Access to Innovation
Access to Capital
Access to Talent
Access to Market
Access to Knowledge
Date Trend snippet:
07 June 2021
Relevance date:
2019
Type of Treath or Oppertunity
Domain of application
Source of threat
Trends in Security
Trends in Security Information
The HSD Trendmonitor is designed to provide access to relevant content on various subjects in the safety and security domain, to identify relevant developments and to connect knowledge and organisations. The safety and security domain encompasses a vast number of subjects. Four relevant taxonomies (type of threat or opportunity, victim, source of threat and domain of application) have been constructed in order to visualize all of these subjects. The taxonomies and related category descriptions have been carefully composed according to other taxonomies, European and international standards and our own expertise.
In order to identify safety and security related trends, relevant reports and HSD news articles are continuously scanned, analysed and classified by hand according to the four taxonomies. This results in a wide array of observations, which we call ‘Trend Snippets’. Multiple Trend Snippets combined can provide insights into safety and security trends. The size of the circles shows the relative weight of the topic, the filters can be used to further select the most relevant content for you. If you have an addition, question or remark, drop us a line at info@securitydelta.nl.
visible on larger screens only
Please expand your browser window.
Or enjoy this interactive application on your desktop or laptop.
IoT security challenge: product lifecycle support
Keeping software up to date and allowing for patches and updates is critical for a secure IoT device. Updates should be delivered and deployed using a secure and verifiable methodology. Device manufacturers should adopt a secure software development lifecycle, with a documented vulnerability management process in accordance with ISO/IEC 29147
and ISO/IEC 30111. The manufacturer should bear responsibility for an IoT device throughout its product lifecycle, including a responsibility to manage suppliers. Existing device lifecycle management protocols include OMA LWM2M. Cloud-based IoT platforms offer comprehensive, albeit unstandardised, device management functionality.
and ISO/IEC 30111. The manufacturer should bear responsibility for an IoT device throughout its product lifecycle, including a responsibility to manage suppliers. Existing device lifecycle management protocols include OMA LWM2M. Cloud-based IoT platforms offer comprehensive, albeit unstandardised, device management functionality.
More source info
5.7 PRODUCT LIFECYCLE SUPPORT
Building a device today that will stand up to the everevolving security requirements of the next several years without any updates or modifications may well be impossible; in the absence of patching and device management, devices quickly become outdated from a security perspective. However, updates typically require changes in device firmware – this makes it difficult for regular users to manage these devices. Remote update capability needs to be designed into the device to allow security updates, yet, the specialised operating systems used for embedded devices may not support this by default. Further, the life cycle for IoT devices varies widely in duration: industrial devices may be in the field for decades, consumer products such as smart home appliances or autonomous vehicles could run for about 10 years, and wearables may be in use for only a year or two. Clearly, managing IoT device lifecycles is a tremendous challenge.
5.7.1 Current Landscape and Recent Developments
As ABI Research identifies179, lifecycle device management offers manufacturers the ability to continue providing value long after a device has been sold and even re-sold; however, that management service only has value if it can be tied securely back to the device. Secure hardware (such as secure elements and secure MCUs) is at the forefront of providing this trust. Without this process, any future service provisioning for the device post-market is vulnerable. The increased recognition that this opportunity cannot be realised without trust is a potential driver for industry adoption of secure hardware. Soos et al180 present a model for IoT device lifecycle management that maps the phases of the IoT device lifecycle to three broad life stages: Beginning of Life (BoL), Middle of Life (MoL) and End of Life (EoL). Figure 12 depicts the security features and functions that should be in place during each step of a device’s lifecycle.181 During initialisation or boot-up, a firmware integrity check and secure boot process should be used to ensure that firmware and bootloader software have not been modified or tampered with. Once initialisation is complete, the communication between device and device, device and the Internet, or device and user interface (through mobile apps or web apps) should be encrypted. Authentication should use a second factor wherever possible, and default passwords must be changed. During normal operation, monitoring, analytics and audit procedures should be in place. The device should detect abnormal events and operations and provide a warning to the backend and/or end user. Secure firmware-over-the-air (FOTA) updates should themselves be integrity-checked and verified before installation.
