The increase in the sophistication, frequency and costs of cyber attacks is a cause for concern. SolarWinds, the Exchange hack, Colonial Pipeline, JBS and more recently Kaseya hacks have demonstrated that current cyber incident response legislation is not working. The…
It’s an observation only but when you read the enclosed 2 thoughts come to mind. The first is that NIST are aligning their risk management thinking along with other sectors such as financial services for federal agencies. Formalising risk governance,…
Worth a read, a very interesting set of statistics on cyber insurance. global insurance pricing has increased 32%. Ransomware is the predominant cyber threat confronting businesses of all sizes overtaking data breaches, which is what we all see in the…
More is coming to light about the weekends Kaseya cyber attack, which looks like it came from a zero day following a patch release (CVE-2021¢â‚¬â€œ30116). If correct then it resembles the SolarWinds attack in 2020 and went straight in at…
More is coming to light about the weekends Kaseya cyber attack, which looks like it came from a zero day following a patch release (CVE-2021€30116). If correct then it resembles the SolarWinds attack in 2020 and went straight in at…
We seem to be moving from hack to hack, can we break out of the spiral of infrastructure hacks of this magnitude and complexity? There needs to be a rethink of cybersecurity and cyber risk management which does not involve…
The Kaseya attack over this weekends 4th of July celebrations demonstrates the lack of defensive cyber security and ease by which hackers can and have infiltrated companies, which manage the keys to the crown jewels of Corporate America, Europe, Asia…
The US and UK intelligence agencies have raised their concerns over the involvement of Russian hackers continued campaign of attacks targeting the US and Europe. The concerns raised around the attacks being unsophisticated brute force, goes some way to demonstrate…
A very interesting report published by the International Institute of Strategic Studies (IISS), following a 2 year assessment of the State level cyber security capabilities of major global powers. Presenting a snapshot of the cyber maturity of across 1. Strategy…
First American Financial Corporation (FAFC)‚Â became the first firm fined by the Securities and Exchange Commission (SEC) for poor quality cybersecurity disclosure controls and procedures, in combination with NYDFS charges for violating cybersecurity regulations. In what I see as test cases…
