Gabriela Guiu-Sorsa

There is some very good information provided for small business in this document. I recomended a read if you are a sole trader or other small business owner. if you know anyone that fits that description please encourage them to seek this document out.

11

📢 Exciting Announcement! 🔒 Seminar on Information Security Standards and Operations 🏫 Venue: Whitecliffe Wellington Campus - (Level-3 Ranchhode Tower, Lambton Quay Wellington, New Zealand) 📅 Date: 11-05-2024 (Saturday) 🕥 Time: 10:30 AM Join me for a comprehensive seminar delving into the realms of Information Security Standards and Operations. We'll explore the various phases of planning, designing, and implementing cyber defense policies tailored specifically for financial organizations. In this era of #AI & #cyberSecurity understanding both internal and external threats is paramount. Let's navigate through strategies to safeguard our organizations effectively. Looking forward to engaging discussions and valuable insights! #Standards #Policies #Assurance #Compliance #Governance #RiskAssessment #RiskManagement #Defense #CyberFrameWork #Ransom

40

8 Comments

Strengthening Cyber Security Awareness: Insights from Recent Arrests Linked to the LabHost Phishing Scam I just read Niki Burnside's (ABC News) article detailing the arrest of 37 individuals, including five Australians, in connection with a global phishing scam. The scam, orchestrated through the platform LabHost, aimed to trick victims into revealing sensitive information such as online banking credentials, credit card details, and passwords. Among the victims were a staggering 94,000 Australians, emphasising the widespread impact of such malicious activities. The article revealed the depth and breadth of this scam, highlighting how it involved more than 170 fraudulent websites impersonating reputable banks, government entities, and major organisations. Victims were lured into clicking on links in texts and emails, leading them to these fraudulent sites where their sensitive information was harvested by cybercriminals. This sophisticated operation not only targeted Australians but also had a global reach, involving 10,000 cybercriminals and impacting tens of thousands of individuals worldwide. As we reflect on this incident, it becomes evident that cyber security awareness training is not just a necessity but a proactive measure against evolving cyber threats. At PhishNet, our cyber security awareness training platform is designed to empower individuals and organisations with the knowledge and skills to recognise and prevent everyday scams and cyber threats. If you're interested in learning more, please don't hesitate to reach out. We're here to empower you with knowledge and strengthen your defences against cyber threats. #PhishingScam #CyberAwareness #PhishNet

5

1 Comment

On Wednesday this week, myself and David Z. are delivering a #MISP workshop at #Auscert2024 - MISP Teething, Tricks, Tips and Traps. A comprehensive crash course on how to effectively use MISP for cyber threat intelligence. Cosive staff have served as MISP subject matter experts on major MISP projects including the CTIS initiative spearheaded by the ACSC. We cover not only the basics, but also pass on our experience of troubleshooting, and pitfalls to look out for: * What is MISP and some of the concepts. * Setting up a MISP instance and considerations * Getting started with consuming threat intel with MISP * Managing and maintaining MISP * Sharing with MISP * MISP integrations and automations We cover everything for someone to get started with their own MISP instance and understand the terminology and skip some of the usual mistakes that people make with MISP. If you are heading up and haven't booked in yet, you still can, we have a BIG room (70 pax i think), and there is still a bit of space. If you have registered, send me a DM and I'll get you an invite to discord where we will have some discussions and handouts etc. https://lnkd.in/gifDhb8Q

30

Supporting Career Villages at Conferences in 2024! I am organising multiple career villages at conferences in Australia, BSides Canberra, BSides Melbourne, and Australian Information Security Association (AISA) CyberCon (Melbourne) this year. I am looking for industry professionals who want to share their knowledge, experience, and advice with others. Ideas for talks: 👉 Breaking down what you do in your job. 👉 Share your unusual journey into the industry. (help inspire others) 👉 Hiring managers advising on what you look out for when hiring. 👉 CISO sharing advice for aspiring CISOs. I am looking for people to join in on some panel sessions: 👉 Certifications 👉 Neurodiversity in cybersecurity 👉 Student to cybersecurity professional We will also seek volunteers to do resume reviews/ mock interviews. There are formal CFPs for BSides Canberra and BSides Melbourne, which you will need to complete, but if you're interested in helping out and don't know where to start/ want to register your interest, fill out the Google Form in the comments, and I can work with you on your submission. We haven't seen much in the way of gender diversity in submissions so far. It sounds corny, but be the change you want to see.

