#cyberessentials — Public Fediverse posts

I've just heard someone *seriously* suggest that if a scanner finds a vulnerability in (for example) Microsoft Teams, even if there is no fix available from the vendor (Microsoft) we should patch the component with the latest file version from the upstream provider (often open source maintainers). Bear in mind where this is a file version detection, there's no evidence that its actually exploitable (e.g. the impacted functionality may not even be used by the parent product). For someone in Information Security to suggest this seems absolutely bananas, but am I missing something? #vulnerability #vulnerabilitymanagement #compliancetheater #cyberessentials

My customers are seeing this more and more.

"𝘞𝘦 𝘸𝘪𝘭𝘭 𝘵𝘩𝘦𝘳𝘦𝘧𝘰𝘳𝘦 𝘰𝘯𝘭𝘺 𝘦𝘯𝘨𝘢𝘨𝘦 𝘸𝘪𝘵𝘩 𝘰𝘳𝘨𝘢𝘯𝘪𝘴𝘢𝘵𝘪𝘰𝘯𝘴 𝘵𝘩𝘢𝘵 𝘤𝘢𝘯 𝘥𝘦𝘮𝘰𝘯𝘴𝘵𝘳𝘢𝘵𝘦 𝘵𝘩𝘦𝘺 𝘩𝘰𝘭𝘥 𝘤𝘶𝘳𝘳𝘦𝘯𝘵 𝘊𝘺𝘣𝘦𝘳 𝘌𝘴𝘴𝘦𝘯𝘵𝘪𝘢𝘭𝘴 𝘤𝘦𝘳𝘵𝘪𝘧𝘪𝘤𝘢𝘵𝘪𝘰𝘯, 𝘧𝘳𝘰𝘮 𝘱𝘳𝘦-𝘤𝘰𝘯𝘴𝘵𝘳𝘶𝘤𝘵𝘪𝘰𝘯 𝘴𝘵𝘢𝘨𝘦 𝘵𝘩𝘳𝘰𝘶𝘨𝘩 𝘵𝘰 𝘤𝘰𝘯𝘵𝘳𝘢𝘤𝘵 𝘢𝘸𝘢𝘳𝘥, 𝘱𝘳𝘰𝘫𝘦𝘤𝘵 𝘥𝘦𝘭𝘪𝘷𝘦𝘳𝘺, 𝘢𝘯𝘥 𝘩𝘢𝘯𝘥𝘰𝘷𝘦𝘳."

In other words, if you don't have it, we won't trade with you.

It's good for us, though, so many need to spend money to become compliant. 🕺🏻 🥂 🤑

So much for: "𝘞𝘩𝘺 𝘥𝘰 𝘐 𝘯𝘦𝘦𝘥 𝘵𝘰 𝘶𝘱𝘨𝘳𝘢𝘥𝘦? 𝘐𝘵 𝘸𝘰𝘳𝘬𝘴, 𝘥𝘰𝘯'𝘵 𝘪𝘵?" 🤣

#CyberEssentials

I have to scream into the void about #CyberEssentials, just for a minute. I apparently have bend over backwards to prove a bug in their product to an ASV which doesn't know the difference between a Windows 11 ntoskrnl.exe version and a Windows Server ntoskrnl.exe version. This is really helping me reduce cyber security risk. Just like being Cyber Essentials compliant helped M&S and Co-op. SO much time wasted. #cyberessentials #securitytheater

I laugh when I see organisations contorting themselves to comply with #cyberessentials (the governments own Cyber Security standard) whilst the cabinet and number 10 use Twitter, WhatsApp and personally owned devices apparently without a care in the world!

