Gagan Bhatia

https://lnkd.in/eZfp59HD Schools need greater support and funding for protection and mitigation against such attacks. If a school is run as an academy can they face an ICO fine? There were 347 cyber incidents reported in the education and childcare sector in 2023, a BBC report revealed. It represented a 55% increase on 2022.

11

1 Comment

https://lnkd.in/eEZXMTH4 !!Analysts claim cyber attacks contribute to business failure!! I was going to do a post on BGP hijacking as I have seen some "imaginative" comments about recent events but this is more relevant. A small bonus that comes with being "on the bench" is that I get a chance to listen to the business news in the morning, where I heard that this longstanding retailer is going under administration. My heart goes out to those that may lose their jobs -- but I want to highlight the economic analysts comments: "that a recent cyber attack had damaged trade and cash-flow", this was echoed by the article attached. These days even traditional businesses are digital businesses - yet I find even "Digital", "no-brick only clicks" firms often treat the digital platforms & infrastructure plus the regulations+laws that govern them that "are the means of profit generation" as something other than important. Other things always hold their focus. Here is another example of something as fundamental as malware precipitating a business black-swan event - something a jobbing CISO or HofS is reminded of everyday. An example I will use Perhaps NIS2 and DORA will cause a shift in mindset

8

4 Comments

#QRishing is a #cyberattack that is becoming as popular as #QRCode because after a QR code is printed no one really cares for its integrity ... How sure you are those QR codes in banners and advertisement in the streets haven't been tampered with and #ThreatActors didn't glue their own malicious QR code on top of it? Welcome to the world of #ZeroTrust! #InformationSecurity #CyberSecurity #InfoSec #CISO #Vishing: Fraudulent voice calls, #Phishing: Fraudulent emails, #SMShing: Fraudulent SMS, #QRishing: Fraudulent QR code. Any communication channel can be used in malicious/fraudulent way.

97

5 Comments

UK arrests teen linked to Transport for London cyber attack U.K.'s National Crime Agency says it arrested a 17-year-old teenager who is suspected of being connected to the cyberattack on Transport for London, the city's public transportation agency. "A teenager has been arrested in Walsall by the National Crime Agency, as part of the investigation into a cyber security incident affecting Transport for London (TfL)," reads the NCA statement. "The 17-year-old male was detained on suspicion of Computer Misuse Act offences in relation to the attack, which was launched on TfL on 1 September." Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

1

What's in a Name? Having led the response to major reliability and cyber incidents over the last 15 years, I am fascinated by how the names of incidents often starkly contrast with those of projects. Projects typically bear grand titles, invoking historic milestones or badges of greatness 🏆, while incidents are given more mundane, boring names. Take the recent CrowdStrike incident, for instance, named "Channel File 291." In contrast, consider project names like "Apollo" or "Titan," which evoke a sense of grandeur and ambition. Even the actual sensor in question, Falcon, symbolizes agility and precision. Unfortunately, these attributes were not evident in the incident a few weeks back. And no, "Blue Screen of Death" was not a contender ☠ . This naming convention highlights how incidents, despite their significant impact, are often treated as routine problems to be managed and resolved. In contrast, projects are celebrated endeavors aimed at achieving major milestones. #IncidentManagement #ProjectManagement #CyberSecurity #TechLeadership

2

Interesting to see this peddled again “a lack of basic cyber hygiene”. Reviewing the latest #CyberBreach survey from HMG is sobering reading. 75% of UK business report #Cyber as being a key area for the board, yet this (again) results in total lack of #Governance: - 33% of businesses have a formal security policy - 31% have conducted a risk assessment - 30% have a board member with cyber responsibility (this has returned to the levels of 2016-18) - 27% have asset management activities - 13% are aware of the NCSC 10 Steps Guidance, but only 3% have actioned all 10 steps - 11% have conducted a pen test - 11% have reviewed their supply chains - 12% are aware of CyberEssentials (up from 8% in 2016) - 3% review NCSC/ICO guidance on Cyber (up from 2% since 2016) This is damning, we have excellent guidance on the NCSC website for Cyber and on the ICO website for Data Protection. 41% of the business are consulting externally, so why are those consultants not advising their clients correctly? I have a real issue when we fete the current #CyberSecurity strategy yet in every demonstrable metric it’s failing to engage and inform. I hope that the new government looks to reset the foundations before pushing on with anything else. Within our clients, we place baseline guidance for Cyber and Data Protection at the centre of the engagement. This ensures that governance is reset and a solid foundation can be provided for improvement.

2

2 Comments

🔐 🤖 🧠 Weekly InfoSec Knowledge Nugget 🧠 🤖 🔐 ℹ 30 million people in the UK have had data lost or stolen, whereby 55% of UK adults reported having had their data lost or stolen, and 30% of them experiencing emotional distress as a result. 🔗 Source: UK Information Commissioner's Office: https://lnkd.in/df-NS6rK ⚡Data is gold these days and it is important to safeguard it using robust security practices. Individuals and organisations alike need to do more to improve their security and data protection measures to protect this precious data. As individuals we need to ensure that we only share data with reputable organisations who have the safeguarding of such data as a core interest. Organisations collecting data need to implement all the necessary security protocols and controls to protect the data they are collecting and processing. #security #infosec #data #dataprotection #gdpr #databreach #uk #ico

