Yesterday, NCSC published this report “Advisory: Turla group exploits Iranian APT to expand coverage of victims” together with the NSA. Rob declared this was “very interesting” so I sat down to read it. I didn’t even make it to the third paragraph… I asked Rob to...
I tweeted some thoughts on the news of the UK’s new cyber force, and thought I’d follow up with a short blog. The short background is that the UK government has announced a new £250 million joint MOD-GCHQ cyber force. The purpose of this is...
As 2016 closed, the US took the unusual step of releasing an report attributing a series of hacks, and subsequent leaks of stolen information, to Russian intelligence services (RIS in the vernacular of spooks). The report consisted of some technical analysis and indicators of compromise...
If you're at all interested in all things cyber security, then you will know this has been an interesting summer. Most notably, I think, have been the allegations (reasonably substantiated in my opinion) of Russian state backed hacking of, and subsequent leaking of material from,...
If you read cyber security related stories in the news, or receive any kind of sales or marketing brochures from cyber security companies, you will doubtless hear that cyber attacks are becoming more 'sophisticated'. Additionally any company that ever has to publicly admit to being hacked...
If you follow cyber security in the news, or twitter or LinkedIn, you'll often hear debates about attribution - usually taking the form of Attack X is the work of Country Y. Most recently the attacks on the Swift network have been associated with the...
On November 4th the UK government issued a draft of its new Investigative Powers Bill (IBP). Broadly, this proposed legislation lays out the ways and means that UK intelligence, security and law enforcement agencies will have to access their targets' (i.e. people) internet usage. The full...
In todays post we're going to delve into the world of open source intelligence, and see how you can use this to defend your organisation. So what is open source intelligence? Without wanting to delve too deeply into what is and what isn't 'intelligence', open source intelligence...
On June 5th a US agency you had probably never heard of (I hadn't) called the Office of Personnel Management (OPM hereafter) confessed to an enormous breach, which had compromised the records of millions of federal employees. The OPM acts as a kind of centralised...
I'm going to deviate from the usual 'ask the expert' today and talk instead about something I very much enjoy, which is digging around in data, and at the same time highlight the threat from what are apparently Russian state backed hackers. Sounds very Cold...