Jon Inns

https://lnkd.in/eZfp59HD Schools need greater support and funding for protection and mitigation against such attacks. If a school is run as an academy can they face an ICO fine? There were 347 cyber incidents reported in the education and childcare sector in 2023, a BBC report revealed. It represented a 55% increase on 2022.

11

1 Comment

Are You Tired of worrying about Cyber Attacks ? You're not alone. But there is a solution. IASME Cyber Essentials can help protect your business and boost your reputation. Here is why it matters: Stronger Security: Cyber Essentials provides a solid foundation for protecting your business from common cyber threats. It's like having a security expert on your team. Build Trust: Customers and partners value businesses that prioritise security. Certification shows you are serious about protecting their data. Open New Doors: Work with government agencies and win new contracts. Cyber Essentials can give you a competitive edge. Peace of Mind: Knowing your business is protected against common cyber threats lets you focus on growing your business. Do not gamble with your business's security. IASME Cyber Essentials is an investment in your future success. Ready to take the next step? Let's talk about how Cyber Essentials can benefit your business. email us: [email protected] #CyberSecurity #Certification #DataProtection #Therybecgroup

6

⚠ scam alert ⚠ Cyber Criminals stop at NOTHING. 🦹‍♂️ They have one thing in mind; financial gain. 💰 They are devious and use some very sophisticated tactics to trick people and businesses. Turn up your paranoia senses. If you are lucky enough to have a large amount of cash in your bank account, move it to another account, away from your bill paying account. This gentleman was lucky enough that the banks reimbursed his money, but this doesn't mean they will reimbursed everybody. #CyberSecurity #CyberAwareness #CyberDefence #CyberHygiene https://lnkd.in/e4jimT2D

2

1 Comment

Responding to the breaking news that the MoD been subject to a data breach that compromised the personal information of UK military personnel, our CEO, Martin Greenfield, shared his expert insights with i News.   As Martin highlights, this breach is part of a larger trend of cyber-attacks targeting nationally sensitive data, with over half of UK organisations experiencing a breach or attack in the last year.   Silos in cyber security monitoring contribute to the vulnerability of organisations, making it more challenging to identify and mitigate potential threats.   To effectively combat the growing threat of cyber-attacks, organisations across both the public and private sectors must adopt a holistic and unified approach to cybersecurity. This requires dismantling the silos that often hinder communication and collaboration between different teams and departments.   Read Martin's full comments in: https://lnkd.in/eKfXsyej   #MoDBreach #CyberSecurity #CyberResilience #QuodOrbis 

7

learn how VFC has been used successfully in real world scenarios by attending this webinar.

1

Learn how VFC has improved and assisted Cyber/Digital/Incident Response investigations

3

Interesting to see this peddled again “a lack of basic cyber hygiene”. Reviewing the latest #CyberBreach survey from HMG is sobering reading. 75% of UK business report #Cyber as being a key area for the board, yet this (again) results in total lack of #Governance: - 33% of businesses have a formal security policy - 31% have conducted a risk assessment - 30% have a board member with cyber responsibility (this has returned to the levels of 2016-18) - 27% have asset management activities - 13% are aware of the NCSC 10 Steps Guidance, but only 3% have actioned all 10 steps - 11% have conducted a pen test - 11% have reviewed their supply chains - 12% are aware of CyberEssentials (up from 8% in 2016) - 3% review NCSC/ICO guidance on Cyber (up from 2% since 2016) This is damning, we have excellent guidance on the NCSC website for Cyber and on the ICO website for Data Protection. 41% of the business are consulting externally, so why are those consultants not advising their clients correctly? I have a real issue when we fete the current #CyberSecurity strategy yet in every demonstrable metric it’s failing to engage and inform. I hope that the new government looks to reset the foundations before pushing on with anything else. Within our clients, we place baseline guidance for Cyber and Data Protection at the centre of the engagement. This ensures that governance is reset and a solid foundation can be provided for improvement.

2

2 Comments

Bit of a heavy post for Monday for you all so apologies but this was instigated by The Register cracking article on UK's governments "plans to introduce the controversial technology into policing and security services." In 1984, Orwell introduces the concept of the omnipresent surveillance state, epitomised by the phrase "Big Brother is watching you." The fictional regime uses telescreens—devices that function as both televisions and cameras—to monitor and control the populace constantly. These devices are a central metaphor for the invasive reach of authoritarian governments into private life. A pertinent question arises: can we genuinely trust these organisations to handle our data securely, and do we, as individuals, retain any rights when third parties capture our images? Naturally, security agencies and government institutions will assure us that such measures are indispensable for maintaining safety and order. But one might wonder—wouldn’t those funds be more effectively spent on the timeless practice of having an actual 'Bobby' walking the beat in our communities? After all, no #CCTV camera ever stopped to ask how your day was going or caught a would-be thief with a firm handshake. #protectyourprivacy

