Dave Dhindsa

Jaguar Land Rover hit by major cyber incident — 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻 & 𝘀𝗮𝗹𝗲𝘀 disrupted JLR reported a significant cybersecurity incident that forced shutdowns across retail and production systems while recovery proceeds in a “controlled” manner. Early statements say no evidence of customer data compromise, but operational downtime highlights sector-wide exposure to ransomware/business disruption campaigns. Suppliers should prepare for cascading effects. 🔗 https://lnkd.in/dNuwD2is #Ransomware #Manufacturing #Automotive #OTSecurity #Akamai

3

𝗔𝗗𝗫 𝗩𝗶𝘀𝗶𝗼𝗻 - 𝗥𝗲𝗮𝗹-𝗧𝗶𝗺𝗲 𝗩𝗶𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝘆 𝗶𝗻𝘁𝗼 𝗔𝗜 𝗨𝘀𝗲 𝗮𝗻𝗱 𝗚𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲 𝗦𝗵𝗮𝗱𝗼𝘄 𝗔𝗜 has rapidly become a significant source of data exfiltration,  creating risks around intellectual property loss and regulatory exposure. 𝗔𝗗𝗫 𝗩𝗶𝘀𝗶𝗼𝗻 delivers on-device protection that identifies and prevents  unauthorised data sharing with unapproved AI tools, enabling secure and  compliant use of generative AI across the enterprise. If you’d be interested in a demonstration or a deeper discussion on how this could support your AI governance strategy, I’d be happy to arrange that. https://lnkd.in/eEgZhyWi #BlackFog #ADX #LLM #ArtificialIntelligence #ADXVision

4

Owned by you - and potentially others..? The Co-op has confirmed a major cyber-attack affecting 6.5 million members, with names, addresses, and contact details stolen. CEO Shirine Khoury-Haq expressed devastation over the breach and its impact on both customers and colleagues. What can we learn about this attack? 1️⃣ Cyber resilience is crucial, and should be built into every organisational layer. 2️⃣ Member and employee support post-breach is vital. 3️⃣ Transparency helps rebuild trust. 🔗 Link in the comments! Harry Fredrickson Kelly McCann Lucy Holmes Alice MacLennan KnowBe4 Partners

23

1 Comment

Yet another cyber incident. A question comes to mind of how much visibility the provider(s) had before this happened... A key NHS priority is focusing on proactive not reactive and this can only be done with information. Clearly, in this instance, the information to highlight a potential vulnerability and suggest proactive steps to mitigate that risk was not available. Worth having a look at these two resources as well. The information to be proactive might not have been there but the warning signs certainly were; - https://lnkd.in/eRFy6ECv - https://lnkd.in/epUwtGv2 https://lnkd.in/eg254a-i

8

The UK Cyber Security and Resilience Bill just passed its second reading, and it's about to change everything for GRC teams.   Our CEO Mark Edgeworth in Professional Security Magazine: "This Bill represents the most significant modernisation of UK cyber law in years. It extends responsibility well beyond traditional critical infrastructure, bringing a wider set of digital services, suppliers and delivery models firmly into scope."   The expanded scope makes one thing clear: reporting obligations, incident response readiness and third, party risk oversight can no longer sit on the sidelines.   Want to get ahead of the curve? https://www.hicomply.com #CyberSecurity #GRC #Compliance #ISO27001 #SOC2

25

In recent months, we’ve seen another wave of attacks hit UK organisations—across healthcare, legal, manufacturing and retail. The headlines are becoming routine, but the disruption is anything but. Operational downtime, reputational damage, and financial loss are only part of the impact. For frontline teams, the stress of recovery and the personal toll it takes can be just as severe. It's clear: prevention is no longer enough. Organisations need resilience—the ability to recover fast, avoid paying ransoms, and keep critical operations running even during an active attack. That means rethinking the endpoint. Rethinking recovery. And building layered defenses that assume compromise and are built to bounce back. If your ransomware strategy still starts and ends with "keep it out," it's time to go deeper. #Ransomware #CyberResilience #UKCyber #InfoSec #EndpointSecurity #CyberSecurity

28

The UK Cyber Security & Resilience Bill is set to reshape how organisations protect their data, systems, and customers. Our latest blog breaks down exactly what’s changing—and why now is the time to act. At KH Infosec, we specialise in helping businesses prepare before new legislation becomes a problem. From risk assessments to resilience planning, we make sure you’re compliant, protected, and ahead of emerging threats. If you want clarity on what the Bill means for your organisation—and expert support to get your security where it needs to be—this is for you. Read the blog and discover how KH Infosec can help your business stay ahead, stay secure, and stay resilient.

