John Rhee

Seeing an increase in tenders focusing on risk-based alerting recently. For those interested, here's a basic guide by on the topic. #SouthAustralia #Risk #RiskBasedAlerting #InfoSec #Cybersecurity #Splunk #EnterpriseSecurity Adam Ind Splunk

10

Alert fatigue and high rates of false positives can lead to missed detections. Reducing the noise to enable your team to focus on the right alerts is critical, especially for smaller IT teams. If this is something you're struggling with, NCC Group can help! https://lnkd.in/gTbgmDjd #managedservices #mdr #edr #databreach #cybersecurity

5

Organisations in Australia & New Zealand experienced 879 cyber attacks per week in the last six months. Given this increase in advanced threats, it is now more imperative than ever for organisations to adopt comprehensive strategies to measure, manage, and communicate their digital risk exposures effectively – but how? #cybersecurity

3

🚀 The 2024 Global Cybersecurity Skills Gap Report highlights a concerning shortage of skilled professionals amid rising cyber threats. Glenn Maiden, director of threat intelligence operations, FortiGuard Labs ANZ, spoke with Mike Loder, host of Ticker News Insight on the reports findings and how on how organisations can address these gaps through targeted training, certifications, and partnerships. Watch the full interview here. #Cybersecurity #SkillsGap #ThreatLandscape

1

Åtte viktige punkter å få med seg for IT Security & Service Providers! Discover the power of the Essential Eight cybersecurity strategy developed by the Australian Signals Directorate (ASD), a cornerstone framework for managed service providers (MSPs) to combat cyber threats effectively. 📌𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗽𝗮𝘁𝗰𝗵𝗶𝗻𝗴: Patching software addresses vulnerabilities, boosting cybersecurity defenses; while automated patching streamlines the process, fortifying against threats. 📌𝗢𝗦 𝗽𝗮𝘁𝗰𝗵𝗶𝗻𝗴: Regularly updating operating systems is essential to address security vulnerabilities. MSPs must assess and prioritize critical fixes to maintain network integrity. 📌𝗠𝘂𝗹𝘁𝗶-𝗳𝗮𝗰𝘁𝗼𝗿 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻: Adding additional authentication layers beyond user credentials strengthens security and mitigates risks in today's evolving threat landscape. 📌𝗥𝗲𝘀𝘁𝗿𝗶𝗰𝘁 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗶𝘃𝗲 𝗽𝗿𝗶𝘃𝗶𝗹𝗲𝗴𝗲𝘀: Limiting access to authorized users minimizes the risk of lateral movement in the event of a network breach, enhancing data security. 📌𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗰𝗼𝗻𝘁𝗿𝗼𝗹: Vigilant monitoring and security protocols for third-party applications prevent unauthorized access to corporate data, reducing vulnerabilities. 📌𝗥𝗲𝘀𝘁𝗿𝗶𝗰𝘁 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗢𝗳𝗳𝗶𝗰𝗲 𝗺𝗮𝗰𝗿𝗼𝘀: Careful management of Microsoft Office macros—coupled with security protocols—mitigates risks associated with deprecated or vulnerable services. 📌𝗨𝘀𝗲𝗿 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗵𝗮𝗿𝗱𝗲𝗻𝗶𝗻𝗴: Strengthening user-based applications, particularly browsers, fortifies against potential exploitation by hackers targeting user accounts. 📌𝗕𝗮𝗰𝗸𝘂𝗽𝘀: Regular backups not only protect client data but also mitigate risks associated with ransomware attacks, safeguarding client reputation and data integrity. In conclusion, implementing the Essential Eight cybersecurity strategies outlined here is essential for MSPs to safeguard their clients' digital assets. This helps service providers stay vigilant and proactive in cybersecurity, upholding client trust and resilience in the face of evolving cyber threats. #ITsecurity #Serviceproviders #Manageengine #Disnova #avantis

1

Proofpoint has found that 59% of ASX 200 companies are subjecting customers, partners, and employees to higher risks of #emailfraud. Adrian Covich of Proofpoint says, "If we are to avoid a repeat of the high profile attacks we’ve seen on Australian companies in recent years, an overwhelming majority of the ASX 200 need to ensure they improve their cyber security defences, particularly when it comes to securing the email channel." Read on in KBI.Media.

1

In 2024, 61% of Australian Chief Information Security Officers (CISOs) surveyed feel at risk of experiencing a material cyber attack in the next 12 months, compared to 53% in 2023. However, just 40% feel their organisation is unprepared to cope with a targeted cyber attack. #cybersecurity

2

Good breakdown of Blue, Red and Purple team Objectives and Responsibilities by Gartner. Building cyber resilience through more regular Purple team exercises seems like a good idea... https://lnkd.in/g_Ny5Z4Q

7

Want to learn more about #DFIR and Velociraptor DFIR? This is the event to join! Get your hands dirty with us and let’s #DigDeeper!

