Jane Frankland

JANUARY 12, 2025

In this blog, I’m exploring these changes, grouped under key categories that I’ve used in previous years, to help business leaders and cyber risk owners better prepare for the evolving landscape. The emergence of shadow AIunauthorised AI tools used without IT approvalamplifies these vulnerabilities.

Cybersecurity

Security Boulevard

MARCH 20, 2025

As organizations work to establish AI governance frameworks, many are taking a cautious approach, restricting access to certain AI applications as they refine policies around data protection.U.S. Figure 1: Top AI applications by transaction volume Enterprises blocked a large proportion of AI transactions: 59.9%

Social Engineering

Schneier on Security

FEBRUARY 26, 2025

Last month, the UK government demanded that Apple weaken the security of iCloud for users worldwide. But the British law is written in a way that requires Apple to give its government access to anyone, anywhere in the world. Should the UK government persist in its demands, the ramifications will be profound in two ways.

Computers and Electronics

BH Consulting

JULY 8, 2025

We provide a market leading range of information security services focused on cybersecurity, cyber risk management, ISO 27001, and data protection. We are seeking an experienced and business-oriented Senior Cybersecurity Consultant, with a specialisation in Governance, Risk, and Compliance (GRC). Who are we looking for?

Cybersecurity

Centraleyes

MAY 26, 2025

As the regulatory authority for the European Union, EASA sets the standards that govern everything from aircraft design to operational protocols. Regulation Part-IS is the latest initiative designed to create a robust framework that addresses emerging cyber risks threatening the aviation ecosystem. What is EASA?

Cybersecurity

SecureWorld News

MARCH 5, 2025

This article explores how the latest tariffs could reshape cybersecurity for enterprises, cybersecurity vendors, and government agencies. Cybersecurity professionals are already grappling with the risks of supply chain attacks, and these tariffs add another layer of complexity. These tariffs will create real cyber risks.

Cyber Risk

SecureWorld News

MAY 29, 2024

The manufacturing sector faces an increasingly daunting cyber threat landscape that puts production operations, intellectual property, and entire supply chains at risk. Simply checking boxes is no longer sufficient to withstand escalating cyber attacks from criminals, nation-states, and insiders," the paper states.

Manufacturing

The Last Watchdog

AUGUST 30, 2018

As the Industrial Internet of Things continues to transform the global industrial manufacturing and critical infrastructure industries, the threat of aggressive, innovative and dangerous cyber-attacks has become increasingly concerning. Related: The top 7 most worrisome cyber warfare attacks. The role of standards.

Manufacturing

The Last Watchdog

FEBRUARY 21, 2023

Part one of the book catalogues how cyber criminals and US adversaries have taken full advantage of systemic flaws in how we’ve come to defend business and government networks. Today it is the world’s largest manufacturer of telecom equipment, including critical 5-G equipment.

Marketing

The Last Watchdog

FEBRUARY 3, 2020

Buried in the Shamoon code was an image of a burning American flag, intended as an admonishment to the Saudi government for supporting American foreign policy in the Middle East. And hackers linked to the Russian government were reportedly behind the Triton hack of 2017 , as well, as disclosed by security vendor FireEye.

Energy and Utilities

SecureWorld News

OCTOBER 12, 2023

The report analyzes top cyber threats from the second half of 2023 and emerging cybersecurity trends impacting critical industries such as finance, education, manufacturing, and state and local government (SLED). critical infrastructure.

Cyber threats

Centraleyes

SEPTEMBER 10, 2024

What is an OT Cyber Risk Framework? An OT Cyber Risk Framework is a structured approach designed to identify, assess, manage, and mitigate cybersecurity risks in Operational Technology environments. Assessing the potential impact of cyber threats on critical industrial systems.

Cyber Risk

SC Magazine

MAY 28, 2021

The shutdown of operations of Colonial Pipeline captured the attention of the security community, government and consumers that suddenly couldn’t fill their gas tanks. That then begs the question of government’s role. Colonial Pipeline also heightened discussion about the influence of ransomware attacks on cyber insurance.