According to AIOTI182, device management is defined as software or firmware updates as well as configuration or fault and performance management. Device management can be performed using existing protocols e.g. BBF TR-069183 or OMA LWM2M184.
Vulnerability Disclosure
History shows that vulnerabilities are invariably found after a product is deployed – and often exploited in “zero-day” attacks. It is vital to be able to detect unforeseen vulnerabilities, anomalies and threats in live IoT deployments, and to respond quickly, recover and remediate. A strategy to deal with discovered threats and vulnerabilities includes a Coordinated Vulnerability Disclosure (CVD) program that balances security with the interests of manufacturers and stakeholders, as well as a clear understanding of liability. CVD is standardised by the ISO185 under ISO/IEC 29147 and ISO/IEC 30111. While CVD is currently used mainly by the IT industry, it is imperative for open, standardised vulnerability management to be implemented across all sectors where security is becoming a critical component of safety.
Platform-Based Device Lifecycle Management
The growth of IoT has led to the emergence of cloud-based IoT platforms from many cloud service providers (CSPs) such as Amazon’s AWS, Microsoft Azure and Google Cloud. Most of these offer comprehensive device management functions across the device lifecycle, e.g. device registration/ enrolment, identity management, provisioning, permissions, monitoring and troubleshooting, status queries, and overthe-air (OTA) firmware updates. Platforms allow IoT users scale device fleets and may help to reduce the cost and effort of managing large and diverse IoT device deployments. Microsoft Azure, in particular, has comprehensive device management functionality built into its IoT Hub.186 This includes the use of a “device twin” for each connected physical device that stores device metadata and essentially acts a proxy for the actual device.
5.7.2 Key Findings
– Keeping software up to date and allowing for patches and updates is critical for a secure IoT device. Updates should be delivered and deployed using a secure and verifiable methodology.
– Device manufacturers should adopt a secure software development lifecycle, with a documented vulnerability management process in accordance with ISO/IEC 29147 and ISO/IEC 30111.
– The manufacturer should bear responsibility for an IoT device throughout its product lifecycle, including a responsibility to manage suppliers.
– Existing device lifecycle management protocols include OMA LWM2M. Cloud-based IoT platforms offer comprehensive, albeit unstandardised, device management functionality.
More trend snippets in Crime/terror groups
Perceived liveability in the neighborhood has increased slightly
The score for the quality of life in the neighborhood is 7.6. This is slightly higher than in 2017 and 2012.
- In the longer term, from 2008 and 2005 respectively, opinions about physical facilities and social cohesion have changed little.
- Satisfaction with the physical facilities is slightly higher than in 2017 and 2012.
- Satisfaction with social cohesion is slightly higher than in 2017 and 2012.
20 January 2021
|
Report
:
CBS Veiligheidsmonitor 2019
Perceived nuisance in the neighborhood has not changed
In total, the neighborhood nuisance experienced is the same as in 2017 and less than in 2012.
- The physical deterioration from which Dutch people experience a lot of nuisance in their neighborhood is less than in 2017 and 2012. The perceived social nuisance has not changed compared to 2017, but less than in 2012.
- The perceived traffic nuisance is higher than in 2017 and equal to that in 2012.
- Almost half of the inhabitants (49 percent) of the 70,000+ municipalities will experience in 2019
a lot of neighborhood nuisance; a lot of nuisance is experienced especially in the four largest cities; the
neighborhood nuisance is comparable to 2017.
20 January 2021
|
Report
:
CBS Veiligheidsmonitor 2019
Public sense of safety has increased
In 2019, 32 percent of Dutch people sometimes felt unsafe in general. This is lower than in 2017 and 2012.
- Public sense of insecurity has decreased by 34 percent compared to 2005.
- 14 percent of Dutch people sometimes felt unsafe in their own neighborhood in 2019, this is lower than in 2017 (16 percent) and 2012 (18 percent).
- In 2019, public sense of insecurity was around 14 percent lower than in 2008.
