James Walker

“A new report released today by NCC Group plc has found that ransomware attacks hit a record high in May, driven by a massive resurgence in LockBit ransomware attacks. The NCC Group 2024 Threat Intel report found that global ransomware attacks rose by 32% month-over-month in May, to 470 recorded ransomware attacks, up from 356 in April. Compared with May of last year, ransomware attacks rose 8%. … By sector, industrial companies remain the most targeted, a position they have held since January 2021. In May, 143 ransomware attacks targeted the industrial sector, up from 116 in April. In second place was the technology sector, with 72 attacks in May, up from 49 the previous month. The consumer cyclical sector came in third place with 59 attacks, down from 62 the prior month.” https://gag.gl/8xzNfk Visit our website to learn how you can protect IP, PII, and PHI against malware and ransomware by reducing and defending the number of entry points a malicious file can enter their networks. #cybersecurity #kiteworks #cyberattack #ransomware #malware #contentprotection #contentsecurity

1

🗣️ Don’t miss our panel discussion, “How a Proactive Cyber-Security Strategy Improves Your Detection and Response Efforts” at #teissLondon2024. 🗓  Tuesday, 17 September from 10:30 - 11:00 💡 Join industry experts along with Cyware's very own Dan Bridges, as they dive into how proactive cyber-security measures can transform your defence strategy. From leveraging proactive threat hunting to addressing vulnerabilities with cutting-edge penetration testing, this panel will explore advanced techniques to fortify your cyber defences. #Cybersecurity #ThreatHunting #ThreatIntelligence

12

Cybersecurity Awareness Month ends on 31st October, but the free Proofpoint #Cybersecurity Awareness Kit will still be available. Download your copy today to equip your employees with the knowledge and tools they need to #StaySafeOnline #SecurityAwareness #CAM

3

What do you need to know about the proposed mandatory reporting in the UK? OpenText's Stan Wisseman breaks down the proposal and what it means for businesses and the challenges it brings in his latest blog. Check it out.

3

Operational Technology can be secured in a variety of ways. If you’d like to see what excellent security controls could look like, in depth, across your environment just let us know. Capturing OT current state, designing future state and supporting critical infrastructure customers with OT architecture and security control best practices is what we do well. Compliment that with threat intelligence, threat detection and offensive security practices which we can help you with - then you’re in a much better place. Get an OT experts input across your plan. #OTsecurity #cyberthreats #criticalinfrastructure

2

For the latest discoveries in cyber research for the week of 30th September, please check out Check Point Research's Threat Intelligence Bulletin. It includes the top cyber-attacks, data breaches, vulnerabilities, patches and more that you need to know this week. #cybersecurity

2

SentinelOne are up at Olympia again today for the final day of UK Cyber Week. We'll be joined by the Cybanetix team so pop by and to discuss your cyber security strategy and see how we can help. #UCW #PurpleAI #endpointsecurity #cloudsecurity #identitysecurity #securitydatalake

45

3 Comments

This week in cyber - 20th July ->26th July 1. The post incident report (PIR) for the Crowdstrike BSOD event has been released. Crowdstrike delivers configuration content to their EDR in 2 different ways formats, Sensor content (which is used to update capabilities expected to be used long term on the CrowdStrike solution) and Rapid Response content (used to respond to immediate threats at operational speed). The PIR details the event was caused by an issue stemming from a Rapid Response content push which was allowed to be pushed out to all sensors after passing a content validator. A bug in the content validator allowed this content to be pushed out with problem content data which caused the associated Microsoft operating systems to crash. Crowdstrike have now put in preventative measures in place to avoid a similar issue in future. 2. Knowbe4 have released a statement detailing how they employed a North Korean hacker as an IT personnel. A North Korean Hacker was able to steal a real American identity and create a deepfake that passed their internal checks around background, history, video interviews and references. Post the "IT" staff receiving their MacBook laptop, KB4's internal SOC were instantly alerted to an attack happening on the device, it appears the MacBook had been plugged into an IT mule farm and was exhibiting unusual behaviour such as manipulating history files and executing unknown executables. FBI were alerted and Mandian is now involved in digital forensics. Applauds to Knowbe4 for their full transparency. 3. IDC's research into Cybersecurity show that there will be a significant increase in expenditure prior to the Paris Olympics. This olympics will be the most technologically advanced and interconnected Olympics to date with significant advances in cyber defence and offence capabilities since the last olympics. In France, a national service (ANSSI) was created specifically to prepare the strategy around cybersecurity attack prevention at the games and it is believed that French enterprises are wholly prepared for the unprecedented attack amounts that are to come. 4. Wiz has walked away from the $23B acquisition offer from Alphabet. In an internal memo to the business the Wiz Founder, Assaf Rappaport, detailed his confidence in the company reaching $1b ARR before pursuing sales of shares to the public. This is indeed a very bold statement by the company that has been the fastest growing cybersecurity organisation to reach unicorn status. It will be seen how fruitful this play is.