Insurance

NetSpi Executives

OCTOBER 17, 2023

Section 3305 mandates that medical device manufacturers must submit comprehensive plans to the FDA, focusing on monitoring, identifying, and proactively addressing medical device vulnerabilities. Moreover, manufacturers must establish and maintain processes to ensure that the device and associated systems are sufficiently cyber-secure.

Healthcare

The Security Ledger

MAY 3, 2022

The post Feel Good Ukraine Tractor Story Highlights Ag Cyber Risk appeared first on The Security Ledger with Paul F. Related Stories DEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber Risk Episode 235: Justine Bone of MedSec on Healthcare Insecurity Episode 234: Rep.

Cyber Risk

Security Affairs

JULY 20, 2022

” The MiCODUS MV720 GPS Tracker is a popular vehicle GPS tracker manufactured in China, which is used by consumers for theft protection and location management, and by organizations for vehicle fleet management. The analysis of the sector usage on a global scale revealed significant differences by continent in the typical user profile.

Manufacturing

Security Boulevard

OCTOBER 27, 2022

Key Infrastructure and Critical Vulnerabilities: Attack Against Tata Power Highlights Cyber Risk to India’s Growing and Increasingly Connected Population. 8 ) Deadbolt first targeted storage devices manufactured by Taiwan-based company QNAP, for which patches have been available since early this year. (

Cyber Risk

Thales Cloud Protection & Licensing

DECEMBER 16, 2021

The common denominator across all countries is that these criminal activities are mostly targeting the sectors of healthcare, finance, energy, education and government. A report jointly published by France and Germany states that there are two major types of threat actors in the current cyber-threat landscape.

Social Engineering

SC Magazine

APRIL 15, 2021

Respondents, 77% of whom were located in North America, represent a cross-section of the profession, including large (49%), medium (29%) and small companies (23%), and a broad selection of industries, such as IT/technology, services, financial services, education, government, manufacturing and healthcare.

Financial Services

SecureWorld News

AUGUST 6, 2024

As governments push for more renewable energy projects, the industry is poised for rapid expansion. This growth, while beneficial for environmental sustainability, also increases the attack surface for cyber threats. Register here to attend for free and earn 6 CPE credits.

Cybersecurity

IT Security Guru

NOVEMBER 11, 2021

It’s mostly problems from the IT world, says Andy Norton, European Cyber Risk Officer at Armis. The Guru decided to ask Armis’ European cyber risk officer, Andy Norton for his thoughts. What keeps OT security specialists up at night? Vulnerabilities, especially in IT. SoC team, what SoC team?

Cybersecurity

The Security Ledger

OCTOBER 23, 2018

In part II, we invite Chip Block of the firm Evolver back into the studio to talk about the challenge that “converged” cyber physical systems pose to insurance carriers as they try to wrap their arms around their exposure to cyber risk. One way insurance companies are responding is by improving their modeling of cyber risk.

Insurance

Security Boulevard

OCTOBER 25, 2024

1 - CSA: How to prevent “shadow AI” As organizations scale up their AI adoption, they must closely track their AI assets to secure them and mitigate their cyber risk. Cybersecurity and Infrastructure Security Agency (CISA), the FBI and the Australian Cyber Security Centre. So how do you identify, manage and prevent shadow AI?

Software

SC Magazine

MAY 1, 2021

Below is our esteemed panel of SC Awards judges, contributing from health care, engineering, finance, education, manufacturing, nonprofit and consulting, among others. Cedric Leighton is founder and president of Cedric Leighton Associates, a strategic risk and leadership management consultancy.

Computers and Electronics

McAfee

NOVEMBER 3, 2020

Her work centered on helping aerospace manufacturers manage the convergence of cyber risk across their increasingly complex business ecosystem, including IT, OT and connected products. During her first few years at Booz Allen, she supported technology, innovation and risk analysis initiatives across U.S. Deana Elizondo.