81

13 Comments

⚠ Rethinking Readiness ~ How Australia Must Shift from Reactive to Proactive Cyber Security Measures As I've been saying for years, this responsibility cannot be handled by a single individual, department, or business... it requires a whole 'Team Australia' approach, with us all working together to crack this nut! Traversing the delicate balance between crisis management and preparedness in cyber security has never been more crucial! However, and as articulated by Tom Burton in the The Australian Financial Review, there are significant challenges within the Australian Department of Home Affairs which underscore a need for a shift towards proactive planning for cyber and border security threats. 🔗 Full article here - https://lnkd.in/gHK_JkAH He states that despite the department’s pivotal role, there’s a noticeable focus on reactive measures, highlighting a gap in strategic foresight, a sentiment that echoes across all sectors needing robust cyber security frameworks. This calls for a reimagined approach that not only responds to crises but anticipates and mitigates them before they escalate. At the MurFin Group and via Cyber Security Certification Australia (CSCAU), we advocate for strengthening Australia's cyber resilience by proactively establishing standards like SMB1001, aimed at fortifying businesses against emerging threats. Now, more than ever, we all need to assist departments like Home Affairs, which are critical to our national security, upgrade their/our cyber security measures through strategic foresight and collaborative leadership. Let’s collaborate and innovate to turn today’s challenges into tomorrow’s opportunities for a secure and more prosperous Australia. 🇦🇺 #CyberSecurity #Innovation #NationalSecurity #DigitalResilience

40

4 Comments

🛡Call to Action ~ Forming 'Team Australia' for Cyber Security Awareness Support! The Australian Government has announced a significant grant opportunity under the Cyber Security Program – Cyber Awareness Support for Vulnerable Groups. This initiative aims to uplift cyber security literacy and outreach across the nation, focusing on vulnerable communities. Grant Details • Grant ID: GO6970 • Agency: Australian Department of Home Affairs • Close Date: 11 July 2024 As we prepare to bid for this grant, I propose a unified 'Team Australia' approach. Instead of the usual multiple separate applications, let’s bring together the best minds and organisations to form one or two strong, cohesive proposals. This will ensure we leverage the best expertise and create a comprehensive solution to enhance cyber security awareness for vulnerable groups. Who We Need • Project Managers • Cyber Security Education Specialists • Community Engagement Experts • Policy & Strategy Advisors • Technical Cyber Security Experts • Evaluation Analysts Our Goals • Build a nationwide baseline cyber security capability. • Reduce the economic and social impact of cybercrime. • Increase the outreach and impact of the Act Now, Stay Secure campaign. Join Us If you have the expertise, passion and commitment to make a significant impact, we want to hear from you. Pop yourself, or suggested people and bodies in the comments, or DM me. Let’s collaborate to form a powerhouse team and develop a winning proposal. Together, we can ensure the best cyber security practices reach every corner of our community. #CyberSecurity #TeamAustralia #CyberAwareness #VulnerableGroups #CyberSafety #Australia #GrantOpportunity

149

95 Comments

Please join me for a keynote session on "Ransomware Resilience and Lessons Learned from Recent Attacks in Victoria." In this session, we'll delve into crucial topics that affect us all: - Why Ransomware is Still a Threat: Understanding the ongoing risks. - Lessons from Recent Attacks: What we can learn from the past. - Improving Our Response: Tips for better handling future breaches. Let's come together to discuss how we can enhance our cyber resilience and safeguard our digital assets. I look forward to your participation and insightful discussions! #Security #Ransomware #CyberResilience #Victoria #Cybersecurity #KeynoteSpeaker

166

1 Comment

Another Australian business affected through a 3rd party cyber incident, though in this article great pains are taken to explain that it is not their own systems but rather a 3rd party, yet who owns the data that has been exfiltrated and is now showing up on third party sites? Likening this to a personal situation, if I have household items and valuables stored at a storage facility, I will be damned certain that the storage facility is fully secure and I will expect them through the T&Cs of our agreement to have security in place. Always know what data you are sharing with your third party providers, in this case it would appear to be an unacceptable type of data (sensitive information) without sufficient security of that data, if it did need to be shared with this 3rd party provider. Data that must be shared with a third party, must be: - As little as possible to provide the service - For as short a time as possible to provide the service - At least as securely as your data security policies Thanks Brandon Dunlop for sharing https://lnkd.in/ggurmxhs

