Edward Wasilchin

Track the NIS2 transposition progress across EU Member States 🌍🔍 The ECSO NIS2 Transposition Tracker isn’t just a collection of country data, it’s the result of a joint effort between ECSO and the CISO Community, to make staying up to date with NIS2 implementation easier than ever. How do we ensure accuracy? 🔎 Systematic research and cross-referencing of official sources. 📜 Data from Member States’ Official Journals and EU databases. 👩‍💼👨‍💼 Verification by CISOs and policy professionals. With ongoing updates, the tracker evolves alongside national legislation to give you clarity on the latest NIS2 developments. 👉 Explore the tracker now to see the full picture: https://lnkd.in/gCmErqTJ #European #Cybersecurity #Policy #NIS2 #EU

140

2 kommentarer

Choosing the right Multi-Factor Authentication (MFA), solution for NIS2 compliance is essential for securing critical infrastructure.   ➡️👩‍💻Read blog from our expert Maja Šporčić and find out how to choose an MFA Solution to meet NIS2 standards ➡️ https://lnkd.in/d-J-Qrhm #ASEE #NIS2 #NIS2Directive #Cybersecurity #Compliance

105

Scams are now personal. So is our defense. In his opening keynote at SPECIES, F-Secure CEO Timo Laaksonen called out a hard truth: AI has taken scams to the next level. They’re no longer clumsy mass attacks. They’re targeted, emotional, and costly. In 2024, global losses hit $1 trillion. And the most at-risk group? It’s not the elderly. It’s 18 to 32-year-olds. Digital natives are not cyber security natives. This isn’t just a crisis. It’s a turning point. F-Secure is leading the shift from protecting devices to protecting people. At SPECIES, our partners are the first to see what that looks like in action, through three bold initiatives that redefine how we fight scams and build trust. We believe the scam pandemic is the biggest consumer security opportunity in the history of the internet. Let’s turn it into impact. #FSecure #CyberSecurity #ScamProtection

98

Exciting News: HackerOne and PortSwigger have joined forces to elevate researcher recognition and impact. Together, we're launching the Hacker Milestone Rewards Program, a new initiative celebrating the achievements of Burp Suite users participating in HackerOne bug bounty programs. 🎯 Why it matters: Security researchers are the driving force behind vulnerability discovery. This collaboration recognizes their expertise and rewards the milestones that matter—bringing together PortSwigger's best-in-class tooling and HackerOne’s industry-leading platform. 🔍 Whether you’re uncovering a critical vulnerability or reaching a new personal best, the program brings more visibility, credibility, and community appreciation to your work. Learn more about the program: https://bit.ly/4ny1xf3 #TogetherWeHitHarder #Portswigger #bugbounty #cybersecurity

78

3 kommentarer

🚨 Global cybercrime tool taken down. On May 27, 2025, U.S., Dutch, and Finnish authorities seized domains like AvCheck[.]net, used by hackers to hide malware from antivirus tools. 👀 The twist? These “security checkers” claimed to detect threats—but were secretly helping cybercriminals stay invisible. 🔗 Details: https://lnkd.in/gx8EFPpC

148

1 kommentar

Discover the power of the Local Administrator Password Solution (LAPS) with insights from Viktor Hedberg, Senior Technical Architect at Truesec. In this guide, Viktor delves into the evolution of LAPS, Microsoft LAPS vs Windows LAPS, and offers practical advice on how to effectively integrate LAPS into your daily operations. Learn more via the link: https://lnkd.in/dZr-vQXb #CyberSecurity #LAPS #Truesec

51

We’re thrilled to welcome Spektion to the LiveOak Ventures portfolio! Spearheaded by a team of seasoned security leaders, Spektion is introducing a fundamentally new approach to vulnerability management—one that’s proactive, behavior-based, and built for the complexity of modern software environments. “Vulnerability management – one of the critical functions of every cybersecurity team – is fundamentally broken. It’s stuck in a never-ending, reactive struggle with backlogs that continue to grow,” said Creighton Hicks, Partner at LiveOak Ventures. “We are excited to partner with the Spektion team to solve one of today’s biggest challenges in cybersecurity. Their deep operational and domain expertise has led them to a revolutionary approach that enables security teams to be proactive and stay ahead of the problem. Spektion has hit the ground running, signing up blue-chip customers less than a year since its founding—a testament to both the unmet demand for such a solution and the Spektion team’s ability to capture it.” Congratulations to Joe Silva, Josh Skorich, Julien Maladrie, and the entire Spektion team! We’re excited to be on this journey with you. https://lnkd.in/gaw77uQc

73

2 kommentarer

24 hours. 72 hours. One month. That’s the new standard for reporting security incidents under Europe’s updated cybersecurity rules. Already in force in Denmark and Finland. Soon to follow in Sweden and Ireland. “If you haven’t started adapting, you need to do so now. This is a change journey that takes time,” says our CSO, Klas Bergwall. Most companies underestimate the effort required for compliance. Don’t make that mistake. https://lnkd.in/dCdd_r9d

39

Far too many vulnerability management programs are stuck in 2005. Endless scan reports. Thousands of “critical” findings. No context. No clarity. No time. Meanwhile, attackers are exploiting new vulnerabilities in hours, not weeks. That’s why leading security teams are evolving from traditional VM to Continuous Threat Exposure Management (CTEM). But here’s the catch: 💡CTEM isn’t a product you buy, it’s a maturity journey. Our new guide, A Practical Guide for Evolving from VM to CTEM, shows you exactly how to: 👀 Build continuous asset visibility across hybrid environments 🔬 Go beyond CVSS with real-world context like internet exposure, runtime presence, & configuration of compensating controls to prioritize your biggest risks 🥷 Proactively hunt exposures before they become incidents 🌟 Align Security & IT for faster, more focused remediation 📊 Learn the 4 stages of the Exposure Management Maturity Model based on hundreds of conversations with security leaders. Get steps you can take today, no matter where you are on your CTEM journey. 🔗 Download your copy and start closing your exposure gap now → [link in comments] #CTEM #VulnerabilityManagement #ExposureManagement #RiskReduction Nathan Rollings | Tom Anthony | Tomer Admon | Jonathan Wood | Snir Havdala

