Armando Dacal

In 2024, cyber attacks on 🇦🇺 Australian organisations continue unabated. Despite the 🇦🇺 Australian Government's implementation of several cybersecurity initiatives following notable breaches like those involving @Medicare and Optus, businesses must not solely rely on these measures and should implement additional preventive controls. 🇦🇺 Australia has experienced a staggering 388% increase in compromised accounts quarter-on-quarter in 2024. Mining companies are particularly attractive targets for #cyber criminals due to their extensive and diverse supply chains. Northern Minerals Limited (see article on recorded cyber incident), a smaller player in the mineral exploration sector, exemplifies how even minor organisations can impact the mining ecosystem and supply chain. The mining supply chain is inherently complex, comprising several critical components: a) the mines, where minerals are extracted, processed, and stocked before being loaded onto trains; b) the rail system, which transports the product from the mines to the port; and c) the port, where materials are stocked and then loaded onto ships. (Source: Science Direct) Additionally, the human impact extends to individual homes. A cyber attack can disrupt various mining operations, including drilling, blasting, equipment maintenance, processing, and other activities, by impacting the labour force contracted to the mine. A lot of the labour is contracted in so dependent on the agreement they have with the workforce, it could have an impact on the paypacket to bonuses awarded. Assessing Northern Minerals Limited's compromised data footprint, as indicated by the BreachAware® redacted scan (source: https://lnkd.in/er9ZwAJ4), reveals a peak in 2024. We recommend conducting an audit as a part of your risk management program, a straightforward task. Overall, the company's data presence is relatively secure, particularly considering its web activity since 2012. We hope you find this insight useful and constructive. For more information about BreachAware, email us at [email protected]. Become a partner or sign up directly. #protectyourprivacy https://lnkd.in/eu7WfS6V

8

3 Comments

The Rising Threat of Ransomware : FirstMac Ransomware is a growing threat to businesses worldwide. Among the latest victims is Australian non-banking lender, FirstMac. The ransomware group, EMBARGO, claimed responsibility for the attack. In this post we'll look into this incident, explore its implications and offer tips to safeguard against similar threats. FirstMac, an Australian non-bank lender, became the second prey of the EMBARGO ransomware group. The group made this attack public on their darknet leak site. Alarmingly, it was the same day FirstMac informed its customers about the cybersecurity breach. According to EMBARGO, the group managed to steal a massive 500 gigabytes of data, including full databases, source codes, and sensitive customer data. However, EMBARGO has remained silent regarding its ransom demand and hasn't shared any proof of the hack. FirstMac confirmed the attack, admitting that an unauthorised entity had breached a limited part of their IT system. The company promptly secured the system and sought the services of forensic experts to investigate the incident. The investigation is ongoing, and FirstMac has pledged to keep stakeholders informed. As a new operation, EMBARGO is masked in mystery. The group describes itself as an international team without of any political affiliations. How to Safeguard Your Business Against Ransomware In light of the FirstMac incident, it's essential to understand how businesses can protect themselves from ransomware. Here are five key strategies: 🐟 Regular Backups: Regularly backing up your data can help you recover your files without paying a ransom in case of an attack. 🐟 Cyber Security Awareness Training: Empower employees by providing them with training that is designed to equip them with the skills to recognise and combat everyday scams and cyber threats, including sophisticated phishing attempts and social engineering tactics. 🐟 Regular Updates: Keeping your systems and software up-to-date ensures you're protected from known vulnerabilities. 🐟 Robust Security Measures: Implement a robust security policy, including antivirus software, firewalls, and intrusion detection systems. 🐟 Incident Response Plan: Have a clear plan in place to respond to cyber incidents. This can help limit damage and reduce recovery time. The FirstMac incident serves as a stark reminder of the ever-evolving cyber threat landscape. As ransomware attacks become more common and sophisticated, businesses must stay vigilant and proactive in their cyber security measures. #ransomware #cybersecurityawareness #phishnetglobal

