E.DSO’s Post

Registration Now Open for Critical Infrastructure Protection & Resilience Europe Early Bird Rates currently apply Register online at https://lnkd.in/ey3mNNUa The first ‘Critical Infrastructure Protection Week’ will take place in Madrid, Spain on 12th-14th November 2024, and will see IACIPP host the ‘Critical Infrastructure Protection & Resilience Europe’ conference and exhibition and ‘EU-CIP Horizon Project’ conference as the first two events as part of the initiative. Critical Infrastructure Protection and Resilience Europe brings together leading stakeholders from industry, operators, agencies and governments to collaborate on securing Europe. Learn about the importance of the new Critical Entities Directive and NIS2 Directive to ensure your critical assets meet these minimum standards. The ever changing nature of threats, whether natural through climate change, or man-made through terrorism activities, either physical or cyber-attacks, means the need to continually review and update policies, practices and technologies to meet these demands. Conference Agenda: https://lnkd.in/ebXzxjjb Speaker Line Up: https://lnkd.in/emjQdR8K Register online at https://lnkd.in/ey3mNNUa We look forward to welcoming you to Madrid, Spain on 12th-14th November 2024. #criticalinfrastructureprotection #reseilience #criticalinfrastructure #cybersecurity #security

Registration Now Open for Critical Infrastructure Protection & Resilience Europe Early Bird Rates currently apply Register online at https://lnkd.in/ey3mNNUa The first ‘Critical Infrastructure Protection Week’ will take place in Madrid, Spain on 12th-14th November 2024, and will see IACIPP host the ‘Critical Infrastructure Protection & Resilience Europe’ conference and exhibition and ‘EU-CIP Horizon Project’ conference as the first two events as part of the initiative. Critical Infrastructure Protection and Resilience Europe brings together leading stakeholders from industry, operators, agencies and governments to collaborate on securing Europe. Learn about the importance of the new Critical Entities Directive and NIS2 Directive to ensure your critical assets meet these minimum standards. The ever changing nature of threats, whether natural through climate change, or man-made through terrorism activities, either physical or cyber-attacks, means the need to continually review and update policies, practices and technologies to meet these demands. Conference Agenda: https://lnkd.in/ebXzxjjb Speaker Line Up: https://lnkd.in/emjQdR8K Register online at https://lnkd.in/ey3mNNUa We look forward to welcoming you to Madrid, Spain on 12th-14th November 2024. #criticalinfrastructureprotection #reseilience #criticalinfrastructure #cybersecurity #security

The Center for Security Studies (#KEMEA) in #ATLANTIS -Improved resilience of Critical Infratsructures AgainsT LArge scale transNational and sysTemic rISks project. Leading WP1 Cross-CI Systemic Risk Assessment & Incidents Mitigation Strategies and Task T1.2 Cross-CI CPH systemic threat analysis and countermeasures, completed the deliverable D1.1 Cross-CI Risk Assessment and GDPR compliance.  The deliverable offers an exhaustive examination of the use cases, technical prerequisites, as well as ethical, privacy, and GDPR considerations that will govern the activities of LSPs in the ATLANTIS project. Within this report, we acquaint the CI operators involved in the ATLANTIS initiative, and expound upon taxonomies of threats encompassing cyber, physical, and human risks pertinent to critical infrastructure systems. Additionally, we elucidate sample scenarios illustrating the potential impacts of CPH hazards on critical infrastructure systems, delineating their conceivable ramifications.  In-depth enumerations of threats affecting the participating organizations are furnished by the experts within each entity, evaluating both the likelihood and the potential impact of each risk. A comprehensive risk assessment is presented, accompanied by a depiction of the interdependencies within each sector, predicated on the threats identified. Lastly, we offer a concise summary of the legal and ethical concerns intertwined with the project's pursuits.  For more details on the ATLANTIS Project, please visit: https://lnkd.in/dswsKmUt  #ATLANTISHORIZONEUROPE #CriticalInfrastructure #CriticalInfrastructure #InfrastructureResilience #criticalinfrastructureprotection #CyberPhysicalSecurity#research #projects #infra #security #horizoneurope #eu

🚨 DDoS Attacks Target Environmental Services Firms Amid Global Conferences 🚨 ⚠️ Environmental services websites are experiencing a surge in distributed denial-of-service (DDoS) attacks, with Cloudflare reporting a dramatic 61,839% increase in such incidents during the fourth quarter of last year. Key Takeaways: ➡ The rise in DDoS attacks coincides with major environmental conferences like the United Nations COP28 climate conference. This pattern suggests a targeted approach by cyber threat actors during significant global environmental events. ➡ The report also highlights the growing use of DDoS attacks in political and military conflicts, as seen in the escalation of such incidents during Russia's invasion of Ukraine and the conflict between Israel and Hamas. This indicates a broader trend of DDoS attacks being used as tools in global conflicts. #Cybersecurity #DDoSAttacks #EnvironmentalServices #Cloudflare #GlobalConferences #InfoSec #Cyberthreatintelligence #Threatintelligence #Informationsecurity

