Andrew Shephard

For the latest discoveries in cyber research for the week of 23rd September, please check out our Threat Intelligence Bulletin. It covers the top cyber-attacks, breaches, vulnerabilities, patches and more that you need to know this week. #cybersecurity #mustread

2

If your brand has an AI story to tell, check out our latest Data Dive for the lowdown on… - who is using AI…and why - AI attitudes and use in the workplace - the media that matter #b2bmarketing #techpr #AI

1

1 Comment

📢 With a new political landscape expected regardless of the election's outcome, one thing is certain. Significant advances in AI and new cybersecurity threats will require new parliamentarians to address several tech-related policy issues. 💻 Technology is advancing faster than ever, bringing new challenges, threats and opportunities. ⚠ Before the election, the Government's Cyber Security Breaches Survey 2024 highlighted that half of businesses and around a third of charities reported some form of cyber security breach or attack in the last 12 months. 🔢 Agile policymaking and collaboration with experts in the field can support with meeting these challenges. ➡ Ahead of the election, Beatriz Serra and colleagues have produced two excellent guides to the landscape for cyber security and AI. Please get in touch at [email protected] if you would like to discuss how we can support your public affairs work. Tendo Consulting Limited #publicaffairs #ukelection #ukgeneralelection #cybersecurity #AI

3

Cyber Incidents: What exactly should organisations be monitoring? 🤔 We spoke to Cyber Incident Responder, Vanessa Horton, for her advice on what organisations need to be monitoring: Security events. These are just everyday events on your systems or networks – logins, incoming emails, files received, and so on. So, for example, if you suddenly get someone logging in from Russia, and they weren’t on a business trip there or something, you need to investigate. This means you’re not just tracking the logins themselves, but also certain information about them – locations and IP addresses, login times, files or services accessed, and so on. Again, you have to know your baseline. What is expected activity? And if it’s unexpected, someone must quickly investigate. If a threat actor did gain access to a user’s account, you want to prevent them from accessing anything else. Equally, if it’s just someone who’s on holiday in Russia and decided to log in, you can dismiss the security event. But you must establish that in your initial follow-up; you can’t just assume it’s not a security incident. [The difference between a security event and a security incident is that an event is an everyday occurrence – like users logging in. But some events also signify a security incident: a breach of confidentiality, integrity and/or availability, also known as the ‘CIA triad’.] Read more from our 'A Practical Guide to Cyber Incident Response' with Cyber Incident Responder, Vanessa Horton 👉 https://lnkd.in/eJnBShva #CyberSecurity #IncidentResponse #CyberIncident #Infosec #Anomaly #SuspiciousActivity

5

Communications best practices apply to IR, just as they do for all strategic communications. Learn more about IR website essentials in the in-depth guide from PR Newswire ➡️ https://lnkd.in/e9wW2QaH #IR #InvestorRelations #Comms

5