Cyber Resilience • Assured

Features 17.12.2024

Five Incidents that Shaped the Cybersecurity Landscape in 2024

Assured Intelligence has compiled a breakdown of the top events that helped define the security landscape in 2024

Interviews 12.12.2024

Getting to Know: Eliza-May Austin

Co-founder and CEO of th4ts3cur1ty.company, Eliza-May Austin, is a force to be reckoned with.

Blogs & Opinions 10.12.2024

NIS2: Greater Resilience or More Red Tape?

NIS2 came into effect on 17 October but has so far proven something of a damp squib

Blogs & Opinions 28.11.2024

The Shifting Sands of Ransomware in 2024: Who’s Who and What’s New?

Among the shifting ransomware ecosystem landscape, two new groups are worth noting.

Features 21.11.2024

Are Backups Beyond Data Enough to Secure Ransomware Resilience?

In an era of increasing ransomware, backups aren’t enough. Are new capabilities to restore your entire tech infrastructure the answer?

Blogs & Opinions 14.11.2024

Weighing Up Potential Loss and Prevention in the Wake of Crowdstrike and NetworkRail Outages

Conor O’Neill highlights the true cost of a data breach to your company and how businesses can minimise future risks.

Blogs & Opinions 07.11.2024

CISO ‘How to’ Without the Bull: Third-Party Risk Management

These blogs will focus on making a tangible difference in a language the business understands. The points are drawn from experience delivering cybersecurity transformation programmes in multiple industries.

Features 31.10.2024

Trouble Squared: What Happens When Nation States and Cyber Criminals Work Together?

Reports claim that the majority of attributable malware-based attacks are now state-sponsored. What does this mean for CISOs?

Interviews 29.10.2024

Five Minutes With: A Senior Technical Specialist at Coventry Building Society

Guy Heaton is the senior technical specialist responsible for backup and recovery at Coventry Building Society.

Blogs & Opinions 17.10.2024

Ensuring NIS2 Compliance With Proactive Cyber Resilience

NIS2 is here. Are you ready?

Features 15.10.2024

Follow the Honey: How Cyber-Deception Can Help CISOs

The NCSC is building “a nation-scale evidence base” for cyber-deception

Features 08.10.2024

Critical Infrastructure Under Cyber Siege

60% of UK CNI organisations have experienced ransomware over the previous year

Features 03.10.2024

Game Over? Cybersecurity Threats Surge in Online Gaming

Are your employees gamers? And if so, what does that mean for your security posture?

Interviews 01.10.2024

Five Minutes With: A Technical Director

How does one transition from windsurfing instructor to cybersecurity tech director? Dan Bridges knows…

Features 26.09.2024

AI Autopsy: The Long Road to Recovery for the British Library

The British Library has shared a detailed report of the 2023 cyber incident and its aftermath. Assured Intelligence picks out the highlights for our autopsy report

Features 19.09.2024

SaaS Data Breaches Are Surging: How Should Security Teams Respond?

What do SaaS customers need to do to harness the benefits of the cloud without inviting excessive cyber risk?

Features 05.09.2024

Out of the Shadows: Why it’s Time to Shine a Light on Unmanaged Data

The cost of data breaches is rising. Shadow data is one of the reasons for this.

Blogs & Opinions 03.09.2024

Cyber Resilience: Identity is at the Heart of Response and Recovery

It’s happened. Your organisation is now one of the 70% hit by a cyber attack. What now?

Blogs & Opinions 27.08.2024

The Role of the Human Factor in the Cybersecurity and Resilience Bill

The CSR Bill’s current focus on regulatory compliance and incident reporting is vital, but it should strongly emphasise the human factor in cybersecurity.

Features 22.08.2024

An AI Autopsy: AT&T’s 2024 Data Breaches

The first in our AI Autopsy series…Features that analyse and dissect recent cyber incidents, providing lessons learnt so cybersecurity professionals can avoid history repeating itself

Interviews 21.08.2024

Five Minutes With: A CISO

What keeps Cyro Cyber’s CISO up at night? Here’s a spoiler…it’s people!

Features 15.08.2024

That Sinking Feeling: How Can the Maritime Industry Improve Cyber Resilience?

Do shipping companies feel anchored down by cyber risk?

Features 13.08.2024

Mis-sold and Misinformed: The Problem with Cyber Insurance?

A combination of mis-sold policies, coverage small print, and generalist brokers threaten to do more harm than good.

Blogs & Opinions 08.08.2024

The Six Biggest Cyber Threats of 2024

Reflecting on 2024 so far, the cyber danger zones can be divided into key areas.

