Data Breaches & Threats Archives

Learning from the Interserve experience

Another GDPR breach was in the news this week following the latest findings made by the UK Information Commissioner’s Office and covered by Lexology. What is the measure of effective cyber security is sometimes difficult to determine; particularly...

Notifiable Data Breaches – are they increasing?

The Office of the Australian Information Commissioner (OAIC) released its latest statistics on notifiable data breaches covering the period from January to June 2020. Interestingly, this report showed a 3% decrease in the number of breaches in this period,...

Threat Hunting using MITRE ATTACK

Organisations introducing threat hunting into their operational security team’s remit will encourage a proactive approach to detecting and responding to sophisticated cyber threats. Threat hunting demands disciplined and focused effort using threat...

“Continuous Diagnostics and Mitigation” in Cyber Security

Continuous Diagnostics and Mitigation, or CDM, is a term for a strategy around cyber security defence that tries to shift from a stance of: Prevent – Detect – Respond, to an approach that is more real-time, continuous, operational and automatic.

Australia Under Cyber Attack

On Friday 19th June, the Australian Prime Minister gave a press conference outlining an intense and persistent cyber attack against Australian organisations, allegedly originating from an overseas adversary. The Prime Minister confidently stated that...

Lessons from cyber security breaches – Cathay Pacific

Obviously, writing this in the midst of the Coronavirus outbreak, airlines all round the world are suffering huge impacts from the effects of the isolation, quarantine and travel restrictions that are in place. Cyber security might not be at the top...

Cyber security due diligence: Marriott’s GDPR breach fine

Last week was a big week for the Information Commissioner’s Office in the UK after the BA fine announcement (£183m) and a second data breach fine story around the Marriott Hotel chain.

Once more unto the breach: The BA GDPR fine

This week saw the announcement that British Airways (BA) was to be fined by the Information Commissioner for its breach of the GDPR. The proposed fine amounts to £183m so it caught the attention of the security and legal/compliance community as being...

ANU Data Breach – Don’t be a “Me Too”

Few organisations have the resilience to suffer a cyberattack as large as the one the Australian National University (ANU) notified last week. Data breaches of this magnitude certainly take their toll, and in this case the ANU will be feeling the pain...

Canva Breach: Protect your Business from External Privacy Breaches

At the weekend, an Australian graphic design company called Canva reported a data breach. At this stage, you’d be forgiven for thinking so what? Yet, this wasn’t just a typical data breach – it’s one of the largest privacy breaches of user information...