5

Don’t be one of the 2.5m businesses in the UK to suffer from a cyber-attack this year 🛑 Secure your place at our webinar this week, run by cyber-security experts with a police background.  You will go away with actionable takeaways that you can implement quickly to improve your business’s defences against digital data security attacks. Don't let a data breach cost you time, money, and your reputation. 🔗 https://lnkd.in/emJiEvYR  

9

Do you know the phone number that will help you stop fraud in real time? It will be the most important number you will ever memorise. Dan Whitworth did an excellent piece on BBC News this morning. It is 8 minutes long, but the information will save everyone that watches it, thousands in future. We have been sharing this number for the last 3 years in our talks and webinars. Please share this information with everyone you know as they will thank you. I highly recommend you: 1. Add this number to your email signatures 2. Share this with your parents and every other family member 3. Write down the number for your elder family to call(yours maybe) when they are pressured by scammers 4. Write this number down and or print it out and stick next to the kettle in the office (with an explanation off course) 5. Practice calling this number and go through to your bank to test it 6. Add it to notice boards at the library and schools 7. Pin the number onto the fridge door The other interest thing is that this must be the only number I know that can’t be spoofed. Of all the cyber advice we share, this one is right up there as the best. Do you agree? #fraud #scams #cybersecurity #SecurityEverywhere

36

9 Comments

TFL was hacked this week... -Specific details remain undisclosed but TFL claims customer data has not been compromised -The National Crime Agency and National Cyber Security Centre are continuing their investigations What's the worst possible outcome of a cyber attack on TFL? -Train systems are affected causing major delays -Customer payment details are stolen -Businesses across London are affected as a result Often clients choose not to purchase or buy low limits of cyber insurance, as they think a cyber attack would never happen to them. Unfortunately cyber crime affects 50% of businesses in the UK, costing them a total estimated £21 billion per year. Although you might not hold customer data, cyber insurance is more than just protection against GDPR. What happens if all of your data is deleted? What happens if you can’t access any of your systems? What happens if they take money out of your bank account? Want to know more about cyber insurance - please reach out to the team at Sioma #CyberSecurity #InsuranceIndustry #RiskManagement #CyberInsurance #TFL #NCSC #NCA #Sioma

61

4 Comments

Ransomware us Once - Shame on you, Ransomware us Twice - Shame on us. Plus a $50 million Ransom... Several months ago Synnovis Italy suffered a cyberattack that resulted in disruption and chaos. Despite this intrusion, Synnovis failed to identify, address, or remediate their exposed and insecure servers. Synnovis lack of action placed thousands of patients at risk. Synnovis and those patients remain at the same, if not increased risk. Despite the first and subsequent attack on the 4 June 2024, Synnovis and NHS servers remain insecure despite our information sharing and offers to help all concerned. Including the Information Commissioner's Office. The first and second attacks were easily enabled and facilitated the extraction of data via insecure Internet Assets and insecure servers. A robbery, any robbery cannot take place without access being gained. That fact is the same for any physical, or digital theft. Despite having one of the best Intelligence Agencies in the world, it is surprising that Synnovis and the NHS remain so exposed. However, a similar attack on the UK's The Electoral Commission servers also remain insecure despite the data theft of 41 million UK Citizens from Aug 2021 to Oct 2022 when our Intelligence Agency also were parachuted in. This incident clearly demonstrates inadequate knowledge, complacency, or complicit behaviour. Given chris streather, the Chief Medical Officer of NHSE London actions after we shared information we are very concerned at the conduct and ignorance despite being presented with information and evidence. NHS have at least two cyberattacks in flight currently, this and the Dumfries and Galloway attack. Both share the same exposed and insecure third-party servers. It is no coincidence the same insecure servers are used by The Electoral Commission, Synnovis, Medibank, UnitedHealth Group and thousands more cyberattack victims including SolarWinds. With Elections upon us, politicians need to wake up to the fact no GDP growth or cost savings will ever keep pace with the costs and losses of self inflicted cyber costs and losses. As Churchill so eloquently said; ''You cannot reason with a tiger when your head is in its mouth.'' Cybersec Innovation Partners GCHQ FBI Cyber Division The White House Central Intelligence Agency BBC News CNBC Fox News Media ITV #WhitethornShield #InternetSecurity #DNS #PKI https://lnkd.in/d6sBKcCe

38

9 Comments

Someone Stealing Your Glastonbury Ticket Is Like This New Phishing Attack. How could Glastonbury festival ever be related to phishing and cybersecurity? Well, we have found a way to link them! This video shows how a new sophisticated phishing attack called Session Token Theft can be likened to someone stealing your Glastonbury wristband. Unfortunately, this attack can also get around multifactor authentication (MFA) protocols, meaning MFA can no longer offer your business sufficient protection. However, there is good news on the horizon as phish-resistant security measures are now available! Click the link below to discover more. https://lnkd.in/edEWKQpb

