Businesses must prepare for possible disruptions in the near or distant future as there is uncertainty everywhere in today’s digital economy. Continuing to operate during disruption and restoring to normal service is a huge challenge for today’s digital bound organisation and it requires forward planning. This forward-thinking approach is the foundation of Business Impact Analysis … Read more
Industry-Specific Security
The UK government has recently announced a public consultation seeking views on three proposals aimed at striking a significant blow to the ransomware criminal business model. As outlined by the National Cyber Security Centre (NCSC), the consultation will consider three proposals: The ultimate goal is to protect UK CNI and the broader economy from the … Read more
2025 is shaping up to be a pivotal year for cybersecurity compliance in the UK and the EU. Businesses must prepare to align with new regulations designed to counter the evolving cyber threat landscape. With stricter requirements on the horizon, it’s essential to understand what these changes mean and how they will impact your operations. … Read more
Recent headlines have highlighted a significant privacy violation involving Netflix, resulting in a €4.75 million fine by the Dutch Data Protection Authority (DPA). The issue stemmed from Netflix’s failure to provide clear and sufficient information about how users’ personal data was processed between 2018 and 2020. The investigation revealed vague explanations of data use, sharing … Read more
Richard Horne, the head of the UK’s National Cyber Security Centre (NCSC), warned that the threats to the UK are wildly underestimated by both individuals and organisations. He stated that a sharp rise in severe cyber incidents, including attacks on healthcare, transportation, and other critical sectors, has become more frequent, sophisticated, and intense, as highlighted … Read more
When most of us think about cyberattacks, we imagine sudden, chaotic events; a Company’s systems crashing, customer data being stolen, or ransomware demanding payment overnight. However, some of the most effective cyber threats are conducted by stealth, operating in the shadows for months without detection. These forms of attacks are often motivated by more capable … Read more
The Claim In the recent news, chinese researchers claim to have used a D-Wave Advantage quantum computer to break specific encryption algorithms based on the Substitution-Permutation Network (SPN), a common structure in encryption. SPNs secure data by repeatedly substituting (replacing) and permuting (reordering) parts of it, and they are foundational to widely used encryption systems … Read more
In a recent significant cyberattack, over 2000 Palo Alto Network firewalls have been compromised by attackers exploiting two recently patched vulnerabilities. Palo Alto provides cybersecurity services to enterprises, government and service providers. According to UK based Shadow server Foundation the number of breaches in US and India on Palo Alto network firewalls were in the … Read more
On 15 Nov 2024, Wall Street Journal (WSJ) reported that T-Mobile has suffered from a recent cyberattack which has been linked to the Chinese state-sponsored hacking group called Salt Typhoon. The attackers exploited vulnerabilities in network infrastructure to access sensitive communication data. While the company claims no customer data was stolen, the breach has raised … Read more
CloudSEK cybersecurity experts have recently discovered a significant threat with AndroxGh0st malware, which has now integrated the Mozi botnet to target IoT and cloud-based services. This combination expands AndroxGh0st’s reach, making it a powerful tool for cybercriminals to compromise various devices and networks, including cloud platforms like AWS and TwilioSendGrid. By merging with Mozi’s capabilities, … Read more