Cybersecurity

eSecurity Planet

SEPTEMBER 1, 2021

Consumers and organizations are enthused about the operational benefits of more robust mobile connectivity, but the shift to 5G networks doesn’t come without risks. Service providers and 5G-enabled device manufacturers both have critical roles to play in the success and sustainability of this wireless network rollout.

Risk

SecureWorld News

MAY 16, 2022

It helps members address risk, including cyber risk. Don't forget to register for the upcoming virtual SecureWorld Government conference on June 23 to hear real-world experiences and practical advice from the Secret Service, CISA, and other government agencies. Impressive numbers, certainly.

Financial Services

SecureWorld News

APRIL 17, 2023

By the way, Sean Scranton will be presenting on "Covering Your Cyber Assets" at the SecureWorld Philadelphia conference on April 19-20. Can companies live without cyber insurance? that may be included as part of the cyber insurance coverage terms. Theresa Le, Chief Claims Officer, Cowbell: "Cyber insurance is highly recommended.

Cyber Insurance

Spinone

NOVEMBER 22, 2018

We covered the cybersecurity landscape including the most high-profile cyber crime statistics: number of attacks, crime targets, cybersecurity spendings, and cyber risk management. Cyber Risk Management It’s important to recognize that what is commonly called cybersecurity is really cyber risk managemen t.

Cybersecurity

SC Magazine

JULY 13, 2021

The data supports a June Avanan report , which confirmed health care has been among the most targeted with phishing attacks during the first half of 2021, alongside the IT and manufacturing industries. The Government Accountability Office warned all private sector entities of this insurance shift in May.

Data breaches

Security Boulevard

SEPTEMBER 20, 2024

government found most of the networks could be breached using ordinary, well-known attack methods. That’s according to “ CISA Analysis: Fiscal Year 2023 Risk and Vulnerability Assessments, ” a report about the risk and vulnerability assessments (RVAs) conducted by the Cybersecurity and Infrastructure Security Agency (CISA) and the U.S.

IoT

The Security Ledger

MAY 8, 2022

A cyber attack has disrupted the operations of AGCO/Fendt, a major manufacturer of agricultural equipment, the company has acknowledged. The post Cyber Attack Halts Production at Ag Equipment Maker AGCO Fendt appeared first on The Security Ledger with Paul F. Cyber attacks on agriculture on the rise.

Cyber Attacks

The Security Ledger

NOVEMBER 4, 2020

The post Episode 193: Repair, Cyber and Your Car with Assaf Harel of Karamba Security appeared first on The Security Ledger. Are Local Governments Ready To Turn Back Election Hacks? Report: Hacking Risk for Connected Vehicles Shows Significant Decline. Related Stories Episode 192: It’s Showtime!

Wireless

BH Consulting

JULY 13, 2023

The 51-page report goes into detail on the threat landscape, risks to key sectors and supply chain risks. The Irish Independent reported that the Government also plans to set up a national anti-ransomware organisation. Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants.

Cyber Risk

Thales Cloud Protection & Licensing

AUGUST 16, 2018

On May 16, the Department of Homeland Security (DHS) released a new cybersecurity strategy to keep pace with the evolving cyber risk landscape. In the past, most strategies from the government have been fairly heavily focused on networking – connecting devices and ensuring access to certain parts of the world.

Cybersecurity

Thales Cloud Protection & Licensing

APRIL 29, 2024

EU Cyber Resilience Act The Cyber Resilience Act establishes a groundbreaking framework to ensure that products with digital elements, both hardware and software, enter the European market with strong cybersecurity safeguards. It emphasizes outcome-driven risk management and now expands its core functions to include 'Governance.'

Risk

Security Boulevard

APRIL 29, 2024

EU Cyber Resilience Act The Cyber Resilience Act establishes a groundbreaking framework to ensure that products with digital elements, both hardware and software, enter the European market with strong cybersecurity safeguards. It emphasizes outcome-driven risk management and now expands its core functions to include 'Governance.'

Risk