Failure to invest, prepare for and manage cyber risks has left us exposed to the next general of cyber risks. Regulators need to get up to speed, there needs to be better information sharing and standards are needed to address…
Brilliant. helping give young hackers a second chance, is the way it should be. With legit bug bounty hunters earning millions, it gives these kids a chance to use their obvious expertise in the right way. They have more chance…
Earl Enterprises, a large US retail group which includes Planet Holywood loses over 2Mn the credit and debit card details between 2018 and 2019. Which raises many questions. It appears that PoS terminals were compromised. I hope the card details…
The openness from the leadership team at Norsk Hydro clarifies the global impact of the attack and the actions taken to get things back up and running. It often takes an incident for management to focus on cyber risk management.…
The Huawei debate continues, the latest NCSC report casts doubts around the long term security risks associated with the manufacturer. Whose right, who will take the risk? It’s surely got to be damaging the credibility of the company. Especially given…
Asus pushed out malicious code to +500,000 servers. It was found by Kaspersky, when it noticed unusual activity follow an update. What’s worrying is that as it was signed with an authentic certificate, it wasn’t picked up nor was it…
Hackers will invariably aim for financial gain, so go where the money is. But its not necessarily about the size of the prize that’s important in the short term. With the advent of faster payments, hackers are targeting the high…
I was pleased to formally receive recognition as a Chartered Security Professional (#CSyP), at last week’s CSyP celebratory dinner. Held at the Old Bailey in London and presented by Lord Carlile of Berriew, the outgoing chairman. 10 CSyP members were…
Give blood save a life, give blood lose your PII. View Original Post
Getting the basics right is a necessity for managing the complex cyber security environment. It requires the same level of attention if not greater, than financial control. It’s why IT and cyber controls are included in Sarbanes Oxley financial audit.…
