Looking for some help. Does anyone have a view on building an inherent risk model to assess the risk of a cyber-attack on a fictitious company? Coming up with the inherent financial impact. It may not be a discrete number,…
I’ve realized over the past 6 months, you get less views when you post data breaches than other posts. But this one is interesting, like bitcoin before, AI is now a target. The data AI firms handle in security is…
An interesting read for a Monday. Raising some interesting questions, albeit from the perspective of a fictional narrative. A narrative which does resonate somewhat with what we are seeing today. An increase in cyber activity, based upon digital dependency and…
Intimidating witnesses, no, misplacing evidence no. The evidence relating to a number of cases held on computers belonging to the Stuart police department, Florida. Has been locked out following the April 2019 hack. The result being that several cases have…
A US gas pipeline has been impacted by a ransomware. It started as a spear-phising email, pivoting to the OT network and windows systems. The observation made is that the CNI provider was not sufficiently aware and prepared, according the…
One to watch as political games are afoot in the US. A proposed bill is put forward by New York Senator Kirsten Gillibrand for a Federal Data Protection Agency to enforce existing privacy laws. Is this a little like the…
Do the recently reported hacks on 5 law firms highlight a new chapter in the monetisation of cyber? They open up an interesting narrative on Maze the hacking group. How they are monetizing hacks and who may or may not…
The Security vs risk management debate. Cyber security is not about nuts, bolts and widgets, its fundamentally about managing risk. The risk to financial statements, which cyber attacks clearly demonstrate. The reason cyber security fails to land at the board…
A useful article. 2019 may be the year of the VPN hack and the year in which nationstate hackers emerged into the spotlight of media attention. A number of leading VPN manufacturers announced vulnerabilities in their products. Vulnerabilities which it…
Germany moves to ensure its artificial intelligence, electronic warfare, networked operations and cryptology, and defense-related information and communications technology are deemed to be critical for national security. Giving the German government the option of deciding who can acquire the technologies,…
