Thank you for posting Olaf Classen. The effects of supply chain or third party hacks demonstrate the need to ensure supplies can and are able to manage cybersecurity risks. As in this case, public sector organisations and MSPs fall under…
Thank you for sharing Bryan Foss. If correct then I’m not sure I can add any value to this article. Other than to say the December 2023 UK Parliament report on cyber may reflect ransomware, but it makes clear the…
Thank you Olaf Classen for sending this post. DORA is only 10 months away from transposition by EU member states and 12 months from being applied. DORA requires covered Financial Institutions to adopt a risk based approach for the oversight,…
Apologies – reposted The UK is proposing its own regulation that has similarities to DORA. With proposals requiring FIs to oversight ICT third party vendors, such as cloud providers. Third part supplier resilience and concentration risk is a critical vulnerability…
As always thank you for posting Olaf Classen. This report is a further example of the art of possible, and potentially art of the probable, as cyber supply chain hacks increase in popularity. It is no longer the case that…
Supply chain cyber attacks seem to be the flavor of the month. As at least 60 credit unions in the U.S are experiencing the effects of a hack on a third party supplier. It appears that a ransomware attack targeted…
The Property sector looks to be the target of choice today for hackers. With last weeks attack on CTS affecting property completions in the UK, the attack on Fidelity National Financial in the U.S (), and the hack against EDC…
The recent hack on the legal MSP CTS is having far reaching consequences, not just for the unfortunate clients caught in completion chains. Conveyancers could be restricted or suspended from services by lenders. “It’s galling,†said a spokesperson from another…
One of those supply chain cyber threats. In this case as it relate to the ownCloud service. An open source file sharing and sync tool. The ACSC rates this vulnerability as critical, as it allows the compromise of a third…
Those pesky nation state threat actors are just getting better at what they do. Identifying and exploiting vulnerabilities in code written by product and service providers. Supply chain hacks are increasing in frequency, sophistication and severity of impact. In ones…
