As cyber threats evolve and persist, a pressing need to build greater resilience in OT For several days in May 2021, there were long queues at petrol stations up and down the East coast of the United States. These were caused not by fuel shortages or rising energy prices, but…

There is need for ‘greater cryptocurrency regulation’ to make the hacking method a ‘poor business model’ Read more at The Telegraph: https://www.telegraph.co.uk/business/2021/12/05/crackdown-crypto-firms-needed-wreck-ransomware-says-ex-gchq/?utm_content=telegraph&utm_medium=Social&utm_campaign=Echobox&utm_source=Twitter#Echobox=1638721611

Asked recently what risk he worried about most, alongside Taiwan and Ukraine, General Stanley McChrystal replied: cyber security, particularly in the supply chain. He joins a growing group of the most senior operational and strategic US commanders, such as former Chairman of the Joint Chiefs of Staff, Admiral Mike Mullen…

Former Director of GCHQ, Robert Hannigan, has navigated a somewhat unexpected cybersecurity career through government and now the private sector. He talks to James Coker about his days advising the Prime Minister and his passion for increasing diversity in the industry https://www.infosecurity-magazine.com/magazine-features/profile-interview-robert-hannigan?utm_source=twitterfeed&utm_medium=twitter

Imagine a valuable criminal commodity — Class A narcotics, for example — which had no chemical impact when used in certain countries. Or high-grade illegal weapons which would not fire if sold to customers in certain jurisdictions. …

The Colonial Pipeline attack has brought a welcome media and political focus on ransomware. Similar recent incidents affecting the Irish healthcare system, schools in the UK, or hospitals in Germany have done the same job in Europe. But anyone working in the cyber industry knows this is not new: they…

SolarWinds was not the first supply chain cyber attack and it won’t be the last. Everyday companies find themselves compromised through their vendors, who unknowingly deliver attacks — especially ransomware in the past year — to the customer company. Once a compromised company is delivering a sophisticated attack through a…

The cyber attack still unfolding in the US may turn out to be the most serious nation state espionage campaign in history. Assessing the possible damage and clearing up the infection will take many months and will extend to the thousands of government departments and FTSE companies in many countries that used SolarWinds Orion software for managing their networks, since it was the regular upgrades to this which delivered at least part of the infection. If Russian intelligence agencies were responsible, we should assume the damage goes beyond mere espionage — they may use the access to alter, monetise or destroy corporate and government data.

Governments and regulators are worrying about third party cyber risk. They clearly regard the current approach as inadequate. Large organisations are also worried — but the scale of the task for overstretched teams is daunting. They are struggling to keep up with the threat for three key reasons. 1. Prioritisation…