Joe B.

The Nikki-Universal ransomware attack shows how quickly things can spiral when cybercriminals strike—and why the stakes are higher than ever for businesses worldwide. Attacks like these aren’t just about encrypted files; they’re about leaked secrets, operational chaos, and reputation damage. With hackers using tactics like double and triple extortion, it’s clear: defense strategies must evolve. For more insights and analysis, check out the detailed post on Matisoft’s LinkedIn page. Follow Matisoft Cyber Security Labs for more insights and updates on this and related topics. #MatisoftLabs #Cybersecurity #RansomwareAttack #DataSecurity #RiskManagement #IncidentResponse #CyberResilience

1

Having a 27001 certificate doesn't necessarily mean you are 'more secure' than a company who hasn't certified. It simply means you are managing information security risk to a level which is deemed sufficient by a certification body. Take this in to consideration when you're completing supplier due diligence and the only question you ask is 'are you 27001 certified?' If you're not sure what questions you should ask as part of your supplier due diligence process, drop me a PM and I'll see if I can give you some pointers.

20

5 Comments

learn how VFC has been used successfully in real world scenarios by attending this webinar.

1

Learn how VFC has improved and assisted Cyber/Digital/Incident Response investigations

3

Yesterday we announced the renewal of our 𝗖𝘆𝗯𝗲𝗿 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹𝘀 Certificate of Assurance. Cyber Essentials, A UK Government-backed scheme to help organizations improve cybersecurity defenses against common internet-based attacks. Here are 5 controls you can implement today: - Use a firewall: Create a buffer zone between your IT network and external networks. - Use secure settings: Configure devices and software with secure settings to reduce vulnerabilities. - Control access: Limit data and service access to essential personnel only. - Protect against malware: Use antivirus software and regular updates to prevent harmful software. - Keep devices and software updated: Regular updates patch vulnerabilities and protect against new threats. Our renewed certification highlights our commitment to top-notch cybersecurity. Learn more about how we can help protect your business by booking a demo at the link below ⏬ https://lnkd.in/g_5wtScu #CyberEssentials #CyberSecurity #Certification #DigitalSafety #PrivilegedAccessManagement #ZeroTrust #RemoteAccess #AdminByRequest

13

Another attack; another breach; and the same advice to those impacted - change your passwords and adopt a hygienic approach to password management. I have 452 credentials stored in my own personal password safe/vault. I don't think I'm that much of an outlier, but that is a lot of passwords and that means my "person attack surface" is already frightening. And it's not just passwords. I couldn't tell you off the top of my head what information is being held about me in a lot of those systems/platforms/apps/sites - are their credit card details on file, PII, preferences, other information they have "inferred"? As consumers, we put our trust in these suppliers of services that they will look after our information. It's not good enough that they say: "sorry, would you mind changing your passwords". They shouldn't let it happen in the first place! #breach #attacksurface #password #passwordhygiene https://lnkd.in/eHMsG5Qb

