have not yet implemented effective solutions to manage their data securely.🔓 🤔The consequence of not anonymizing large volumes of data? The accumulation of unprotected data exposes companies to a greater risk of security breaches and leaks😈, affecting both user privacy and the reputation of the organization. 💡With Nymiz, it is possible to anonymize large volumes of data efficiently and accurately✅, without compromising privacy. In addition, our process is fully monitored to ensure that the process is carried out correctly. But this is just one of the many advantages of our solution. 🔎Discover how Nymiz can help you avoid unnecessary exposure of sensitive data sets and comply with data protection regulations reliably and quickly.🔐 🤓Ready to try it? 📌Find the link in the first comment and discover how Nymiz transforms data management in your company.🛡️🚀 #DataMasking #DataPrivacy #AEPD #Cybersecurity #Compliance #SoftwareSolution

17

1 comentario

Scant information is available about the extensive digital surveillance system that Venezuela has stealthily developed over the past decade. In this International Forum for Democratic Studies podcast, I discuss the Venezuelan surveillance system with Christopher Walker and Beth Kerley. I explain how the Patria System, video surveillance cameras, referenced quadrants, telephone monitoring, State apps, and party leaders on the ground are pieces of a loosely integrated widespread surveillance system. Valentin Weber explain details of the Chinese surveillance system. The commonalities between China and Venezuela are striking. https://lnkd.in/enx7z-MK

19

After #HarfangLab revelations on #Mifare devices, another vuln on physical device. "The #EUCLEAK attack requires physical access to the secure element [...]. All #YubiKey 5 Series (with firmware version below 5.7) are impacted by the attack and in fact all Infineon security microcontrollers (including TPMs) that run the Infineon cryptographic library [...]" https://lnkd.in/ggn74Nxt

4

In AI engineering, code quality and other software best practices are often neglected. One of the reasons is that AI teams consider code checking tools too strict when using them for feedback - often rightfully so. The solution is to use TRL: Technology Readiness Level as a way to set different levels of scrutiny for different levels of readiness. Quick AI experiments hardly need any scrutiny, but code that will be involved in production at some time needs more strict objectives when it comes to security, maintainability, test coverage etc. In this video, my esteemed colleagues Shima Rafizadeh and Ken Vernaillen explain how to set those objectives for different systems in a portfolio, and use benchmark-based metrics to set a certain level of quality, instead of demanding that every single finding from code analysis needs to be fixed. AI teams will love it. This is the way. #ai #softwareengineering #codequality #aisecurity

19