5

Really exicting news! Fortra has just acquired Zero-Point Security Ltd, founded by Daniel Duggan (aka RastaMouse) - a name most in the red teaming community will already know. This builds on an already strong partnership, and it’s a logical next step. Bringing together world class tools like Cobalt Strike, Outflank, and Core Impact with world class training is exactly where the industry is heading. Zero-Point’s Certified Red Team Ops (CRTO) courses have set a high bar for operator training, and with Daniel now working alongside Fortra's offensive security teams, there’s real potential to push that even further. If you’re curious about what this means in practice or want to learn more, feel free to reach out. Full announcement: https://lnkd.in/drr5CrHC #Fortra #ZeroPoint #CRTO

48

1 Comment

🔍 How well do you really know your third-party risks? Recent incidents have once again highlighted a crucial truth: even the most secure organizations can be compromised through their supply chain. It’s no longer enough to secure your systems — your partners’, vendors’, and suppliers’ security posture directly impacts yours. 💡 Manufacturers (and businesses across industries) must now go beyond surface-level assessments. Are you: Actively evaluating your vendors’ cybersecurity maturity? Setting clear expectations and accountability in your contracts? Continuously monitoring third-party compliance and performance — not just once a year? Cybersecurity is only as strong as the weakest link in your network of partners. The question isn’t if you should implement rigorous vendor risk management — it’s how fast you can make it a standard practice across your supply chain. #CyberSecurity #ThirdPartyRisk #VendorRiskManagement #SupplyChainSecurity #DataProtection #RiskManagement #Manufacturing #Infosec #Compliance #CyberResilience 🔐

2

As cyber incidents continue to intensify across Europe, CrowdStrike is proud to share that our UK incident response services are now assured against the National Cyber Security Centre (NCSC) Cyber Incident Response (CIR) Standard 🏆 This assurance confirms our services have been independently assessed against defined requirements for incident handling, service delivery, and operational rigor. It also reflects our continued investment in the region as we continue strengthening support for organizations before, during, and after an incident. 🔗 Read more:https://lnkd.in/eSSxcSmJ

24

Working in fraud prevention, you get used to seeing new tools pop up. A £7.5 million international cyber fraud scheme has been exposed — and it’s another wake-up call for the power (and necessity) of cross-border collaboration. The core of the operation? Joker OTP — a fraudulent bot platform designed to intercept one-time passwords (OTPs) used in online banking and account verification. Here’s how it worked: ↳ Victims would receive spoofed messages or calls prompting them to reveal authentication codes — the kind of second-step security we all rely on. ↳ The Joker OTP tool automated and scaled these attacks, tricking victims in real time, often while a transaction was in progress. ↳ It’s believed to have been used more than 28,000 times across 13 countries — highlighting just how connected fraud operations have become. This case, led by Cleveland Police’s Cyber Crime Unit, with arrests in both the UK and The Netherlands, is a powerful example of how cybercrime knows no borders — and why collaboration between law enforcement, banks, and cyber units must be just as global. Let’s not underestimate what these tools enable — and the damage they cause. #CyberFraud #OTP #JokerOTP #CyberSecurity #CrossBorderCollaboration #FraudPrevention #ThreatIntel #BehavioralBiometrics #BioCatch

8

If your company's 'ransomware recovery plan' states that no ransomware payment will be made, then its essential you have taken all steps to recover rapidly from an attack. With Halcyon recovery time is measured in hours...not weeks. Waiting, with fingers tightly crossed, is not an option any board should consider. #ransomware #cybersecurity #PlanGTechnology https://lnkd.in/eVRviYpV

