NCC Group

A cyber attack on a single logistics provider can quickly become everyone else's problem. Following reports of a cyber attack on CEVA Logistics, Gary Cannon®, Global Transport Lead at NCC Group, shares his perspective on what the incident reveals about growing supply chain cyber risk. As organisations become more interconnected, disruption at a trusted supplier can have far-reaching consequences, impacting operations, customers and business resilience. In his latest expert commentary, Gary explores: 🔹 Why logistics providers are attractive cyber targets 🔹 The risks of third-party dependencies 🔹 How cyber incidents can disrupt real-world operations 🔹 Steps organisations can take to strengthen resilience Read more: https://lnkd.in/excwGQSD #CyberSecurity #SupplyChainSecurity #CyberResilience #ThirdPartyRisk #Logistics #SupplyChain

Security leaders today are being asked to do more with less. More alerts. More complexity. More scrutiny from boards, regulators and insurers. But the challenge isn't visibility, it's turning that visibility into meaningful action. As threat actors continue to evolve, organisations are looking beyond traditional alert monitoring and towards MDR providers that can: ✅ Reduce noise and analyst fatigue ✅ Continuously improve detection quality ✅ Extend visibility across IT, OT, cloud and identity environments ✅ Combine AI with human expertise to strengthen response The future of MDR isn't about generating more alerts. It's about delivering better outcomes. Read the latest NCC Group blog exploring the trends shaping the next generation of managed detection and response: https://lnkd.in/empi32mQ #CyberSecurity #MDR #SOC #ThreatDetection

NCC Group in Dark Reading: Katharina Sommer on protecting security researchers Security researchers play a vital role in identifying and disclosing vulnerabilities, yet many countries' cybercrime laws still fail to distinguish between malicious activity and good-faith security research. In Dark Reading, Katharina Sommer, Director of Government Affairs and Analyst Relations at NCC Group, discusses how outdated legal frameworks can create uncertainty for ethical hackers and researchers. She highlights the need for greater legal protections to support responsible vulnerability research while maintaining strong cybercrime enforcement. The article also explores Katharina's research into how countries are approaching legal safeguards for security researchers and the policy reforms needed to support modern cyber security practices. Read the full coverage in Dark Reading: https://lnkd.in/g5Gzb4rb

🚨🔍 How can we trust digital content without creating new privacy risks? As part of a recent research placement with NCC Group, PhD researchers from the Cyber Security Centre for Doctoral Training at the Universities of Bristol and Bath explored emerging challenges in cyber security and digital trust. In a new research blog, Demi McCollum examines the privacy and security challenges of content provenance and authenticity systems, analysing the emerging C2PA standard for digital content verification and highlighting how security and privacy considerations can intersect in complex ways, particularly for journalists, activists and other at-risk groups. Read more: https://lnkd.in/eHH6TPTT #CyberSecurity #Research #Privacy #DigitalTrust #AI #ContentAuthenticity #Innovation

Cyber policy, resilience and the UK’s digital growth agenda moved quickly in July, with one question shaping many of the conversations across NCC Group: what does the new Burnham premiership mean for cyber?   In the third edition of the Cyber Policy Pulse, our Government Affairs team explores why cyber must remain visible, valued and central as the new UK Government reshapes departmental responsibilities and sets its priorities across technology, AI, industrial strategy and regional growth.   This month’s edition also covers NCC Group’s engagement across the cyber policy ecosystem, including Kat Sommer’s upcoming DEF CON 34 talk on lawful security research, the UK Government’s Cyber Resilience Pledge, EU digital sovereignty discussions, and more.   Be sure to subscribe and read the latest edition below 👇   #governmentaffairs #policyadvocacy #cyberpolicy #cyberresilience #AIsecurity

Upcoming webinar: Keeping pace with a changing threat landscape 🔍   From AI-enabled threats to geopolitical tensions and evolving adversary tactics, today's threat landscape is becoming increasingly complex. As new threats and technologies compete for attention, organisations need a clear, intelligence-led view of the developments that warrant focus without losing sight of the foundations of cyber resilience.   Join 👤 Matt H. for our next Cyber Threat Intelligence webinar, where he will share expert analysis of the latest cyber threat developments, alongside practical guidance to help organisations make informed, risk-based security decisions.   You'll gain: ✅ Insights into the key cyber threat developments  ✅ Analysis of emerging trends across regions and sectors ✅ Perspectives on the threat actors and tactics shaping today's risk environment ✅ Practical intelligence to support informed security decision-making ❓ Live Q&A - discuss your questions with Matt   Designed for security leaders and practitioners, this session will help you focus on the developments that matter most and prepare for what's next.   🗓️ 25 August | 4pm BST 👉 Register here: https://lnkd.in/ebSvVFvw #ThreatIntelligence #CyberSecurity #CyberThreats #CyberRisk #CyberResilience

DEF CON 34 is here! Today, we're kicking things off with Katharina Sommer's session exploring how countries are shaping the legal landscape for security research. Then, stick around for another must-see talk on Sunday, when Alex P. and Robert Herrera take the stage to reveal how USB video devices can be exploited. Katharina Sommer Today | 4:30–5:00 PM PDT LVCC – L1, Exhibit Hall West 3 – 801 (Creator Stage 1) Legally Hacked: How Countries Decide When Security Research Is Allowed https://lnkd.in/euGzJ3pC Alex P. & Robert Herrera Sunday | 11:00 AM PDT LVCC – L1, Exhibit Hall West 3 – 903 Gone in 60 Frames – USB Video Exploitation https://lnkd.in/evHuU2dG If you're at DEF CON this week, we'd love to connect between sessions and hear what's top of mind in cyber security.

New research: A new approach to adversarial AI attacks As AI models become more capable, understanding how they can be manipulated becomes increasingly important. In Interpretable Adversarial Attacks in Superposition, we explore whether feature interference within neural networks can be used to create adversarial inputs that influence model behaviour in new ways. Their preliminary findings demonstrate how interpretable attacks can be constructed in toy models by exploiting the geometry of learned features, offering fresh insight into AI security, mechanistic interpretability and the challenges of securing future models. 🔍 A novel approach to adversarial machine learning 🔍 Insights into feature interference and superposition 🔍 Considerations for the security of future AI systems Read the research: https://lnkd.in/eqmvTxxe #CyberSecurity #AISecurity #MachineLearning #ArtificialIntelligence #SecurityResearch

🔐 Identity is now one of the most critical components of cyber resilience. As organisations navigate growing risk from human, machine and AI-driven identities, NCC Group is expanding its identity security capabilities with SailPoint to help customers strengthen governance, reduce access risk and build resilience across cloud, hybrid and AI-enabled environments. Together, we're helping organisations gain greater visibility and control over their growing identity landscape through: ✅ Managed Identity Governance & Administration (IGA) ✅ Identity Security Advisory & Implementation ✅ AI Agent Security With identity increasingly becoming a primary attack vector, organisations need the right controls, governance and expertise to stay ahead of evolving threats. This collaboration helps customers securely adopt emerging technologies while keeping identity security at the core of their cyber resilience strategy. Read more: https://lnkd.in/e9jp-zae #CyberSecurity #IdentitySecurity