Expert in online culture and technology, Jamie Bartlett, shares insights from his journey across the far reaches of the dark web. Jamie explores how to navigate the innovative ways threat actors exploit human behaviour, and emphasises the huge regulatory task at hand. He also draws from his extensive experience in the cryptocurrency space to delve […]
Rocio de la Cruz from BPE Solicitors provides a legal perspective on cybercrime and policy as ISF Analysts explore the ISF’s involvement in CC-Driver. The panel delve into the European Commission project, and expand upon the new methods detailed in the report aimed at preventing, investigating and mitigating cybercrime in Europe. …we need to discuss, […]
The recently released European Commission report, led by the Information Security Forum with contribution from CC-Driver, a consortium of 13 partner organizations from nine European countries, issued a cybersecurity framework of five interrelated elements deemed critical to tackling cybercrime and bolstering cybersecurity defences. Funded by a €5m European Commission Horizon 2020 research program, the report is compliant […]
This week’s episode sees ISF Chief Executive Steve Durbin sit down with Alexander Seger, head of the Cybercrime Division at the Council of Europe, to share insight into the evolving cybercrime landscape. The pair discuss ways to promote cooperation between private and government entities, the challenges of investigating and prosecuting cybercrimes across multiple jurisdictions, and […]
On Thursday 24th February at 13:00 GMT, Bruce Page and Aman Behl, ISF, discussed the key findings of a European Commission research report on cyber-related strategies, laws, initiatives, law enforcement and data in eight countries. In this session they explored: the work being done to investigate cybercrime at a European level five tools that will […]
Panelists from the ISF CxO Roundtable – Today’s Cybercrime pandemic and what to do about it discuss the recent colonial pipeline, the negative impact of OT, and the decision of whether to pay a ransom or not. To watch the full discussion watch here.
Understand how to protect your organisation’s crown jewels in a quick 6-minute snippet from Today’s cybercrime pandemic and what to do about it – CxO Roundtable. Robert Hannigan, Chairman of BlueVoyant and ex-Director of GCHQ and Steve Durbin, CEO, ISF discuss what cybercriminals look for when sizing up an organisation, the tactics they deploy and how […]
Hear 3 key takeaways from Today’s cybercrime pandemic and what to do about it – CxO Roundtable. Understand what organisations can do to prevent themselves from attacks, how CISOs can engage the board and how to future-proof your organisation against cybercrime. Guest speakers share their insights on the techniques cyber criminals use to increase the […]
Cybercrime has increased exponentially during the pandemic which in turn has seen an increase in ransomware attacks. Add to this the increased discussion around nation-state attacks and it’s easy to see why organisations who operate on a global scale are asking ‘how do we mitigate these risks?’ In this live broadcast session, guest speakers share […]
By Steve Durbin, Chief Executive of the ISF With the pandemic precipitating a rapid acceleration of working from home, the potential attack surface for cyber-criminals has grown enormously. People are working in less secure environments, they are more distracted, and the pandemic has provided cover for countless scams. Steve Durbin, Chief Executive of the ISF […]
Ransomware is on the rise—there’s no doubt about that. On Thursday 18th February, 14:00 GMT/15:00 CET, the ISF was joined by Jared Phipps, SVP Worldwide Sales Engineering at SentinelOne for a webinar looking into the cybercrime trends to look out for in 2021. Listen back to this webinar and you will: Understand who is behind […]
By Steve Durbin, Managing Director, ISF Current attacks will continue to be refined, and what may seem a weakness now could turn out to be a disaster. The majority of significant threats we face today have been around for years, even centuries (for example, fake news via propaganda, demands for ransom, data compromise), and while […]
In the past, traditional organised crime and cybercrime had very little to do with each other. However, with digitisation over the last 10 years, the two criminal cultures are beginning to merge, allowing global criminal networks to expand, and cybercrime becoming an increasing issue for law enforcement and politicians. In this interview, Misha Glenny, award-winning […]
We hope you enjoyed tuning in to our Summer Listening programme over the last few weeks. As we enter Season 22, we thought we would take a moment to reflect a handful of notable discussions from our guest interviews so far. Today’s episode features the most memorable moments from Steve Durbin, Chief Executive of the […]
CISOs need to define their risk tolerance, identify specific critical data, and make changes based on strategic business goals. The past few years have been a bumpy ride all around. 2022 was supposed to be a breather for CISOs as the uncertainty surrounding the pandemic largely subsided. Sadly, they found themselves coming to terms with […]
