Daniel Ferguson

"The cyber sector will be a 'prime target for economic growth' in the upcoming Industrial Strategy, as the government secures Britain’s future and delivers the Plan for Change.   Chancellor of the Duchy of Lancaster Pat McFadden will say that boosting the cyber sector will deliver the double dividend of producing home grown jobs as well as protecting growth in other sectors by improving cyber security" https://lnkd.in/einv2yZa Right position! Wow!

1

CGI’s UK Security Operations Centre is now CREST Accredited. Our Intelligence-led Security Operations Centre has officially achieved CREST SOC Accreditation. Joining our existing CREST-certified Incident Response and Pen Testing services. Why does this matter? - Independent validation of 24/7 monitoring and response - Simplified procurement for regulated sectors - Trust, transparency, and total cyber assurance Read how this elevates resilience for our clients and what it means for the future of cyber defence https://bit.ly/448qbfj #CGIUK #WeAreCGI #CyberSecurity #SOC #CyberResilience #CRESTAccreditation

201

2 Comments

Many deepfake attacks succeed because people don't know what to look for. CloudGuard have published a practical guide breaking down 10 visual and audio deepfake warning signs, plus a short interactive walkthrough you can share internally. If your team can spot the signs, they can help stop the attack. 👉 Read it here: https://lnkd.in/eKem5xGe

53

5 Comments

𝐖𝐡𝐚𝐭’𝐬 𝐭𝐡𝐞 𝐦𝐨𝐬𝐭 𝐢𝐦𝐩𝐨𝐫𝐭𝐚𝐧𝐭 𝐥𝐞𝐬𝐬𝐨𝐧 𝐲𝐨𝐮’𝐯𝐞 𝐥𝐞𝐚𝐫𝐧𝐞𝐝 𝐟𝐫𝐨𝐦 𝐰𝐨𝐫𝐤𝐢𝐧𝐠 𝐰𝐢𝐭𝐡 𝐏𝐂𝐈 𝐃𝐒𝐒 𝐭𝐡𝐚𝐭 𝐜𝐨𝐮𝐥𝐝 𝐡𝐞𝐥𝐩 𝐨𝐮𝐫 𝐈𝐒𝐀 𝐝𝐞𝐥𝐞𝐠𝐚𝐭𝐞𝐬 𝐭𝐡𝐢𝐬 𝐰𝐞𝐞𝐤? Today, BT Group is proud to welcome Scott Chambers CISSP, CISA from the PCI Security Standards Council and a fantastic group of delegates to our BT Group Birmingham office for this week's 𝐏𝐂𝐈 𝐈𝐒𝐀 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠. It’s a great opportunity to support the next wave of payment security leaders and provide a focused, welcoming environment for deep learning - including: 🔍 Scoping with purpose 🧠 Understanding the intent behind PCI DSS controls 🛠️ Using the Customised Approach effectively 🧩 And mastering the all-important phrase… “It depends.” We’re also championing a mindset shift, not just ticking boxes, but building processes where - 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 𝐛𝐞𝐜𝐨𝐦𝐞𝐬 𝐚 𝐂𝐨𝐧𝐬𝐞𝐪𝐮𝐞𝐧𝐜𝐞 of doing things right. 𝐃𝐫𝐨𝐩 𝐲𝐨𝐮𝐫 𝐚𝐝𝐯𝐢𝐜𝐞 𝐨𝐫 𝐞𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 𝐢𝐧 𝐭𝐡𝐞 𝐜𝐨𝐦𝐦𝐞𝐧𝐭𝐬 - 𝐰𝐞’𝐥𝐥 𝐦𝐚𝐤𝐞 𝐬𝐮𝐫𝐞 𝐢𝐭 𝐠𝐞𝐭𝐬 𝐬𝐡𝐚𝐫𝐞𝐝 𝐢𝐧 𝐭𝐡𝐞 𝐫𝐨𝐨𝐦! #PCIDSS #CyberSecurity #Payments #InformationSecurity #PCITraining #KnowledgeSharing #Mentorship

