Hot Topics

Avatar photo
Andy Norton
Armis
Andy Norton is Director of Threat Intelligence at Lastline. He has been involved in cyber security best practice for over 20 years, specializing in establishing emerging security technologies at Symantec, Cisco and FireEye. In that time, he has presented threat and intelligence briefings for both Bush and Obama administrations, The Cabinet office, the Foreign and Commonwealth office, SWIFT, Swiss National Bank, Prudential Regulation Authority, the Bank of England, The Hong Kong Monetary Authority and NASA. Returning to Europe from Asia in 2011, he has spent the past 5 years helping many of the FTSE 250 companies measure, manage and respond to cyber incidents.

Legislating IoT Devices, One Part of IoT Security Jigsaw

Legislating IoT Devices, One Part of IoT Security Jigsaw

|
Legislating IoT Devices, One Part of IoT Security JigsawBy Andy Norton, European Cyber Risk Officer The UK government recently announced that it is forging ahead with plans to legislate IoT devices and, crucially, it is bringing smartphone devices into this purview. The Department of Digital, Media and Sport (DCMS) cited ... Read More
Armis
The importance of (CSFs) Cyber Security Frameworks

The importance of (CSFs) Cyber Security Frameworks

|
The importance of (CSFs) Cyber Security FrameworksBy Andy Norton, European Cyber Risk Officer Since 2013 when President Obama signed Executive order 13636, new regulations and legislation have been implemented all around the world that mandate higher levels of cyber resilience from organisations that are deemed essential, critical, or hold Personal ... Read More
Armis
Watering Hole Attacks FI

Five High-Profile Watering Hole Attacks Highlight Importance of Network Security

| | Blog, Digital criminal, Havex RAT, ICS/SCADA systems, LuckyMouse group, phishing emails, sophisticated malware
Digital criminals use various techniques to breach organizations’ computer systems. One method that continues to be popular among cybercriminals is watering hole attacks. The name is derived from how predatory animals tend to lurk around watering holes waiting for their prey to come for a... The post Five High-Profile Watering ... Read More
Blog – Lastline
IoT security FI

Can Smart Lighting Beat a Hacker? How Machine Learning Can Boost IoT Security

| | Andy Norton, Blog, iot, machine learning, smart devices, smart lighting
It’s possible: Smart lighting could be the most dangerous element in your company’s network. By 2025, there will be 75 million IoT devices in use. Smart devices are now found throughout most commercial offices, yet a lack of security could make them ticking time bombs;... The post Can Smart Lighting ... Read More
Blog – Lastline
digital security small business owners FI

Think Your Business Is Too Small to Get Hacked? Wake Up!

| | Andy Norton, Blog, Digital attacks against SMB, Digital security for small businesses, Impact of breach on security practices, Network Security, personally identifiable information, SMB cyberattacks
Sixty percent of small- to mid-sized businesses (SMBs) go bankrupt six months after suffering a cyberattack. The risk is simply too great. SMBs need to strengthen their digital security. Uber…Equifax…Yahoo…if you look only at the headlines, you’d probably think that digital attackers target just large... The post Think Your Business ... Read More
Blog – Lastline
post-Brexit cybersecurity FI

Post-Brexit Cybersecurity – Implications on Risk and Uncertainty

| | Andy Norton, Blog, cybersecurity threats, European Commission cyber-defense, GDPR, Data Protection, General Data Protection Regulation, legal framework, Network and information security directive (NIS), Privacy and security, Privacy Shield, threat landscape
Who knows what is going to happen with Brexit, or when the United Kingdom will officially leave the European Union, with a deal or not. (Although at the time I write these lines a delay or revoke of Article 50, the formal process of leaving,... The post Post-Brexit Cybersecurity – ... Read More
Blog – Lastline
machine learning for cybersecurity FI

How Machine Learning for Cybersecurity Can Thwart Insider Threats

| | Andy Norton, Blog, compromised credentials, data exfiltration, insider threat, Machine Learning for Security
While there are innumerable cybersecurity threats, the end goal for many attacks is data exfiltration. Much has been said about using machine learning to detect malicious programs, but it’s less common to discuss how machine learning can aid in identifying other types of notable threats.... The post How Machine Learning ... Read More
Blog – Lastline
cyberwar insurance risk management

The Asynchronous Nature of Asymmetric Cyberwarfare: Success Factors of Cyberattacks

| | asymmetric attacks, cyber warfare, Cybersecurity, intelligence gathering
Winning against an asymmetric cyberattack first requires we recognize an attack is occurring It has been given many names: soft war, non-linear war, unconventional hybrid warfare, cyber cold war, Cold War 2.0, Code War. Regardless of the name, one thing is certain: The way in which the internet is being ... Read More
Security Boulevard
phishing emails FI

Can You Stop Phishing Emails? Why What You’re Doing Now is Failing.

| | AI and machine learning, Andy Norton, anti-phishing solutions, behavior of malicious emails, Blog, business email compromise, clone phishing, phishing attack, spear-phishing
Phishing emails are not new. Despite broad coverage in the press, numerous corporate training programs, and many anti-phishing solutions, why are a massive 93% of data breaches still caused by phishing? With the average phishing attack costing a mid-sized company $1.6 million, this is not a... The post Can You ... Read More
Blog – Lastline

Application Security Check Up