11

A cyber attack on Kensington and Chelsea Council has demonstrated the need for public sector organisations to invest in enhanced security infrastructure such as SailPoint. #sailpoint #IGA #Identity Security

8

Happy Pancake Day! 🥞 For many businesses, the thought of moving from cyber non-compliance to being fully compliant feels about as daunting as trying to flip a giant pancake without it landing on the dog. 🐶 (Don't worry, no dogs were harmed in the making of this analogy). The truth is, that gap between knowing you should and actually doing it can seem huge. It's often filled with questions like "Where do I even start?", "What if I get it wrong?", and "Is there enough syrup for this monumental task?" But it doesn't have to be a messy, scary leap of faith! We help simplify that "flip," making cyber compliance achievable, understandable, and dare I say... enjoyable? Think of us as your expert pancake chef, guiding you to a perfect, secure stack. What's the biggest cyber "pancake" you're trying to flip right now? #CyberSecurity #GRC #PancakeDay #ComplianceJourney #SMBsecurity #UKCyber #BusinessChallenges #DigitalSafety #DCcybertech

5

Chris Roberts speaking against a punitive approach via phishing tests, with Avishai Avivi on the CISOnomics podcast. Links in comments👇

The Defence Cyber Certification (DCC) is a comprehensive, organisation-wide cyber security certification for suppliers in the Defence sector. Achieving and maintaining certification demonstrates a supplier’s commitment to cyber resilience and supports the MOD’s goal of strengthening the defence supply chain. At FSP we’re proud to be one of only a handful of organisations accredited to deliver DCC certifications, and we’re already supporting suppliers across the UK in: ·      Understanding the framework and its requirements ·      Assessing readiness and identifying gaps ·      Building clear, achievable roadmaps to certification If you’re part of the defence supply chain and want to learn more about how the DCC will impact your organisation, please reach out. #CyberSecurity #MOD #Defence #DCC #DefenceCyberCertification #FSP #UKDefence #CyberEssentials #SupplyChainSecurity

26

3 Comments

When scrutiny hits, leaders are judged fast. UK organisations are operating under unprecedented pressure - tighter regulation, geopolitical instability, rising cyber risk and real board-level accountability. And when regulators, boards or the public start asking questions, the difference between confidence and crisis is clarity, control and credibility. The hard truth? Most high-profile failures aren’t caused by a lack of investment - they’re exposed by cloud, data and security decisions made in isolation, only revealing their weaknesses when it matters most. Executive Briefing | 14th April | 3.00–3.45pm Join Liam Bennett Deputy CTO at Claranet, for a focused session on how modern platform decisions can quietly increase business risk - and what resilient organisations do differently when pressure is on. He will cover: • How regulatory, geopolitical and cyber pressure is reshaping executive accountability • Why many organisations struggle to evidence control under scrutiny • Where modern platform choices create hidden board-level exposure • How resilient leaders retain clarity and decision-making authority during incidents • What “good” really looks like to regulators, boards and stakeholders Who should attend: CIOs, CTOs and senior leaders accountable for operational resilience, regulatory confidence and organisational credibility. Register here: https://lnkd.in/eMik6vVx #ExecutiveBriefing #OperationalResilience #CyberResilience #AIAndGovernance #DataSovereignty #BoardAccountability #CIO #CTO

7

I’m delighted to welcome two fantastic new additions to the Acumen Cyber team as we continue to scale the business and invest in the next phase of our growth. Firstly, welcome to David Ollerhead, who joins our Senior Leadership Team as Sales Director. David joins us from another UK-based MSSP and brings a wealth of experience in building high-performing sales teams and driving growth in this sector. He will play a key role in helping spearhead Acumen's continued expansion across the UK and beyond. I’m also very pleased to welcome Neil Moorcraft, who joins as Head of Bids & Proposals. Neil brings significant experience in bid management and strategic proposals in the cyber security sector, and will lead the formalisation and evolution of our bid function as we continue to grow our presence across both public and private sector opportunities. Both appointments represent another important step forward for Acumen as we continue building a business centred around exceptional people, outstanding customer outcomes and a modern approach to managed cyber security services. Welcome to the team, David and Neil!

129

2 Comments