Mikey A.

“As quantum technology advances, upgrading our collective security is not just important – it’s essential.” , NCSC Chief Technical Officer Ollie Whitehouse UK's cyber security agency, @National Cyber Security Centre, has issued new guidance to help UK prepare for and protect against threats posed by future developments in #quantum computing (#PQC). The new guidance STRONGLY encourages organisations to begin preparing for the transition NOW to allow for a "smoother, more controlled migration that will reduce the risk of rushed implementations and related security gaps". 📆 It outlines three phases for migration:  ▶️ To 2028 – identify cryptographic services needing upgrades and build a migration plan.  ▶️ From 2028 to 2031 – execute high-priority upgrades and refine plans as PQC evolves.  ▶️ From 2031 to 2035 – complete migration to PQC for all systems, services and products. The good news is that your can start protecting your data today, with the resources available to you. RHEL 10 (and 9.6) is the first enterprise distribution to integrate quantum-resistant algorithms. Speak to your Red Hat account team and/or your partner to build an upgrade plan today to meet the security and government regulations coming to you! Not on RHEL yet? Download #RHEL at no-cost here for dev purposes: https://lnkd.in/dDbX525b

92

The kids aren’t alright, and cybersecurity needs to admit it. Brilliant piece out this week on computer.co.uk from Penny Harwood on the need for unconventional talent in cyber. The data is clear - the average cybercriminal is now just 19 years old. They're curious, creative, fast...and often completely overlooked by traditional recruitment. Chris Wysopal says it best - the next generation of security leaders won’t all come from computer science. Some will come from gaming, others from psychology, some from criminal paths they almost didn’t escape. We see this daily. Talented Gen Z hackers who don’t tick HR’s boxes, but who can think like attackers because they’ve been in the forums, played with exploits, or seen how systems really get broken. Industry needs to stop hiring the same CVs and start building bridges to the next wave of defenders before someone else recruits them first. Let’s stop gatekeeping and start talent-spotting. The Hacking Games You can read the article here: https://lnkd.in/ebYVuzjA

49

1 Comment

Although it's good the UK public sector is taking cyber more seriously.... ...could this spell bad news for some cyber providers serving the sector due to a rise in insourcing? Cyberfort CEO Glen Williams says its latest acquisition - of pen testing specialist The ZDL Group Limited - is partly about diluting its focus on public sector (which generates half its turnover). The move will hand it 200 private sector customers it can cross-sell its broader suite of cyber services into. Read more here (link also in comments) ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ ⭐ https://lnkd.in/ebUbRGJj

48

2 Comments

Fortinet Central Government team led a roundtable event this week at the House of Lords for key UK Government stakeholders, discussing best practice for driving efficiency in digital government. Experts Claire Silcock, Ady Ringrose and Randall Mason shared views with senior leaders and Chris Parker moderated the discussion. #Fortinet continue to lead in providing Fortified Networks for Government as the UK's leading cybersecurity vendor. Learn more at: https://ftnt.net/604045OSO

155

5 Comments

📣 Exciting News! BackupVault is now live on the Everything ICT public sector framework! This Department for Education (DfE) recommended procurement framework enables schools and MATs to: ✅ Simplify procurement of data protection services ✅ Improve compliance with regulatory requirements including Ofsted, NCSC and GDPR ✅ Lower costs while securing critical education data We are continuting to make it easier than ever for the education sector to access reliable and affordable UK-based cloud backup solutions. Find out more: https://lnkd.in/eJnnMccg #BackupVault #EverythingICT #EducationSector #CloudBackup #DataProtection #Schools #MATs #Education #DfE #FutureReady

23

1 Comment

“Yeah, well Cyber Essentials didn’t help Land Rover, did it?” I agree. As an advocate of the Cyber Essentials scheme since 2014, you might wonder why I agree with such a negative train of thought. Well, that’s easy. It’s not the scheme that’s the problem. It’s the interpretation, scope and lack of progression past a self-assessment. JLR’s scope of certification didn’t cover their whole organisation and they limited what was covered by the questions asked in that self assessment. Remember, the clue with Cyber Essentials is in the name - it is merely the essential technical controls an organisation needs to have in place to stop the most basic attacks. The larger the organisation, the more competent and capable they should be in defending against attacks because they should have a more mature approach to securing their network infrastructure. If JLR couldn’t cover the basics across their whole organisation, that’s a problem. A problem that was compounded by the scope of their IT provider’s certification because their scope specifically rules out customer networks. Two large organisations here, struggling to achieve a minimum standard that only covers the bare essentials. And we wonder how it happened? This is something you can help prevent in your supply chain with two questions. If someone isn’t certified to Cyber Essentials, why aren’t they? If someone IS certified to Cyber Essentials but their scope of certification ISN’T “whole organisation”, what are they hiding? Two simple questions that reveal telling answers. Check your suppliers certificates here: https://lnkd.in/eSbzzhNW

137

67 Comments

Japanese brewing giant Asahi Group Holdings has suffered a cyber attack that caused a major systems failure, halting order processing, shipments and customer service operations across Japan. The company confirmed the incident and stated that no personal data leaks have been identified, though investigations are ongoing. European and international operations, including those in the UK, remain unaffected. The attack is believed to be part of a growing wave of denial-of-service (DDoS) incidents targeting large corporations. These attacks overwhelm systems with traffic, causing shutdowns and operational paralysis. To prevent such attacks, measures including DDoS mitigation tools, network traffic monitoring and incident response plans are crucial. Regular system updates, employee training and partnerships with cyber security firms strengthens defences against increasingly sophisticated threats. #cyberattack #asahi #asahibrewing

14