Frederik Mennes

A Warning ⏰ from the Dutch National Coordinator for Security and Counterterrorism (NCTV): Cyber Attacks from Russia and China are intensifying, increasing in impact and complexity. I had the pleasure to speak to NPO Nieuws en Co about the subject. 📺 What's been reported so far in 2024, how are different European Nations targeted and what can the Netherlands expect? The dialogue is in Dutch - take a look here

34

ABN Amro discloses data breach following an attack on a third-party provider Dutch bank ABN Amro disclosed a data breach after third-party services provider AddComm suffered a ransomware attack. AddComm distributes documents and tokens physically and digitally to clients and employees. The ransomware attack occurred last week and unauthorized parties may have obtained access to data of a limited number of ABN AMRO clients. ABN AMRO will contact the impacted clients and have already notified the Dutch Data Protection Authority and regulators. Read More : https://lnkd.in/eRvQjN4m #databreach #abnamro #addcomm #ransomware #ransomwareattack #banking #cybersecurity #whizsecurity #infosecurity #itsecurity #hacking #cybersafe #cybersafenews

2

First - read the tweet. Then understand that Max Schrems often points out, that EUs NIS2 IS NOT addressing FISA-702, which grants the U.S. intelligence the right to demand data provided to them, by companies subject to the law. This means US vendors. Up for anti FISA-702 medicine, anyone ?? Blink-blink - you could reach out if you’re concerned - the Zafepass Prevent & Protect platform does what NIS2 doesn’t. More info@zafehouze.com

9

So, I use KeePassXC with an offline #nocloud .kdbx file to store TOTP seeds Has a browser extension that can autofill the digits on match. Protocol described here https://lnkd.in/eQf-BrfF The .kdbx file is sycned across several devices using Syncthing including offsite snapshots

2

Is your financial institution prepared for the wave of cyberattacks targeting the industry? 🌊 AttackIQ's #DORA Automated Assessments offer a game-changing solution. By simulating real-world attacks, we help you identify vulnerabilities, prioritize remediation, and demonstrate compliance with #EU mandates. 💡 Learn how to fortify your defenses against cyberattacks: https://bit.ly/3LZ2k7W #Cybersecurity #FinancialInstitutions #Compliance #BAS #SecurityTesting #EuropeanUnion

7

⚠ More on the Importance of ISO/IEC TS 12791:2024⚠ Many of you saw Adam Leon Smith DEng FBCS's post yesterday commenting on the release of ISO’s new technical specification (TS) document for the treatment of unwanted bias in certain AI systems. I don’t think everyone realizes what a big deal this really is, so today I thought we might explicate it a bit more. The primary goal of ISO/IEC TS 12791:2024 is to offer a structured approach for managing unwanted #bias in machine learning (ML) systems, with a specific focus on classification and regression tasks. It outlines practical methods to identify, assess, and address bias at each stage of the AI lifecycle, ultimately supporting ethical AI practices that yield fair and accurate outcomes. ➡Applicability This specification applies to organizations of all sizes and types that develop, implement, or operate AI systems, particularly those deploying ML models for classification and regression tasks. It’s useful across various verticals where AI-driven decisions impact individuals and groups, such as finance, healthcare, and public services. ➡Technical Aspects 🔶 ISO/IEC TS 12791 outlines methods to address unwanted bias in several AI lifecycle stages: 1. Inception and Stakeholder Identification - Emphasizes understanding diverse stakeholder perspectives, which helps identify and address potential biases early. 2. Design and Development - Provides guidance on selecting features and handling metadata to prevent and mitigate biases. 3. Verification and Validation - Recommends both static and dynamic testing to ensure the AI system performs consistently across diverse groups, supporting fairness and accuracy. 4. Continuous Monitoring and Re-evaluation - Mandates ongoing oversight to detect bias over time, especially when external conditions change. 5. Bias Treatment Techniques - Suggests data and algorithmic adjustments to reduce bias impact, including training adjustments, feature balancing, and use of diverse datasets. ➡ Supporting AI Governance via #ISO42001 For organizations implementing ISO42001 (AIMS), ISO/IEC TS 12791 serves as a key resource to meet your governance requirements related to fairness and non-discrimination in AI. Specifically: ✅Alignment with Risk Management (Clause 6): The standard’s focus on proactive bias identification and mitigation supports ISO42001's risk-based approach by managing bias as a potential risk factor. ✅Transparency and Accountability (Clause 7.5): Documenting bias mitigation steps fulfills ISO42001’s transparency requirements, ensuring that bias-related decisions are recorded and traceable. ✅Stakeholder Engagement (Clause 4.2): By identifying and considering stakeholders impacted by bias, organizations can enhance alignment with ethical AI governance, fostering trust and inclusivity. Special thanks to Deniz Celikkaya for coaching on today's article. A-LIGN #TheBusinessofCompliance #ComplianceAlignedtoYou 🌐 https://lnkd.in/gFpvrndX