5

🚨 The latest report from the Office of the Australian Information Commissioner (OAIC) shows a 9% rise in data breaches in the first half of 2024, with 527 incidents recorded. This is a clear reminder that as our reliance on technology grows, so do the risks. Proactively addressing vulnerabilities and enhancing threat intelligence is key to staying ahead of cyber threats. Are you ready to safeguard your business in this evolving digital landscape?" SOCRadar® Extended Threat Intelligence #CyberSecurity #DataBreach #DigitalRisks #ThreatIntelligence

4

Mapping the Essential Eight - How the ACSC’s Cyber Strategies Help Organisations Defend Against Common Threats Join Scott Hesford, Senior Director, Solutions Engineering, APJ, BeyondTrust, Yaroslav Solovyov, Principal Consultant, IDAM, CyberCX and Brad B., Senior Manager, Governance Risk and Compliance, CyberCX, as they map common attacks back to the Essential Eight framework and the particular crucial controls called out in the strategies themselves. By attending the webinar you will: ✅ Understand how Essential Eight protects against today’s threats ✅ Why Identity Security is crucial to meet the Essential Eight requirements ✅ Learn about strategies to implement that go beyond the Essential Eight Register your place now. https://lnkd.in/e-dCefKH #EssentialEight #ACSC #Australia #Cybersecurity #IdentitySecurity

3

In today's digital landscape, it's crucial for businesses to stay vigilant and proactive in managing software updates and patches. Collaborating with IT providers to implement a robust patch and application update management system is not just a best practice—it's a necessity. This ensures that all systems are fortified against the latest security threats and operate at peak efficiency. Let's prioritise cybersecurity and keep our networks secure. #BusinessIT #Cybersecurity #PatchManagement #SoftwareUpdates

3

Got DAS? (not direct attached storage) SailPoint's Data Access Security integrates the ability to DISCOVER, GOVERN and SECURE critical unstructured data within the same window of your your IGA platform. Were you aware Ken is accessing and sharing PII data with Susie? https://lnkd.in/gd3GTAQv

16

1 Comment

Australia is a hot spot for Phishing attacks as discovered in the latest Zscaler Threat labs report. LINK->> https://lnkd.in/g_58rsaS Some scary facts: ·    Phishing attacks surged by 58.2% in 2023 compared to the previous year. ·    Microsoft is the most imitated brand, with 43.1% of phishing attempts targeting it.  ANZ Bank was 11th in the list of brands targeted. ·    Vishing (voice phishing) and deepfake phishing attacks are on the rise, leveraging generative AI to amplify social engineering tactics. ·    Adversary-in-the-middle (AiTM) attacks and browser-in-the-browser (BiTB) attacks are persistent threats, targeting users in web browsers and making them harder to detect and mitigate. ·    The top five countries targeted by phishing attacks are the United States, United Kingdom, India, Canada, and Germany. Australian was 9th. ·    The finance and insurance industry faced 27.8% of overall phishing attacks, followed closely by the manufacturing industry at 21%. ·    Tech support scams and QR CAPTCHA scams were among the most prevalent attack types in 2023. ·    Social media platforms like Telegram, Facebook, WhatsApp, Instagram, X (previously Twitter), and Snapchat are exploited by threat actors for phishing attempts. Zscaler can help mitigate phishing attacks through a combination of strategies: ·      advanced threat protection, ·      URL filtering, ·      browser isolation, ·      zero trust architecture, ·      threat intelligence, and ·      user awareness and training. These measures help identify and block phishing threats, prevent access to malicious websites, isolate web content, enforce strict access controls, and educate users to recognise and report phishing attempts. Please reach out if you need any additional information about our Zero Trust Platform and its benefits to users and organisation.

15

Mapping the Essential Eight - How the ACSC’s Cyber Strategies Help Organisations Defend Against Common Threats On October 10, Join Scott Hesford, Senior Director, Solutions Engineering, APJ, BeyondTrust, Yaroslav Solovyov, Principal Consultant, IDAM, CyberCX and Brad B., Senior Manager, Governance Risk and Compliance, CyberCX, as they map common attacks back to the Essential Eight framework and the particular crucial controls called out in the strategies themselves. By attending the webinar you will: Understand how the Essential Eight protect against today’s threats. Know why Identity Security is crucial in meeting Essential Eight requirements. Learn strategies to implement that go beyond the Essential Eight. Register to secure your place today. https://lnkd.in/e-dCefKH #EssentialEight #BeyondTrust #Compliance #IdentitySecurity #APJ

3

Mapping the Essential Eight - How the ACSC’s Cyber Strategies Help Organisations Defend Against Common Threats On October 10, Join Scott Hesford, Senior Director, Solutions Engineering, APJ, BeyondTrust, Yaroslav Solovyov, Principal Consultant, IDAM, CyberCX and Brad B., Senior Manager, Governance Risk and Compliance, CyberCX, as they map common attacks back to the Essential Eight framework and the particular crucial controls called out in the strategies themselves. By attending the webinar you will: Understand how the Essential Eight protect against today’s threats. Know why Identity Security is crucial in meeting Essential Eight requirements. Learn strategies to implement that go beyond the Essential Eight. Register to secure your place today. https://lnkd.in/gA2bqUzZ #EssentialEight #BeyondTrust #Compliance #IdentitySecurity #APJ

3