Luís Martins

Suggested reading of Security Library (Biblioteca de Segurança): Securing Critical Infrastructure. Check in: https://lnkd.in/dj3XN5Nd Download 24p. Security Library has the largest collection in the world about risk management, corporate security, cybersecurity, business continuity, etc. There are already over 3500 publications | Content in four languages: Portuguese, Spanish, English and French. Sinopse: Governments are having to work out how to protect their critical assets. Some assets are managed by themselves, and some by the private sector, but all fall under the state’s responsibility to provide services and protect its citizens. Which is why we have seen governments in recent years developing and enforcing security regulation over critical infrastructure. A critical infrastructure sector can be described as one whose assets, systems, and networks, whether physical or virtual, are considered so vital to their country that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof. As more critical infrastructure is digitalised to respond to the increasing needs of society, the attack surface increases – and with it, the prospect of life-threatening disruption. This is a conundrum that is further exacerbated by the fact that Operations Technology (OT) often exists outside of Information Technology (IT), with one being more concerned about productivity and efficiency, versus the other whose priority is cybersecurity. Organisations understand the price of not complying with current regulations, but the cybersecurity impact can be even greater if an organisation is hit by hacking activity, ransomware, or stealing their “Crown Jewels”. Ransomware attacks have targeted everything from private businesses to the government to hospitals and health care systems. The latter are especially attractive targets, given how urgent it is to get their systems back up as soon as possible. #bibliotecadeseguranca #livrosdeseguranca #segurancacorporativa

7

3 comentários

Suggested reading of Security Library (Biblioteca de Segurança): Corporate Risk and Governance. Check in: https://lnkd.in/dsTTjQth Security Library has the largest collection in the world about risk management, corporate security, cybersecurity, business continuity, etc. There are already over 3500 publications | Content in four languages: Portuguese, Spanish, English and French. Sinopse: Corporate Risk and Governance addresses corporate risk management and governance requirements affecting large organizations in all industry sectors and countries. The book strongly advocates implementation of Corporate Governance Codes, ISO 31000 Risk Management, ISO 22301 Business Continuity Management and PAS 200 Crisis Management but warns against treating any standard or model slavishly, as if it can offer easy salvation or a simple route to a risk nirvana. Alan Waring challenges many hallowed beliefs, attitudes and practices that continue to hamper the delivery of effective Enterprise Risk Management (ERM) and thereby good governance. Those boardroom and corporate cultures that are complacent about risk exposures and risk management or, worse, encourage ’chancers’ and a ’what can we get away with’ attitude, are examined in depth along with what is required to embed a culture of responsible risk-taking. Some 75 cases from around the world provide graphic examples and lessons to be learned. Although the text includes some summary practical guidance, this book is designed primarily as a thinking aid rather than a risk management cookbook. It is something to encourage better informed risk-decision making; a more informed view of enterprise risk exposures, control and mitigation issues and an awareness of boardroom and corporate culture issues and their impact on effective ERM. #bibliotecadeseguranca #livrosdeseguranca #segurancacorporativa

7

This special compendium of Wilson Mendes' technical articles will take you on a fascinating journey through the complexities of cybersecurity, and information protection. https://lnkd.in/dMYdFD2U #infosec #cybersecurity #pentest #pentesting #hacking #hackers #windows

1

Suggested reading of Security Library (Biblioteca de Segurança): Security Risk Management. Check in: https://lnkd.in/d7sX4GXA Security Library has the largest collection in the world about risk management, corporate security, cybersecurity, business continuity, etc. There are already over 3500 publications | Content in four languages: Portuguese, Spanish, English and French. Sinopse: The importance of businesses being ‘operationally resilient’ is becoming increasingly important, and a driving force behind whether an organization can ensure that its valuable business operations can ‘bounce back’ from or manage to evade impactful occurrences is its security risk management capabilities. In this book, we change the perspective on an organization’s operational resilience capabilities so that it shifts from being a reactive (tick box) approach to being proactive. The perspectives of every chapter in this book focus on risk profiles and how your business can reduce these profiles using effective mitigation measures. #bibliotecadeseguranca #livrosdeseguranca #segurancacorporativa