What does "digital sovereignty" actually mean -- and what doesn't it mean?
We use the phrase a lot at @hauntedlighthouse. So here's our position, written down clearly.
Jurisdiction. Audit trails. Knowing who can be compelled by a court order to hand over your data. Not nationalism. Not isolationism. Not a routing table with opinions.
https://sovereignauditor.substack.com/p/what-digital-sovereignty-means-to
#DigitalSovereignty #DataProtection #CLOUDACT #CyberEssentials #IsleOfMan #InfoSec #Privacy #GDPR

MI5 is briefing CNI operators. The Technology Secretary says firms have months to prepare. On the Isle of Man, the biggest unaudited risk isn't your firewall -- it's your IT provider. The Island has been here before. https://open.substack.com/pub/sovereignauditor/p/the-island-has-been-here-before
#CyberSecurity #IsleOfMan #Mythos #CyberEssentials #DataProtection #NCSC #SovereignAuditor

We called out Anthropic's Cyber Verification Program this morning as opaque gatekeeping. Then we applied. Approval came in under an hour. A Cyber Essentials cert and three honest sentences about what you actually do was sufficient. If you do legitimate security work and haven't applied -- the barrier is lower than it looks. https://open.substack.com/pub/sovereignauditor/p/if-you-dont-ask-youll-never-find

#CyberSecurity #CyberEssentials #Anthropic #Claude #AI #InfoSec #DataProtection #IsleOfMan

Ireland's NCSC says defenders have the advantage. Their own director told the Oireachtas it's a race the frontier moves every week. Both true. Together they define a window. At Present -- on the Mythos moment and what "at present" actually means. https://open.substack.com/pub/sovereignauditor/p/at-present
#CyberSecurity #AIGovernance #Mythos #CyberEssentials #DataSovereignty

Zero detections across 69 AV engines for a credential stealer delivered via a fake Windows Update site. WiX MSI, Electron wrapper, hidden Python runtime. Every layer legitimate. The evasion is architectural, not accidental. "We have AV" is not a compliance answer -- here's what is. https://sovereignauditor.substack.com/p/zero-detections-does-not-mean-clean #infosec #cybersecurity #CyberEssentials #patchmanagement

The Haunted Lighthouse Limited has achieved Cyber Essentials certification (whole organisation scope).

Assessed under the IASME scheme, aligned with the UK National Cyber Security Centre baseline controls. Sensible fundamentals: patch management, MFA, least privilege, secure configuration, and disciplined backup practices.

Not glamorous, just solid security hygiene.

The lighthouse is officially audited.

#CyberEssentials #IASME #NCSC #CyberSecurity #InfoSec #SmallBusiness #PrivacyFirst

Providing some helpful and constructive feedback on the UK's Cyber Essentials scheme, a set of controls to ensure organisation have a base level of IT security.

That's right kids, full disk encryption for laptops in not considered a bare minimum of #infosec for #CyberEssentials.

France Approves Social Media Ban for Children Under 15 Amid Global Trend https://thecyberexpress.com/social-media-ban-for-children-france/ #socialmediabanforchildren #protectingchildrenonline #TheCyberExpressNews #ChildCyberSafety #CyberEssentials #Frenchlawmakers #TheCyberExpress #FirewallDaily #PolicyUpdates #Governance #CyberNews

Lt Gen (Dr) Rajesh Pant to Lead Webinar on AI-Driven Cyber Threats — Register Free Now https://thecyberexpress.com/ai-cybersecurity-webinar-february-2026/ #aicybersecuritywebinarFebruary2026 #AIRansomwareWebinarFebruary2026 #AnnualThreatLandscapeReport2025 #Learning&Development #aicybersecurity2026 #aihacktivismwebsite #LtGen(Dr)RajeshPant #Cybersecurity2026 #CyberEssentials #FirewallDaily #Webinar2026

UK Unveils £210M Cyber Overhaul as Nation Faces “Critically High” Digital Threat https://thecyberexpress.com/uk-unveils-210m-cyber-action-plan/ #GovernmentCyberActionPlan #CyberEssentials #CyberActionPlan #FirewallDaily #CyberNews #UK

8 Ways the DPDP Act Will Change How Indian Companies Handle Data in 2026 https://thecyberexpress.com/india-dpdp-act-will-change-data-handling-2026/ #DigitalPersonalDataProtectionRules #SignificantDataFiduciaries #Indiadataprotectionlaw #Indiaprivacylaw2026 #Preparingfor2026 #CyberEssentials #FirewallDaily #PolicyUpdates #DPDPRules2025 #Governance #MainStory #Features #DPDPAct

CBI Files Charges Against 13 in Digital Arrest Fraud Case Linked to Myanmar Cyber Slave Compounds https://thecyberexpress.com/cbi-files-charges-in-digital-arrest-fraud-case/ #DigitalArrestFraud #CyberEssentials #FirewallDaily #DigitalArrest #CyberFraud #CyberNews #CBI