15

Time for a rant! Boy, haven't I read this piece of utter BS from almost any "political" body. Whether UK / US / Germany ... doesn't matter. ALWAYS the same friggin idiocy. Let's put in some sense into this blabber. About not enough candidates in universities: Well, as "cyber, cyber, cyber" is first and foremost a software, then a complexity and then a configuration problem, it would be so INCREDIBLY AWESOME if those building this dire heap of shit we nowadays call software- or tech-stack would learn "how-to-build-software-securely" IN THE FIRST PLACE! Can't be that hard, can it? There're literally hundreds of books dealing with just that. How to actually build software - AND TEST IT THEN !! - securely. Developing software is NOT an IT-Sec Pro job! Same goes for "IT-professionals": Why don't they learn how our biggest attack surface ever - aka MS - can be administered securely? (Possible, indeed duh!) Yes, it's a huge, extremely overcomplex, monstrous hydra to be tamed. So, what? That's what businesses went for. Deal with your decisions consequesces and stop whining! Administering is NOT an IT-Sec Pro job! High attrition rate: No shit sherlock! IT-Security pros these days need a complete other skill set than trained! They need the capacity to deal with the harbingers of chaos -> humans! Because "humans" are the root cause for this incredibly shitty landscape of operated "days of open doors for anyone"! No, I don't mean normal office staff. Clicking on mail will hardly do any harm nowadays ... anymore -> IF you actually run a patched up, up-to-date Microsoft stack. ... and pay the money, of course. (Welcome to the golden cage.) Those posing the biggest threat are Managers and C-Levels in NOT allowing absolute basics to be done properly and demanding "Cyber,cyber, cyber" to clean up the mess they created. The job of a cyber-sec Pro is ACTUALLY to get "people" to either do the right things OR at least not stand in the way. Therefore you need the following skills: - Communication (happy nerding as a mole is no more! Learn business lingo.) - Psychology (You're dealing with THE most diffucult NI there is!) - Leadership skills (YOU're the expert! You tell them what to do.) - Influencing (They need to do what you want them to ...) - Self-confidence (shaking in front of C-Level decinding on your budget doesn't help) That's for starters. These very simple steps would close this "gap" already considerably!

2

7 Comments

🔒 DON’T GET LOCKED IN BY RANSOMWARE 🔒 ➡ Join our must-attend webinar on the growing threat of ransomware hitting the UK and beyond! Our expert panel will dive into the latest trends, impacts, and what this means for you. You'll learn how to strengthen your defences and handle these cyberattacks like a pro 💪 ➡ Key topics we'll cover include the latest ransomware attacks hitting the UK and the world 🌍 how these threats are disrupting businesses and the best practices to keep your systems protected 🔐 ➡ We'll also show you how to spot weaknesses 🔎 build stronger defences and respond effectively during an attack 🚨 Stay ahead of the game and learn the new tactics cybercriminals are using! 👾 Register here 👉 https://lnkd.in/dGGQuABn #ransomware #cybercrime #cyberattack #cybersecurity #cyber #cyberlondon #london Izak Oosthuizen Simon Newman Raj Rajarajan Mark Child Paresh Deshmukh Lucindi Storme Kathy Meyer Christopher Haverly Louis Oosthuizen

13

🚨 Reusing passwords across different sites can leave you vulnerable to cyberattacks. Recent incidents, like the Manchester Council breach, show how easily personal data can be exploited. Stay safe by using unique, strong passwords for each account. Learn more about the risks here: https://lnkd.in/e5waWsyW #CyberSecurity #StaySafeOnline

1

UK launches 'world 1st' cyber laws to protect consumers from weak internet connected devices.. Common or easily guessable passwords like ‘admin’ or ‘12345’ will be banned to prevent vulnerabilities and hacking  Manufacturers will have to publish contact details so bugs and issues can be reported and dealt with Manufacturers and retailers will have to be open with consumers on the minimum time they can expect to receive important security updates https://lnkd.in/eSYFUkEK

12

Compliance doesn't have to be a painpoint! We've recently closed out and delivered a handful of ISO 27001 internal audits and vCISO support for ISO 27001 and the feedback is in! Below is an example of some awesome Trustpilot feedback from an awesome customer we helped get ready for their ISO 27001 audit. 👇🏼 Each business is a unique rubiks cube of challenges and opportunities. Getting to understand them in a finite amount of time to advise on the effectiveness and efficiency of security controls is an art as much as a science. At Steel FYI we pride ourselves in giving practical, friendly, and commercially-minded advice on how to achieve compliance and prevent material breach, without tying the business up in red-tape. If you want some support in making ISO 27001 work for your business, not the other way around, drop me a message 📨