As digital transformation takes a grip of all aspects of business, the relationship between CISOs and the board is increasingly crucial. Leveraging her vast boardroom experience, Margaret Heffernan joins Steve Durbin to provide actionable advice on how security and business leaders should collaborate to ensure best practice security is cascaded through the business. …there isn’t a […]
The year 2022 was when the world largely emerged from the pandemic and woke up to a number of changes in the overall business landscape. Commerce had become more digital. Working from home had been normalised. A number of physical assets had merged with digital, artificial intelligence had made its inroads into businesses, and cyber […]
Arunoshi Singh is a public policy and international relations graduate with a keen interest in information security governance. She has been supporting ISF Services in developing and delivering cyber awareness programmes, both in the form of cyber attack simulations and from a human-centred perspective since November 2021. She is leading the ISF contribution to CC […]
Most security incidents have less to do with technology and more to do with people. In 2021, 82% of security breaches involved a human element. Negligence, judgement errors, carelessness, misuse, misconfigurations and biases help cyber criminals walk through the front door of some of the most “security-savvy” organisations. The threat landscape is also becoming riskier and more complex. Employees working […]
Phishing continues to be the preferred method that cybercriminals use to gain access to a business-critical information. While many organisations have turned to technology to combat the threat, criminals blend their own technology and creativity to bypass legacy security systems and launch their attack – meaning your business’s customer, employee, and financial data is […]
Over the past weeks, you’ve heard encore presentations of some of our favourite episodes this year throughout our Summer Listening programme. As we look ahead to Season 14, we are taking this moment to reflect on the highlights from our guest interviews during 2022 so far. Today’s episode features standout moments from Steve Durbin, Chief […]
8 Cyber challenges in an uncertain world Cybercrime is now part of everyday life, and as more organisations adopt digitalisation and move their operations exclusively online, their need to protect data and critical assets increases. In a changing world where resources are limited more than ever, the need to manage information risk and establish resilience […]
Rising inflation, surging commodity prices, an uncertain economic recovery and an ongoing Russia-Ukraine crisis — the global economy has had a pretty rough start to 2022. Against such a volatile backdrop, supply chain companies face enormous risks and significant pressure in terms of business disruptions, security and safety of infrastructure, theft or loss of confidential […]
In this episode, ISF Chief Executive Steve Durbin is in conversation with Adam Rumanek, the founder and CEO of AUX Mode, a company specialising in digital rights management, content strategy and IP protection. The discussion expands upon the challenges of protecting content and intellectual property in today’s rapidly expanding digital sphere. Covering not only what […]
ISF Analysts and authors of the latest Threat Horizon 2024: The disintegration of trust report, Mark Ward and Max Brook, speak with James Chappell from security firm, Digital Shadows, to expand upon cyber crime, a major risk topic within in the series of reports. James offers his business perspective on recent trending cyber attacks; highlighting the […]
In this round up episode of Season 10, Steve Durbin, ISF Chief Executive, provides actionable insights for SME and multi-national organisations on ‘how to adapt to a riskier future’. This season covered a broad range of topics: from the challenges of building a culture of security in a multinational corporation with David Thornewill, DHL’s CISO, to exploring the […]
Steve Durbin, Chief Executive of the ISF, sits down with Federico Varese, a professor of Criminology and Head of the Sociology Department at Nuffield College, Oxford University. With first-hand account from his fieldwork in global criminal gangs over the last three decades, Prof. Varese provides superb context to the history of organised crime, and how […]
Steve Durbin is Chief Executive of the Information Security Forum. He is a frequent speaker on the Board’s role in cybersecurity and technology. Covid-19 has accelerated the Fourth Industrial Revolution. E-commerce, online learning, online services and remote work will likely continue to transform society long after the pandemic has ended. By 2025, it is estimated […]
Daniel Norman is a Senior Solutions Analyst at the Information Security Forum (ISF). The Middle Eastern region has seen significant public and private investment, especially across urban areas since the mid 1980’s. One just has to compare the skylines of Dubai or Abu Dhabi in the 1980’s to see the differences between the small fishing […]
Steve Durbin is Chief Executive of Information Security Forum. He is a frequent speaker on the Board’s role in cybersecurity and technology. With the world embracing hyper-connectivity, businesses intensifying their digitization efforts and consumers entering a new realm of augmented reality like the metaverse, it’s not hard to imagine cybercrime becoming more insidious. Cybercrime breaks new […]
