Malte Spence

Do you know frammework for 🙄 Digital Forensics in OT 🏭 ? I repeat OT 🏭 its not IT! 💻 NIST’s publication introduces a tailored DFIR framework for OT, extending traditional IT incident response practices with OT-specific strategies. OT is a type of system that has a strong connection to the physical world. There is great importance in understanding the possible implications for safety and operation resulting from any forensic-related action performed in the system. Therefore, there must be a strong connection between technical OT personnel and Digital Forensics analysts. Check out the DFIR Frammework from NIST. https://lnkd.in/gYHdWNM6 🙌 I will teach what books won't teach. Learn Practical OT Cybersecurity 🏭 with Syed 📛 ! ✍ 👬 Hit Connect, follow me and repost this artcile to learn content like this in OT cybersecurity. 🚣‍♂️ . #OTCybersecurity #Cybersecurity #EthicalHacking #Securityanlyst #PracticalOTSyed #Cyberattack #Honeypots

24

🚨 Te Pūkenga Competenz cyber attack data breach affects more than 6,000 students What happened? "This is an update regarding the ongoing investigation into the cyber-attack on the Competenz IT system. As a result of that investigation, it has come to light that some personal data and identity documents were compromised in the attack." ‍ What kind of information? The attack resulted in various types of personal information being compromised. Our investigation has identified that this included personal information that was provided to Competenz to enrol them into their qualification. That compromised information may include some of the following: ‍ Name, contact details, date of birth Copies of the identity documents that you provided to Competenz for enrolment, such as passport, birth certificate, driver licence, certificate of identity and or citizenship, immigration visas, grant of residence, and student/ employee identity documents Financial cards and statements Professional and enrolment registration detail Qualifications Completion certificates Marriage licence. What has happened to the information? "Our investigation has established that during the attack, the cyber-criminals extracted and stole certain data from our systems, including personal information as described above. " https://lnkd.in/gby_QWkf #cybernews #cybersecuritynews #ransomware #cybersecurityisalifestyle #cybersecurity #cyber #humanfirewall #buildinghumanfirewall  #competenz #databreach #cyberattack

4

📢 The NIS2 Directive is Now in Effect. Is Your Board Prepared? 🚨   Last week, the NIS2 directive officially took effect, marking a major shift in cybersecurity and risk management for EU-based organizations. This new directive places more responsibility on boards to manage cyber risks proactively and to demonstrate compliance with enhanced care and reporting standards.    In Dr Yuri Bobbert's latest article, he covers the top three actions boards must consider to ensure compliance and protect their organizations, including: 1. Establishing clear ownership for cybersecurity oversight, 2. Focusing compliance efforts on critical systems, and  3. Leveraging existing resources to avoid unnecessary consulting costs.   Find out how #NIS2 can serve as a competitive advantage and what your organization needs to do to stay ahead.   Click down below to read the full article! https://lnkd.in/ewPc3EH5 #regulation #ITregulations #cybersecurity #digitalassurance #compliance

9

[eBook] When setting #SaaS use rights, producers often try to leverage existing investments in Identity and Access Management (IAM) systems, but soon realize the limitations. Get practical advice in this guide >>> https://lnkd.in/duqF9-Xy

6

#ISO27001 and #CISL. Congratulations to Julie Mann Kjeldsen and Anders Høgh Olesen with the ISO/IEC 27001 Lead Implementer and Certified Information Security Leader certifications. Julie got the ISO/IEC 27001 Lead Implementer certification. The course was focusing on implementing and maintaining an Information Security Management System (ISMS) based on ISO/IEC 27001, and it trained the participants in leading internal and external ISMS implementation projects. Whether supporting their organization in implementing an ISMS or delivering information security consulting services to assist organizations in implementing an ISO/IEC 27001 ISMS and achieving certification. The course provided Julie with a comprehensive understanding of ISMS best practices and a framework for its ongoing management and improvement. Anders succeeded in completing the Cyber Information Security Leader (CISL). A course designed to train and enabling cyber security managers and specialists to safely lead organizations through the challenges of digitalization. The CISL education focused on strengthening the participants' capability to navigate at the executive level, managing politics, risks, stakeholders, crisis, culture, and the corporate reporting game. Participants – and hereby also Anders - were introduced to the value of knowing how personality types, capabilities, and behavioural structures can benefit in crisis situations and be used strategically to create impact and drive results.   Well done, Julie and Anders! 🤘 itm8 / www.itm8.com #CyberSecurity #ISO #CISL #certification #itm8