- Compared to 2017, fewer Dutch people in 2019 indicate that they do not open the door in the evening because they do not think it is safe. A smaller group also feels unsafe at home in the evenings, and the group that is afraid of becoming a victim of crime has shrunk. The proportion that detours because of unsafe places or that feels unsafe on the street at night is comparable to 2017. Compared to 2012, public sense of insecurity at night and avoidance behavior in the neighborhood have also generally decreased.
- 36 percent of all Dutch people sometimes feel unsafe in places where groups of young people hang out. One in five sometimes feels unsafe around entertainment venues. Furthermore, 6 percent sometimes feel unsafe in their own home. That is less than in previous years.
- 18 percent of the residents of the 70,000+ municipalities sometimes feel unsafe in their own neighborhood. This public sense of insecurity is highest in the G4 (23 percent), followed by the G40 (17 percent) and the other 70,000+ municipalities (13 percent).
20 January 2021
|
Report
:
CBS Veiligheidsmonitor 2019
Victimization of traditional crime has declined
In the longer term, from 2005, crime victimization has decreased by 50 percent.
-17 percent of the residents of the 70,000+ municipalities were victims of one or more forms of crime in 2019. This is lower than in 2017 (19 percent). Victimization is greatest in the G4 (21 percent), followed by the G40 (15 percent) and the other 70,000+ municipalities (12 percent). Particularly in the G40 and the other 70,000+ municipalities, victimization has decreased compared to 2017. In the G4, victimization has remained the same.
In 2019, 2 percent of Dutch people were victims of violence, 9 percent of property crimes and 5 percent of vandalism.
-The victimization rate of vandalism and property crimes has decreased compared to 2017; the victimization rate for violence has remained the same over the past two years.
-A total of 14 percent in 2019 were victims of one or more of these forms of "traditional" crime; this is lower than in 2017 (15 percent) and 2012 (20 percent)
-In 2019, 23 percent of the crimes encountered by victims of traditional crime were reported to the police. This is comparable to 2017 (24 percent) and less than in 2012 (29 percent).
20 January 2021
|
Report
:
CBS Veiligheidsmonitor 2019
Cybercrime victimization has increased
One in nine Dutch people (13 percent) was a victim of cybercrime in 2019; this is higher than in 2017 and 2012.
- In 2019, 8 percent of the crimes encountered by victims of cybercrime were reported to the police. This is comparable to previous years.
- Hacking is the most common of cybercrime offenses in 2019 (6 percent). This is followed by sale or purchase fraud (5 percent), internet bullying (4 percent) and identity fraud (1 percent).
20 January 2021
|
Report
:
CBS Veiligheidsmonitor 2019
Citizens and police: satisfaction with the functioning of the police increased
19 percent of the Dutch had contact with the police in their own municipality in 2019; this is less than in previous years.
- 66 percent were (very) satisfied with this contact; this is higher than in 2017 and 2012.
- In the long term, from 2005 onwards, satisfaction with the contact with the police in their own municipality has increased by 23 percent.
- 28 percent is (very) satisfied with the functioning of the police in the neighborhood; 35 percent is (very) satisfied with the functioning of the police in general. A relatively large number indicate that they do not have an opinion on this.
Satisfaction with the functioning of the police in the neighborhood and in general has increased compared to 2017 and 2012.
- Since 2005, satisfaction with the functioning of the police in the neighborhood has increased by 14 percent.
- Satisfaction with the functioning of the police in the neighborhood is slightly higher in the 70,000+ municipalities than the national average (29 versus 28 percent); satisfaction is comparable to 2017. The residents of the four largest cities in particular are relatively positive about the functioning of the police in the neighborhood.
-In terms of satisfaction with the functioning of the police in the neighborhood, districts in The Hague and Amsterdam in particular do above average.
20 January 2021
|
Report
:
CBS Veiligheidsmonitor 2019
Social preventive behavior has increased slightly
Social preventive behavior overall increased slightly between 2017 and 2019. The presence of preventive facilities in / around the home has decreased slightly compared to 2017.
