Chris Dimitriadis

New feature in TaskForce 2024.6! 🎉 With the new TaskForce update, you can combine various ports into a group in Express mode. Each group has different settings of target folder, file format, type of hash to calculate, and case report fields. #dfir #digitalforensics #forensicimaging

13

Greek Post receives three million euro fine for data breach caused by ransomware The Greek Data Protection Authority (HDPA) has imposed a fine of 3 million euros on the Greek Post for a data breach caused by a ransomware attack in 2022. During the attack, data from the postal systems was stolen and vital company systems were encrypted. The stolen personal data was eventually published on the internet by the ransomware group. Hellenic Post reported the data breach to the Greek Data Protection Authority, which then launched an investigation. The HDPA found that the post had not implemented appropriate technical and organizational measures to protect personal data, lacked a data protection policy, and did not regularly test the security of the systems and services used. Based on the number of affected individuals, the damage incurred, the data leakage on the internet, and the inadequate security measures, the Greek Data Protection Authority imposed a fine of 3 million euros. According to the HDPA, the Greek Post violated several aspects of the GDPR. However, it was noted that since the incident, the post has tightened security measures, a significant portion of the data could be restored via backups, no sensitive personal data was leaked, the post provided multiple notifications about the incident, and the financial situation of the organization was taken into account. Privacy Management System, Training and Consultancy: https://privacy.partners #greekpost #databreach #gdpr #fine #measure #dataprotection #cybersecurity #impact

2

It is a short 7 days until the final drafts of the Regulatory Technical Standards (RTS’s) are set to be released to the general public by the European Supervisory Authorities (ESA’s) . In these the ESA’s will focus on: Technical standards on content, timelines and templates on incident reporting Guidance on aggregated costs and losses from major incidents Technical standards on subcontracting of critical or important functions Technical stands on oversight on harmonization Oversight cooperation between ESAs and competent authorities Technical standards on threat-led penetration testing (TLPT) It will be interesting to see the final text when it comes out, especially around the testing standards. With the need to be compliant by January 17th, 2025. It leaves less than 190 days to ensure your firm is ready. Head over to our blog to read more about how certain regulators are already making DORA a focus in their communications with the firms in their domain. https://lnkd.in/eMyXiBJY Want to know more? Reach out to us via the contact us button and we will schedule some time to chat about how we can help your firm on their compliance journey.

20

#Forensicadvisory practices have certainly scaled up significantly to cope with the increased #investment activity, not just by way of an increase in strength of forensic practitioners, but also introduction of a more diverse #skillset, advanced #forensictechnology and #AI, leveraging #dataanalytics, in order to cover multitude of complex dimensions in an #investigation: Geetu Singh, KPMG India. Read more in LiveMint https://lnkd.in/dUhc5W-n | #KPMGForensic

38

1 Comment

Vital Digital Forensics has observed in the last month that #Akira ransomware has performed many attacks against #Greek organizations. Before that, the least Athens Technology Center has been reported by #OSINT sources (https://lnkd.in/d5XFqJaJ) as being hit in November 2023. #Akira is a highly sophisticated malware targeting systems of all OS and is the first one seen by Vital Digital Forensics that uses an "auto-save" feature that enables the ransomware operators to save a temp file (.arika file) with the encryption "metadata" of each encrypted file. As soon as the encryption finishes the encrypted file gets an .akira extension, with the encryption "metadata" written on the file and the .arika file deleted. In this way, #Akira operators achieve that even partially encrypted files get decrypted! This feature was reported by Palo Alto Networks Unit 42 back in 2/2024, which in its Github (https://lnkd.in/dFK9styB) states "An autosave feature has also been added, with .arika (note: not .akira) files being created on runtime containing temporary metadata. " Ransomware executable uses parallel threading, uses extensive logging, is usually named w.exe and placed, in the case of Windows systems, in known file system locations. #Akira uses a password-protected page to communicate with it's victims, with the password provided to them in the ransom note left on the victims' systems, and uses a double extortion scheme, where the victims are threatened that their stolen data will be published on #Akira blog and / or sold to interested parties. Akira has been reported to have made $42 million the least from 250 attacks since March 2023, when it emerged in the wild (https://lnkd.in/eR2DGSAE) and be responsible for 21% of ransomware attacks around the world over the first quarter of 2024 (https://lnkd.in/ddW6aQwy). A decryptor was released in July 2023 by Avast (https://lnkd.in/giJ4UR8a) but does not work for new victims as #Akira operators changed their ransomware executable. On April 18, 2024, the FBI, Europol’s European Cybercrime Center (EC3), CISA and the NCSC-NL (respectively US and Dutch cybersecurity agencies) published a joint cybersecurity advisory (CSA), which covers the Akira ransomware gang (https://lnkd.in/gTrPej2e). Among others, #Akira has been reported to capitalize on exploiting CVE-2023-20269, a vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software (https://lnkd.in/g47y6PQs)

3

Update⚖️: SI 272/2024. These Regulations give effect to provisions in Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance and amending Regulation (EU) 2018/1724 (Data Governance Act). In particular, they seek to establish a framework for the sharing of ‘categories of protected data’ held by public sector bodies as set out in Chapter 2 of the EU Regulation. Commencement: 5 June 2024 Read the full Statutory Instrument here➡️ https://lnkd.in/dR_vTbcV Information from: Law Society of Ireland #lawupdate #data #governance #europeangovernance