18

4 Comments

🔒 The end of an era for UK cyber collaboration 🔒 This November marks the official decommissioning of the National Cyber Security Centre CiSP (Cyber Security Information Sharing Partnership) platform after more than a decade of service. Launched in 2013 by CERT-UK, CiSP was a pioneering initiative to bring together government, industry, and academia in a trusted environment for sharing cyber threat intelligence. At the time, it was one of the first large-scale attempts in the UK to create a secure, collaborative community where organisations could exchange real-time insights on threats, vulnerabilities and general cyber best practice. Over the years, CiSP has: ✅ Brought together thousands of members from across critical national infrastructure, business, academia and public sector. ✅ Facilitated early warnings and alerts that helped prevent attacks. ✅ Built a culture of collaboration over competition in cyber defence. ✅ Shaped thinking on how government and industry can work together against evolving threats. I’m proud to have played a part in this journey as the Service Owner for CiSP during its CERT-UK days and through the early years of the NCSC. It was a privilege to help establish and grow the platform that encouraged trust and collaboration at a time when information sharing in cyber security was still in its infancy. Seeing CiSP evolve and support organisations across the UK remains a highlight of my career. Of course, technology and the threat landscape have moved on. The NCSC is now investing in newer, more advanced platforms and approaches to information sharing that reflect today’s scale, speed, and complexity. But for many of us, CiSP will always represent a turning point and proof that trust, collaboration, and community are just as important in cyber security as firewalls and encryption. 👋 Thank you to everyone who contributed, shared, and learned through CiSP over the years. Its legacy lives on in the partnerships and practices it inspired. So on the 28th November I shall be finding a bar, in the Whitehall area, to make a toast and say farewell to the CiSP platform.

140

18 Comments

FutureRange MD Danny McEntee and ThreatLocker CEO Danny Jenkins sat down at Zero Trust World in Florida to discuss the challenges organisations face in combating cyber security threats and how Zero Trust in operation provides the most robust defence in an ever-evolving threat landscape.

32

𝗬𝗼𝘂 𝗰𝗮𝗻’𝘁 𝗵𝘂𝗻𝘁 𝘄𝗵𝗮𝘁 𝘆𝗼𝘂 𝗰𝗮𝗻’𝘁 𝘀𝗲𝗲. But you also can’t defend what you don’t 𝘂𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱. 🔐 A powerful share from Tom Read on the piece by Ollie W. at the National Cyber Security Centre, exploring why observability and threat hunting are now inseparable pillars of national resilience. 👉 Observability gives us visibility. 👉 Threat hunting gives us curiosity and context. Together, they turn fragmented signals into intelligence. This is the future of cyber defence: 🛡️ Moving beyond fragile IOCs to 𝗯𝗲𝗵𝗮𝘃𝗶𝗼𝘂𝗿𝗮𝗹 𝗧𝗧𝗣𝘀 🛡️ Linking 𝗱𝗮𝘁𝗮 𝘃𝗶𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝘆 𝘄𝗶𝘁𝗵 𝗵𝘆𝗽𝗼𝘁𝗵𝗲𝘀𝗶𝘀-𝗱𝗿𝗶𝘃𝗲𝗻 𝗱𝗲𝗳𝗲𝗻𝗰𝗲 🛡️ Embedding 𝗮𝗱𝘃𝗲𝗿𝘀𝗮𝗿𝘆 𝘀𝗶𝗺𝘂𝗹𝗮𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗽𝗿𝗼𝗮𝗰𝘁𝗶𝘃𝗲 𝗵𝘂𝗻𝘁𝗶𝗻𝗴 𝗶𝗻𝘁𝗼 𝗲𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗺𝘂𝘀𝗰𝗹𝗲 𝗺𝗲𝗺𝗼𝗿𝘆 💷 For #financialservices, this mindset is critical high-frequency, high-value, highly regulated environments demand real-time observability, cross-domain telemetry, and intelligence-led resilience that keeps pace with both adversaries and auditors. As the UK government continues to 𝘀𝘁𝗿𝗲𝗻𝗴𝘁𝗵𝗲𝗻 𝘁𝗵𝗲 𝗳𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝘀𝗲𝗰𝘁𝗼𝗿’𝘀 𝗿𝗼𝗹𝗲 𝘄𝗶𝘁𝗵𝗶𝗻 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗡𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 (𝗖𝗡𝗜) — emphasising systemic risk, third-party dependency, and operational resilience under 𝗗𝗢𝗥𝗔, 𝗙𝗖𝗔/𝗣𝗥𝗔, 𝗮𝗻𝗱 𝗡𝗖𝗦𝗖 𝗳𝗿𝗮𝗺𝗲𝘄𝗼𝗿𝗸𝘀 visibility and proactive threat hunting are no longer optional; they’re a core element of national defence. As AI and automation reshape our detection surfaces, the organisations that master observability and TTP-led hunting will be those 𝘁𝗵𝗮𝘁 𝘀𝗲𝗲 𝗮𝗻𝗱 𝗮𝗰𝘁𝗳𝗶𝗿𝘀𝘁. 📖 Read Ollie’s full NCSC blog: Strengthening national cyber resilience through observability and threat hunting #CyberResilience #ThreatHunting #Observability

