Chinese hackers responsible for two ‘malicious’ cyber campaigns against UK

Chinese state affiliated hackers were responsible for two malicious cyber-attack campaigns targeting UK parliamentarians and democratic institutions, Oliver Dowden told the Commons. The Deputy Prime Minister said that the National Cyber Security Centre (NCSC), part of GCHQ, had identified a Chinese state-affiliated hacking group responsible for infiltrating the IT systems of the UK Electoral Commission… Continue reading Chinese hackers responsible for two ‘malicious’ cyber campaigns against UK

Britain’s democracy under threat from Chinese cyber attackers, government warns

Britain’s democracy is under threat from Chinese cyber attacks that have accessed the details of 40 million UK voters and targeted senior politicians, MPs will be told today. Deputy prime minister Oliver Dowden is due to tell Parliament that Beijing is behind a hacking operation that accessed millions of UK voters’ details from the Electoral… Continue reading Britain’s democracy under threat from Chinese cyber attackers, government warns

Board-level buy-in: preparing cyber defences the right way

The cyber security function isn’t a back office team that is never seen and never heard. To truly protect the company, cyber security touches every corner of the business, and it starts from the top.  At ISACA’s virtual conference on 22 February 2024, I led a session on how CISOs can “attack the board’s mindset”… Continue reading Board-level buy-in: preparing cyber defences the right way

UK’s cyber resilience stagnates as more fall victim to attacks

Three-quarters of medium and large enterprises in the UK, and four-fifths of high-income charities, have experienced some form of cyber security incident in the past 12 months, but improvements to overall cyber resilience appear to be stagnating, with economic headwinds and high inflation leading to less overall investment, the government has warned. In a report… Continue reading UK’s cyber resilience stagnates as more fall victim to attacks

NCSC guidance to help CEOs work through cyber incidents

The UK’s National Cyber Security Centre (NCSC) has published guidance aimed at helping CEOs across the private and public sectors understand how best to manage and respond to a cyber security incident. The guidelines, which have been designed to complement its existing Board Toolkit support package, are intended to serve as a non-technical guide to… Continue reading NCSC guidance to help CEOs work through cyber incidents

Cyber attacks in 2023 develop quicker as average dwell times plummet

The median dwell time – the time in between an attacker accessing their victim’s systems and the attack being detected or executed – has dropped significantly, falling from 10 to eight days between January and July 2023, having fallen by five days from 15 to 10 during 2022 after a sharp rise in 2021.… Continue reading Cyber attacks in 2023 develop quicker as average dwell times plummet

Cyber attack on Aussie energy services firm may hit UK CNI

Operators of critical utility infrastructure across the UK may have been affected by a developing cyber attack on the systems of Energy One, an Australia-based supplier of software and services for the energy sector. The ongoing incident was disclosed via a statement to the Australian Securities Exchange (ASX) on the morning of Monday 21… Continue reading Cyber attack on Aussie energy services firm may hit UK CNI

Cyber Explorers programme reaches 50,000 11-14 year olds in 18 months

The government-backed Cyber Explorers programme has reached 50,000 young people at 2,000 schools around the UK since its launch in February 2022, and ahead of the new school year, the National Cyber Security Centre (NCSC) is urging teachers across the country to sign up to access free resources to help secondary school-aged children build… Continue reading Cyber Explorers programme reaches 50,000 11-14 year olds in 18 months

Top marks for graduates of CIISec vocational cyber course

Amid the annual tradition of A-level results day, the first students to sit a new Extended Project Qualification for young people aged 14 and up looking to start a career in cyber security have also been receiving their grades, with promising results. The first intake to the course comprised a total of 132 students… Continue reading Top marks for graduates of CIISec vocational cyber course

NCSC expands Cyber Incident Response service more widely

The UK’s National Cyber Security Centre (NCSC) has announced an expansion to its Cyber Incident Response (CIR) scheme, introducing a second tier of service providers that will supposedly help more organisations provide incident response service to more victim organisations. The well-established scheme is designed to help organisations experiencing a cyber attack quickly and easily… Continue reading NCSC expands Cyber Incident Response service more widely