Latest news

MySwitch2Cyber: Sales Operations to Cyber Security Program Manager

MySwitch2Cyber: Sales Operations to Cyber Security Program Manager

In the next instalment of our MySwitch2Cyber blog, our talent attraction team sat down with Rachel Erskine to hear about her 10 year NCC Group journey and switch from a career in Sales Operations to becoming a Cyber Security Program Manager.

What does the new appointment of a Minister for Cyber Security mean for Australia?

What does the new appointment of a Minister for Cyber Security mean for Australia?

In a sign that the new Labor Government in Australia is set to prioritise cyber security, Prime Minister Anthony Albanese has appointed Clare O’Neil as the new Minister for Cyber Security. This marks the first time the Australian Government has had a dedicated minister for cyber.

NCC Group Monthly Threat Pulse

NCC Group Monthly Threat Pulse – May 2022

The number of ransomware attack victims decreased in May, according to NCC Group’s strategic threat intelligence team. In total, it observed 236 attacks in the month, an 18% decrease on the 289 attacks observed in April.

Future industrials

Securing cyber-physical infrastructure

Charly Davis, Head of Industrials at NCC Group shares thoughts on some of the key areas of the UK’s Government proposed vision for how national cyber-physical infrastructure could accelerate innovation across the UK.

UK Connectivity

Is security at the heart of the UK’s new digital strategy?

Verona Hulse, Senior Public Affairs Manager shares the key takeaways from the UK Government’s Digital Strategy which sets out its vision to “make the UK the best place in the world to start and grow a technology business.”

Reflecting on cyber security as a risk in private equity: Three actions to improve

Reflecting on cyber security as a risk in private equity: Three actions to improve

Authors: Paul Darwin and Sara de la Torre We recently hosted leading technologists, lawyers and senior stakeholders from Private Equity to a round table discussion on the importance of cyber security in the deals market. Read our three key takeaways here.

Social media

Our latest monthly Threat Pulse from our Strategic Threat Intelligence Practice includes a rundown of the key highlights and trends seen in May, including the most targeted sectors, regions and most active threat actors. https://t.co/Z6VCrgBHpV

@NCCGroupplc
In the next instalment of our MySwitch2Cyber blog, our Talent Attraction team sat down with Rachel Erskine to hear about her 10 year NCC Group journey and switch from a career in Sales Operations to becoming a Cyber Security Program Manager. Read it via the link in our bio. #MySwitch2Cyber #NCCOriginals #WeAreNCCGroup #CyberCareers #CareersInCyber #BlogSeries

In the next instalment of our MySwitch2Cyber blog, our Talent Attraction team sat down with Rachel Erskine to hear about her 10 year NCC Group journey and switch from a career in Sales Operations to becoming a Cyber Security Program Manager. Read it via the link in our bio. #MySwitch2Cyber #NCCOriginals #WeAreNCCGroup #CyberCareers #CareersInCyber #BlogSeries

lifeatnccgroup

By Nicolas Bidron, and Nicolas Guigo. [Editor’s note: This is an updated/expanded version of these advisories which we originally published on June 3 2022.] U-boot is a popular boot loader for embedded systems with implementations for a large number of architectures and prominent in most linux based embedded systems such as ChromeOS and Android Devices. … Continue reading Updated: Technical Advisory and Proofs of Concept – Multiple Vulnerabilities in U-Boot (CVE-2022-30790, CVE-2022-30552) →

Updated: Technical Advisory and Proofs of Concept – Multiple Vulnerabilities in U-Boot (CVE-2022-30790, CVE-2022-30552)

The healthcare sector and ransomware attacks appear together frequently in the media. Since before the start of the pandemic rarely a week goes by without at least one story about a healthcare organisation falling victim to a ransomware attack. We often hear about the financial impact these attacks have or how they can affect patient safety, but … Continue reading Understanding the Impact of Ransomware on Patient Outcomes – Do We Know Enough? →

Understanding the Impact of Ransomware on Patient Outcomes – Do We Know Enough?

