James Todd

🛠️ Traditional SIEMs weren’t built for today’s threats. Complexity, poor cloud integration, and high false positives are holding security teams back. It’s time to modernize. This guide gives security leaders a clear roadmap to transform their SIEM without disrupting operations. 🔍 Start your SIEM transformation with Cortex XSIAM. https://bit.ly/3JsfsEz

84

It's been a busy few months Rapid7. We've launched Intelligence Hub to provide curated, high-fidelity data to enable organisations to focus on threats relevant to their sector or geo. We 've introduced new features within Remediation Hub, giving security teams a unified view of assets to prioritise and optimise risk mitigation. Additionally our AI teams has been busy leveraging agent AI and automation to scale detection and response, active remediation for MDR and extending AI alert triage for SIEM customers! If you interested to learn more, then dive in by clicking on this link or subscribe to the R7 blog at https://lnkd.in/etdj9-ck https://lnkd.in/etcnQypx

144

After years of work, we have decent security standards, but we'll continue to struggle until we adopt security by default. Take the relationship between TLS 1.2 and 1.3, for example. Both protocols can provide reasonable security, but TLS 1.2 supports a kitchen sink of options, and you need to know what you're doing to configure it correctly. TLS 1.3, on the other hand, just works, no further work needed. This is just one example; there are dozens of standards and situations for everyone to consider when it comes to their network infrastructure. Until we get security by default, the only way to stay ahead is to have comprehensive configuration monitoring to catch problems and drift. I created Hardenize to solve exactly this problem. Our free test is still available at hardenize.com, and the commercial product has been rolled into Red Sift's. Now that Mail Check and Web Check are being retired, I am very happy that there is still a way for Hardenize to continue to serve.

13

1 Comment

Huge win for the #UK #education and #research sector! 🎓 The procurement framework piece is critical here - removing procurement friction means institutions can focus on implementation rather than bureaucratic hurdles. For universities and research organizations dealing with sensitive data, distributed networks, and increasing cyber threats, having streamlined access to enterprise-grade PKI and certificate lifecycle management is essential. Educational institutions often operate with complex certificate environments (student access, research networks, #IoT devices, federated authentication) but limited security resources. Automated lifecycle management at scale prevents the certificate expiration issues that can bring down critical systems. This kind of foundational trust infrastructure enables secure collaboration across the research ecosystem. Well done DigiCert and Jisc! 🔐 #PKI #DigitalTrust #HigherEducation #CyberSecurity #Research #TLS #CertificateManagement #InfoSec #UKEducation

3

How secure is the UK’s rail network as it transitions to Great British Railways? With legacy systems meeting new digital platforms, cyber risk is rising. This white paper explores practical ways to protect critical rail infrastructure, safeguard passengers, and support operational continuity. Read now: https://lnkd.in/dVDGtjW3 #ProtectCriticalInfrastructure

11

CovertSwarm is accredited by CREST to deliver CBEST TLPT assessments, the UK’s financial-sector standard for threat intelligence-led security testing. Our red team uses an intelligence led approach to emulate advanced persistent threat actors across all attack vectors to assess cyber resilience under realistic conditions. Learn more about capabilities for financial services: https://hubs.li/Q03lM26Q0

29

CYSIAM’s David A. speaks about the importance of high risk supply chains such as in the UK Defence sector using credible partners that understand the adversaries they face. #CYSIAM #DefenceSupplyChain #cybersecurity

5

MDR sharpens visibility. Because resilient businesses need a clearer lens. In today’s cyber landscape, what you don’t see often matters more than what you do. Modern security teams face an overload of alerts. MDR steps in to give clarity where it matters most: - Filters noise so only real threats demand attention - Adds context to alerts for faster understanding - Guides action with expert-driven recommendations - Accelerates decisions when time is critical - Strengthens resilience by spotting what tools alone may miss MDR makes your defenses sharper, faster and more reliable. Graftronics is a Sophos MDR partner, transforming IT teams across organizations in multiple industries. Reach out to us for assessing MDR for your setup. - Vimesh Avlani Managed Detection & Response | Cyber Resilience | Trusted by Mid-Market CXOs

20

4 Comments

A new cybersecurity report for space-based power generation. The world needs more renewables and this is a new frontier. Good analysis. One concerning scenario I had not considered: adversaries taking control of a different spacecraft capable of reaching the orbit of the space-based solar platform and colliding with it. In future, do we need really good cybersecurity for all high-powered spacecraft no matter who sends them up, not only the solar station and ground stations themselves? See the full report here ➡️ https://lnkd.in/gHpRVj3C