Ransomware needs no introduction and is perhaps the most damaging and widespread form of cybercrime in years. Several high-profile businesses fell hostage to ransomware in the first half of 2021, with U.S. agencies now prioritizing ransomware incidents as serious acts of terrorism. In 2020, attack incidents grew by 800 percent, and 73 percent of those […]
Steve Durbin, Chief Executive of the ISF, kicks off 2022 focussing on his recent discussion with world-renowned experts. In this episode, Steve focusses on The New World Order where he outlines the areas of cybersecurity that are likely to be impacted by the increase of data volumes and usage as a result of deploying advanced […]
Steve Durbin is Chief Executive of Information Security Forum. He is a frequent speaker on the Board’s role in cybersecurity and technology. Cybercrime will cost the global economy $10 trillion annually by 2025. Even though security spending is at an all-time high, the majority of security leaders still lack confidence in cybersecurity investments. This is because most security breaches aren’t a […]
Paul Watts, Distinguished Analyst for the Information Security Forum (ISF), featured in Computer Weekly. The past five years have been a turbulent time for the IT sector. Just as technology has become more advanced and ubiquitous, so too have the threats facing the industry escalated. Rising to counter these threats are a multitude of security services […]
Viviane Reding, former First Vice-President of the European Commission, sits down with ISF Chief Executive, Steve Durbin to discuss the ramifications of GDPR, cybercrime, and what kind of governance in cyberspace is possible going forward. I think privacy by design will become more important when we go to the development of AI, because at a […]
Steve Durbin is Chief Executive of Information Security Forum. He is a frequent speaker on the Board’s role in cybersecurity and technology. Cybercrime is a major threat to every industry and organization in the world. No wonder global entities are desperately seeking a silver bullet that can somehow neutralize cybersecurity threats. Right now, the cybersecurity industry is […]
Paul Watts, Distinguished Analyst of the Information Security Forum (ISF), features in the latest Write Side Up by Freeform Dynamics for Computer Weekly. As someone who first encountered ransomware during the last millennium – thankfully at second-hand – and has been writing about it for almost as long, I sometimes find myself amazed by the […]
Here are five questions to help determine if your company needs cyber coverage. The cyber insurance market is rapidly maturing and there are many reasons for this. Companies are increasingly leveraging technology to expand or streamline their businesses, remote work is seeing wide-scale adoption, cybercrime is inflicting trillions of dollars in damages and global cybersecurity legislation and […]
To pay or not to pay? Notwithstanding the ethical and emerging federal legal liability issues associated with paying a ransom, what should you do in this situation? Steve Durbin, Chief Executive, ISF Police forces, healthcare providers, educational institutes, the oil industry, entire governments — no sector is immune to the ransomware epidemic. Once you’re hit, […]
The ISF, in conjunction with CC-DRIVER, a consortium of 13 partner organisations from industry, research and law enforcement backgrounds, have released a report detailing new methods to prevent, investigate and mitigate cybercriminal behaviour. This report presents a review and gap analysis of cybersecurity legislation and cybercriminality policies covering eight European countries. The eight countries included: […]
Organisations often have the best of intentions when creating some of these types of software, but they can often be on the edge of what is right and acceptable for many, treading that thin line into the ‘black hat’ world UK’s cyber partnership with Israel Speaking at Cyber Week hosted by Tel Aviv University (July 20), […]
On Thursday 17th June, 10:00 BST, Benoit Heynderickx, Principal Analyst at the ISF took part in a TeissTalk discussing Ransomware as a 2021 threat trend. This teissTalk answered some of the biggest questions facing the Information Security industry, including: Are cyber criminals moving from encryption to exfiltration, and what can you do to protect your […]
Benoit Heynderickx, Principal Analyst at the ISF, chairs a live panel discussion with Andy Jones, Distinguished Analyst at the ISF and author of our Extinction Level Attacks report, and Zeki Turedi, CTO, Europe, Middle East and Africa at CrowdStrike. This discussion set the scene of the dangers of ransomware; exploring the current trends, shifts in […]
By Steve Durbin, CEO of the Information Security Forum, and Forbes Business Council Member Building security awareness is vital to combat cybercriminals employing sophisticated social engineering techniques to victimize employees struggling with security policies. Steve Durbin, CEO of the ISF There was an inevitable uptick in cybercrime in 2020, as organizations scrambled to support a […]
By Steve Durbin, CEO of the ISF Maturing your organization’s ability to detect intrusions quickly and respond expeditiously will be of the highest importance in 2021 and beyond. Steve Durbin In the year ahead, organizations must prepare for the unknown so they have the flexibility to endure unexpected and high-impact security events. ISF’s Steve Durbin […]