100

8 Comments

NIST Finalizes Updated Guidelines for Protecting Sensitive Information. Very useful information. The National Institute of Standards and Technology (NIST) has finalized its updated guidelines for protecting this data, known as controlled unclassified information (CUI), in two publications: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations (NIST Special Publication [SP] 800-171, Revision 3), and its companion, Assessing Security Requirements for Controlled Unclassified Information (NIST SP 800-171A, Revision 3). Link : https://lnkd.in/ed-4jnBu

20

1 Comment

📢 New Draft Guidance for NIS2 Compliance Released by ENISA & European Commission The European Union Agency for Cybersecurity (ENISA) and the European Commission have issued draft technical guidance to help EU Member States, DNS providers, TLD registries, cloud providers, data centers, CDNs, managed services, online platforms, and more to align with the #NIS2 cybersecurity requirements, following the latest Commission Implementing Regulation (EU) 2024/2690. What’s inside: 📌Practical Insights: Clear advice on interpreting technical requirements and navigating NIS2 concepts. 📌Compliance Evidence: Examples of documentation that can support compliance. 📌Standards Alignment: Tables matching NIS2 requirements with EU, international, and national standards for easier compliance. You’re invited to contribute with your feedback on this draft by December 9 2024. #Cybersecurity #ENISA #infosec

14

FaceDancer: An exploitation tool aimed at creating hijackable, proxy-based DLLs https://lnkd.in/dx_CSYtW #Pentesting #CyberSecurity #Infosec

1

THE RISK OF HEAT MAPS: How They Lead to False Security in Cyber Risk Management Heat maps, often used to visualize risk assessments in various shades of color, are popular in risk management. They offer a seemingly simple way to display risk levels and are used by executives and decision-makers as a quick overview tool. However, the convenience they offer often comes at the cost of depth and accuracy, leading to potentially misguided decision-making. In this article, published recently in the eGUIDE, Tobias Faiss explores 13 ways heat maps can do more harm than good in risk management. Come to the HUB to access Tobias' article in Vol 700 of the Continuity eGUIDE >> https://lnkd.in/ekg3wHNq Other practical resources and news in Vol 700 >> · Good Practices on Disaster Resilient Infrastructure · Let’s Do Great Things Together in 2025! · BCI Horizon Scan Report 2024 · Organizational Vulnerabilities due to 3rd-party Failures · Awards Winners at the 72nd IAEM Annual Conference Visit the Risk and Resilience HUB to connect, collaborate and build resilient organizations. https://lnkd.in/e4BVs58 #supplychainvulnerabilities, #heatmaps, #cyberriskmanagement, #risksin2025, #collaboration

2

🔔 Mark Your Calendars for the ISACA Denmark Christmas Meeting! 🎄 We’re excited to highlight Johan Lidros and Fredrik Soderblom, esteemed experts from Eminere Group, who will present “Are You a Cyber Risk Target?” on December 4, 2024, from 11:25 AM to 12:00 PM. In this must-attend session, they’ll explore the ever-changing cyber threat landscape and available tools for all to use, share strategies to identify vulnerabilities and provide actionable steps to mitigate cyber risks effectively. Don't miss this insightful discussion and the opportunity to learn how to protect your organization in today’s high-risk digital environment. Let’s make cybersecurity a top priority this holiday season! #CyberRisk #CyberSecurity #ISACADenmark #ITGovernance #RiskManagement #EminereGroup #ITAudit #CyberThreats #ProfessionalGrowth