Features 01.08.2024

Danger: Don’t Get Too Close to (the) Edge (Computing)

The monthly addition of edge service and infrastructure CVEs rose by 22%. So, how can CISOs protect the edge more effectively?

Blogs & Opinions 30.07.2024

Cyber Resilience in Healthcare: Tackling Ransomware with Advanced Cyber Defences

When it comes to protecting healthcare data and systems, the threat is high, and the stakes are even higher, warns Dr. Darren Williams In early June 2024, major London hospitals, including Kings College Hospital and Guy’s and St Thomas’s, declared a critical incident following a ransomware attack on Synnovis, a pathology services provider. This cyber […]

Blogs & Opinions 25.07.2024

The Labour Party Promised Change: What Does That Mean for Cyber?

The Labour government promised “change” as its big election manifesto theme. Will that stretch to cyber?

Features 04.07.2024

Lives on the Line: Life Threatening Cyber Attacks Raising the Stakes for CISOs

Six NHS trusts in London and countless GP practices in surrounding regions recently suffered major disruption after a ransomware attack

Features 02.07.2024

Can the PSTI Act Resolve the IoT Security Nightmare?

The PSTI Act came into play in April 2024, aiming to improve resilience for notoriously insecure IoT devices

Blogs & Opinions 13.06.2024

Plugging the Cybersecurity Skills Gap With Contractors

Cybersecurity leaders face immense pressure to strengthen their organisations’ defences. Yet the industry is struggling to fill positions. Luckily, CAPSLOCK’s Dr Andrea Cullen has a plan The UK’s cybersecurity sector is still struggling to fill positions. The government estimates that 51% of UK companies lack basic cyber skills. This shortage of cybersecurity professionals is putting […]

Features 11.06.2024

Dropbox Hack: 5 Lessons from the Dropbox Sign Breach

This incident shows breaches can inadvertently compromise the data of individuals who may not have had a Dropbox account

Interviews 04.06.2024

Five Minutes With: An Associate Professor and University Reader in Cybersecurity

Dr Jason Nurse names AI as the biggest unsolved problem in cybersecurity. And he believes that good cybersecurity training is the bare minimum for improving cybersecurity posture.

Features 30.05.2024

Building Back Safer: Why Construction Firms Need to Tackle Mounting Cyber Threats

In a sector focused on building physical things, digital threats have often played second fiddle to physical risks on-site.

Features 14.05.2024

Lessons in Cybersecurity for the Education Sector

Education was the most attacked sector in the UK in the last six months

Features 09.05.2024

Cybersecurity’s Top Three Concerns According to TikTok and Deutsche Telekom

Top security leaders share their three biggest cybersecurity concerns

Blogs & Opinions 02.05.2024

Security Culture: Out With Ephemeral, In With a Lasting Psychological Approach

What exactly is a security culture and how can organisations build and maintain one?

Features 23.04.2024

Logistics Uncovered: Understanding the Cyber Threat to Physical Supply Chains

After KNP declared bankruptcy following a ransomware attack last year, we investigate the top cyber risks facing the logistics sector.

Features 09.04.2024

Securing a Record-Breaking Election Year: Easier Said than Cyber Done

More than two billion people, including UK and US citizens, are set to head to the polls this year, which invites plenty of speculation about the security of the voting process.

Blogs & Opinions 04.04.2024

You’ve Got an Incident Response Plan, but Have You Tested It?

By failing to prepare, you’re preparing to fail, so get that incident response plan in place, says Chris Denbigh-White If two buildings are ablaze, then it stands to reason that the one with fire marshalls, evacuation plans, sprinkler systems and the one that has taken steps to improve its ability to contain a fire with […]

Features 03.04.2024

Patching Problems: Why Vendor Security Updates Are Letting Down Customers

The MOVEit file transfer software impacted tens of millions of end customers

Blogs & Opinions 19.03.2024

Getting Into the Psyche of a Ransomware Hacker in 2024

What’s changed in the ransomware landscape in 2024? Chris Rogers considers the psyche of those writing the code and looks at new tactics, tools and the prevalence of double-extortion ransomware The cybersecurity ecosystem moves at an extremely rapid pace. However, in the months ahead, it seems inevitable that organisations will be faced with even more […]

Features 05.03.2024

Business Email Compromise: How Not to Lose $121m Like Google and Facebook

How BEC is becoming a bigger threat and what you can do about it

Blogs & Opinions 22.02.2024

Ransomware: The Myth of Sophistication

Sometimes it’s the simple things that can have the biggest impact on cybersecurity posture

Features 13.02.2024

Unpatched Patches: Three Critical Patches that Just Keep Bleeding

Unpatched issues can result in dire consequences, as the worst flaws of recent times show. Kate O’Flaherty considers the podium of recent unpatched flaws and questions why firms are so slow to patch Patching: You can’t live with it, but you definitely can’t live without it. And as many firms have discovered, failing to patch […]

Blogs & Opinions 30.01.2024

Pen Testing v Ethical Hacking: Which is Better?