By Steve Durbin, CEO of the ISF Leading the enterprise to a position of readiness, resilience and responsiveness is the surest way to secure assets and protect people. Steve Durbin, CEO of the ISF Alongside new technologies, the geopolitical arena will continue to be complex, turbulent and fragile in 2021. Economic conditions will also have […]
Attackers will continue to be presented with the tools and opportunities to target and exploit those who are unprepared… Steve Durbin, Managing Director of the ISF The Information Security Forum (ISF), trusted source for strategic and practical guidance on information security and risk management, has announced the organization’s outlook for the top global security threats that businesses […]
As we approach the start of the new year, ISF Chief Executive, Steve Durbin, breaks down the top five threats for security professionals to guard against in 2021. Steve explores the following threats: The insider threat Edge computing pushes security to the brink The digital generation becoming the scammer’s dream So I think that 2021 […]
I, for one, am wary if a website asks me, unprompted, to download anything. It immediately makes me wonder if it is legitimate. Richard Absalom, Senior Research Analyst at the ISF A newly reported supply chain attack involved malicious hackers compromising financial and government websites so they would deliver malware to unsuspecting visitors. The tactic […]
Errors and acts of negligence can cause significant financial and reputational damage to an organization… Daniel Norman, Senior Solutions Analyst at the ISF Organizations should improve their understanding of the human mind to establish more secure behaviors among employees, according to the Information Security Forum (ISF). The group has published a new report entitled Human-Centred Security: Positively Influencing Security […]
Privacy should also be a high priority for anyone handling sensitive information, considering the shift towards storing patient records online. Daniel Norman, Senior Solutions Analyst at the ISF The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the U.S. Department of Health and Human Services (HHS) have credible information of […]
Basic cyber hygiene standards need to be met, covering patching and updates, network segmentation, network monitoring and hardening, especially for technologies such as AI, robotics and IoT devices. Dan Norman, Senior Solutions Analyst at the ISF The Cybersecurity and Infrastructure Security Agency (CISA), FBI and the U.S. Department of Homeland Security warned this week of […]
The attacking state will build user profiles, understand patterns of behavior and then they will target the most influential individuals or ones most likely to slip up. Daniel Norman, Senior Solutions Analyst at the ISF Norway this week accused Russia of hacking the email system of the country’s parliament, known as the Storting, in September. In […]
Cybercrime flourishes in an economic downturn, and as more organisations adopt digitalisation and move operations online, their need to protect data and critical assets increases. We live in an uncertain world where budgets and resources are tight, yet the need to manage information risk and establish resilience has never been more important. Alex Jordan, Senior […]
We live in an uncertain world where budgets and resources are tight, yet the need to manage information risk and establish resilience has never been more important. Steve Durbin, Managing Director of the ISF LONDON (October 8, 2020) – The Information Security Forum (ISF) today announces the global launch of ISF Aligned Tools Suite 2020, bringing together […]
Non-security incidents can have a substantial knock-on effect within the information security spectrum Steve Durbin, Managing Director of the ISF Cyber threats didn’t suddenly become a thing when COVID-19 pushed the enterprise into a remote workforce. Careless, security noncompliant employees have negligently allowed hackers access into company computers and software while solidly ensconced within a brick-and-mortar office. A […]
The risk and severity of cyber-attacks have increased over the past few years. In recent years, mankind has witnessed the most horrifying cases of cybercrimes relating to data breaches, crypto-jacking, flaws in microchips, and many others. The wide use of digital media and the advancement of technology is making attackers increasingly smarter. Additionally, cybercriminals take […]
When Smithfield Foods closed its Sioux Falls pork processing plant – joining other meat and poultry closures from Tyson Foods, Cargill and JBS USA – headlines suggested that the country was ‘perilously close to the edge’ of food shortages. So, just how safe is the food supply? The recent closures have been forced by the […]
The Information Security Forum (ISF) has published a major update to its Standard of Good Practice (The Standard) for IT security professionals, the industry’s most business-focused, all-in-one guide to information security assurance, presenting business-orientated information security topics with practical and trusted guidance. The Standard provides a ready-made framework that can help an organization improve their resilience by preparing for, […]