10

1 Comment

It was a pleasure to host a Sydney IT Leaders Lunch last week for Infoblox discussing... “Breaking Down The Australian Government’s Cyber Security Strategy For 2030 And How It Impacts Your Organisation.” Infoblox, a leading cybersecurity company, welcomes the strategy and sees it as an opportunity for companies to move up the maturity levels in Essential Eight, and to avail of existing tools such as the Government’s AUPDNS to filter out malicious and suspicious domains. The strategy focuses on real-time threat intelligence sharing, working in partnership with the government, and raising all organisations and people’s cyber security posture to make the whole stronger than the sum of its parts. The round table covered the following topics: The Australian Government’s Cyber Security Strategy. Real-time threat intelligence sharing. Working in partnership with the government Raising all organisations and people’s cyber security posture. Identifying your organisation’s maturity level for the optimal Essential Eight implementation. This week we are hosting events in Singapore and Jakarta. Nicholas Roberts, MBA Kate F. Helena Mikhailova Tom Bailey

15

1 Comment

VyOS in Australia: Time to Make Your Network Adaptive & Powerful https://lnkd.in/gM6br5bT In today’s rapidly evolving IT landscape, businesses need network solutions that are not only powerful and flexible but also capable of adapting to the unique demands of modern infrastructure. Enter VyOS, an open-source network operating system that is quickly gaining traction in Australia as the go-to solution for organizations seeking robust and cost-effective networking capabilities. VyOS is a powerful, open-source network operating system that integrates advanced routing, VPN, and firewall functionalities into a single, unified platform. Built on top of Debian Linux, VyOS offers enterprise-grade networking features that rival those of traditional proprietary solutions, but with the added benefits of flexibility, scalability, and freedom from vendor lock-in. As businesses grow more dependent on cloud-based applications and distributed environments, traditional networking models can fall short. Legacy solutions often struggle with the complexity of integrating modern cloud services, managing remote workforces, and maintaining security across multiple locations. To stay ahead, enterprises need a dynamic, scalable, and vendor-agnostic approach to networking. VyOS, with its open-source architecture, is engineered to handle these modern-day challenges by adapting to your specific operational requirements. Learn more at https://lnkd.in/gM6br5bT

6

The introduction of new guidelines prioritising transparency, privacy, and risk management is receiving high praise from industry leaders like Anthony Spiteri from Veeam and Rhonda Robati from Crayon. The focus on ethical AI use is crucial, and these regulations will require businesses to disclose AI capabilities and comply with strict security standards. Although these guidelines come with challenges, they also present opportunities for innovation and gaining a competitive edge. #AI #Ethical #Innovation #Compliance #Transparency

2

THE IMPORTANCE OF PARTNERING WITH AN AUSSIE MSP WITH A CYBERSECURITY FOCUS In today’s world of evolving cyber threats, partnering with a Managed Service Provider (MSP) that prioritises cybersecurity is essential. For Australian businesses, choosing a local MSP without offshore staff adds an extra layer of protection. Here’s why opting for a local MSP is a smart choice for your business. 1. Data Sovereignty and Compliance Australia’s data sovereignty laws require specific data to stay within the country. Offshore MSPs may expose your business to legal risks. A local MSP ensures compliance with the Privacy Act 1988 and the Notifiable Data Breaches Scheme, while adhering to Australian cybersecurity standards like the Essential Eight. 2. Reduced Risk of Data Breaches Offshore teams operate under different laws and security practices, which can lead to security gaps. A local MSP, familiar with Australian regulations, ensures your data is protected by professionals who follow best practices to minimise risks. 3. Faster Response Times When a cyber incident occurs, quick action is vital. Offshore teams may delay responses due to time zone differences. A local MSP offers real-time support within your business hours, reducing the damage from potential attacks. 4. Tailored Security Solutions Local MSPs understand the specific challenges Australian businesses face, such as compliance and region-specific threats. They can offer customised solutions designed to protect against issues like phishing and ransomware. 5. Enhanced Control and Transparency A local MSP gives you greater control over your data, with clearer visibility into how it’s handled. This reduces the risk of unauthorised access and enhances your overall security posture. 6. Cultural Alignment and Communication Working with a local MSP ensures there are no language or cultural barriers during critical security incidents, resulting in smoother communication and faster resolution times. 7. Supporting the Australian Economy Choosing a local MSP not only protects your business but also supports local jobs and strengthens Australia’s cybersecurity industry. Conclusion: The Advantage of Local Expertise In today’s fast-paced cyber landscape, the security of your business is crucial. Partnering with a local, cybersecurity-focused MSP means quicker response times, compliance with Australian laws, and tailored protection against threats. Contact Evisent today at 1800 384 736 to learn how we can help secure your business.

5