2

Bank of England’s Sasha Mills sets out the banks expectations around operational resilience for FMIs. Some key points hinting at regulatory focus in the run up to April 2025… 1. Growing emphasis on cyber and data corruption scenarios as some of the most demanding 2. Ensuring that extreme but plausible scenarios provide a full exploration of resilience issues 3. Adopting more comprehensive resilience testing regime over time not just tabletops 4. Considering broader market impacts and involving market participants in testing 5. Growing emphasis on third party risk and the forthcoming critical third party regime While this speech focuses mainly on payment systems - the themes will be familiar to most FIs in their recent dealings with regulators. While April 2025 focusses many people’s minds - we can all be certain that regulatory interest in resilience will not diminish after that date. We wait with interest for the next rounds of supervisory engagement as the regulators digest everyone’s latest self assessments. #operational resilience

62

1 Comment

From October, UK banks will be 💯% liable for #scam losses - even when the payment is authorised by the customer. (It doesn’t mean you can all go and get scammed now! 😅) Authorised Push Payment fraud is where a victim is tricked into making a large bank transfer to an account posing as a legitimate organisation. But in a few months, people will be fully reimbursed and the costs will be equally divided between the bank managing the customer's account sending the funds and the bank operating the account receiving them. 🤔 Not only could this force banking costs to rise, I predict we could see an increase in attempts as fraudsters will know the money is available. I also think we may see an uptick in first-party fraud where the actual account holder uses their own credentials for fraudulent means.

328

85 Comments

https://lnkd.in/eCAau6qp An interesting read and it goes to show you can take on huge corporations and win. Also how long it took is just insane.

4

Session 08 of the CISO Sessions - Useful CISO Metrics is now live. Each week I will be providing bite size snippets demonstrating how to create actionable business focussed security metrics. https://lnkd.in/eu_zFvQG

14

17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London British authorities on Thursday announced the arrest of a 17-year-old male in connection with a cyber attack affecting Transport for London (TfL). "The 17-year-old male was detained on suspicion of Computer Misuse Act offenses in relation to the attack, which was launched on TfL on 1 September," the U.K. National Crime Agency (NCA) said. The teenager, who's from Walsall, is said to have been arrested on September 5, 2024, following an investigation that was launched in the incident's aftermath. The law enforcement agency said the unnamed individual was questioned and subsequently let go on bail. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

1

Continuation of fraud scenarios - Scenario 4 **** Views expressed are my own **** You are desparate for a change in job and you receive an email or a post on a networking site stating that your profile has been shortlisted because of your impressive skills. You attend staged interview by the member of the fraud company who tells you that they are hiring on behalf of another well known company. You receive authentic looking letters and a dream compensation. The deal is sweetned when you hear that the position will require you to travel abroad and it is an urgent requirement. You get very excited that the long awaited opportunity has landed. In your excitement and the sense of urgency created by the fraudster, you drop your guard. The fraudster tells you that all the paperwork will be done by their organization on behalf of that well known company. They ask you to pay a certain amount for the visa. And then they continue to ask you to pay additional amounts for certain bureaucratic procedures consistently insisting that it is urgent to pay the amounts quickly else the offer will be revoked. You don't want to lose the opportunity of a lifetime and you continue to pay until the day the person disappears and you are left conned. TIP: Do your thorough research on any job opportunity that comes to you. Always ask questions on opportunities that sound too good to be true. Be especially watchful when the offer comes from a company or consultancy that you don't recognize. A search on the internet will help you a immensely in recognizing any red flags. It is important to spread the word so that others are safe. Please share the knowledge about frauds with those who are susceptible to becoming victims. Example: Elderly who are not tech or news savvy and/or people who trust easily without verifying. Also with people who tend to get easily swayed through emotions. When you receive any unsolicited call that attempts to create panic/fear/temptation/pain/dispair or feed on your pride for patriotism, please become extra cautious immediately. Challenge them with facts data, proof, transparency. Chances are they will excuse themselves out of the call or not call back. Also please report such incidents to the Indian cyber crime division. The link is: https://lnkd.in/gHDscgng

37

4 Comments

#Crowdstrike has released its Root Cause Analysis - 12 pages of details which ultimately boils down to inadequate testing, in other words a systemic issue. Perhaps not surprising, but we can't depend on our service providers putting in place adequate quality assurance processes, we need to consider doing more testing prior to deployment - or consider alternative solutions. #testing #qualityassurance #cyber

22

1 Comment

Reviewing the latest #CyberBreach survey from HMG is sobering reading. 75% of UK business report #Cyber as being a key area for the board, yet this (again) results in total lack of #Governance: - 33% of businesses have a formal security policy - 31% have conducted a risk assessment - 30% have a board member with cyber responsibility (this has returned to the levels of 2016-18) - 27% have asset management activities - 13% are aware of the NCSC 10 Steps Guidance, but only 3% have actioned all 10 steps - 11% have conducted a pen test - 11% have reviewed their supply chains - 12% are aware of CyberEssentials (up from 8% in 2016) - 3% review NCSC/ICO guidance on Cyber (up from 2% since 2016) This is damning, we have excellent guidance on the NCSC website for Cyber and on the ICO website for Data Protection. 41% of the business are consulting externally, so why are those consultants not advising their clients correctly? Within our clients, we place baseline guidance for Cyber and Data Protection at the centre of the engagement. This ensures that governance is reset and a solid foundation can be provided for improvement. If you would like a better guide on your journey, then please do reach out :) #BeyondCyber #SafeNotSecure #GovernanceMatters https://lnkd.in/exrf-FNW

9

2 Comments