Senior executives understand that today’s global economy is still not adequately protected against cyberattacks, despite years of effort and multi-billions in spending each year. Until recently, many chief financial officers (CFOs) may not have been considered an essential part of an organization’s security team. And many may not have understood how to respond to security […]
In this ISF Podcast, Cyberpsychologist Dr Mary Aiken sits down with ISF Chief Executive, Steve Durbin to discuss the difference between cyberspace and real life, whether or not humans are prepared for the cyber challenges we face, the impact of technology on young children, and a fascinating potential solution to the skills shortage that could […]
The traditional picture of a hacker is of a script kiddie in a hoodie hunched over a computer keyboard, but this stereotype is stale and outdated. Is it time to move away from a fear-based approach to security? When people think about hackers, the default perception is of a teenage script kiddie, slaving away in his […]
“This debate has been ongoing for some time now and there is clearly a need to protect the rights of the individual around the collection, processing and storage of personal data.” Steve Durbin, Managing Director, ISF U.S. Sen. Steve Daines, R-Mont., and Rep. Warren Davidson, R-Ohio, introduced a bill to reform Section 215 of the PATRIOT Act […]
“In a hyperconnected world, attack surfaces and interdependencies will grow astonishingly quickly,” warns Steve Durbin, Managing Director of the Information Security Forum. For the first time ever, the top five most likely global risks enumerated in the annual Global Risks Report from the World Economic Forum (PDF) are all environmental: extreme weather, climate action failure, […]
The race to develop strategically important next-generation technology will drive an increase in nation-state-backed attacks. In the year ahead, organizations must prepare for the unknown. They can do so by ensuring they have the flexibility to endure unexpected and high-impact cybersecurity events. Businesses will need to manage security risks in ways beyond those traditionally handled […]
In the year ahead, organisations of all sizes must prepare for the unknown, so they have the flexibility to withstand unexpected, high-impact cybersecurity events. To take advantage of emerging trends in both technology and cyberspace, businesses need to manage risks in ways beyond those traditionally handled by the information security function, since new attacks will […]
It’s that time of year again. Time for every one of us to reminisce on the past year and make resolutions for how we can do better in the year ahead–particularly in the area of cybersecurity. Right up to the end of the year, massive cyber-attacks and high-profile data breaches made headlines in 2019. In […]
The Information Security Forum (ISF), a resource for executives and board members on cybersecurity and risk management, has announced the organization’s outlook for the top global security threats that businesses will face in 2020. Key threats for the coming year include: The Race for Technology Dominance Third Parties, Internet of Things (IoT) and the Cloud Cybercrime […]
Pilot Program Demonstrates ISF’s Commitment to Working with Leading Authorities on Information and Cyber Security-Related Standards and Frameworks The Information Security Forum (ISF), trusted resource for executives and board members on cybersecurity and risk management, announce that the organization has been working with the United States National Institute of Standards and Technology (NIST) as part […]
A new report explores how attackers identify psychological vulnerabilities to effectively manipulate targets. “People make mistakes” is a common and relatable phrase, but it’s also a malicious one in the hands of cybercriminals, more of whom are exploiting simple human errors to launch successful attacks. The Information Security Forum (ISF) explored the topic in “Human-Centered […]
As new technologies and infrastructure such as virtualization, cloud, and containers are introduced into enterprise networks to make them more efficient, these hybrid environments are becoming more complex—potentially adding risks and security vulnerabilities. According to the Information Security Forum’s Global Security Threat Outlook for 2019, one of the biggest IT trends to watch this year is the […]
In the year ahead, organizations must prepare for the unknown so they have the flexibility to endure unexpected and high impact security events. To take advantage of emerging trends in both technology and cyberspace, businesses need to manage risks in ways beyond those traditionally handled by the information security function, since innovative attacks will most […]
Cybercrime caused no shortage of sleepless nights in 2018. And in 2019, freelance hackers and sophisticated nation-states alike will be more determined and capable than ever — to put your organization in the cross hairs. Yet despite projections of a $6 trillion cybercrime toll by 2021, too many business and technology leaders remain ill prepared […]
In the year ahead, organizations of all sizes must prepare for the unknown, so they have the flexibility to withstand unexpected, high-impact cybersecurity events. To take advantage of emerging trends in both technology and cyberspace, businesses need to manage risks in ways beyond those traditionally handled by the information security function, since new attacks will […]
