Cybeers

CrowdStrike Falcon Agent causing Blue Screen of Death (BSOD) Errors on Windows

• Pikabot
• MFA bypass
• EDR bypass
• Worm GPT
• Sleepers inside of organisations

In our latest (and refreshed!) podcast, our team discussed network segregation, back-ups, data footprint and cyber-insurance.

We also unpacked what breached organisations are doing while potentially affected customers await information.

Learn why it is essential to have good IT support before you get to the cyber experts.

Subscribe to get notified about our next episodes. We are recording each month!

Richard, Nick and Mike, chatty as always, discussed careers in cyber;

- How was it 'back in their days' vs today,

- what's the challenge with entry-level roles,

- can you become an expert in a 6-week course,

- what are the trends, and how do you specialise,

- and when we are hiring, what do we look for?

[🎙 #Cybeers Las Vegas 🇺🇸 Special]

Richard Grainger, Nick Morgan and Milan Patel covered key takeaways from SANS DFIR Summit the team attended in Austin, TX and BSides Las Vegas.

Key impressions cover:

▶ Bulk forensics at scale,

▶ process improvements,

▶ how to get results quicker,

▶ flow and impact of cloud forensics, but also validation on how we respond to ransomware attack cycles,

▶ cost-effective SIEM,

▶ process creation logs,

▶ Google Workspace forensics, and much more.

✳ SANS Institute is one of the world's largest providers of cybersecurity expertise and research. This year from the 3rd-4th of August, the Summit gathered 250 in-person attendees, whilst around 4000 people followed the sessions online.

✳ BSides is a get-together for the Information Security industry and community, provides conferences for security practitioners, and is present in 194 countries worldwide. The Las Vegas edition was happening from the 8th & 9th of August.

Richard Grainger, Nick Morgan and Michael Varley exchanged thoughts on the increased number of reported cyber incidents in healthcare.

▪ Is cyber in healthcare prioritised as it should be,

▪ how much does the specificity of healthcare technologies affect effective maintenance,

▪ what should GPs or small practices be doing to protect their data,

▪ how not to create a potential for data to be accessed.

Tune into Part 2 of 🎙 #Cybeers Las Vegas 🇺🇸 Special. Richard Grainger, Nick Morgan, Milan Patel and Christopher-Jan Tokarski shared their impressions, learnings and favourite moments from #DEFCON.

#CyberSecurityAwarenessMonth is a good reminder that organisations should think about cybersecurity throughout the year, not just in October. Nick Morgan and Jack Rutherford discussed four essential controls but, most importantly, provided extra tips.

We discussed:

- Changing regulatory environment

- Growing demand due to regulation

- Understanding the maturity of the organisation, developing objectives

- The DFIR factor

- Utilising real life examples from like compromises

- Changing techniques

- Consideration of mitigating controls Some of the questions we ask during these exercises:

- Ransom payment decisioning

- Introducing complexities around sanctions, insurance

- Dependence upon ransom to recover

- Board Engagement on the day

- Accountability / responsibility of the board.

Cybeers with Richard Grainger, Craig Martin, and Nick Morgan.

Over the last few years, guys have been trying to find out when the initial access happened, and they discovered, especially for ransomware engagements, that there are a lot of activities in environments during the Christmas break. What's happening while people are not working and enjoying their time away, and what are we especially concerned about this year?