Our free advice on mitigating the potential disaster of attackers getting administrative access to your Internet domains.
Current Cybersecurity Threats
Its really tough to watch what is happening in Ukraine right now and our thoughts are with the Ukrainian people.
Part of the Russian offensive is Cyber warfare and MSPs need to be aware this is not only limited to Nation state attacks on critical infrastructure in Ukraine or any of the countries sympathetic to them.
The chaotic state of affairs in the region will mean that rogue individuals and organised gangs will feel more empowered and have more freedom to carry out cyber attacks and this may be directed at local government, education and private companies in other countries.
Having reviewed many forums and threat intelligence, it does appear that this activity has not yet increased substantially and this may continue, but as ever we must hope for the best and plan for the worst.
There are many sources of free information on this subject and below are just a few examples that we recommend:
https://www.ncsc.gov.uk/guidance/actions-to-take-when-the-cyber-threat-is-heightened
https://forum.comptiaisao.org/forums/active-exploits-discussion-recommendations.82/
https://www.cisa.gov/uscert/ncas/alerts/aa22-047a
https://www.sans.org/blog/ukraine-russia-conflict-cyber-resource-center/
Our advice to MSPs remains the same as it has for the past 4 years:
Do the cyber security basics well and consistently, this is your best defence against any sort of cyber attack from whatever threat actor.
If you need any help with putting these processes in place in your MSP or your clients, just get in contact, we deal with many MSPs across the UK and Europe and are here to help
How to set up secure LDAP for Active Directory
Tenable Nessus tips and tricks
Improving Cyber Essentials
Astrix partner with LuJam
We’re happy to announce that we’ve partnered with LuJam - a GCHQ-, NCSC-, and Tech Nation-backed company who have set out to solve the problem of network security and compliance!
Continuum-Cyber Essentials mapping
As requested by Continuum, we have worked with them on developing their Fortify for Protection product to implement automatic reporting on an organisation’s Cyber Essentials compliance.
