Weekly Review: High-Profile Threats and Global Responses – 20/12/2024

This week in cyber security, we're seeing a surge in high-profile incidents that highlight the growing global threat landscape on Friday 21/12/2024.

1. Global cyber security threats: The Lazarus Group targeted nuclear engineers with new malware, while a critical flaw in Fortinet EMS was exploited for remote access attacks. Additionally, npm packages were compromised with crypto-mining malware, highlighing the risks of supply chain vulnerabilities. In another breach, hacker group IntelBroker leaked 2.9GB of data stolen from Cisco's DevHub, including source code, credentials, and confidential documents. These incidents demonstrate the urgent need for enhanced cyber security measures worldwide.

2. Two Wrong, never make a Right: The Chinese cyber security centre has accused the US of hacking and stealing tech secrets, escalating tensions. Meanwhile, CISA urges senior officials to adopt end-to-end encrypted messaging after a series of Chinese intrusions at major American telecoms.

3. Australia's Cyber Security Act: Australia has passed its first standalone Cyber Security Act 2024, introducing mandatory security standards for smart devices and ransomware reporting requirements. G’day to stronger cyber security Down Under!

4. UK’s Nuclear Cyber Security Hub: The UK has launched a new cyber security centre near the Sellafield nuclear facility, following recent fines over data vulnerabilities. The UK's National Cyber Security Centre also warns that the country is underestimating cyber threats, with hostile activities on the rise. Time to take those cyber threats seriously, chaps!

5. Russia's Cancer Cure: Russia has announced a groundbreaking mRNA-based cancer vaccine set to launch in early 2025. This personalised treatment aims to revolutionise cancer care by training the immune system to target and destroy cancer cells. A cure for cancer? Now that’s a headline we can all get behind.

However, the development and deployment of such advanced medical technology also raise significant cyber security concerns. Protecting sensitive patient data and ensuring the integrity of medical research against cyber threats will be crucial.

As cyber security threats escalate, the SECURE | CYBER CONNECT Community & Podcast are tackling the Cultural, technical, and Talent Acquisition challenges that hinder effective defence. By collaborating across diverse expertise, we bridge knowledge gaps and promote a culture of security awareness, helping organisations better anticipate and mitigate evolving cyber risks.

Roundup of our latest Podcast Episodes:

Explore our latest podcast sessions, diving into critical topics shaping the future of cyber security and technology. To encourage diverse and inclusive knowledge sharing, please subscribe to our channel, like, share and comment.

• A Global Perspective on Third-Party Supply Chain Risk: Essentials for 2025 w/ Mark Child & Paul Foster - Quantum Evolve - Business Enablement , Cyber London

• Tech & Cybersecurity Skills Gap: Enhancing DE&I Through Visa Sponsorship w/ Rukayat Alabi Alavi - RKY Careers , The Immigrant Founders' Network, UK

• Connected Devices, OT & IoT Security: Layer 1 & Cyber Deep Tech w/ Yossi Appleboum - Sepio

• Cybersecurity, AI & Automation: Essentials for Businesses in 2025 w/ Marius Poskus - MP Cybersecurity Services

🎙️ Join us this Sunday 22nd December at 17:00 GMT for an exclusive session:

The Intersection Between Data Privacy and GRC, Beyond “Protection of Data” w/ Dr Mike Brass

Simply search "Secure Cyber Connect" for our full length podcast session and short form content, available across Youtube, Spotify & Apple Podcast.

To encourage diverse and inclusive knowledge sharing, please Subscribe, Like, Share and Comment.

Stay informed, inspired, and ready to navigate the evolving landscape of tech and cyber security. Check out my official newsletter, released every Monday, subscribe on LinkedIn https://www.linkedin.com/build-relation/newsletter-follow?entityUrn=7188137928903000064

We warmly invite you to join our community. With exciting partnerships and major announcements on the horizon in January, now is the perfect time to get involved and stay ahead of the curve!

Want to explore how we support as allies and advocates?

Curious about the tangible impacts we've made in 2024?

Reach out directly—I am here to help, or request testimonials to hear directly from our clients and business partners!