21

As part of cyber security awareness month, Yorkshire Cyber Security Cluster are proud to present an exclusive virtual masterclass on Digital Forensic, Incident Response, and Investigation with guest speaker Adam Hughes, Senior Manager at CyXcel. 🗓️ Wednesday 23rd October 🕛 12:00 - 1:00pm 📍 Virtual This technical session will provide a comprehensive view of incident response, guiding you through how to manage cyber incidents from detection to resolution, while minimising business disruption. Dive deep into the technical intricacies of investigating malware, ransomware, and other cyber threats, with expert insights from Adam Hughes, a DFIR professional with 17 years of experience. Additionally, Jack, an experienced cyber lawyer, will shed light on the legal considerations and regulatory obligations related to handling large-scale data breaches and cyber incidents. Who should attend? ➡ IT & Cyber Security professionals ➡ Legal professionals navigating cyber law ➡ Business leaders enhancing cyber resilience ➡ Incident response teams ➡ Risk & compliance officers In this masterclass, you'll gain valuable insights into effective incident response strategies and best practices, including how to navigate legal ramifications and manage insurance claims during a cyber incident. You’ll also explore real-world case studies to sharpen your skills in handling cyber threats. This is a must-attend event for anyone looking to strengthen their cyber defenses during cyber security awareness month. Don’t miss the opportunity to learn practical strategies from industry experts and elevate your organisation's security posture! 🔗 Register for FREE here: https://lnkd.in/dUjki4P5 #cybersecurityawarenessmonth #digitalforensics #incidentresponse #cybersecurity #cyberresilience #cyberlaw

19

3 Comments

New regulations that came into effect on April 29, 2024 (#1007) aim to improve consumer protection by requiring stricter security measures for internet-connected products like smart TVs, speakers, air-friers, coffee machines and wearables. ❓What you need to know: - Applies to any business producing, selling, or distributing these products in the UK. - Requires risk assessments, security measures, and clear communication of those measures. - Regular security updates and a point of contact for reporting vulnerabilities are mandatory. 💸Non-compliance can be costly: Fines up to £10 million or 4% of global turnover. Product removals and potential liability for damages.

8

🚨 Attention Business Owners! 🚨 A recent cybersecurity breach has exposed the personal data of nearly 70,000 Welsh Rugby Union supporters' club members. Names, addresses, phone numbers, emails, and payment details were all leaked. 😱 This incident highlights the critical importance of robust cybersecurity measures. Here are a few takeaways: 🔒 Secure Your Data: Ensure your data protection strategies are up-to-date. Encrypt sensitive information and regularly update your security protocols. 🛡️ Employee Training: Educate your team about cyber threats and safe practices. Human error is often the weakest link in security chains. 📈 Regular Audits: Conduct frequent security audits to identify and address vulnerabilities before they can be exploited. 📞 Incident Response Plan: Have a clear action plan for potential breaches to minimise damage and restore trust swiftly. Cybersecurity isn't just an IT issue—it's a business imperative. Protect your business, your data, and your reputation. Don't wait for a breach to take action! #CyberSecurity #DataProtection #BusinessSafety #TechNews #StaySecure https://lnkd.in/egW_i32Z

3

ISO 27001:2022 transition challenges and how to use ISO 27002 Matthew Peers from IT Governance Ltd once again offers his practical expert insight, this time into ISO 27001:2022 transition challenges. Also, I love how he refers to ISO 27002: the “good ideas book” :) As Matthew explained: “If you’re struggling with how to implement a given control, look at the guidance in ISO 27002. It’ll jog your memory, or spark some ideas to get you on the right track. “Or you might come at it from the other direction: ‘This is how we’ve previously done it; is there a better way of achieving that?’ Then you’d refer to ISO 27002 to see if you can borrow ideas. “It can also trigger ideas by reminding you of things you need to achieve, even without being specific about how to achieve them.” Read the full interview 👇 https://lnkd.in/gxdxBXS6

4

The ICO has published the most common security mistakes from cyber data breach reports that they have received. Read the lessons learned to see how your business can improve its cyber security👇 https://orlo.uk/3ka9A #businessresilience

2