6

Suggested reading of Security Library (Biblioteca de Segurança): A Guide for Anti-Corruption Risk Assessment - United Nations Global Compact Office. Check in: https://lnkd.in/dy7KArDi Download 74p. Security Library has the largest collection in the world about risk management, corporate security, cybersecurity, business continuity, etc. There are already over 3500 publications | Content in four languages: Portuguese, Spanish, English and French. Sinopse: The promulgation of regulatory guidance on the importance of an effective anti-corruption compliance programme has been steady and significant over the last few years, and has garnered media attention given the size of the fines some enterprises have paid. That media attention has, in turn, led to increased focus from management, board members and investors alike on corruption-related risk’s impact on stock value, company reputation, employee morale, and the people of the impacted countries. Effective assessment and mitigation of an enterprise’s corruption risk has been an element of many recent settlements with regulatory agencies. It is highlighted in both the OECD’s Good Practice Guidance on Internal Controls, Ethics and Compliance, and the Guidance issued to accompany the UK Bribery Act. It is also a critical element of the UN Convention against Corruption, including the 10th Principle of the UN Global Compact. The need for risk assessment and the approach outlined in this document is consistent with the “assess” step of the UN Global Compact Management Model framework. This step allows an enterprise to identify risks that can affect its performance and reputation from nonalignment with the 10 Principles of the Global Compact. Increasingly, companies across the world receive more lenient treatment in bribery prosecutions as an affirmative defense for the quality of their anti-corruption programmes in the event of employee misconduct. One key component of an effective programme is the assessment of the anti-corruption risk facing a given enterprise. Though much of the available regulatory guidance is instructive and highlights the importance of effective risk assessment, it fails to provide a “how-to” of such an assessment. #bibliotecadeseguranca #livrosdeseguranca #segurancacorporativa

9

European Cyber Resilience in Focus 🛡️ In the latest opinion piece featured in CNN Portugal, "Towards a European Cybersecurity Ecosystem", our CEO Jorge Monteiro, delves into the complexities of Europe's cybersecurity scenario. As he highlights, cybersecurity goes beyond technological intricacies or legal frameworks; it's about adopting a 𝗽𝗿𝗮𝗴𝗺𝗮𝘁𝗶𝗰 𝗮𝗽𝗽𝗿𝗼𝗮𝗰𝗵 amidst evolving geopolitical challenges. With cyber threats evolving at an unprecedented pace, he emphasizes the paramount importance of agility in cybersecurity strategies. Read the full article for more insights into Europe's cybersecurity challenges and the 𝗶𝗺𝗽𝗲𝗿𝗮𝘁𝗶𝘃𝗲 𝗳𝗼𝗿 𝘀𝘄𝗶𝗳𝘁, 𝗱𝗲𝗰𝗶𝘀𝗶𝘃𝗲 𝗮𝗰𝘁𝗶𝗼𝗻 https://lnkd.in/d3p9VsgK #cybersecurity #ethiack #EuropeanCybersecurityAct

16

Want to learn more about the Technical Challenges of Security Scanning in CI/CD with our CTO Tiago Mendo? Then, join us tomorrow for the 7th OWASP Lisboa Meetup, at Springer Nature Group from 18:00. Tiago will give practical #tips to start implementing #security in CI/CD pipelines, and propose solutions for different teams' maturity levels. We know we may sound biased, but that is a very interesting topic to listen to. There are still some spots left (about 20), and one of them could be yours. Sign up here 👉 https://lnkd.in/dUh7gv79 Oh, and feel free to go say "hi" to Tiago tomorrow and ask him about Probely Discovey. You won't regret it. 😉 #Probely #DAST #AppSec #Cybersecurity #Discovery #OWASP #MeetUp #Lisboa

15

OWASP Global AppSec Lisbon 2024 registration is still open! Featuring a diverse selection of training sessions & a two-day conference designed for appsec professionals! Privacy is a new stream of application security. If you're thinking of acquiring a new skill or shaking up your job, register for this training with Kim Wuyts and Avi Douglen to see what it is all about. Link to register ⬇️ https://lnkd.in/e9k842GV #appsec #AI #cybersecurity #lisbon #privacy

8

This special compendium of Wilson Mendes' latest technical articles will take you on a fascinating journey through the complexities of cybersecurity, etc. https://lnkd.in/dMYdFD2U #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #opensource #windows

1

📃 Read the latest #OSM blogpost by Pedro Escaleira (Instituto de Telecomunicações) on CVE-2022-35503 disclosure for Remote Code Execution in LCM/N2VC. The vulnerability was analyzed during OSM#15 Hackfest and the patch, which will prevent the injection of malicious code by an attacker, was developed by Daniel Arndt (Canonical). Congratulations and big thanks to him! The patches, which include changes in NBI and N2VC, have been delivered in OSM Release FIFTEEN and backported to Release FOURTEEN LTS and Release TWELVE LTS. https://lnkd.in/eZSfeSJy