CBI Files Chargesheet Against 30 Including Two Chinese Nationals in ₹1,000 Cr Cyber Fraud Network https://thecyberexpress.com/cbi-%E2%82%B91000-cr-cyber-fraud-network/ #CyberFraudNetwork #CyberEssentials #OperationChakra #CyberNews #Chakra-V #Covid-19 #fraud #CBI

US Offers $10M for Iranian Cyber Operatives Behind Election Interference and Critical Infrastructure Attacks https://thecyberexpress.com/wanted-iranian-cyber-operatives/ #IranianCyberOperatives #CyberEssentials #IranianHackers #FirewallDaily #CyberWarfare #ThreatActors #CyberNews #Espionage #IRGC

Russia Weaponizes Stolen Ukrainian IP Addresses to Disguise Cyberattacks Against Europe https://thecyberexpress.com/russia-weaponizes-ukrainian-ip-addresses/ #UkrainianIPAddresses #CyberEssentials #FirewallDaily #digitalassets #IPaddresses #CyberNews #Ukraine #Russia

Australia Establishes AI Safety Institute to Combat Emerging Threats from Frontier AI Systems https://thecyberexpress.com/australia-ai-safety-institute-national-ai-plan/ #AISafetyInstitute #CyberEssentials #AIgovernance #CyberNews #Australia #AIRisks

Cyber Monday 2025: How Shoppers Are Being Fooled by ‘Too Good to Be True’ Deals https://thecyberexpress.com/cyber-monday-scams-2025/ #TheCyberExpressNews #CyberMondayscams #SocialMediaScams #CyberEssentials #TheCyberExpress #FakeMobileApps #phishingemails #FirewallDaily #ShoppingTools #FakeDeals

French Regulator Fines Vanity Fair Publisher €750,000 for Persistent Cookie Consent Violations https://thecyberexpress.com/french-regulator-fines-vanity-fair/ #FrenchDataProtectionAgency #FrenchDataPrivacy #CyberEssentials #CookieConsent #Regulations #VanityFair #CyberNews #CondéNast #CNIL

Poland Arrests Russian Suspected of Hacking E-Commerce Databases Across Europe https://thecyberexpress.com/poland-arrests-russian-suspected-of-hacking/ #CyberEssentials #CyberNews #hacking #Poland

EU Reaches Agreement on Child Sexual Abuse Detection Law After Three Years of Contentious Debate https://thecyberexpress.com/eu-agrees-on-child-sexual-abuse-detection-law/ #ChildSexualAbuse #CyberEssentials #PolicyUpdates #Regulations #Compliance #Governance #CyberNews #EU

CBI Arrests Fugitive Cybercrime Kingpin, Busts Fifth Illegal Call Center Targeting US Nationals https://thecyberexpress.com/cbi-arrests-fugitive-cybercrime-kingpin/ #CBIDismantlesCybercrime #CybercrimeKingpin #CyberEssentials #CallCenterScam #FirewallDaily #onlinefraud #cybercrime #CyberNews #CBI #FBI

Operation Endgame Dismantles 1,025 Servers in a Strike Against Rhadamanthys, VenomRAT Operations https://thecyberexpress.com/operation-endgame-dismantle-rhadamanthys/ #ThreatIntelligenceNews #ThreatIntelligence #OperationEndgame #CyberEssentials #ThreatActors #Rhadamanthys #infostealer #CyberNews #VenomRAT

OpenAI Battles Court Order to Indefinitely Retain User Chat Data in NYT Copyright Dispute https://thecyberexpress.com/openai-court-order-nyt-copyright-dispute/ #CourtPreservationOrder #AICopyrightLitigation #ChatGPTDataRetention #DataPrivacyConflicts #GDPRComplianceIssues #SamAltmanAIPrivilege #NewYorkTimesLawsuit #AIDataGovernance #JudgeSidneyStein #CyberEssentials #OpenAILegalCase #TheNewYorkTimes #ChatGPTPrivacy #GPT4Copyright #BusinessNews #dataprivacy #CourtOrder #CyberNews #ChatGPT #OpenAI