104

6 Comments

In my latest blog post, I discuss the role of weak fingerprinting signals in the context of bot and fraud detection. I use the example of language-related signals to illustrate how even signals that may look insignificant can be leveraged to detect inconsistencies introduced by bot frameworks and anti-detect browsers. https://lnkd.in/eZ2hcKeH

34

4 Comments

🔒 Privileged Access Management (PAM): Boost Compliance and Strengthen Security 🔑 Privileged access is a hacker's ultimate prize and a common root cause of security breaches. With regulations like NIS2 and DORA, organizations can no longer afford to ignore Privileged Access Management (PAM). In one of our latest blogs, Cegeka's PAM experts Ricardo Kowsoleea and Toby Kieft explain how a risk-based PAM approach enhances security, ensures compliance, and drives IT efficiency—benefiting organizations of all sizes. At Cegeka, we combine technology, processes, and expertise to help businesses protect their crown jewels, improve cyber hygiene, and ensure operational resilience. 📖 Read the full blog here: https://lnkd.in/es6ZkU7F #CyberSecurity #PAM #NIS2 #DORA #RiskManagement #ITSecurity #InCloseCooperation

24

🚀Taking #cybersecurity to the next level! We are excited to launch CSAF, our Continuous Security Advisory Framework, a new solution to help organizations become cyber resilient. "With CSAF, we help organizations map their attack surface and prioritize cyber risks, enabling them to proactively and continuously respond to cyber threats and take steps towards cyber resilience - thus also become and remain NIS2 compliant," says Fabrice Wynants, Global Director Cybersecurity & Networking at Cegeka. Read more about #CSAF in our announcement 👉 https://lnkd.in/ec2QufPp #inclosecooperation #cybersecurity #NIS2

62

2 Comments

3rd consecutive day of cyberattacks against official Belgian websites Pro-Russian hackers are stubborn. Several Belgian municipalities are affected by DDoS attacks that can block official websites. The NoName057 collective behind the cyber attack is relentless. Although not dangerous according to the Centre for Cybersecurity in Belgium (CCB), cyberattacks against Belgian websites continue. The Russian and pro-Russian hackers behind NoName057 are determined to block the web pages of Belgian municipalities, a few days before the elections. They are organizing denial of service attacks with the aim of disrupting the official websites of municipal authorities. This is the 3rd consecutive day of DDoS. Several municipalities of various sizes are affected, including that of Mouscron with 60,000 inhabitants. Apart from the temporary cutting of access to certain web pages, this operation does not seem to affect citizens' data. https://lnkd.in/e_zJJan8 #cybernews #cyberattack #belgium #ddos

4

Uncover cybersecurity and vulnerability management essentials with John Quirk and Wout Vergauwen next week at Cybersec Europe 2024! Next week's sessions will focus on the critical role of accurate and timely CVE reporting and how it enhances organizational security. They have sessions running on May 29th and 30th, so be sure to make time on your agenda 📆 Learn more about this year's #cybersecurity conference here: https://lnkd.in/gm5SNN4x #PatchMyPC #ConfigMgr #MSIntune

15

🚀 2 more RCSA templates for comments 🚀 I’ve just completed a test on the NIS and NIS2 directives, with risk item deduplication and role name standardization. 🔍 **Key Highlights:** - **NIS Directive** (EU) 2016/1148 - **NIS 2 Directive** (EU) 2022/2555 For those interested in a closer look at the processing results, here are the links to the sample templates 🔗 [NIS Directive Sample Template](https://lnkd.in/e-XUXNt3)  🔗 [NIS 2 Directive Sample Template](https://lnkd.in/eNY35eAf) #NIS #NIS2 #RiskManagement #Compliance #Regulatory #CyberSecurity #DataProtection

8

3 Comments

10 days until DORA comes into effect! Financial institutions across the EU must prove resilience—or face fines. Why it matters: 👉 Standardized rules 👉 Stronger incident reporting 👉 Accountability at the top When nearly 20% of cyberattacks target financial institutions - compliance with DORA is critical to stay protected. Need help? Tools like Hyver simplify DORA’s toughest challenges. Read more from Sharon Shochat, our UK&I Commercial Director >> https://hubs.la/Q031nD-60 #Dora #regulations #EU #cyber

36

4 Comments

The first ever seen by me consolidated technical document about EUDI wallets without gaps in the most crucial part - cryptographic algorithms and keys For instance, ARF (architecture reference framework) explains a lot, but not this part

4

Follow the DVMS Institute for exciting announcements on "HOW" organizations of any Size, Scale, or Complexity can Operationalize a NIST Cybersecurity Framework Digital Value Management System™ capable of delivering the Trusted, Resilient, and Auditable digital outcomes government auditors expect

16