24

3 Comments

In an era of escalating cyber threats, a sophisticated and multilayered strategy is crucial for safeguarding your organisation. At Red Helix, we champion a comprehensive cybersecurity approach to ensure the security and resilience of businesses in an ever-evolving digital landscape. 📽️ Watch the animation below to see how we can deliver simple cyber security for your business. ----------------------------------------------------------------------------------- ⬇⬇⬇⬇⬇⬇ 📩 Reach out via messenger to discuss how we can help fortify your business from cyber attacks and criminals! 🤝🔒💼 #Cyber #Cybersecurity #XDR #MDR #EDR #NDR #SOC #SIEM

8

Great short read from Aoibhín Hamill - CISMP on the role of Cyber Threat Intel and proactive cyber defence. Thanks for the mention Aoibhin, our partnership with Softcat plc goes from strength to strength. It's always a pleasure working with the team! #cyber #cyberrisk #threatintelligence

7

1 Comment

For the latest discoveries in cyber research for the week of 9th September, check out our Threat Intelligence Bulletin. It includes the top cyber-attacks, breaches, vulnerabilities, patches and more. #cybersecurity

3

Today's video is inspired by a webinar I did just now for Claroty about how KEVs, Reachability and Business Context can help you be super targeted around prioritising vulnerability remediation, which is a fact of life in the OT world where remediating vulnerabilities can be so difficult. https://lnkd.in/gat_dj5p

13

1 Comment

For the latest discoveries in cyber research for the week of 9th December, check out our Threat Intelligence Bulletin. It covers the latest cyber-attacks, vulnerabilities, patches and more that you need to know this week. #cybersecurity

1

NIS2 is very nearly real, live and required! This weeks recommended reading is The National Cyber Security Bill 2024 that was published by the Department of the Environment, Climate and Communications last week. - The Bill outlines new cybersecurity requirements that your company may need to adhere to, ensuring you stay compliant with national regulations. - Understanding the Bill helps you identify potential risks and vulnerabilities in your network that the NCSC might proactively scan for, allowing you to strengthen your defences. It's not an insignificant read and gives wide ranging powers to the National Cyber Security Centre, Ireland (NCSC-IE) Some things of note are: - The NCSC now has the ability to scan internal networks, with your consent, to improve cybersecurity - The NCSC is getting real teeth under the 2024 Bill—think proactive scanning, DNS blocking, and even temporary sensor deployment on critical networks. - The NCSC is officially Ireland’s cybersecurity watchdog under the 2024 Bill, with powers to act on everything from botnets to malware https://lnkd.in/ewKVCT57 Armis, Barry O'Brien

13

📣 Calling all CISOs! Don't miss our latest blog in techUK, discussing cyber risk and how CISOs are addressing cybersecurity gaps ➡️ https://ow.ly/NTOU30sIzJ1 #cybersecurity #CyberStrategy #TechUK

2

Our CTO, Gareth Pritchard, delves into the realms where future tech and cyber security intersect. Explore how #AI is revolutionizing industries by striking a delicate balance between innovation and security. Read more ➡ https://lnkd.in/ekZP3rqW #CyberSecurity #MachineLearning #CYBERUK24

14