4

1 Comment

It is really surprising how many cybersecurity professionals in the UK & in Gibraltar here on LinkedIn have not read, fully understood, or meaningfully integrated the principles of the Computer Misuse Act 1990 into their cyber practices. So, let’s break it down for vulnerability researchers and penetration testers. - The Computer Misuse Act 1990 (CMA) criminalises unauthorised access to computer systems. Full stop, and regardless of intent. This means that even well-meaning actions, such as scanning, probing, or reporting a vulnerability without explicit permission, can violate the law. There is no public interest defense written into the CMA, and intent to improve security does not exempt individuals from liability. - For vulnerability researchers, discovering a flaw in a system and responsibly disclosing it, without having a formal agreement or being invited to do so, can still be considered unauthorised access. Whilst I agree, this legal uncertainty discourages good-faith research and weakens the overall resilience of digital infrastructure in the UK, the law still applies. The Automobile industry has weaponised this for years. - For penetration testers, without a clear, signed scope of engagement and documented authorisation from the system owner, even routine activities like port scanning or exploiting a known vulnerability for demonstration can constitute an offence under the Act. In short: no contract, no testing. Understanding the CMA isn't optional. It’s foundational to ethical and legal security practices in the UK. Whether you're red teaming, bug hunting, or building secure infrastructure, knowing where the legal lines are, and ensuring your work stays on the right side of them, is not just good practice. It’s essential for protecting yourself, your clients, and the profession as a whole. You only need one of these companies to go after you, and it is game over. Does it need an update? Hell yes. Does that mean it does not apply? Hell no.

27

6 Comments

🛠️ Traditional SIEMs weren’t built for today’s threats. Complexity, poor cloud integration, and high false positives are holding security teams back. It’s time to modernize. This guide gives security leaders a clear roadmap to transform their SIEM without disrupting operations. 🔍 Start your SIEM transformation with Cortex XSIAM. https://bit.ly/3JsfsEz

84

PQC certification programme for UK consultancies from the National Cyber Security Centre to accelerate discovery and planning of PQC migrations - https://lnkd.in/eQkpJnjh

15

Cloud & Cyber Security Expo is excited to announce our Media Partnership with the UK Cyber Security Council for 2026! The UK Cyber Security Council is the charitable, self-regulatory body for the UK cyber security profession. It sets and upholds nationally recognised professional standards, supports career development, and works with government to strengthen the UK’s cyber resilience. Through professional registration and alignment with the National Cyber Security Strategy, the Council helps build trust and accountability across the industry. We’re proud to partner with them as we welcome CISOs, CIOs, and cybersecurity leaders to Excel London on 4–5 March. Register for Cloud & Cyber Security Expo 2026 here: https://lnkd.in/ebG-wGqc Learn more about the UK Cyber Security Council here: https://lnkd.in/eNV2gmvk 

7

After years of work, we have decent security standards, but we'll continue to struggle until we adopt security by default. Take the relationship between TLS 1.2 and 1.3, for example. Both protocols can provide reasonable security, but TLS 1.2 supports a kitchen sink of options, and you need to know what you're doing to configure it correctly. TLS 1.3, on the other hand, just works, no further work needed. This is just one example; there are dozens of standards and situations for everyone to consider when it comes to their network infrastructure. Until we get security by default, the only way to stay ahead is to have comprehensive configuration monitoring to catch problems and drift. I created Hardenize to solve exactly this problem. Our free test is still available at hardenize.com, and the commercial product has been rolled into Red Sift's. Now that Mail Check and Web Check are being retired, I am very happy that there is still a way for Hardenize to continue to serve.

13

1 Comment

Impersonations and targeted phishing attacks against financial institutions continue to rise. That’s why one of the UK’s Big Four Banks came to ZeroFox. With our advanced threat intelligence and takedown capabilities, we helped the bank achieve 7x more successful takedowns per month and save their employees 40 hours per week on takedown investigations. Read our case study to learn more about how we’re helping financial institutions keep their customers safe: https://ow.ly/SlrL50XiljU #Banks #FinancialServices #FraudProtection #DigitalRiskProtection

33

Stay ahead of cyber threats in the UK! Our quarterly Threat Intelligence Report is essential for keeping you informed on the latest cyber risks. Read insights into emerging threats and actionable recommendations to mitigate them. https://lnkd.in/e6bZWHsT

6

Big promises, tight budgets, and a fast-moving threat landscape. The UK government’s new Cyber Security and Resilience Bill is full of ambition, but will it deliver where it counts? We've added a link to an article in the comments that breaks down what the policy really means for businesses.

5

1 Comment