11

5 Comments

There are three new mandatory Directions under the PSPF issued on 5 July 2024: 001-2024. Managing Foreign Ownership, Control or Influence Risks in Technology Assets - to identify and manage risks related to the procurement and maintenance of technology assets 002-2024. Technology Assets Stocktake - for Internet-facing systems and services 003-2024. Supporting Visability of the Cyber Threat - compulsory participation in the ASD’s Cyber Security Partnership Program I can only find one other previous Direction (001-2023), on the TikTok application, issued in April 2023. Although Directions do not change PSPF policy, they are compulsory for a Government entities accountable authority to adhere to. #PSPF #ASD #Cybersecurity

29

6 Comments

Want to change the inadequacy of you cybersecurity efforts? Have you considered Prevent & Protect technology! If you don’t know what Prevent & Protect can do for your organisation - you’re welcome to reach out.

5

2 Comments

The Australian Signals Directorate’s (#ASD) Australian Cyber Security Centre (#ACSC), has just released an advisory report on #APT40 activity, including #IOC and #TTP and mitigation strategies. APT40 is a Chinese threat group responsible for many #cyberespionage campaigns in the region and globally. This is an important read if you work in #cybersecurity and #DFIR. #infosec #CISO #malware #threatintelligence https://lnkd.in/gvCFpM5R

61

Do we not take Cyber Security seriously? 🤔 I can vouch for the fact that more companies seem to be aware of the need to be Cyber Secure. Whether this is due to new regulations or the ever growing threat potential looming - i don't know. Do you think Cyber Security is taken seriously?.... #cybersecurity #InformationSecurity #DataProtection #ImHiring #Takenseriously

15

10 Comments

Reposting this for broader coverage, if you have young folks of High School age, or know of some that are interested in Cybersecurity here is a great opportunity to get more of an idea of what this might look/feel like. Please reshare with others

17

CISA and Partners join ASD’S ACSC to Release Advisory on PRC State-Sponsored Group, APT 40: CISA has collaborated with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) to release an advisory, People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action outlining a PRC state-sponsored cyber group’s activity. The following organizations also collaborated with ASD's ACSC on the guidance: * The National Security Agency (NSA); * The Federal Bureau of Investigation (FBI); * The United Kingdom’s National Cyber Security Centre (NCSC-UK); * The Canadian Centre for Cyber Security (CCCS); * The New Zealand National Cyber Security Centre (NCSC-NZ); * The German Federal Intelligence Service (BND) and Federal Office for the Protection of the Constitution (BfV); * The Republic of Korea’s National Intelligence Service (NIS) and NIS’ National Cyber Security Center (NCSC); and * Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and National Policy Agency (NPA). The advisory is based on current ACSC-led incident response investigations and shared understanding of a PRC state-sponsored cyber group, APT40—also known as Kryptonite Panda, GINGHAM TYPHOON, Leviathan and Bronze Mohawk in industry reporting. APT 40 has previously targeted organizations in various countries, including Australia and the United States. Notably, APT 40 possesses the ability to quickly transform and adapt vulnerability proofs of concept (POCs) for targeting, reconnaissance, and exploitation operations. APT 40 identifies new exploits within widely used public software such as Log4J, Atlassian Confluence and Microsoft Exchange to target the infrastructure of the associated vulnerability. CISA urges all organizations and software manufacturers to review the advisory to help identify, prevent, and remediate APT 40 intrusions. Software vendors are also urged to incorporate Secure by Design principles into their practices to limit the impact of threat actor techniques and to strengthen the security posture of their products for their customers. For more information on PRC state-sponsored threat actor activity, see CISA’s People's Republic of China Cyber Threat. To learn more about secure by design principles and practices, visit CISA’s Secure by Design webpage. https://lnkd.in/gpC2D65p