In March 2022, DFINITY engaged NCC Group to conduct a security and cryptography review of a threshold ECDSA implementation, which follows a novel approach described in the reference paper entitled “Design and analysis of a distributed ECDSA signing service” and available on the IACR ePrint archive at https://eprint.iacr.org/2022/506. The threshold ECDSA protocol will be deployed into … Continue reading Public Report – Threshold ECDSA Cryptography Review →

Public Report – Threshold ECDSA Cryptography Review

Robust exception handling is one of the tenets of best practice for development, no matter what the coding language. This blog post explores the curious circumstances in which a developer trying to do the right thing – but without appreciating the full effects – could lead to data integrity issues in a Salesforce Organization. As … Continue reading Exception Handling and Data Integrity in Salesforce →

Exception Handling and Data Integrity in Salesforce

The Trendnet TEW-831DR WiFi Router was found to have multiple vulnerabilities exposing the owners of the router to potential intrusion of their local WiFi network and possible takeover of the device. Five vulnerabilities were discovered. Below are links to the associated technical advisories: Technical Advisory: Stored XSS in Web Interface for Trendnet TEW-831DR WiFi router … Continue reading Technical Advisory – Multiple Vulnerabilities in Trendnet TEW-831DR WiFi Router (CVE-2022-30325, CVE-2022-30326, CVE-2022-30327, CVE-2022-30328, CVE-2022-30329) →

Technical Advisory – Multiple Vulnerabilities in Trendnet TEW-831DR WiFi Router (CVE-2022-30325, CVE-2022-30326, CVE-2022-30327, CVE-2022-30328, CVE-2022-30329)
In our latest episode of #TalkingCyber, host David Brauchler talks to colleague Angel Gamboa about #malware and thinking like a hacker, and the problems you can encounter when you do... Listen and subscribe here: https://t.co/0WLRbJA1pS https://t.co/wIgSZFu4uc

In our latest episode of #TalkingCyber, host David Brauchler talks to colleague Angel Gamboa about #malware and thinking like a hacker, and the problems you can encounter when you do... Listen and subscribe here: https://t.co/0WLRbJA1pS https://t.co/wIgSZFu4uc

@NCCGroupplc

This blog post documents some of the TTPs employed by a threat actor group who were observed deploying Black Basta ransomware during a recent incident response engagement, as well as a breakdown of the executable file which performs the encryption.

Shining the Light on Black Basta

By Nicolas Bidron, and Nicolas Guigo. U-boot is a popular boot loader for embedded systems with implementations for a large number of architectures and prominent in most Linux based embedded systems such as ChromeOS and Android Devices. Two vulnerabilities were uncovered in the IP Defragmentation algorithm implemented in U-Boot, with the associated technical advisories below: … Continue reading Technical Advisory – Multiple Vulnerabilities in U-Boot (CVE-2022-30790, CVE-2022-30552) →

Technical Advisory – Multiple Vulnerabilities in U-Boot (CVE-2022-30790, CVE-2022-30552)

Congratulations to NCC Group researcher Jeremy Boone, who was recently recognized for both the Highest Quality Report, as well as the Most Eligible Reports, as an invited researcher to the Intel Circuit Breaker program! From Intel: “This exclusive event invited a select group of security researchers to hunt vulnerabilities in the 11th Gen Intel® Core™ … Continue reading NCC Group’s Jeremy Boone recognized for Highest Quality and Most Eligible Reports through the Intel Circuit Breaker program →

NCC Group’s Jeremy Boone recognized for Highest Quality and Most Eligible Reports through the Intel Circuit Breaker program

We’re changing our logos on social media for Pride month. In this article, our LGBTQIA+ Colleague Resource Group share why this is not simply an aesthetic change, but a commitment to remain focused on the inclusion and wellbeing of our LGBTQIA+ colleagues. https://t.co/KwoPws4fPK

@NCCGroupplc

Press contacts

NCC Group Press Office

NCC Group Press Office

Press contact All media enquires relating to NCC Group plc +44 7824 412 405
NCC Group - Financial Media Enquiries

NCC Group - Financial Media Enquiries

Press contact Maitland AMO Financial Results Media Enquiries +44 (0)20 7379 5151
Regional Press Office - North America

Regional Press Office - North America

Press contact +1 408 776 1400
Regional Press Office - Europe

Regional Press Office - Europe

Press contact +31 (0)23 562 8208

NCC Group exists to make the world safer and more secure

In today’s threat landscape understanding the risks organisations and customers are exposed to is more important than ever.

Understanding the impact and how to be more resilient is key to protecting brand, reputation and sensitive customer information. Building a cyber-resilient organization can be a complex process but it’s not impossible.

With our knowledge, experience and global footprint, we help assess, develop and manage cyber resilience posture.

NCC Group Newsroom
XYZ Building, 2 Hardman Boulevard, Spinningfield
M3 3AQ Manchester
United Kingdom
NCC Group customer website
NCC Group corporate website
NCC Group Cyberstore