British Cyber Security At Risk From Russia

Speaking the National Cyber Security Centre’s (NCSC) CyberUK conference, Britain's cyber security Minister Steve Barclay said that Russia poses a significant threat to the UK. A “whole of society” approach to cyber security is needed to protect the UK amid Russia’s war in Ukraine, the Minister said. 

According to Barclay, one major Russian-based cyber crime group was behind a failed ransomware attempt to steal personal data to exchange it for a ransom payment, with 53 victim known reports in the past year. 

“It is vital that we adopt a ‘whole of society’ approach to cyber security... It’s a job for us all. Preserving our core values of democracy and free speech while keeping people safe online, as we are doing through our Online Safety Bill, depends on the UK having robust cyber defences." 

“We will achieve these by harnessing our collective strengths and acting as one. It is for this reason that our National Cyber Strategy treats the cyber domain no longer as a niche concern simply for the IT team, but as a wide-ranging grand initiative... “Responsible, durable, effective cyber power cannot be achieved by government alone; we want to see industry, universities, schools and individual citizens getting involved.” Barclay said.

NCSC chief executive Lindy Cameron echoed the Minister, saying it was vital for cyber security experts to “empower everyone” and to “mobilise every individual to stand up for the collective safety of our community”.
“We need to help people develop that instinct for spotting digital duplicity,” she said. “The threats are not going away – it will change but it won’t go away – and we must be savvy enough to respond to those changes... So we need to help people help themselves. That way we can build a well-prepared, resilient nation that sees the digital world as exciting, vibrant and rewarding, not scary, confusing and dull.”

Mr Barclay added that the “greatest cyber crime threat to the UK” will come from ransomware attacks – a form of malware that encrypts a victim’s files... While attempted attacks are concerning, we can draw positives. Our controls quickly spotted them. And in deploying rapid incident responses, we cull useful evidence to share with the wider sector, helping mitigate against similar-style attacks.

Coinciding with the Minister's speech, the Five Eyes intelligence partners in the UK, US, Australia, Canada and New Zealand issued a joint advisory to IT service providers and their customers with guidance on how to protect themselves and their supply chains in the wake of Russia’s invasion of Ukraine.

The advisory encourages firms to adopt multi-factor authentication, an added layer of log-in security, and ensure that all software and operating systems were up-to-date as well as prioritising the patching of any known vulnerabilities. The advisory comes after GCHQ spy agency Chief Sir Jeremy Fleming said that that the current “serious global economic situation” means “the need to make the UK the safest place to live and do business online is ever more relevant”.

The GCHQ Director said the UK must continue to focus on cyber criminals and other bad actors who are constantly adapting their tactics in an effort to make money through illegal activities. Fleming also said the National Cyber Force (NCF), a partnership between GCHQ and the Ministry of Defence, has been working to “disrupt” cyber crime and has done so on an “immense scale”. 

He also warned the UK and other countries who are standing with Ukraine against Russia’s ongoing invasion must continue to boost their own cyber security capabilities. He also said GCHQ has seen indications that “Russia’s cyber operatives continue to look for targets in countries which oppose their actions”.

Independent:     Yahoo:     The National:     Quest Media:    PA News / Forres Gazette:    Standard:  

You Might Also Read: 

Britain’s National Cyber Security Strategy:

 

« The Big Cyber Security Threats That You Can Prepare For
Google’s New Security Features »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Fuel Recruitment

Fuel Recruitment

Fuel Recruitment is a specialist recruitment company for the IT, Telecoms, Engineering, Consulting and Marketing industries.

PETRAS IoT Hub

PETRAS IoT Hub

PETRAS is a consortium of 12 research institutions and the world’s largest socio-technical research centre focused on the future implementation of the IoT.

DeviceAssure

DeviceAssure

DeviceAssure enables organizations to reliably identify counterfeit and non-standard devices with a real-time check on a device's authenticity.

IP Twins

IP Twins

IP Twins offer a wide range of services related to domain names and online brand protection.

Netpoleon Group

Netpoleon Group

Netpoleon is a leading provider of integrated security, networking solutions and value added services.

stackArmor

stackArmor

stackArmor specializes in compliance and security-focused solutions delivered using our Agile Cloud Transformation (ACT) methodology.

Cisco Networking Academy

Cisco Networking Academy

Cisco Networking Academy is the world's largest classroom, bringing technology education, 21st-century skills, and improved jobs prospects since 1997.

Truvantis

Truvantis

Truvantis is a cybersecurity consulting organization providing best-in-class cybersecurity services to secure your organization’s infrastructure, data, operations and products.

Oman Technology Fund (OTF)

Oman Technology Fund (OTF)

Oman Technology Fund aims to make Oman the preferred destination for emerging tech companies in the region, and an attractive and stimulating destination for venture capital.

Grindstone Ventures

Grindstone Ventures

Grindstone Ventures is a post-seed fund that supports post-seed equity and quasi-equity investments in early-stage innovation-driven and/or technology companies.

Fireblocks

Fireblocks

Fireblocks is a digital asset security platform that helps financial institutions protect digital assets from theft or hackers.

J.S. Held

J.S. Held

J.S. Held is a global consulting firm providing technical, scientific, and financial expertise across all assets and value at risk.

Boecore

Boecore

Boecore is an aerospace and defense engineering company that specializes in software solutions, systems engineering, cybersecurity, enterprise networks, and mission operations.

Canadian Cyber Threat Exchange (CCTX)

Canadian Cyber Threat Exchange (CCTX)

The CCTX is Canada’s not-for-profit, private-sector cyber threat sharing hub and collaboration centre.

Increase Your Skills (IYS)

Increase Your Skills (IYS)

Armed and ready: raise awareness of cyberattacks in your company with the Full-Service Awareness Platform from IYS – fast and effective. We help you develop a robust, sustainable security strategy.

Scinary Cybersecurity

Scinary Cybersecurity

Scinary was founded in 2015 on the premise that cybersecurity should not be limited to just large corporations or large government entities.