H2OSecCon Spring 2024: A Resounding Success in Water and Wastewater Sector Security. Tom Dobbins, Executive Director of WaterISAC, praised the event's impact: “H2OSecCon Spring 2024 demonstrated the power of collaboration and knowledge-sharing in the water sector. The insights and strategies shared by our expert speakers will undoubtedly help utilities enhance their security measures and resilience against emerging threats. This event shows our collective commitment to safeguarding our critical water infrastructure.” Key Takeaways from H2OSecCon Spring 2024 ➤ #Cybersecurity #Bestpractices: Comprehensive strategies for #securing Industrial Control Systems (#ICS) and Operational Technology (#OT) against evolving #threats. ➤ Physical Security Insights: Effective measures to counter threats from #extremists, #terrorists, and common #criminals. ➤ Emerging Threats: How to #protect OT systems from potential threats posed by Artificial Intelligence (#AI). ➤ Communication Strategies: Best practices for maintaining confidentiality while effectively communicating with stakeholders during #emergencies. https://lnkd.in/eFznkv9z

The Baltic states have come to be recognized as global leaders in the fields of cyber security & critical infrastructure resilience. In our latest publication, we explore what lessons Kosovo can draw from the experiences of these nations in safeguarding critical infrastructure. Some 🔑 takeaway points: 📌 Kosovo should instill a strong security culture among all inst. actors involved in critical infrastructure protection. 📌 Kosovo should consider a shift towards protecting critical services rather than individual objects. 📌 Kosovo should streamline legal norms & organizational structure to enhance efficiency. 📌 Kosovo should develop tools and resources to strengthen civil preparedness in the event of critical infrastructure disruptions. 📑 Read the full report in Albanian and English here: https://lnkd.in/dzcGStgU

⏰ In a roundtable on Tuesday at the RSA Conference Eric Goldstein executive assistant director at Cybersecurity and Infrastructure Security Agency, emphasized the evidence found of hacking campaigns launched by China’s Volt Typhoon targeting Guam and the US critical infrastructure and how they are using living-off-the-land techniques to maximize their persistence and avoid detection. 👀 One quote provided by a senior security official summarized what is China’s objective in deploying Volt Typhoon hackers: “cause disruption and sow societal panic”. ♦️ As China has increased its aggressiveness toward Taiwan, China’s hackers are tasked with infiltrate the U.S. critical infrastructure in Guam and elsewhere with the intent of neutralize any potential mobilization of forces in support of Taiwan. 🇺🇸 Regarless of their clear intentions and risks for our people, the government will continue fighting to protect us and those countries that need our help from oppression. #cybersecurity #espionage #threatactors #cisa #nsa #cia #criticalinfrastructure #living-off-the-land #rsac2024 #rsac #

US confronts China over Volt Typhoon cyber espionage - SaltWire Halifax powered by The Chronicle Herald: US confronts China over Volt Typhoon cyber espionage  SaltWire Halifax powered by The Chronicle Herald #CyberSecurity #InfoSec #SecurityInsights

Under the auspices of the European Security and Defence College (ESDC), the Portuguese Guarda Nacional Republicana (GNR) will organise the Critical Entities Resilience Course (Advanced Level), from Monday 24 to Friday 28 June 2024, in Lisbon. The course aims to provide participants a significant grounding in the framework of Critical Entities Resilience (CER), including critical infrastructure protection, which will contribute to a systemic view of the world and the underlying risks, vulnerabilities and threats that national governments and the European Commission are trying to address through new regulations, requirements, new mechanisms and better cooperation. This specialised course, at strategic level, aims to enable participants to systematise knowledge in specific critical entities resilience fields, interdependencies and dynamics; bolstering the interconnectivity and cross-border nature of their operations; enhance the interaction between participants and experts through table top exercise (TTX); train the strategic foresight in the CER and resilience planning activities, with a focus on cross-border and European dimension; develop a multidisciplinary view of CER and the interdependencies, as well as a better understanding of the toolbox and conceptual framework which decision makers use to perform complex system governance in a multi-stakeholder setting. The course is open to mid‐ or high‐level representatives and experts of public authorities, Critical Entities or Critical Infrastructure (CI) owners/operators (private and state) with responsibilities for the development, formulation and implementation of security strategies and mechanisms for Critical Entities Resilience/Critical Infrastructure Protection. EU Member States governmental and private companies involved in CER or CI operations, as well as members of EU institutions, bodies and agencies are invited to participate. https://lnkd.in/dPtcawGa

Securing Against Long-Term Threats: China-Linked APT Volt Typhoon's Stealthy Infiltration into US Infrastructure and the Imperative of Tokenisation The report highlights a concerning infiltration by China-linked APT Volt Typhoon into US critical infrastructure, with the group remaining undetected for an alarming five years. Their use of living-off-the-land techniques and advanced tactics poses a significant threat. The US agencies' advisory emphasizes the importance of identifying and mitigating these techniques, underlining the potential risks during geopolitical tensions or military conflicts. Implementing tokenisation for API technologies is among the recommended strategies for enhancing cybersecurity in the face of such sophisticated threats. Stay vigilant and prioritize security measures to safeguard critical infrastructure. https://lnkd.in/eEUBiC_F