South Korean defense contractors and their suppliers have been targeted by North Korean hackers over the past 18 months with increased complexity. Local media reports 83 defense companies and their contractors had confidential information stolen between October 2022 and July…
The sophistication of this adversary-in-the-middle (AitM) threat identified by Avast is incredible. The infection chain is complex and it highlights the lengths threat actors go to, to open back doors in target companies and the challenges security professional face with…
It was a pleasure to deliver our NIST CSF 2.0 Essentials for Internal Auditor yesterday. We had over 1,200 attendees, an indication that the CSF is a topic of interest to many, including internal audit. As CSF is adopt more…
An interesting article on the UnitedHealth cyber incident in the The Wall Street Journal. As more is known more questions are asked, raising questions over the cybersecurity risk management of the company. Leading up to the publication of the event…
Many congratulations on the 25 years of incorporatation and Russell Penny CPP MSyI our master. It is a pleasure to be a member of the The Worshipful Company of Security Professionals. View Original Post
Could the United Health, Change Healthcare, cyber attack be the largest theft of Health PII in the U.S to date? It’s also likely to be the costliest across any measure that one can think of. If PII was compromised, the…
Cyber insurance has been relied upon as a significant and predominant risk transfer tool for companies for years. However, insurers have implemented exclusion clauses and caps to manage their exposure. At the same time cyber attacks have increased in frequency,…
Management and CISOs of SEC covered entities should read the enclosed. The SEC filed an opposition to SolarWinds motion to dismiss on the19th of April. As the case heads towards oral arguments next month both sides are presenting their arguments…
National Institute of Standards & Technology (NIST) released an update to its Cybersecurity Framework (CSF) profile in February 2024 and in March the U.S DoD issued it Defense Industry Base (DIB) Strategy nested under NIST CSF. ‘A primary framework the…
As always Johnathan Rudy a great writeup on the ongoing SolarWinds SEC case. The case has and is being debated in the court of public opinion and irrespective of the SECs final cyber rule (2023), one finds it difficult to…