- Almost seven in ten Dutch people often take valuables out of the car in 2019 to prevent theft.
- 45 percent often leave the lights on at night when no one is home.
- 63 percent of Dutch citizens have extra security locks.
- 12 percent have an alarm system at home.
- In terms of the presence of preventive facilities in or around the home, almost all districts in Zeeland - West Brabant, East Brabant and Limburg score higher than average.
20 January 2021
|
Report
:
CBS Veiligheidsmonitor 2019
The number of Dutch citizens that have fallen victim to cybercrime has increased in 2019
Between 2017 and 2019, the number of Dutch citizens that have fallen victim to cybercrime has increased from 11% to 13%. This concerns, for example, sales fraud, credit card fraud and hacking. Bullying and stalking via the internet is also seen as cyber crime.
21 June 2021
|
News
:
Less burglary or Violence, more Cyber Crime in Security Monitor
Veilig Online toont het cybersecurity bewustzijn van de gemiddelde Nederlander
Alert Online is een gezamenlijk initiatief van overheid, bedrijfsleven en wetenschap, dat zich richt op het creëren van bewustwording rondom online veiligheid, op het vergroten van kennis over online veiligheid en op het stimuleren van en helpen bij cyber secure gedrag, bij diverse doelgroepen. Het Cybersecurity onderzoek Veilig Online monitort de cyber awareness en cyber skills van Nederlanders door de jaren heen. Tot 1 januari 2020 werd dit jaarlijkse bewustzijnsonderzoek in opdracht van de NCTV van het ministerie van Justitie en Veiligheid uitgevoerd. Per deze datum heeft het ministerie van Economische Zaken en Klimaat (EZK) dit overgenomen. Aanvullend beoogt dit onderzoek om inzichten te vergaren van kennis, houding en gedrag van Nederlanders met betrekking tot online veiligheid en het bieden van inzichten voor beleidsvorming met betrekking tot dit thema.
14 October 2021
|
Report
:
Cybersecurity Onderzoek Veilig Online 2021
Dutch citizens judge their Cybersecurity knowledge similarly to last year
The Dutch assess their own knowledge about online risks comparable to last year. Almost three quarters of the Dutch rate their knowledge of digital and online security as at least reasonable. Most Dutch people also correctly estimate the concepts of cybercrime presented (which they say they know themselves). The strongest deviation from this trend is seen in the elderly (65+). They estimate their own knowledge to be relatively low and are also less familiar with various forms of cybercrime. The two most experienced forms of cybercrime, malware and phishing, have also remained the same as last year. These are also the forms of which people most often expect to become a victim.
14 October 2021
|
Report
:
Cybersecurity Onderzoek Veilig Online 2021
Dutch citizens are more worried about Cybersecurity threats
Concerns about online safety at home have increased compared to 2020. Six out of ten Dutch people are somewhat concerned about their own online safety in their home situation. In 2020 this was 46%. Twelve percent also indicate that these concerns have increased since the corona crisis. People are particularly concerned about criminals who want to steal their data. A difference can be observed between different age groups. The degree of concern about one's own online safety increases with age. At the same time, Dutch people under the age of 40 are less likely to worry about cyber attacks than older people. Higher educated people also feel safer online than lower educated people. The lower educated are relatively often concerned because they think they know too little about digital security.
14 October 2021
|
Report
:
Cybersecurity Onderzoek Veilig Online 2021
This threat landscape paper provides valuable insights into emerging trends in terms of cybersecurity threats, threat actors’ activities as well as vulnerabilities and cybersecurity incidents.
The ENISA Threat Landscape 2023 report is a comprehensive overview of the cybersecurity landscape, drawing insights from open sources and ENISA's Cyber Threat Intelligence capabilities. It covers various cybersecurity threats, including threat actors, CVE landscape, ransomware, malware, and more. The report categorizes threat actors, providing insights into their motives, impact, and tactics. It emphasizes the challenges of attribution and highlights the misuse of legitimate tools by state-nexus groups. Additionally, the report addresses evolving tactics of cybercriminals, hackers-for-hire, and hacktivists. It provides recommendations for threat mitigation and offers valuable insights into the attributed threat actors during the reporting period. Overall, it serves as a crucial resource for understanding emerging threats and cybersecurity trends.