23

⭐️ Nearsoft Implements CoPS on the Digital Channels Platform in Portugal 🚀 Nearsoft is pleased to announce that the financial institutions in Portugal, using the Nearsoft Digital Channels Platform, now have CoPS (Confirmation of Payee Single) in production. This implementation marks a significant step in improving the security and efficiency of financial transactions. ◦ What is CoPS? CoPS (Confirmation of Payee Single) is a feature that allows the verification of the beneficiary's identity before completing a transaction. This verification is essential to prevent fraud, errors, and to increase trust in digital payments. For more information check: https://lnkd.in/dz8QwnjJ ◦ Benefits of CoPS for Financial Institutions: Enhanced Security: By verifying the beneficiary's identity beforehand, transactions are more secure, significantly reducing the risk of fraud. Transaction Accuracy: Confirming the identity helps ensure that payments are directed to the correct beneficiaries, minimizing errors. Improved User Experience: Users can make payments with greater confidence, knowing they are interacting with verified recipients. ◦ How Does CoPS Work? When initiating a payment operation, the platform uses CoPS to verify the beneficiary's identity, confirming that the provided data matches the account holder's information. This process is quick and integrated into the platform's user experience, ensuring a seamless verification. ◦ Next Steps: Nearsoft will continue to work closely with financial institutions to ensure that all functionalities of the digital channels platform are fully utilized, providing ongoing training and support for the integration of CoPS into their daily operations. ◦ Acknowledgment: We appreciate the trust placed in Nearsoft and look forward to continuing to provide high-quality services that drive the success of financial institutions. For more information about CoPS and other platform features, please visit our website or contact our customer support. #Nearsoft #DigitalBanking #Banking #CoP #CoPS #OnlineBanking #MobileBanking #Fintech #Disruption #BeBrave

39

3 comentários

#CL0P ransomware strikes again, this time targeting Cooperativa de Crédito y Vivienda Unicred Limitada. Here's what you need to know: 1. The notorious ransomware group alleges to have breached Unicred's security, exfiltrating sensitive financial documents. 2. If verified, this attack could jeopardize Unicred's operations, customer trust, and lead to severe privacy breaches. 3. With a history of high-profile cyberattacks, including recent hits on McKinley Packing and S&A Law Offices, CL0P poses a serious threat. Read more: https://lnkd.in/dzhYHsfz #CyberSecurity #RansomwareAttack #databreach #darkweb #Unicred

4

🚨 The recent communication from the European Commission highlighting the cybersecurity skills shortage, as indicated by the latest Eurobarometer, is a call to urgent action. The European Union faces a significant deficit of qualified professionals in this critical area, as also emphasized by the report from the EU Agency for Cybersecurity. 🌐 This issue, prevalent in nearly all member states, exacerbates cyber threats and exposes the vulnerabilities of the EU's digital infrastructures. Addressing this requires prioritizing investment in education. Robust and comprehensive cybersecurity educational programs are essential to train a new generation of specialists capable of tackling these challenges and ensuring Europe's competitiveness in a digitalized world. https://lnkd.in/ggZzdtd2 #Cybersecurity #Education #EthicalHacking #Europe

4

🌟Meet the partners in EXIGENCE 🌟 Introducing ITAV - Instituto de Telecomunicações, based in #Portugal. 📡As a private, non-profit organisation, with public interest, ITAV is a partnership of nine institutions focused on research and development in the field of #Telecommunications. 🥽The members of ITAV - around 200 PhD holding integrated researchers - cover most of the R&D areas in Telecommunications and supporting sciences and technologies. ITAV also hosts about 250 #PhD students as well as 200 #MSc students each year! 🔍The ITAV #team involved in EXIGENCE has a long track record of #research and #innovation. With telecommunications as its driver, the team will develop new insights towards increasing the flexibility and #energyefficiency of the future telecommunications infrastructures, by proposing and validating designs and concepts that may present advantages to future iterations, and to be transferred as innovations. 📍EXIGENCE will have two testbed locations, and one of them is at ITAV! A great partner to be collaborating with!💪 Stay tuned to meet the other 8 partners of the #EXIGENCE consortium! #6G #telco #sustainability #EUProjects #collaboration #consortium #HorizonEU Daniel Corujo Rui Luís Aguiar Hao Ran Chi

16

Our CEO, Pedro Torres, recently shared his thoughts on eIDAS 2.0 in an article for Biometric Update. eIDAS 2.0 is a big step forward for online security in the EU, making it easier and safer for everyone to verify their identities online. We're excited about the potential of eIDAS 2.0 to streamline online interactions and create a more trusted digital landscape 🚀 Check out Pedro's full article 🔗 https://lnkd.in/g7UApTKY #eIDAS2 #DigitalSecurity #AnythingWithALook

13

"New European cybersecurity competence centre and network", interesting briefing published now in June 2024 by the European Parliament. 👇 This briefing summarizes the development and implementation of the European Union's #cybersecurity initiatives, beginning with the adoption of a #cybersecurity package by the European Commission on 13 September 2017. This package aimed to enhance European Union cyber-resilience and defense capabilities. In September 2018, the European Commission proposed establishing a European #cybersecurity competence centre and a #network of national coordination centres to strengthen European Union #cybersecurity infrastructure. This centre was designated to manage European Union funds for #cybersecurity research under the Digital Europe and Horizon Europe programs from 2021 to 2027. Following extensive negotiations and trilogue meetings, the legislation was enacted on 28 June 2021. Link: https://lnkd.in/dCJMwu4h #artificialera #web3 #web4 #web5 #fintech #digitalera #digitaltransformation #cybercrime #cyberattacks #cybersecurity #fincrime #criminallaw #AML

18

1 comentário