Andrew Lear

MDR sharpens visibility. Because resilient businesses need a clearer lens. In today’s cyber landscape, what you don’t see often matters more than what you do. Modern security teams face an overload of alerts. MDR steps in to give clarity where it matters most: - Filters noise so only real threats demand attention - Adds context to alerts for faster understanding - Guides action with expert-driven recommendations - Accelerates decisions when time is critical - Strengthens resilience by spotting what tools alone may miss MDR makes your defenses sharper, faster and more reliable. Graftronics is a Sophos MDR partner, transforming IT teams across organizations in multiple industries. Reach out to us for assessing MDR for your setup. - Vimesh Avlani Managed Detection & Response | Cyber Resilience | Trusted by Mid-Market CXOs

20

4 Comments

⚠️ After reports that over 183 million breached email credentials had been uploaded to data breach information site Have I Been Pwned, Alastair MacGibbon told 10 News that this is a reminder to always turn on multi-factor authentication (MFA) when given the option on a website or an app.    "This is malicious code, malware, i.e. software that does bad things, rather than good things, that we get infected with on our computers, or they poison websites," said Alastair. "They break into websites and leave this malicious code on them and it's designed to steal important things, credit card information, usernames and passwords."   "So there is a massive criminal enterprise online that tries to do this 24/7/365."

83

Today we published the government's 🇬🇧 UK Cyber Security Sectoral Analysis 2025. It shows another year of very strong growth for the UK cyber sector: ⬆️ Sector revenue up by 12% ⬆️ Gross Value Added (GVA) up by 21% ⬆️ Employment up by 11% The UK cyber sector is a consistent high performer and we have been measuring this performance since 2017. The compound annual growth rate for sector revenue works out at 13%. While venture capital investment has not grown this year, investors surveyed remain bullish and there has been significant other investment activity in the UK market including mergers, acquisitions, loan and equity funding. https://lnkd.in/ea_fMdez Department for Science, Innovation and Technology / techUK / CyberFirst / National Cyber Security Centre / Plexal Cyber / UK Cyber Security Council / UKC3 - UK Cyber Cluster Collaboration / Cyber Security Academic Startup Programme

123

Built something fun this week. We just published a new challenge on our CTI Academy Learning Platform that uses two of our platforms together: NullBase (our community forum) and LeakLens (our Big Data platform for leaked credentials). The scenario: a forum user is selling NHS credential dumps. Your job is to verify the data against real breach records, and then flip the script. The seller made an OPSEC mistake on their profile. One careless wall post, one personal email, and suddenly you're looking at their real name and location. It's basically a doxing exercise. Forum persona in, real identity out. The whole thing takes about 20 minutes. What you'll actually learn: - How to monitor underground forum listings for client exposure - How to cross-reference forum claims with breach databases - How to spot OPSEC failures in threat actor profiles - How to pivot from a forum handle to a real person The 2025 credential mega-leak proved something interesting: criminals end up in breach databases too. Their personal emails, their reused passwords, everything. You just have to know where to look. Available now at ctiacademy.io. #CyberSecurity #ThreatIntelligence #OSINT #CTI #Doxing #ThreatHunting #CTF #LeakLens #NullBase #CTIAcademy

69

1 Comment

Don’t wait for a breach to care about cyber security. When I stepped into my current role, there wasn’t a formal cyber security framework in place, just good intentions and a few scattered controls. Six months later, we had Cyber Essentials Plus accreditation, supplier risk reviews, and stronger day-to-day practices across the board. We didn’t get there with a big team or endless budget. We got there by prioritising the right things and making security part of the culture. The biggest shift wasn’t technical. It was behavioural. People started flagging suspicious emails, challenging access requests, and thinking twice before sharing data. Here are the top 3 things that made the difference: 1. Prioritise ruthlessly. Not everything is a critical risk…but some things are. Focus there first. 2. Make it everyone’s job. Cyber isn’t just for IT. Build awareness across every team. 3. Start with something real. A practical framework like Cyber Essentials Plus gives structure and momentum. Security doesn’t need to be perfect. But it does need to be deliberate. Intentionality beats inaction every time. #CyberSecurity #Leadership #SecurityCulture #CharityTech #CyberEssentials #DigitalTrust

14

1 Comment

#CyberUK 2025 run by National Cyber Security Centre was another great event. Quite apart from the networking and meeting vendors I enjoyed talking on two different panels, one about Cyber Essentials and getting the foundations of good cyber resilience right with Felicity Oswald OBE, and the other about Secure by Design alongside Eleanor Fairford and others. I've had some queries about my fruit and veg quote from those that weren't there - so here's an explanation! Doing Cyber Essentials (CE) is like eating your cyber "fruit and veg". We all know we need to eat our veg before we eat our pudding and eat our 5 a day as part of a varied diet. AI and other advanced digital tooling is a bit like your pudding. If you fill up on AI (your delicious pudding) without eating enough fruit and veg (doing CE) you tend to end up rather unhealthy (poor cyber resilience)! I'm also delighted that Eleanor Fairford at UK Ministry of Defence and Emma Philpott FCIIS MBE at IASME announced the creation of the Defence Cyber Certification (DCC). It will provide a scalable assurance mechanism to drive improved resilience across the whole of the defence supply chain. Achieving CE and the new DCC as part of a wider Secure by Design process to ensure organisations retain a risk focus along with compliance, will measurably increase the resilience of the UK Defence sector.

135

8 Comments

Tackling cyber security blind spots is one of the biggest challenges facing healthcare IT teams today. Complex estates, legacy systems and shadow IT make it difficult to see where vulnerabilities lie, let alone fix them. In this article, our Public Sector Director Afshin Attari outlines a practical approach for CISOs to regain control. From mapping your IT estate to applying Zero Trust principles and building a scalable security framework, it's about clarity, not complexity. Read the full piece to see how your organisation can close the gaps and build lasting cyber resilience: https://lnkd.in/eJmZEZ3s #CyberSecurity #HealthcareIT #NHS #SASE #ZeroTrust #DigitalHealth #DataProtection #ITSecurity #CyberResilience

29

📣 We're pleased to share that the UK's Cyber Security Professional Register has now reached 1,000 registrants.   Created by Royal Charter in 2022, the UK Cyber Security Council sets professional and ethical standards for the cyber security community, and is the only body chartered to award professional titles in cyber security.   By becoming professionally registered, individuals demonstrate that their expertise, ethics and experience meet the UK Cyber Security Standard for Professional Competence and Commitment.   📈 This is an important milestone, but it's just the beginning. We'll continue working with partners across the industry to grow, strengthen and empower the UK's cyber security profession.   ➡️ Learn more about the benefits of professional registration at https://lnkd.in/eCZikcJ2   #cybersecurity #cyberresilience #professionalstandards

91

10 Comments