Yesterday, NCSC published this report “Advisory: Turla group exploits Iranian APT to expand coverage of victims” together with the NSA. Rob declared this was “very interesting” so I sat down to read it. I didn’t even make it to the third paragraph… I asked Rob to...
If you follow me on twitter, or read the blog here, you’ll know that I am very keen on security monitoring. Effective security monitoring means that you can spot bad stuff when it happens and take action promptly to remediate the problem, and importantly, limit...
I tweeted some thoughts on the news of the UK’s new cyber force, and thought I’d follow up with a short blog. The short background is that the UK government has announced a new £250 million joint MOD-GCHQ cyber force. The purpose of this is...
Ransomware is a particularly unpleasant, and very prevalent, form of cyber criminality. It’s called ransomware because you, the victim, are literally held to ransom. All files stored on your computer are encrypted, and the criminals will only provide the key to decrypt when you pay...
If you’ve been paying any attention at all to the news in the last couple of weeks, you’ll be aware that British Airways had a significant and embarrassing problem with their website. You can read about it here, with quotes from me! I, and most...
The year is 2018 and cyber security is not a new topic. So why is it that every day hacking makes the front page? Why are we doing so badly with what is, at this point, not a new problem? There have been a couple of...
All devices directly connected to the public Internet are regularly probed. The source is commonly an automated script of some type – depending on its purpose it could be described as a scanner, crawler, scraper, spider, bot or more. It’s important to remember that not all...
If you're at all interested in all things cyber security, then you will know this has been an interesting summer. Most notably, I think, have been the allegations (reasonably substantiated in my opinion) of Russian state backed hacking of, and subsequent leaking of material from,...
If you follow cyber security in the news, or twitter or LinkedIn, you'll often hear debates about attribution - usually taking the form of Attack X is the work of Country Y. Most recently the attacks on the Swift network have been associated with the...
Last summer JP Morgan Chase 'fessed up to an enormous breach that impacted some 80 million customers. Headlines at the time were alarming, with speculation even amongst security professionals and seniors in government that this must be the work of a state sponsored group. Who else...