7

Giltar Information Security Ltd are delighted to be supporting the early discovery and development work for the UK military's Digital Targeting Web. The DTW is a £1bn game changing capability which featured as a key recommendation in the recent Strategic Defence Review and it will transform the speed and precision of the sense/decide/effect chain leveraging AI along with a shift from network and application centricity to data centric operations. It will align with NATO standards enabling alliance interoperability and position the UK as the blue force leader in the digital targeting space. Giltar Information Security Ltd will lead the early security work developing guidance, principles and architecture that will lay the foundations for compliance with #SecureByDesign principles. We will also enable dynamic and proportionate security assurance of early minimum viable product demonstrations. #DigitalTransformation

28

2 Comments

I welcome the UK’s new Cyber Security and Resilience policy presented to Parliament by the Secretary of State for Science, Innovation and Technology by Command of His Majesty because it will bring managed service providers under regulatory oversight for the first time. This is a wake-up call for our industry, and a huge opportunity for those of us who take cyber seriously. Compliance won’t be optional. Trust won’t be assumed. Now’s the time to level up. #CyberSecurity #MSP #Regulation #NIS

10

These are wise words from Richard Horne - cyber crime is undoubtedly the biggest risk to global business. In fact, the World Economic Forum identified cyber crime as one of the biggest risks to the global economy. The reality is that businesses are unprepared.

33

2 Comments

Many deepfake attacks succeed because people don't know what to look for. CloudGuard have published a practical guide breaking down 10 visual and audio deepfake warning signs, plus a short interactive walkthrough you can share internally. If your team can spot the signs, they can help stop the attack. 👉 Read it here: https://lnkd.in/eKem5xGe

53

5 Comments

Non-human identities - devices, service accounts, AIAgents - now shape both security risk and operational speed, yet most IdentityGovernance models weren’t built for them. In this article, Martin Kuppinger outlines a practical maturity-based approach to governing NHIs across their full lifecycle, from provisioning to decommissioning. Read the latest advisory from KuppingerCole Analysts to see how stronger NHI governance can improve security and efficiency: https://bit.ly/3NSP0G8 #NHIs #AIAgents #IdentityGovernance

2

Our whitepaper "Optimising Networks with F5 Solutions," explores how we help clients across various industries streamline their application delivery estates. Key topics within the whitepaper include: ◾ Network automation ◾ Benefits of the NetDevOps approach ◾ CACI’s approach ...Plus use cases and how CACI and our partners F5 can support your organisation! Discover how our 20+ years of expertise and advanced tooling can transform your network operations. Download our whitepaper here: https://lnkd.in/ei2BcbPB #NetworkAutomation #NetDevOps #Networking #F5 #NetworkServices

11

National Cyber Security Centre issued this advice a few weeks ago - we have seen an increase in activity aimed at Scottish Public Sector organisation's and all relevant agencies are monitoring this activity. - We are reaching out proactively around any intelligence we receive, but can you all add another layer of "healthy paranoia" to your Cyber resilience, and ensure any partners you are working with are aware also. https://lnkd.in/ee7-8gMJ

34

1 Comment

There’s something quietly powerful about revisiting the places that shaped you. I did this MSc part-time in 2006; back when it was one of the first programmes of its kind. And, like all good education, its value only really compounds in hindsight. If you’re an alumnus, it’s worth a couple of minutes. Not because surveys change the world… but occasionally, they nudge it in a better direction. Long may it continue to evolve.

5

In the Quorum Cyber Global Cyber Risk Outlook 2025 report, we highlighted that public sector networks are the most frequently targeted by cyber threat actors compared to all other verticals. Last year alone saw approximately 2,550 cyber-attacks against government systems, a 91% increase from the 1,332 reported in 2023. With this trend, Quorum Cyber recently released a blog covering my insights on the various types of cyber threats that #UK public sector organisations must be aware of. I also highlight recent examples of attacks that we have detected. To find out more, check out the blog linked in the Quorum Cyber post below so that we can help protect public sector organisations! ⬇️ #ThreatIntelligence #CyberSecurity #Intelligence #StrategicRisk #UK #PublicSector

7

Join us for our latest episode of Tea & Trend Sessions, as Jeremy Wimble, Senior Programme Manager, Defence at techUK, explores the UK’s evolving defence technology landscape. From the Strategic Defence Review to the Ministry of Defence’s role in shaping cyber policy, Jeremy shares key insights into how national strategy is influencing cyber resilience, and why accelerating innovation is critical to keeping the UK’s defence sector cyber secure. Tune in as we discuss: - The rise of Secure by Design - Balancing digital sovereignty with access to AI and cloud - The operational risks and opportunities of integrating AI into defence systems - Highlights from the NCSC’s 2025 Annual Review. 👉 Register now! https://bit.ly/47JgjJq 👉 Missed an episode? Catch them all on-demand here https://bit.ly/4gyDgmA #TeaAndTrend #CyberResilience #CyberSecurity #DefenceTech #TrendMicro #techUK #SecureByDesign #AIinDefence #DigitalSovereignty

3