Cybersecurity threats and solutions: 13 steps to better protection
Once the realm of IT security professionals, cybersecurity is now an issue and concern for all business people. The scale and volume of cybersecurity threats to business has been steadily increasing. There are many examples of high-profile security breaches such as those at BA and the Marriott hotel Group which exposed millions of people’s personal details. […]
Good password practice
Few things are as central to the concept of security as passwords. Guarded by those who have them, coveted by those who want them, passwords are the keys to the proverbial kingdom. The kingdom in this case being the ever-expanding range of online services we use in our daily lives. Passwords unlock services that help […]
BH Consulting archives: fake invoicing scams are a constant security risk
Trawling through archives can quickly turn bittersweet when it hits home how little has changed between past and present. Looking back through the posts on BHconsulting.ie, invoice redirect scams have featured regularly since 2015. Fast forward to 2019: An Garda Siochana warned that this fraud cost Irish businesses almost €4.5 million this year. The global […]
Cybersecurity awareness training: a constant in a changing world
There are two schools of thought when it comes to users and cybersecurity. Some people working in the industry think of users as the weakest link. We prefer to see them as the first line of defence. Cybersecurity awareness training programmes can address staff shortcomings in knowledge, promote positive behaviour and equip non-experts with enough […]
Ransomware remains a risk, but here’s how you can avoid infection
It’s been a case of good news/bad news when it comes to ransomware recently. New figures from Microsoft suggest that Ireland had one of the lowest rates of infection in the world in 2018. But in early May, a sophisticated strain of ransomware called MegaCortex began spiking across Ireland, the US, Canada, Argentina, France, Indonesia […]
Password-less future moves closer as Google takes FIDO2 for a walk
For years, many organisations – and their users – have struggled with the challenge of password management. The technology industry has toiled on this problem by trying to remove the need to remember passwords at all. Recent developments suggest we might finally be reaching a (finger) tipping point. At Mobile World Congress this year, Google […]
When is it fair to infer?
While the GDPR framework is robust in many respects, it struggles to provide adequate protection against the emerging risks associated with inferred data (sometimes called derived data, profiling data, or inferential data). Inferred data pose potentially significant risks in terms of privacy and/or discrimination, yet they would seem to receive the least protection of the […]
Testing cybersecurity plans with table-top exercises
If a picture is worth a thousand words, and video is worth many multiples more, what value is an interactive experience that plants you firmly in the hot seat during a major security incident? Reading about cyberattacks or data breaches is useful, but it can’t replicate the visceral feeling of a table-top exercise. Variously called […]
More cod than phishing: email compromise is a bigger risk than you think
Phishing emails and social engineering attacks are a huge security risk. When we describe security incidents that involve criminals scamming individuals or businesses out of money, security professionals often use terms like “CEO fraud”, “fake boss scams”, or “impersonation fraud” and “business email compromise” interchangeably for convenience. But there’s a case for treating business email […]
AWS Cloud: Proactive Security and Forensic Readiness – part 5
Part 5: Incident Response in AWS In the event your organisation suffers a data breach or a security incident, it’s crucial to be prepared and conduct timely investigations. Preparation involves having a plan or playbook at hand, along with pre-provisioned tools to effectively respond to and mitigate the potential impact of security incidents. These response […]