52

2 kommentarer

Trend Zero Day Initiative™ (ZDI) exposed the tactics of Russian cybercriminals targeting Ukrainian organizations. From spear-phishing to advanced homoglyph attacks, understand the full spectrum of these threats and how to fortify your business against them: https://spr.ly/6047Ir4aF

94

1 kommentar

How Threat Modeling Could Have Prevented the $1.5B Bybit Hack. Our blog explores one of our most popular but rarely published report types, and how adding threat modeling to your organization can save you from becoming the next billion-dollar headline. 📕 Read the blog: https://hubs.la/Q038qnhf0 Code audits find bugs. Threat models find disasters-in-waiting. The Bybit hack wasn't about smart contracts—it was about compromised signers and manipulated UIs. The attackers didn't need to break the code when they could break the process. Don't wait until your exchange is the next trending topic for all the wrong reasons. Proper threat modeling could have spotted the exact weaknesses exploited at Bybit before $1.5B walked out the door. Contact us to learn more about our Threat Modeling services: https://hubs.la/Q038qlKg0

65

NCC Group Monthly Threat Pulse – Review of December 2024 now live! 🔍   December 2024 breaks records with the highest ever monthly ransomware   - December represents the highest number of ransomware cases observed since NCC Group began monitoring ransomware activity in2021, with 574 attacks. - New threat actor Funksec was the most active threat group, responsible for 18% of attacks. - Industrials remains the most targeted sector, accounting for 24% of attacks. Cases in Asia rose to 16%, closing the gap between Europe. Read our press release 👉 https://lnkd.in/ey7phyck Download the report 👉https://lnkd.in/gjTRn3D6 Catch up on our latest webinar 👉 https://lnkd.in/e8qWfYu9

43

The real PKI threat? It's not just compromised certificate's, it's complacency. Too many organizations are too slow to replace exposed certificates. This is exactly why shorter certificate lifespans matter! They don’t just tighten security. They force agility. As Arvid Vermote explained on TrustID Talk - agility isn’t optional anymore. It’s the only way to survive in a world of key compromises, compliance failures, and quantum looming on the horizon. Don’t fall behind. Learn more by tuning into the full episode👇 Spotify: https://bit.ly/48cByFk Apple: https://loom.ly/DSftlVk YouTube: https://loom.ly/CMdy-T8 #TrustIDTalkPodcast #CABrowserForum #CertificateValidityPeriods

46

Most teams only become aware of CVEs when they’re public. By then, attackers are already steps ahead. Our latest research shows how early signals from threat actors can help predict vulnerabilities before disclosure. 👉 Read the full blog: https://lnkd.in/dXsaJ2gC __ #CVE #ThreatIntelligence

28

Are You a European Company Required to Become NIS2 Compliant? The DVMS Institute NIST Cybersecurity Framework Digital Value Management System is Your Solution Full Blog: https://lnkd.in/gu56GQW5 The Digital Value Management System™ (DVMS) offers a pragmatic and comprehensive model that can help European companies operationalize the capabilities mandated by the NIS2 Directive. As NIS2 raises the bar for cybersecurity governance, risk management, and resilience across essential entities, organizations must go beyond basic compliance and adopt a systems-based, capability-driven approach to meet these requirements sustainably and adaptively. The DVMS aligns naturally with the NIS2 framework by embedding cybersecurity into the core of digital business operations, treating it as a strategic imperative rather than an isolated technical concern. It enables organizations of any size or sector to create, protect, and deliver digital business value in a way that is entirely consistent with the intent and obligations of NIS2. At the heart of NIS2 is a shift in regulatory focus—from a checklist of technical controls toward a holistic governance and risk management model that demands demonstrable cybersecurity capability at both the strategic and operational levels. NIS2 emphasizes leadership accountability, supply chain risk management, incident response preparedness, and ongoing cyber hygiene. These expectations mirror the DVMS model, particularly its foundational concept of “strategy-risk,” which unifies organizational strategy and cybersecurity risk into a single operational entity. This concept is essential for NIS2 compliance, which requires that cybersecurity risks are managed as part of the broader governance and decision-making framework, not as a downstream or isolated function. The Digital Value Management System provides a highly effective, adaptable, and scalable solution for European organizations working to meet the demands of the NIS2 Directive. Through its emphasis on capabilities over compliance, its integration with existing practices, and its deep alignment with strategic governance, cultural transformation, and continuous improvement, the DVMS equips organizations to build true cyber resilience. It ensures regulatory alignment and empowers companies to deliver secure, sustainable digital value in an increasingly complex and regulated digital world.

18

Last week, we hosted a webinar on NIS2—an important directive shaping the future of cybersecurity for critical infrastructure. While discussions around implementation and enforcement are ongoing, it's clear that NIS2 is reshaping how organizations approach cyber risk, accountability, and resilience. But what does it actually mean? Not just in legal terms—but in practice for the industries it affects? We’ve put together a short explainer that breaks down the directive: what it is, what’s new, and why it matters. This is just the starting point. In the coming weeks, we’ll examine what NIS2 means specifically for the rail industry. Read more here 👉🏼https://lnkd.in/dbZRRhfi

22

1 kommentar