Which is more effective in improving a company’s cybersecurity posture?

Features 25.01.2024

Ransomware in the UK: A Catastrophic Risk?

The House of Commons and House of Lords released a report on UK national security, warning that the UK is at risk of a catastrophic ransomware attack. Assured Intelligence breaks that down.

Blogs & Opinions 11.01.2024

Three Things CISOs Can Do to Drive Accountability

There are three ways that CISOs can use security data lakes to drive accountability.

Blogs & Opinions 04.01.2024

Advanced Threat Intelligence: Transforming Cybersecurity Effectiveness

Evolving cyber threats requires evolving threat intelligence. Here’s how to do it.

Features 02.01.2024

Voice Cloning: The (£27m) Cost of a Stolen Voice

When an AI-enabled voice cloning cyber attack fools a branch manager into transferring £27m out of the business, it’s time to pay attention to the new cyber weapon

Blogs & Opinions 28.12.2023

Why Convergence is Gold For Networking and Security

Dave Greenfield believes in the power of converged networking and security teams, and he’s put pen to paper to explain why The convergence of networking with security forms a pivotal foundation in protecting IT infrastructures against the ever-evolving landscape of cyber threats. This union not only safeguards sensitive data and critical resources, but also bolsters […]

Blogs & Opinions 26.12.2023

Shadow AI and the AI Apps That Are a CISO’s Nightmare

Forty per cent of enterprise apps involve uploading content, code, files, or spreadsheets for AI assistance. This raises huge data leakage questions.

Features 21.12.2023

When Cyber Attacks Threaten Lives: A Candid Assessment of The Reality of OT Threats

Assured Intelligence talks to hacktivist group GhostSec to get its perspective on industrial control system threats

Features 14.12.2023

The Allen & Overy Ransomware Incident: What You Need to Know

Six lessons that all businesses should take from the Allen & Overy ransomware incident

Features 21.11.2023

The 2023 Sony Breaches: 5 Important Takeaways

Sony’s reputation has taken a bashing over the last few months after it was hit by two high-profile breaches.

Features 16.11.2023

Harpooning the Whale: Why BEC is the Scourge of the Time-Poor C-Suite

Fraudsters continue to adapt their business email compromise techniques to make a fortune

Blogs & Opinions 03.11.2023

Insider Threats: A Proactive Protection Strategy

Keep your friends close, and your insiders closer…

Features 31.10.2023

How to Create the Perfect Incident Response Strategy in Eight Steps

It’s time to get your incident response ducks in a row…

Features 26.10.2023

Five-Minute Snapshot: What You Need to Know About the SecureWorks State of the Threat Report

Top trends include ransomware, nation-state attacks and business email compromise

Features 17.10.2023

The 7 Worst Hacking Groups in the World

Assured Intelligence introduces seven hacking groups that have risen to infamy, running amok in global networks and leaving a trail of disruption

Features 10.10.2023

Unlocking the Mind: The Psychology of Password Creation

Is a successful password strategy the tech equivalent of the Holy Grail?

Features 05.10.2023

Home-Grown Trouble: Five of the Biggest Insider Threats of 2023

Edward Snowden put the term ‘insider threat’ firmly on the map in 2013. A decade later, insiders are still running amok…

Blogs & Opinions 03.10.2023

Chinese Espionage is Back on Track: What Businesses Need to Know

The stakes just got higher in the world of cyber espionage.

Blogs & Opinions 19.09.2023

Crime-as-a-Service: Anyone Can Be a Cyber Criminal

No Technical skills or expertise? No problem. You can still become a cyber criminal…

Features 12.09.2023

Save Britannia: Cyber Risk for Critical National Infrastructure

The UK government is warning about rising cyber risk levels. Should we be worried?

Features 07.09.2023

Retail Sector Cyber Attacks: Shopping for Security

The retail sector has made headlines due to many high-profile (and costly) data breaches. What can retailers do to stay clear of the front pages?

