Gary P Shewan

Sign in Subscribe

Infosec

Excellent response by British Library

This would have been a good talk to listen to at CyberUK. Roly Keating (CEO of the British Library) explaining how bringing transparency and a little emotional intelligence into their communication following a ransomware attack became very important. British Library on why it kept it real in ransomware commsIt quickly

United on Ransomware payments

Interesting. Cyber insurance industry unites to bear down on ransom paymentsJoint guidance from the NCSC with the Association of British Insurers (ABI), British Insurance Brokers’ Association (BIBA) and International Underwriting Association (IUA) aims to help organisations faced with ransomware demands minimise disruption and the cost of an incident. The guidance

Do better

Brute forcing 5000 requests per minute for 3 weeks, to scrape 49 million names and addresses after getting approved for the partner portal by trying ‘several different names’. Sending multiple emails to say there was an issue before it was patched. Threat actor says he scraped 49M Dell customer addresses

Leadership by example

This is happening more and more. It also reads as pretty lo-fi, as in just AI voice cloning being used - it’s cloned video as well for others. I doubt there will be published stories when it’s successful. CEO of world’s biggest ad firm targeted by deepfake

Dial up the drama

The drama always gets turned up to eleven* for things like this. I suppose ‘MoD hacked!’ is a better headline than service provider breached. MoD data breach: State involvement cannot be ruled out in armed forces hack, says Grant ShappsThe details of serving Army, RAF and Navy personnel are involved,

Marriot held to account?

Remember the Marriot breach back in 2018? Details of 500 million guests were exposed over a period of four years. I remember it because I’d been a Starwood guest during the time so after a lot of swearing I did some checks to see what card details I would

Microsoft push on security

This is quite good from Microsoft - what was needed after the CISA report. Especially the ‘six prioritized security pillars’. Nadella put out a pretty good memo as well. Read Satya Nadella’s Microsoft memo on putting security firstNadella doesn’t want Microsoft employees making security tradeoffs.The Verge The