“An absence of evidence is not evidence of absence” is a longstanding term in medicine. The same applies to infosec. First, check that your controls are appropriate for the threats […]

It’s a small sample size but in line with what I’d expect. Unless data security has a personal ownership component it will continue to be seen as “someone else’s problem”. […]

In some ways, this ‘tit-for-tat’ cyber warfare could be seen as an almost gentlemanly approach to conflict…: The Iranian cyber attack in early April on an Israeli water-treatment facility, designed […]

My cynicism around security awareness and training was confirmed when I got into discussion with a senior manager at a (very) large bank who admitted that he tasked his PA […]

Leaky buckets…again. Time to run a continual audit of what data of yours is exposed (full disclosure: I resell CybelAngel, take a look at this Whitepaper)…: […] “Most of the […]

The criminal group behind the REvil ransomware enterprise has begun auctioning off sensitive data stolen from companies hit by its malicious software. The move marks an escalation in tactics aimed […]

Good bit of analysis by my friends at IT Governance. TL;DR – It’s all about the money…: Contrary to what you might have heard, cyber criminals pose a much bigger […]

As reported by the mainstream media in the UK. I’d also like to see PAT testing extended to include some elements of data security…: MOT tests may soon introduce the […]

Zoom have managed to weather the storm of security and privacy concerns pretty well…: A few weeks ago on this blog, we addressed some of the legal issues that have […]

As well as checking your own VMware setup(s) you should also look at your service providers and seek assurances that they have mitigated the threat…: […] On Monday, penetration testing […]