Features 22.08.2023

Ransomware Trends: What Every Exec Needs to Know

How can execs protect their business from becoming a victim of ransomware?

Interviews 21.08.2023

Getting to know: Marten Mickos

The CEO of HackerOne delivers huge growth and controversial opinions. He loves hackers, but hates cybersecurity. Eleanor Dallaway got to know Marten, and so should you.

Features 20.07.2023

The Bigger Picture: Why Cyber Risk Aggregation Matters

Aggregate cyber risk should inform executive cyber strategy and help insurers to price cyber policies more accurately. Here’s how…

Features 06.07.2023

Stormy Seas: Cybersecurity Challenges in the Logistics Sector

From Americold to SolarWinds, logistics companies have been, and continue to be, vulnerable to cyber attacks. Eugene Yiga investigates

Features 04.07.2023

Know Your Enemy: The Nation-States Provoking a Hundred Cyber Battles

How can organisations bolster their cybersecurity against nation-state threats?

Features 29.06.2023

Closed for Business: The Organisations That Suffered Fatal Cyber Attacks that Shut Their Doors For Good

Assured Intelligence has taken a look at some of the companies that have gone out of business due to a cyber-attack to bring you the low-down on what happened in each case.

Features 15.06.2023

Unlocking the Truth: An Inside Look at the ION Ransomware Attack

The ransomware attack on ION is a stark reminder of the increasing cyber threats that financial institutions face.

Features 12.06.2023

Bug Bounty Programme or Penetration Testing: Which is Right For You?

What are the merits of penetration testing versus bug bounty programmes, and which approach enhances overall security most effectively?

Blogs & Opinions 08.06.2023

Four Considerations for CISOs Making Security Investment Decisions

Ellen Sundra considers benchmarking, connectivity, scaling and automation.

Features 01.06.2023

Two to Tango: Are the Private and Public Sector Pulling Their Weight in the Fight Against Cyber Crime?

Celebrated instances of botnet takedowns and cyber crime indictments often rely on major cybersecurity vendors for intelligence and expertise. But can the government bring cyber criminals to justice without the backing of the private sector? Dan Raywood investigates Earlier this year, Assured Intelligence considered global law enforcement’s response efforts to ransomware. We questioned whether there […]

Features 30.05.2023

Anatomy of a Stealthy Cyber Attack: 10 Steps to Take in the Aftermath of a Data Breach

Attack prevention is a much-talked about area of security, but what happens after a breach takes place?

Features 16.05.2023

Turning the Lights on an Energy Sector Under Cyber Attack

There are three categories of hackers particularly interested in targeting the energy sector. Who are they? And what can be done to protect energy?

Blogs & Opinions 12.05.2023

Four Things CEOs Need to Know About DORA

DORA aims to ensure that the financial services industry can withstand and respond to digital risks. Here’s the low-down on the regulation

Blogs & Opinions 14.04.2023

XX Hacking: Three Tips for Women Aspiring to be a Professional Hacker

Beth Robinson highlights the additional considerations that those with a double X chromosome may need to take if aspiring to be a professional hacker

Blogs & Opinions 22.03.2023

Why Being Cyber Insurable is a Company Effort

Cyber insurance is no longer niche, and is a topic that needs to find its way into the boardroom, says Andy Harris

Features 17.03.2023

Banking on Vulnerability: Why Financial Institutions are Facing Increasing Cyber Attacks

Cyber attackers are increasingly banking on poor cybersecurity practices in financial institutions, raking in profits thanks to legacy practices and tech.

Features 23.02.2023

Building on Solid Foundations: Cybersecurity in Architecture

Why are architects and the companies they work with in construction and engineering among those least prepared for a cybersecurity attack?

Blogs & Opinions 15.02.2023

The Dos and Don’ts of Infosec Event Attendance: Maximise Value, Minimise Nonsense

Javvad Malik advises how to maximise value when attending cybersecurity events

Features 10.02.2023

Living in ‘Forgot Password’ Hell? Here’s How to Escape

Alex Meehan looks at ways to crack the password conundrum

Features 07.02.2023

Cyber Risk Real Talk: How to Identify and Address Your Unique Risk

It’s hardly setting the world alight by announcing that determining cyber risk is crucial to a successful cybersecurity response. Kathryn Pick helps to identify how an organisation goes about identifying where that risk lies

Features 20.01.2023

Crossing the Cybersecurity Poverty Line

In times of economic instability, the cybersecurity poverty line becomes ever thicker. Dan Raywood offers economically viable advice for cash-strapped businesses