31 January 2024
|
Report
:
ENISA Threat Landscape 2023
A complete research peeling off the vulnerabilities, (future) risks, and societal challenges for drug-related corruption at Schiphol Airport and Rotterdam Harbour
This article provides an in-depth analysis of the corruption threats and vulnerabilities at the two largest ports in the Netherlands - Schiphol Airport and the Port of Rotterdam. It adopts different research methods to understand the working of both Schiphol Airport and Rotterdam Harbour
The key findings include:
- The main ports are vulnerable to corruption due to factors like large cargo flows, sophisticated logistics infrastructure, and connections to international drug trafficking networks.
- The corruption threats with the greatest potential impact are bribery in the law enforcement chain and corruption in the cargo handling and logistics processes.
- Experts assessed the resilience of existing policy instruments to mitigate these corruption threats, finding that more attention is needed on issues like blackmail and financial bribery in the logistics chain.
- The study used a National Risk Assessment methodology, relying heavily on expert consultation, to identify and prioritize the key corruption risks facing these critical transportation hubs.
In summary, the article provides a comprehensive overview of the corruption challenges at the heart of the Netherlands' major ports and the policy tools available to address them.
1 May 2024
|
Report
:
Drug-related corruption at Schiphol Airport and Rotterdam harbour
Digitalization is making Dutch society increasingly vulnerable
Due to the continuing digitalization of Dutch society, the offline and the online worlds are becoming interconnected. More devices contain digital technology, more services are rendered by digital means and more data is processed digitally. Since the cyber resilience of these developments is often subpar this constitutes an increase of Dutch vulnerability.
30 March 2021
|
Report
:
Cyberweerbaar met nieuwe technologie
New technologies provide opportunities to enhance cyberresilience
Machine learning, post-quantumcryptograpy, quantumcommunications, distributed systems, LiFi and 5G all offer novel ways to enhance once's cyber resilience. From automated 0-day detection and patching to new heights of encryption using quantum. These two examples are not just potential choices, but necessary to combat the new vulnerabilities that these technologies also opened up.
30 March 2021
|
Report
:
Cyberweerbaar met nieuwe technologie
New technologies create new vulnerabilities
New technologies provide new vulnerabilities. Applied machine learning, for instance, could automate the execution of cyberattacks. new technologies can also lead to entirely new ways to attack a target. The creation of deep fakes to manipulate populations is novel attack vector that did not exist before. Lastly new technology and its application provide new vulnerabilities. Machine learning is very vulnerable to data pollution, providing actors with a new way to undermine actors that use machine learning.
30 March 2021
|
Report
:
Cyberweerbaar met nieuwe technologie
Increasing cyber resilience with existing technologies
There is only limited gains to be had by in investing in new technologies if we are not using existing technologies on a larger scale to increase cyber resilience. There is still much to be gained from taking basic security measures (strong passwords, 2-factor authentication *), encryption, the use of Privacy Enhancing Technologies (PETs) *, open data standards *, open source software * and more secure communication protocols.
30 March 2021
|
Report
:
Cyberweerbaar met nieuwe technologie
The search for untraceable convicts, without privacy violations
In this publication, the Dutch department of Justice and TNO share their findings regarding anonymous data exchange between government organisations, in order to track down unfindable convicted criminals so they can serve their sentences.
14 April 2021
|
External
:
Using data without getting them or seeing them: How we acquire information in the search for untraceable convicts, without privacy violations
As protection of the public is a governments social responsibility, it should assist vital infrastructure companies in securing IACS
Cyberattacks to Industrial Automation Control Systems (IACS) in vital infrastructure could lead to large incidents and consequences. Therefore, the government should keep an eye on organisations in the vital sector. Involved sectors believe it is important to show to the public that they are secured and safe out of their social responsibility.
