My takeaways from last week – Oct 11, 2021

This was a particularly interesting week with a couple of events worth being reviewed (and learned from): the launch of the more security-oriented Windows 11, the Facebook outage and, a new ransomware threat for VMware ESXI. I also included a short read on planning for Incidents Response. Here is my take from last week: I'm …

Continue reading My takeaways from last week – Oct 11, 2021

How ransomware changed the face of cybersecurity

In a popularity contest for cyberattacks, Ransomware would definitely win and its (bad) reputation among the general public is well deserved. Ransomware is probably the type of attack that had the most significant influence on the cybersecurity industry in the last 10 years. Here is why. The Prevalence Compared to other classes of attacks - …

Continue reading How ransomware changed the face of cybersecurity

Security Architecture considerations for Cyber Resilience – why threat prevention is important

In an earlier blog this year, I compared the concepts of cybersecurity and cyber-resiliency, arguing that the main difference between the two is one of perspective. Cybersecurity is centered on the idea that attacks can (and should) be prevented while cyber-resilience acknowledges that some attacks will go through, and that organizations must prepare to deal …

Continue reading Security Architecture considerations for Cyber Resilience – why threat prevention is important

Three takeaways for a Small Business from the Microsoft Exchange hack

I heard this so many times: “My company is too small to be the target of an advanced attack”. Unfortunately, this is not true and the recent cyber-attacks on Microsoft Exchange servers clearly show it. Compared to the recent SolarWinds Orion security breach that directly affected mostly large organizations, the Exchange vulnerabilities were used to …

Continue reading Three takeaways for a Small Business from the Microsoft Exchange hack

A Practical Approach to Cyber Resilience – Part 1 of a 3 Part Series

In a previous blog, I looked at the key differences between cybersecurity and cyber-resilience, and why cyber-resilience is a better approach for organizations to follow in 2021 because it is holistic. The IT cyber-resilience is a complex objective requiring a solid understanding and a structured approach. NIST Special Publication 800-160, Developing Cyber Resilient Systems, is one …

Continue reading A Practical Approach to Cyber Resilience – Part 1 of a 3 Part Series

Cybersecurity or Cyber-resilience: Which one should be the prime objective for 2021?

Given the increased dependency on digital technologies for daily operations it’s not a surprise that organizations are concerned about cyber threats and the risks these are posing to their operations. But what is the best approach to this problem? Should an organization focus on cybersecurity or on cyber-resilience? Which of the two can be consider …

Continue reading Cybersecurity or Cyber-resilience: Which one should be the prime objective for 2021?

Accelerating Safely on the Digital Highway

I wrote this post a couple of months back but it's highly relevant for 2021 and it’s worth being brought up again. You will also find below a reference to an interesting on-demand webinar hosted by InfoSecurity Magazine.. Despite today's harsh medical crisis we are living great times of innovation. For the past years, digital …

Continue reading Accelerating Safely on the Digital Highway