3

Modern digital forensics labs must have a collaborative, centralized approach to evidence assessment since digital evidence is becoming more and more complicated. This applies to both inside and outside the lab. A digital inquiry usually involves a large number of stakeholders at different times, therefore the new paradigm for managing digital evidence needs to encourage increased cooperation at all levels. We are making it possible for investigators to work together, gather, evaluate, and report on digital evidence from a variety of sources, and securely share cases, evidence, and insightful discoveries with both technical and non-technical stakeholders, no matter where they are in the world, with tools like Magnet Axiom and Magnet Review. Review is designed to quickly change which evidence fields non-technical Review users see because it is intended to consume data from Axiom. Users may quickly import computer, mobile, and cloud evidence into Review with a few clicks by leveraging Axiom's processing and analytics power. Working together on cases in real time, investigators and prosecutors can flag topics for additional investigation and share notes and comments using Magnet Review. As a result, investigations can be completed more rapidly because investigators don't have to wait for other team members to complete their research in order to find fresh leads and evidence. We are aware of the significance of safely providing information to various parties when conducting a digital investigation. We're developing a functionality in Review to enable tag syncing from Review back to Axiom because of this. www.riskdiversion.co.za Magnet Forensics #RiskDiversion #cybercrime #cyberforensics #cyberinvestigations #privatesecurity

2

NIS2 Directive Readiness – Compliance, Challenges, and Recommendations Webcast! 📅 Monday, 28 Oct 2024 🕥 14:30 UTC 🎙️ Speaker: Bojan Zdrnja Are you ready for the changes brought by the NIS2 Directive? Join us for this free webcast to: ✅ Learn about modern threat capabilities ✅ Discover statistics on organisations’ preparedness for implementing NIS2 ✅ Get recommendations to consider for meaningful defence and compliance strategies across both IT and ICS/OT operations. Don’t miss out! Register now to stay ahead of NIS2 and ensure your organization is compliant and secure. 🔗 https://lnkd.in/e5cKW9Vv #NIS2Directive

13

New from Security Management: “Security Consultants See Shortcomings in the State of Security Risk Management” Consultants find security professionals do not have as much influence in the organization as they need, and organizations do not perform basic security risk management functions particularly well. https://lnkd.in/dQ2grYwz #security #securityprofession #securitymanagement

53

3 Comments

Every degree course on Digital Forensics begins with a study on File System Forensics - which has a guaranteed module on the New Technology File System. https://lnkd.in/dXghPjnz #infosec #cybersecurity #pentest #pentesting #hacking #hackers #opensource

1

🚨 Urgent Security Advisory: regreSSHion Vulnerability in OpenSSH (CVE-2024-6387) 🚨 Dear Security Professionals, We're alerting you to a critical vulnerability, regreSSHion, discovered in OpenSSH by the award-winning Qualys Threat Research Team, in collaboration with SecuriGeek. This vulnerability, if left unpatched, can lead to full system compromise, allowing attackers to execute code, install malware, and create backdoors across networks. Key Details: 👉 Affected Versions: Earlier than 4.4p1 and from 8.5p1 to 9.8p1 👉 Impact: Potential for significant data breaches and network propagation 👉 Actions: Immediate patching, SSH access controls, and network segmentation recommended How SecuriGeek and Qualys Can Help: 👉 We can Detect vulnerable assets with Qualys External Attack Surface Management 👉 Explore a 30-day free trial of Qualys CyberSecurity Asset Management here https://lnkd.in/gFz8Epz For detailed remediation steps and additional resources, visit Qualys regreSSHion. https://lnkd.in/gtxJiTgu. Let's stay vigilant and secure our networks together. 🛡️ #CyberSecurity #OpenSSH #Vulnerability #Qualys #SecuriGeek #NetworkSecurity

1