Infosec newsletter: key updates and analysis

HM Government writes to Companies at Board level saying "Not all cyber attacks can be prevented. A critical part of good governance is rehearsing how you would respond to a major incident. Please plan and exercise how you would continue operations and rebuild following a destructive cyber incident." How can we best train our younger generations the use of pen and paper into later life?

"If I could prioritize one change in U.S. cyber policy or practice to enhance national security, it would be reforming the way threat intelligence is shared. Today, intelligence is too often built around generic indicators of compromise (IOCs) and broad attacker tactics, techniques, and procedures (TTPs). While these provide technical awareness, they lack the context that makes intelligence useful in practice. Without insight into the targeted sector, economic segment, or organizational function, defenders receive little more than partial guidance." More insight from Forgepoint Capital Venture Partner Shane Shook and other #cybersec experts in "NSI Experts Weigh In: #CybersecurityAwarenessMonth — Part 4: Urgency and Solutions" via The SCIF and National Security Institute (NSI). https://lnkd.in/gSg9CAJg #forgepointfamily

The state of cyber resilience in finance – revealed. 📊 See how firms are confronting threats & protecting investor trust. 📥 Get the full report: https://lnkd.in/gtT-mNEq

The new Cyber Security and Resilience (NIS) Bill making its way through the House of Commons could reshape the UK’s cyber landscape. It expands regulation beyond critical infrastructure - putting greater responsibility on leadership to evidence governance, supply chain assurance, and incident readiness. This marks the real shift: cyber is no longer just an IT issue, it’s a boardroom issue. The UK is raising the bar. Now it’s on every organisation to rise with it. #CyberSecurity #CyberResilience #NISBill #Leadership #Governance #RiskCulture #Mitigo

Local governments are facing significant risks from cyber incidents that extend beyond immediate downtime. An insightful article explores how the Local Government Cybersecurity Alliance (LGCA) aims to educate officials about these risks, including long-term financial impacts. Understanding this issue is crucial for municipal leaders. https://ow.ly/j6eT50XnZNA

Local governments are facing significant risks from cyber incidents that extend beyond immediate downtime. An insightful article explores how the Local Government Cybersecurity Alliance (LGCA) aims to educate officials about these risks, including long-term financial impacts. Understanding this issue is crucial for municipal leaders. https://ow.ly/oeqm50XnQiW

Local governments are facing significant risks from cyber incidents that extend beyond immediate downtime. An insightful article explores how the Local Government Cybersecurity Alliance (LGCA) aims to educate officials about these risks, including long-term financial impacts. Understanding this issue is crucial for municipal leaders. https://ow.ly/UFTe50XnY6L

Local governments are facing significant risks from cyber incidents that extend beyond immediate downtime. An insightful article explores how the Local Government Cybersecurity Alliance (LGCA) aims to educate officials about these risks, including long-term financial impacts. Understanding this issue is crucial for municipal leaders. https://ow.ly/ugY150XnRZM

Local governments are facing significant risks from cyber incidents that extend beyond immediate downtime. An insightful article explores how the Local Government Cybersecurity Alliance (LGCA) aims to educate officials about these risks, including long-term financial impacts. Understanding this issue is crucial for municipal leaders. https://ow.ly/gJS250XnWGz

Last week's NCSC Annual Review offered a sobering insight into the evolving cyber threat landscape, in particular the growth of intrusion products.    'The global commercial cyber intrusion sector will almost certainly expand over the next five years with state demand for intrusion products to meet national security requirements being a key driver.'   Nation states are actively participating in the development and procurement of offensive cyber capabilities. Exploit generation has become a full-fledged business, with high-performing teams, serious funding, and global reach. That might still surprise some people, the idea that cyber vulnerabilities are not just discovered but engineered, packaged, and sold. It’s a market, and it’s growing.   As cyber threats become more geopolitical, the line between national security and commercial cyber activity continues to blur. The implications for businesses and high-profile individuals are profound and is something we'll be watching closely here at coc00n. https://lnkd.in/eWm_Zys9