2

Any number given of Volt Typhoon victims ‘likely an underestimate,’ CISA says. Why it matters: 1. China's Volt Typhoon hackers pose a significant cybersecurity risk, aiming to "cause disruption and sow societal panic" by infiltrating U.S. critical infrastructure - a strategy underscored by China's increasing aggressiveness toward Taiwan. This paints a potentially damaging picture for critical small- to medium-sized businesses across the U.S. 2. U.S. government initiatives are racing to extinguish the threat from Volt Typhoon, a scale of intrusion deemed to be underestimated and broadly-based. This move signifies a ramping up of U.S. cybersecurity defense against not just state-level attacks, but also those endangering individual supply chains. 3. China's alleged involvement in Volt Typhoon could precede a new warfront in cyberspace, reflecting concerns raised in talks with Chinese officials. Advocates, however, emphasize the U.S.'s readiness and resilience in cybersecurity, leveraging industry partnerships for a robust defense strategy. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/ezi4qHRj

5

📝 DNSC Team represented in the SECUR-EU Ethics Committee! The SECUR-EU “Ethics and legal monitoring” activities led by CyberEthics Lab., a group of internal experts have been identified to ensure adequate ethical standards are met and that data protection measures are taken during the project lifecycle. The committee will:   1️⃣ Provide expert judgement on identification, monitoring and assessment of #ethics concerns and safeguards. 2️⃣ Promote and approve guidelines and tools to monitor, assess and address ethics concerns. 3️⃣ Ensure adequate information among all project partners about ethics best practices. In so doing, SECUR-EU confirms the relevance of ethics and regulatory compliance in cybersecurity. #DNSC #SECUREU #ECCC #EU #project #ethics

7

Cybersecurity threats are transnational by definition and as such they can be countered effectively only through global mechanisms aimed at risk reduction and trust building. The #G7 can lead the way for global cooperation on #cybersecurity by promoting risk-based frameworks, harmonising strategies, and establishing trustworthiness criteria for digital service providers. New #IAICommentary by Ettore Greco and Federica Marconi ➡️ https://lnkd.in/dfRfyfYg

10

Confirm your auditing skills with ICO ISMS 27001:2022 Auditor certification. Start your journey from Foundation to Professional today! Learn more about this certificate here: https://lnkd.in/dK6PMhvQ #careergrowth #professionaldevelopment #cybersecurity #itsm #dataprotection #icocert #iso27001 #informationsecurity #securityprofessionals #ams19011 #itcertification #lifelonglearning

1

The #SEC published five new Form 8-K Compliance and Disclosure Interpretations (C&DIs) expanding the agency’s interpretations of cybersecurity incident disclosures pursuant to Item 1.05 of Form 8-K. The new C&DIs identify scenarios involving ransomware payments and the implications of such payments in relation to Form 8-K Item 1.05 disclosures and materiality assessments. The new guidance confirms that making a ransomware payment (or, in one scenario a series of payments) does not relieve a registrant from assessing the materiality of the incident in question or the obligation to make a filing pursuant to Item 1.05 of Form 8-K. Click here to learn more about the new C&DIs: https://bit.ly/3RLaIuU By: Kerry Berchem, John Patrick Clayton, Garrett DeVries, Natasha Kohne, Rosa Testani, Michael S. Miller, Patricia Precel #CyberSecurity #SecuritiesLaw

10

https://lnkd.in/dhGksmgg - 𝗜𝗦𝗢/𝗜𝗘𝗖 𝟮𝟳𝟬𝟬𝟭:𝟮𝟬𝟮𝟮 - 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗮𝗻𝗱 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 - 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗼𝗻𝘁𝗿𝗼𝗹𝘀 Mapped to: 🛡 𝗗𝗼𝗺𝗮𝗶𝗻𝘀 (Organization, People, Physical, Technology) 🛡 𝗖𝗼𝗻𝘁𝗿𝗼𝗹 𝗧𝘆𝗽𝗲𝘀 (Preventive, Corrective, Detective) 🛡 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 (Confidentiality, Integrity, Availability) 🛡 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗙𝗿𝗮𝗺𝗲𝘄𝗼𝗿𝗸 𝗙𝘂𝗻𝗰𝘁𝗶𝗼𝗻𝘀 (Govern, Identity, Protect, Detect, Respond, Recover) #ISO27001 #InformationSecurity #Infosec #Cybersecurity #DataPrivacy #Audit #Framework

5

💡 Check out our latest #article on the #EU's new #Regulatory Technical Standards (RTS), aimed at enhancing incident reporting for Financial Entities (FEs) across Member States. With clear #criteria for classifying #cyberthreats and #ICT-related incidents, the #RTS aims to strengthen #incidentresponse and minimize disruptions. Read the full article: https://lnkd.in/ePC8CA98

15

CyberSaint’s NIST CSF Benchmarking Feature Measures Residual Risk Know more:-https://lnkd.in/d7pffwSg #cybersecurity #aitechparknews #aitechnology #artificialintelligence #technology #innovation #aitech #machinelearning #python #deeplearning  

3