What is Cyber Insurance?

[fusion_builder_container type=”flex” hundred_percent=”no” hundred_percent_height=”no” hundred_percent_height_scroll=”no” align_content=”stretch” flex_align_items=”flex-start” flex_justify_content=”flex-start” hundred_percent_height_center_content=”yes” equal_height_columns=”no” container_tag=”div” hide_on_mobile=”small-visibility,medium-visibility,large-visibility” status=”published” border_style=”solid” box_shadow=”no” box_shadow_blur=”0″ box_shadow_spread=”0″ gradient_start_position=”0″ gradient_end_position=”100″ gradient_type=”linear” radial_direction=”center center” linear_angle=”180″ background_position=”center center” background_repeat=”no-repeat” fade=”no” background_parallax=”none” enable_mobile=”no” parallax_speed=”0.3″ background_blend_mode=”none” video_aspect_ratio=”16:9″ video_loop=”yes” video_mute=”yes” pattern_bg=”none” pattern_bg_style=”default” pattern_bg_opacity=”100″ pattern_bg_blend_mode=”normal” mask_bg=”none” mask_bg_style=”default” mask_bg_opacity=”100″ mask_bg_transform=”left” mask_bg_blend_mode=”normal” absolute=”off” absolute_devices=”small,medium,large” sticky=”off” sticky_devices=”small-visibility,medium-visibility,large-visibility” sticky_transition_offset=”0″ scroll_offset=”0″ animation_direction=”left” animation_speed=”0.3″ filter_hue=”0″ filter_saturation=”100″ filter_brightness=”100″ filter_contrast=”100″ […]

Neu Cyber Threats – 16th June 2022

The BlackCat Ransomware, which was first seen in November 2021, has since emerged as one of the most active ransomware groups.

The group look for active vulnerabilities within organisations and pay in particular favour to the unpatched Microsoft exchange. The group gained access through this vulnerability and applied Rust-based Ransomware.

According to the Cyber Security Analyst ANOZR WAY, the BlackCat group is the 3rd most active ransom group behind Lockbit 2.0 & Conti. They were recently targeting the University of Pisa. They held the University to ransom for an alleged $4.5 million.

Ensuring a regular patching schedule is in place to apply any security update is the best option to defend against this attack style. It is also an excellent notion to ensure you have a good backup stance which is regularly checked and validated.

Other things that can be put in place to secure your organisation against ransomware are to ensure the use of MFA(Multifactor authentication) and the implementation of good endpoint protection. Facilities that offer sandboxing technology can assess files sent in through email and ascertain if they have malicious intent.

Neu Cyber Threats – 23rd June 2022

Android 10 is set to end security support by the end of this year. It is important to know if your phone is using Android 10 and if you have the capability to upgrade to a newer version of Android. This can easily be checked by navigating to your settings and finding the software information. Within these settings, you should see an Android version. An update is needed if your version is saying ‘Android version 10’. To see if your phone is eligible for the upgrade to Android 11 or 12, you will need to see if the update is within software updates. This can be performed by looking in the software update section of your settings for your phone.

What do you risk if you don’t upgrade your Android?

If you do not upgrade to a supported Android version, you will no longer receive security updates for this software once the support for Android runs out. This means any vulnerabilities discovered will not be patched. Your phone becomes a permanent weakness for all your stored data.

Neu Cyber Threats – 30th June 2022

A recent vulnerability has been discovered for Microsoft SharePoint. CVE-2022-30157 was published on 15/06/2022 with a CVSS 3.1 score of 8.8, meaning it is a high rating in criticality. The vulnerability allows for the remote running of arbitrary code on affected Microsoft SharePoint Servers. The vulnerability exists in the processing of charts. They are tampering with the client-side data, which can trigger a serialisation of untrusted data. An attacker can leverage this to execute code.

If you are using Microsoft SharePoint, it is highly recommended that you ensure all current patches are installed. For further information about CVE-2022-30157, click here.

Neu Cyber Threats – 21st April 2022

Spear phishing emails are on the rise and should be closely monitored by your company. Keep an eye out for emails claiming to have good deals or offers or impersonating other people.

Below are some key points surrounding spear phishing attacks:

• These are fraudulent emails either aping staff through similar looking email accounts or by hacking in and impersonating people leading to the theft of deployment of viral payloads
• 3.1 billion spoofed emails are sent every day
• Scam messages have cost businesses £23 billion since 2016
• Phishing was used in 36% of cyber-attacks

Neu Cyber Threats – 28th April 2022

Microsoft has released the April 2022 security update that addresses a number of vulnerabilities, including a remote procedure called runtime remote code execution (CVE-2022-26809).

The NCSC recommendations follow vendor best practices in the mitigation of these vulnerabilities. In this case, installing the latest updates as soon as possible is advised. You can find this information here: Install the latest software and app updates – NCSC.GOV.UK

The Microsoft April 2022 Security updates fixed a number of security vulnerabilities, and more info can be found on Microsoft’s website.

Neu Cyber Threats – 5th May 2022

The UK ferry operator Wightlink has been hit by a complex cyber attack that potentially compromised personal data belonging to a small number of customers and staff.

The attack occurred in February and affected specific back-office IT systems, and law enforcement has been notified, along with other breach victims.

While it was stated that they had taken appropriate measures to prevent issues like this, they were still affected by the attack, which shows that everyone can be at risk from cyber attacks.

Using the most straightforward methods such as MFA and training end-users to spot the different techniques of cyber attacks is a safe and relatively cheap way to provide a solid baseline for mitigating these threats.

Neu Cyber Threats – 12th May 2022

The health and education sectors continue to face serious cyber security threats based on the number of reported incidents to the Information Commissioner’s Office (ICO).

A report from cyber security firm CybSafe has highlighted that 34% of incidents reported last year were experienced by these sectors, increasing 2020’s figures from the ICO. The report also reveals a 19% increase in ransomware attacks.

The report also details that phishing is the most common cyber attack, with ransomware becoming an increasing trend impacting all sectors.

The NCSC has previously reported and provided resources on the threats against cyber threats. A guide to ransomware has also been made available for organisations looking to defend against this threat. You can find these below:

Neu Cyber Threats – 19th May 2022

Enterprise Connected Devices (ECDs) refer to any device which interacts with, holds, or processes an organisation’s data. As a result of the broad range of devices, ECDs can encompass other devices depending on their use. They can cross over to multiple other device classes, including End-user devices, the Internet of things, and Distinct ECDs.

These mainly refer to laptops and computers, phones, the devices connected to the Internet, and specialist equipment that may not always be available to the public.

With the growing number of items and devices that require access to the Internet and the amount of use they get every day, the risk increases. These devices are an excellent target for potential criminal activity as they are likely to hold confidential data, either private or work-based.

This can lead to lateral movement from one device to another over the network. Therefore it is crucial to have all devices protected and catalogued so that they can be monitored and any devices other than those meant for work can be removed from the environment.

To minimise this threat, use only the necessary devices at your offices and protect your network connection and devices in the best way you can.

Neu Cyber Threats – 26th May 2022

The energy regulator Ofgem has issued advice after reports of cyber criminals contacting people and trying to access their bank details.

Criminals are fraudulently requesting bank details under the guise of offering the council tax rebate currently being issued by the government.

The NCSC has guidance advising how to recognise and report phishing emails, texts, websites and adverts or phone calls, which can be found here: Phishing: Spot and report scam emails, texts, websites and… – NCSC.GOV.UK.

If you have received an email you’re not quite sure about, forward it to report@phishing.gov.uk. Suspicious texts should be forwarded to 7726.