Financial entities must comply to the DORA regulations by January 2025. With only a few months to go, now is a critical time to assess and make sure that you are fully compliant.

The Digital Operational Resilience Act is a European framework that establishes a uniform approach regarding the security integrity of the information and communication technology (ICT) systems processed by participants in the financial markets within the European Union’s jurisdiction.

This report documents the threat group Lazarus and their TTPs (Tactics, Techniques and Procedures). Containing recommendations to help detect and mitigate the threat. The report also includes references where information within this report was identified from.

This report documents the lifecycle of the PowerDrop Malware and their TTPs (Tactics, Techniques and Procedures). Containing recommendations to help detect and mitigate the threat. The report also includes references where information within this report was identified from.

This report documents the threat group Lapsus$ and their TTPs (Tactics, Techniques and Procedures), and contains recommendations to help detect and mitigate the emerging threat. The report also includes references to where the information within this report was identified from.

With the increasing number of Cyber Extortion, Ransomware and Malware attacks, standard anti-virus and other infrastructure security products may not be enough to defend and defeat these sophisticated attacks.

The Cyber Assessment Framework provides a methodical and comprehensive approach to gauging the extent to which cyber risks are managed and conducted. 

Most companies operating within the defence sector will require enhanced levels of cyber security if they work with the Ministry of Defence. This often requires evidence that the UK’s Cyber Essential and Cyber Essential Plus certifications have been achieved. 

When a company falls victim to a cyber-attack it can be a difficult situation to resolve on their own without the right guidance and tools. For any cyber attack, timing is crucial. It is essential to respond swiftly to avoid any further damage.

Most companies operating within the defence sector will require enhanced levels of cyber security if they work with the Ministry of Defence. This often required evidence that the UK’s Cyber Essential and Cyber Essential Plus certifications have been achieved. 

It might come as a surprise, but one of the biggest causes for a security breach isn’t by security bugs or malfunctions; it is, in 
fact, human error.

Many organisations treat any incident response with a reactive and unstructured approach. 
However, information security incidents need to be approached with a timely and well-coordinated response to maximise recovery when multiple stakeholders are involved.

For the majority of companies, the lack of sufficient cyber-security is a result of small 
budgets. Often minimum numbers of endpoints monitored can be cost-prohibitive, so a 
more scalable and affordable solution is required.

The movement of electronic information and data is crucial for the Financial Industry to 
function, including personal, commercial, legal and financial information. This type of 
sensitive data is an attractive target to cyber-criminals looking to leverage the information 
to their advantage, therefore it is essential to have effective protection in place.

For the majority of companies, the lack of sufficient cyber-security is a result of
small budgets. Often minimum numbers of endpoints monitored can be cost-prohibitive,
so a more scalable and affordable solution is required.

Transport networks have become increasingly digitalised, with a wide range of data 
flowing across systems on a regular basis. As more devices and control systems are 
connected online, the risk factors to the storage and management of this sensitive 
information are increased

It might come as a surprise, but one of the biggest causes for a security breach isn’t by security bugs or malfunctions; it is, in 
fact, human error. According to a study by CompTIA, human error accounts for 52 percent of the root causes of security 
breaches which are the result of a variety of scenarios including weak passwords, sending sensitive data to the wrong 
recipients, sharing password or account information and falling for phishing scams.