On November 4th the UK government issued a draft of its new Investigative Powers Bill (IBP). Broadly, this proposed legislation lays out the ways and means that UK intelligence, security and law enforcement agencies will have to access their targets' (i.e. people) internet usage. The full...
If you follow cyber security news even vaguely, you'll be aware of the recent news stories about hacking a Chrysler Jeep. This is good, solid security research, conducted over a number of years which on the face of it seems entirely valid. In other words,...
Recently we had a call from a client who had received an extremely targeted malicious email, aimed at convincing the financial director to transfer a large amount of money to a designated bank account at the apparent request of someone else senior in the same...
On June 5th a US agency you had probably never heard of (I hadn't) called the Office of Personnel Management (OPM hereafter) confessed to an enormous breach, which had compromised the records of millions of federal employees. The OPM acts as a kind of centralised...
Post the excitement of the UK general election, and the unexpected Conservative victory, David Cameron has been assigning roles in his new Lib-Dem free Cabinet. Francis Maude, who had responsibility for cyber security as part of his ministerial role in the Cabinet Office has been...
Logjam is the latest high profile security vulnerability to be given its own name (a la shellshock and heartbleed). You can read about it here. Now, whilst this certainly isn’t good I don’t think it quite as terrible as the headline makes out. In essence this...
On a fine and sunny day, what better way to pass the time than thinking about the security of your website. Here at The Cyber Security Expert we think of little else, even at the weekends. It makes us popular at parties. In todays post...
We’ve written a few articles recently on the topic of incident response, without ever stopping to explain what we actually mean when we talk about ‘incident response’ in a cyber security context. So today we’re going to rectify that, and give you some pointers for...
At The Cyber Security Expert we're often asked about incident response - what to do when things go wrong, and how to work out if a particular computer is compromised. Obviously we are here to help you if needed, but there is quite a lot...
I'm going to deviate from the usual 'ask the expert' today and talk instead about something I very much enjoy, which is digging around in data, and at the same time highlight the threat from what are apparently Russian state backed hackers. Sounds very Cold...