2

Cyber Assessment Framework (CAF) 3.2 Released! 🚀 This week, NCSC announced the latest update to the Cyber Assessment Framework (CAF), Version 3.1, which continues to support and enhance cyber resilience across the UK's Critical National Infrastructure (CNI), organisations adhering to the Network and Information Systems (NIS) Regulations, and those dedicated to cyber-related public safety. Here's your whistle-stop tour of the CAF, and the changes released this week: ❓ What is the CAF? The CAF is a set of guidelines developed to help UK organisations (usually CNI or within the NIS scope) improve their cyber resilience. It provides principles, outcomes, and indicators of good practice for organisations to assess and improve their cybersecurity measures, promoting a risk-based approach to managing cyber threats. 🔍 What’s New? Language Enhancements: NCSC has made revisions to improve clarity and consistency across the Framework’s Principles, Contributing Outcomes, and Indicators of Good Practice. Significant Updates: In alignment with the new Government Cyber Security Strategy, which places the CAF at its core, they have introduced a "Partially Achieved" level for the IGP concerning Media/Equipment Sanitisation. This update recognises the unique data confidentiality risks managed by public sector organisations. 💡 NCSC's Pro Tip: Always use the supporting guidance alongside the Framework. The added context is invaluable for interpreting and applying the Framework effectively. #CyberSecurity #CAFUpdate #CyberResilience #UKCNI #PublicSafety #NISRegulations #RiskManagement #CyberAssessmentFramework

30

2 Comments

A powerful opening keynote from Mivy James FBCS , CTO Defence Digital, UK Ministry of Defence at today’s techUK Delivering Diversity in Defence, Security & Policing Reception 👊 Mivy called out: - The importance of male allyship - role to mentor and sponsor women, challenge the micro aggressions - Tokenism in the workplace - take a holistic approach to inclusion - Delegation of power to infinity groups - address the systemic root causes of imposter syndrome - Wanting to see the business case for not having D&I - Holding leaders accountable for their D&I initiatives by measuring impact - ‘A privilege of seniority to lead by example…if I can’t show it in the workplace, then how can I expect others to do it’ 👏🏽 It was a thought provoking panel discussion I had the privilege of being apart of to discuss these points - collaboration and taking action at the heart of D&I. Thank you Stacey Crump, Josie Welland, Nikki Butt, @Elaine Peberby & Vanisha Mistry (Bhogal) for leading by example in your sectors 💜 #NationalInclusionWeek

79

2 Comments

The number of security threats in the UK that hit the country's National Cyber Security Centre's (NCSC) maximum severity threshold has tripled compared to the previous 12 months. #broadcom

1

‘Organisations must do more to combat the growing threat of cyber attacks’ says the UK’s data protection regulator, the ICO. They go on to say ‘…we will take action, including fines, against organisations that are still not taking simple steps to secure their systems’ In their report they say that: ❗ Cyber threats are increasing year on year. ❗ You need to consider the nature of your activities when deciding what is appropriate for your organisation ❗ Most ransomware incidents are usually the result of poor cyber hygiene rather than sophisticated attack techniques. ❗ 91% of UK companies stated they had experienced at least one successful email-based phishing attack in 2022. More than a quarter of those (26%), also reported direct financial losses as a result. ❗ There has been a ten-fold increase in password-based attacks from 2022 to 2023. There were 11,000 attacks per second in April 2023. During their review, they observed that it’s also important to appreciate the importance of governance and ensure that resources with appropriate skills are available. If you need help to do more to combat the growing threat of cyber-attacks, get in touch, as we can help. From ‘light touch’ consulting to full service delivery we can help you implement appropriate information security governance, risk management, and compliance. https://lnkd.in/eKt8Mdu4

6

This story is great to see - https://lnkd.in/d4PyFxBi - that a British council has scheduled wargames, and that in relation to cyber those wargames are mentioned in the same short article in relation to wider emergency planning. As the CrowdStrike outage shows, technology is now so tightly integrated the default should be to consider its impact in all areas of our lives. Path Dependence Limited and our associates can put these kind of wargames together for you, as can other suppliers. I can help you figure out kind of wargame you need, or help you find the right supplier - and what to ask them - if it's not us. But do follow Cheshire East Council's example - get something scheduled, even if it's just an introductory conversation; this is kind of task that it's easy to postpone, until something happens and you wish you hadn't. ( cc Robert Grayston ) ( cc Josie Griffiths hi, excuse me @'ing you on here, but I think the most should be made of positive stories in this area. I'd be interested to know what outcomes from the wargaming will be made public, and whether recent outages managed to "focus" your decision makes struggling with tight budgets. )

18