W is for …

Whaling When people launching spear phishing attacks against senior members of staff, this is known as whaling (because they’re after the big fish). That’s the only real difference in the terms, though the types of attack may differ slightly. Whales are more likely to be the target for mandate fraud, where an email purporting to … Continue reading W is for …

US names arrested Fin7 cyber-gang suspects

This story appeared recently on the BBC website. Three members of a notorious hacking group, variously called Fin7, Carbanak and JokerStash, have been arrested and named. The three individuals were arrested in Germany, Poland and Spain: one has already been extradited to the US and extradition proceedings have begun against the other two. The hacking … Continue reading US names arrested Fin7 cyber-gang suspects

P is for …

Password There has been much written about passwords, but for this entry I thought it worth defining what a password actually is. It’s a code, phrase or sequence of letters and numbers which is used to validate that you are who you say you are. It’s often used in conjunction with a username or when … Continue reading P is for …

Connected at home – what’s the problem?

You’ve probably heard by now of the Internet of Things (IoT). It’s essentially anything that is connected to the internet that isn’t a “standard” laptop or computer. But how secure is it? And how secure is your car? Just because your key fob is in your house doesn’t mean your car can’t be stolen. The … Continue reading Connected at home – what’s the problem?

It’s just a Like…

What harm can it do? You know, seeing your favourite hairdresser or coffee shop on social media, and clicking on the Like button? And what about all those little quizzes and fun games that appear? Like what are your top 5 places to visit, what was your first pet called etc. Not to mention the … Continue reading It’s just a Like…

H is for…

Hacking I’m pretty sure that you’ve all heard the term “hacking”, and you probably know that it has negative connotations. But what exactly is it? Put simply, it’s trying to get access to a computer or network using vulnerabilities in the security of the target. Note that I don’t necessarily say software: people can be … Continue reading H is for…

Vehicle Security

You’ve no doubt heard the stories about cars being hacked over WifI or Bluetooth, but today I want to talk about an easier security risk: second-hand, hire and courtesy cars… I’ve recently had my car in the garage to have it serviced, and I was provided with a reasonably new courtesy car. I had to … Continue reading Vehicle Security

It’s a scary cyber world – or is it?

Have you ever stopped to wonder why the press use terms like “cyber attack”? Think about it for a second. Any loss of data, anyone having their passwords stolen, any bad stuff at all to do with computers is generally referred to as an attack, the language is very emotive, and is all about combat, … Continue reading It’s a scary cyber world – or is it?

10 Steps to Cyber Security – Part 1 of 2

Through discussions with various clients and perspective clients, at conferences, events and forums, it is very apparent that a lot of companies know that they need to do “something about cyber” but many, particularly in the Small and Medium Enterprise (SME) arena, are unsure of what that something should be. My response to them is … Continue reading 10 Steps to Cyber Security – Part 1 of 2

What next after Friday’s Ransomware attacks?

Perhaps predictably, vendors of all sorts are appearing on LinkedIn and elsewhere selling their solutions to the mass attack of Friday. I presume they are hoping to cash in when work resumes for many tomorrow and we find that there may be additional victims from Friday.  There’s been a lot written by a lot of … Continue reading What next after Friday’s Ransomware attacks?