NCC Group

We were pleased to join LMF - London Market Forums for their latest Cyber Resilience Summit today as Nigel G. presented to underwriters on the challenges of quantifying cyber risk and managing hidden threats. While the moving target that is cyber risk presents underwriters with challenges, accurately quantifying cyber risk is essential for insurers, as our team discussed with delegates. Thank you to everyone who participated in the session and to LMF for facilitating lively conversation around the room. To learn more about how we support the insurance sector, visit https://lnkd.in/gdC6YRQb #CyberSecurity #CyberInsurance #CyberRiskQuantification #CyberEvents #LondonMarkets

?????????????????? ???????? ??????????????????: ???? ???????????? ?????????? ???? ???????????????????? ????????-??????-???????? ?????????????? ???? ???????????? ????????????????????? ? Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Mu?oz Scannone, are exploring the most prominent Active Directory (AD) threats. They describe the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.? ?? Read our latest blog, as we crack open the enigma of pass-the-hash attacks - where the currency of your network's trust becomes a counterfeiter's dream?? https://lnkd.in/eAbxcfuU ? #cybersecurity #activedirectorythreats #dfir #passthehash??

Check out what our Director of Security Research Services Jon Renshaw CEng MIET had to say about the EU’s AI Act which came into play on the 1st August. From security ramifications of the Act, and wider AI regulations, and the key things businesses and AI vendors need to be aware of in terms of cyber security - find out more here ??

This week, the EU Cyber Resilience Act was published in the Official Journal of the EU. This Act implements mandatory cyber security requirements for all hardware and software products sold in the EU with very limited exemptions. Click here to find out what our UK Government Affairs & Global Institutions Engagement Lead Verona Johnstone-Hulse had to say ?? https://lnkd.in/eQxbae7P

Act now to navigate the future of cyber regulations???? ? With new governments being elected around the world in the last 12 months, global cyber laws and regulations are becoming ever more complex.? ? Join our webinar, ‘Global Cyber Policy Radar: 2025 and Beyond.’ We’ll cover:? ? The laws and regulations on the horizon? ? The key things to keep an eye out for in 2025? ? How your organisation can prepare? Don’t miss the open Q&A at the end ? ? Save your spot!? ? https://bit.ly/3YFvyOY? ? #cybersecurity #cyberpolicy #cyberregulations? #compliance #publicpolicy #cyberpolicyradar? ? Verona Johnstone-Hulse Katharina Sommer ?? James Pearce Bill Cameron?

?????? ???????? ?????????? ?? ???????????????? ?????? ??????????????????: ???????????????????? ???????????????????? ?????? ?????????????????? ?? Our Digital Forensics and Incident Response (DFIR) team at NCC Group recently tackled a unique ransomware attack where BitLocker encryption was used to hold critical data hostage. From initial access through RDP to leveraging Tor, AnyDesk, and strategic account creation, this unknown ransomware strain used sophisticated tactics to infiltrate, persist, and exfiltrate data to the cloud.?? ? ??This research blog by Molly D.?highlights the attacker’s techniques, including:?? ? Remote Desktop and Tor for access and persistence?? ? Lateral movement via SMB and RDP?? ? Data exfiltration through Backblaze?? ? Device encryption using BitLocker for ransom?? ? Get an in-depth look at the threat landscape and how to defend against these evolving tactics.?? ? Read more here???https://lnkd.in/eE7e3EVV? ? #Ransomware #CyberSecurity #BitLocker #DFIR #IncidentResponse?#Encryption

Here, Director of Industrials Sean Arrowsmith is quoted in The Register around his thoughts on critical infrastructure cyber security following a study on vulnerabilities in US water systems. "It may be the case that water is seen as a sector that will have vulnerabilities with legacy outdated infrastructure being converged with IT systems, and therefore suddenly exposed to internet-borne threats," Arrowsmith said in a statement. "The potential disruption is also attractive, particularly at a nation-state level because compromise of a water facility is headline news and could ultimately cause a threat to safety." Click here to find out more ?? https://lnkd.in/ePkGUb9u

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR).? ? Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. ? Nigel G. and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud.? ? Read the blog?? https://bit.ly/3AREbyg ? #CyberSecurity #CloudSecurity #IncidentResponse

?????????????????? ???????? ??????????????????: ???? ???????????? ?????????? ???? ???????????????????? ???????????? ?????????????????? ?????????????? ???????? ?????????????????? ????????????????? ? Our Digital Forensics and Incident Response (DFIR) experts in Iberia, Rafael Alfaro March and Rodrigo Mu?oz Scannone, are exploring the most prominent Active Directory (AD) threats. In this series, they describe the tell-tale signs that your AD might be at risk, with insight into the best prevention and mitigation strategies.? ?? In the latest blog, we're stepping into the world of LDAP-based attacks - where the very protocol designed to streamline directory access can become an attacker’s playground ??https://lnkd.in/eF88HT73 ? #cybersecurity #activedirectorythreats #dfir #ldap #cyberattacks?

Join us for the launch of our new #webinar series and discover why unifying #IT, #OperationalTechnology, and #Safety expertise is critical to creating resilient industrial operations. ? Webinar 1: "Baseline Readiness - Prerequisites for OT Security"? Join Sean Arrowsmith, Ray Robinson MSc + special guests on 3rd December as we explore the regulatory implications when converging your safety, physical security, and cyber security operations.?? ? ?? Register here > https://bit.ly/4elKec3? ? #IndustrialCyber?? #ICSsecurity?? #OTsecurity