I wrote a short post recently with some guidance for start-ups – if you read it you’ll notice I assume that any start-up will be making use of cloud services, rather than trying to build and host infrastructure internally. It’s not just start-ups using...
So, what is it you do? I’m often asked by people outside the cyber security industry what is it, in fact, that I do. A reasonable question, and my usual answer is ‘stuff, for people’. Partly that is a hangover from the government days, and partly because consultancy is...
So you’re a start-up and you’re worried about security. Well, caring about cyber security is a good thing, and doing so right at the beginning means you can start right now and ensure you maintain the good practice as you grow. Retro-fitting good security is...
If you follow me on twitter, or read the blog here, you’ll know that I am very keen on security monitoring. Effective security monitoring means that you can spot bad stuff when it happens and take action promptly to remediate the problem, and importantly, limit...
The year is 2018 and cyber security is not a new topic. So why is it that every day hacking makes the front page? Why are we doing so badly with what is, at this point, not a new problem? There have been a couple of...
We see examples of failures in cyber security every day, frequently from organisations that should know better, such as this failure at the US Department of Defense: https://www.theregister.co.uk/2018/07/11/us_military_manual_dark_net_sale/ They should be doing a lot better. So what can a small or micro business do? TL;DR Secure the...
The idea of disruptive hacking has long been a favourite of the media and certain talking heads. The idea that a dedicated team with laptops could take out the power and other critical services across a whole country is one that captures the imagination, and...
Recently we had a call from a client who had received an extremely targeted malicious email, aimed at convincing the financial director to transfer a large amount of money to a designated bank account at the apparent request of someone else senior in the same...
Cloud security has been big news again this week, with the online leaks of nude celebrity photos. We roused The Cyber Security Expert from deep contemplation of serious matters (arguing online about which would win in a fight - a Star Destroyer or the Enterprise D)...
The Cyber Security Expert is always recommending people use two factor authentication for online services. It is a good idea, but what in fact is two factor authentication. After explaining about the clocks changing, British Summer Time, and coaxing him to a desk, we asked...