2

The Australian Signals Directorate has released a detailed advisory regarding APT40 (aka Leviathan, Kryptonite Panda, TEMP.Periscope, Bronze Mohawk) who has been the focus of several previous advisories and investigations. The title of the report, "APT40 Advisory: PRC MSS tradecraft in action," leaves no doubt that the Chinese Communist Party is being called out as the attacker. (MITRE refers to this team as Leviathan or G0065, see: https://lnkd.in/eVsbuA6h ) Australian Cyber Security Centre advisory: https://lnkd.in/eT2375Dh They are joined in the advisory by the US (CISA, NSA, FBI), the UK (National Cyber Security Centre/GCHQ), the Canadians (Candian Centre for Cyber Security), the Germans (Bundesnachrichtendienst / Bundesamt fur Verfassungsschutz), the Koreans (National Intelligence Servie and the National Cyber Security Center) and the Japanese (National Police Agency.) CISA did a deep-dive on APT40 when four of their members were indicted by the FBI back in 2021: ZHU Yunmin 朱允敏 (STC Codes: 2612/0336/2404) Alias: Zhu Rong WU Shurong 吴淑荣 (STC Codes: 0702/3219/2837) Aliases: goodperson, ha0r3n, Shi Lei DING Xiaoyang 丁晓阳 (STC Codes: 0002/2556/7122) Aliases: Ding Hao, Manager Chen CHENG Qingmin 程庆民 (STC Codes: 4453/1987/3046) Alias: Manager Cheng CISA's 2021 report, "Tactics, Techniques and Procedures of Indicted APT40 Actors Associated with China's MSS Hainan State Security Department," is here: https://lnkd.in/ezRtCWSy The Indictment against the four, with great details about their front company, Hainan Xiandun Technology Development, goes into great details about the types of intellectual property and confidential business information the team had targeted up until that point. They attacked businesses in the USA, Austria, Cambodia, Canada, Germany, Indonesia, Malaysia, Norway, Saudi Arabia, South Africa, Switzerland, and the UK. A copy of the indictment can be found here: https://lnkd.in/ec-773ZT (Although we reported it at the time and since, both to GitHub, Microsoft Security, and the FBI Cyber Division, Wu Shurong's Github repository is still online, showing that he was a fan of Metasploit: https://lnkd.in/e8Np4hnF ) CISA, the Cybersecurity & Infrastructure Security Agency, has a great resource of China-as-cyber-aggressor resources in their index of "China State-Sponsored Cyber Threat: Advisories" (22 advisories since 2017) which can be found here: https://lnkd.in/enm3yrZ9 (A similar resource exists for Russian state-sponsored cyber attack advisories: https://lnkd.in/enm3yrZ9 ) #China #APT40 #HainanXiandun

11

We really need to implement these action plans. As we move towards a cashless society, there is not enough awareness among citizens about how to avoid scams by unethical individuals in the cyber world. Australia also has a history of data breaches and scams. I meet many citizens daily regarding cyber awareness, and believe me, a lot of data has already been sold to telemarketing companies, which use it to sell various products under government rebate programs like the VEU Program, Solar Victoria, and the ESC Program. Every household is tired of these sales calls. One reason the ESC has banned calls under the VEU from May 1st is because of this, but it was already too late. I believe there is still a gap in implementing these measures at the root level. But glad to see we are making progress day by day. #cybersecurity #naeemtufail #australia

1

🚨 Urgent Call for Enhanced Cyber Security in Government Entities 🚨 A recent national audit has spotlighted significant gaps in cyber security protocols within key Australian government entities. Whilst Australian Government entities are expected to be ‘cyber exemplars’, as they receive, process and store some of Australia’s most sensitive data to support the delivery of essential public services, 31 per cent of cyber security incidents reported to the ASD in 2022-23 were originated by government entities. The Australian National Audit Office report revealed a need for better management and response strategies to cyber incidents, affecting both business continuity and data protection. #CyberSecurity #Governance #PublicSector #riskmanagement

12

🔵 Some great tips from King & Wood Mallesons on managing and preparing for a cybersecurity breach across APAC! 🔵 On the technical side I would adopt the boy scout motto of "Be Prepared" and ensure you have: 🔷 Ensure that timely backups are available, that your backup and disaster recovery drills are well tested, and that you know what to do at a moment's notice. Thanks for sharing Cheng Lim Nicola Charlston Amanda Lees Check out the main article here 👇 #databreach #cybersecurity #ransomware

6