Peter Mackenzie

Penetration testing isn't just important; it's crucial, especially for medical devices. In an era where patient safety and data security are paramount, ensuring the resilience of your systems is non-negotiable. With the increasing connectivity of medical devices, the risk landscape expands exponentially. As a CREST penetration tester, we go beyond the basics. Diving into your network to mimic real-world threats. This proactive approach not only protects patient data but also ensures regulatory compliance. #PenetrationTest #CyberSecurity #MedTechInnovation #MTI #MedTechInnovationExpo

1

How was your week?  I'm sharing some exciting news from Vorago Security. For the second year running, we are proud sponsors of The Real Cyber Awards. 🏆 Check out The Real Cyber Awards 2024, website link in the comments 👇 #cybersecurity #industryexperts #trca2024

7

2 Comments

As #Insurance Providers start offering #MDR services, expanding further into #security services ("they have been offering vulnerability scans, security awareness training and other types of cybersecurity services for years."), what does this mean for #MSPs and #MSSPs? Are they the right companies to offer these services? Now that the relationship between Insurance companies and MSPs/MSSPs has become more contentious, do you see a #conflictofinterest?

6

Today's video is inspired by a webinar I did just now for Claroty about how KEVs, Reachability and Business Context can help you be super targeted around prioritising vulnerability remediation, which is a fact of life in the OT world where remediating vulnerabilities can be so difficult. https://lnkd.in/gat_dj5p

13

1 Comment

Penetration testing is critical for understanding how to fortify your cyber defences. 🛡️ Interested to learn more? Look no further; read our blog ➡️https://ow.ly/lRgk50R33mA and speak to an expert today 📲 #CyberSecurity #PenTesting #CyberThreats #Sapphire

8

Concerned about what threats are being activley exploited out in the wild right now? AppCheck's latest article covers just this! They are categorised based not only on the category of exploitation, but their impact, and versions affected. We've also included any official fix and remediation guidance for the listed vulnerabilities. Read more: https://lnkd.in/e3xAtCZY #CyberSecurity #CVEs #Vulnerabilities #WebLogic #Oracle #JAVS

7

If you've missed the conversation Adrian Sanabria and I had at RSA Conference about Third Party Cyber Risk Management (#tpcrm) and what we are up to here at Tenchi Security, check this out!

20

Have you have ever wondered what a Cyberattack looks like? Or just how quickly it can happen? Then our webinar on the 11th June is the place to be to witness a Live Cyber attack, Yes you read that right LIVE, if you would like to join us on this amazing webinar feel to register follow the link.

7

Scoping a penetration test…. It’s that time of year where your web developers, infrastructure team and security leaders all cram into a meeting room (or teams call) and work out what to include in your annual test. From being involved in scoping, selling and delivering penetration tests for 17 years, questions like the below are fairly commonplace. ‘Do we just do what we did last year?’ ‘Not too much has changed, do we even need to test?’ ‘Whose budget is this coming out of?’ ‘Whose turn is it to collect the coffees?’ All valid questions and ones I’ll attempt to answer here. First off, repeating the same test. It’s been going on for decades now and I can, to an extent, see the merit. You’ve gone another year without a breach and it’s the course of least resistance, the budget is pre-approved. No need for time-sapping scoping calls with your existing provider or going to other companies for a quote. That being said, it’s always worth a look at your risk register to see how that marries up against your current scope. Should we test at all. I’m marginally biased here but the simple answer is yes. Zero days come out with such alarming frequency these days that not having an annual test is simply not good practice. Following on from that most compliance drivers these days have penetration testing in some format as a mandatory task. Think PCI, and ISO 27001 talks about management of technical vulnerabilities. Whose paying for the test - well unless the owner of the company is involved in the decision making process then it’s not personally coming out of anyone’s pocket. I’ve arguably saved the most important question till last. Whose doing the coffee run. My suggestion is the leaders (hey they earn the big bucks) but get me involved in your scoping process and who knows I may even come bearing gifts….

4

9 Comments

Are you following these steps? Do you need to go back a few steps to ensure smooth implementation of ISO 27001? Read my blog and find out 👇 https://lnkd.in/earEfWeu #iso #27001 #isms #cybersecurity #infosec #informationsecurity #smb #yorkshirebusiness #businessuk #voragosecurity

3

Standing room only, rubbing shoulder like we’re in a nightclub… no it was the National Cyber Security Event 2024! Great to attend and be able to catch some seminars, some interesting take aways and key notes. The whole day I just kept thinking how impactful Absolute Security is in the industry! We have such a unique solutions it really is a privilege to be able to bring it to the market, to our partners and customers 🥳 #WeMakeSecurityWork #NCSS2024 #informationsecurity #cybersecurityawareness #cyber #datasecurity

20

2 Days to Go for our Interactive Workshop on Mastering Cyber Crisis Tabletop Exercises. Register now and secure your spot for Friday at 3 PM BST. We'll show you how to plan, produce and conduct an effective cyber crisis tabletop exercise. We’ll also delve into what the EU DORA mandates for Operational Resilience Testing for better business continuity. Why Join? - The advanced cybersecurity workshop will be conducted by a Global CISO and the world’s #1 cyber drill facilitator. - You’ll learn tips and tricks to really hone your team's decision-making and problem-solving skills in a high-pressure attack situation. - You’ll understand how to curate a scenario that’s just right for your business. - Get access to an incredible wealth of free resources like our Cyber Tabletop Exercise Template & Powerpoint, Top 30 Tabletop Scenarios to Rehearse, Cyber Crisis Tabletop Exercise Checklist & more. #cybertabletopexercise #informationsecurity #leadership https://hubs.li/Q02z6S6J0

1

According to the 2024 Data Protection Trends report, 76% of organisations suffered at least one #ransomware attack last year. See what’s in store for 2024 and beyond with the Data Protection Trends report. Get the full report by emailing info@c4secure.co.uk.

4

1 Comment

If you missed VikingCloud's latest webinar, 'PCI DSS v4.0 - Lessons Learned and Pitfalls to Avoid', don't worry you can catch it on demand. Watch this great clip featuring Jeremy King before downloading the full webinar by clicking the link below. #PCIDSS #PCIDSSv4 #PCI #PCIcompliance #Webinar

2

SentinelOne are up at Olympia again today for the final day of UK Cyber Week. We'll be joined by the Cybanetix team so pop by and to discuss your cyber security strategy and see how we can help. #UCW #PurpleAI #endpointsecurity #cloudsecurity #identitysecurity #securitydatalake

45

3 Comments

Announcing KuppingerCole award - 🏅. Download the report to see why Proofpoint has been recognised as an Overall Leader in the KuppingerCole Leadership Compass for Email Security for 2023. Our unwavering dedication to innovation and layered security solutions is setting industry standards in safeguarding enterprises from email threats. Learn more about our approach in our recent blog. #Leadership #EmailSecurity #CyberSecurity #Proofpoint

2

Penetration Testing vs Vulnerability Scanning A topic of discussion that comes up often in the world of Cyber, yet many I speak with are still unsure of the difference and which they should be doing. If you are looking for clarity without the unnecessary jargon, check out the blog I have put together explaining the key differences and benefits of each. Or if you prefer a chat, simply drop me a DM or give me a call on the mobile number listed on my profile. :) You can find the blog by clicking here👇

6