21 May 2021
|
Report
:
Onderzoek Cybersecurity voor Industrial Automation en Control Systems (IACS)
The highest likelihood risks of the next decade are extreme weather, climate action failure and human-led environmental damage
Among the highest likelihood risks of the next ten years are extreme weather, climate action failure and human-led environmental damage; as well as digital power concentration, digital inequality and cybersecurity failure.
31 May 2021
|
External
:
The Global Risks Report 2021
The highest impact risk of the next decade is infectious diseases
Among the highest impact risks of the next decade, infectious diseases are in the top spot, followed by climate action failure and other environmental risks; as well as weapons of mass destruction, livelihood crises, debt crises and IT infrastructure breakdown.
31 May 2021
|
External
:
The Global Risks Report 2021
Digitization heightens risk of losing digital autonomy
At a time when a growing number of human activities are going digital, individuals and
institutions face a heightened risk of losing their digital autonomy. As social identities become more defined by online identities, users will be increasingly at risk of exposure to
targeted political manipulation, invasion of privacy, cybercrime, financial loss, and psychological or physical harm. However, the responding regulatory “techlash” risks internet restriction, information censorship and cut communications.
1 June 2021
|
External
:
The Global Risks Report 2021
Large companies take more measures against cyberthreats
It can be seen that easily applicable measures against cyberthreats are both implemented by small and large companies. For example, more than 80% of all companies utilise anti-virussoftware. However, difficult measures are mostly implemented by larger companies. For example, the use of VPN is larger at big companies.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
The use of two-factor authentication has increased in the last four years
The utilisation of soft- and hardware tokens (two-factor authentication) to login at a company has increased in the last four years. The utilisation at large companies has increased from 71% in 2016 to 87% in 2019, at SME's it has increased from 29% in 2016 to 54% in 2019 and at small companies it has increased from 23% in 2017 to 42% in 2019.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
Large companies outsource their ICT-security more often than small companies
About half of the small companies in the Netherlands perform their ICT-security on their own, whilst only 20% of large companies do this on their own. Consequently, large companies have more resources which they can use to outsource their security to other companies.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
The number of Dutch domain names with DNSSEC is steadily increasing
The percentage of .nl domain names with DNSSEC is steadily increasing. Between the 1st of June 2021 and 1th of October 2020, it has increased from 0 to 56 procent.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
Large companies report more cyber-related incidents than small companies
From 2016-2019, large companies consistently report more cyber-related incidents than small companies. This has several reasons. For internal incidents, like the disruption of hard- and software, the complex infrastructure of large companies provides a bigger chance of hard- and software malfunction. For external incidents, larger companies are a more interesting target for cybercriminals, leading to potential disruption.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
Half of the ICT-incidents are not associated with additional costs
From 2016-2019, it can be seen that half of the ICT-related security incidents are not associated with additional costs. This is the case for internal as well as external incidents.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
The number of internal and external ICT related incidents has decreased
Over the years 2016-2019, the number of internal and external ICT related incidents has decreased. For example in 2016, almost 40% of large companies dealt with ICT related security incidents, whilst in 2019 this number decreased to 20%.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
In 2019 more data leakages have been reported to the Dutch Data Protection Authority
In 2019, more data leakages have been reported to the Dutch Data Protection Authority, compared to 2018. In 2019, 26956 were reported, whilst in 2018 this number was 20881. Most of the reported data leakages came from the Dutch health sector, financial sector and public administration.
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
64% of data leakages only affect one person
The majority of data leakages in the Netherlands, namely 64%, only affect one particular person. Only 4% of data leakages affect more than 500 people. Such data leakages are mostly caused by hacking, malware and/or phishing.
Most data leakages that are caused by hacking and phishing occur in the healthcare sector (18%).
25 August 2021
|
Report
:
Cybersecuritymonitor 2020
How Facial Recognition Technology is used in practice by law enforcement agencies.
Law enforcement investigators use FRT for identification and authentication purposes. Identification activity (also referred to as “one to many”) consists of searching for the identity of a person, as opposed to authentication activity (also referred as “one to one”), which consists of verifying someone’s identity against an identity document (ID).19 Facial examiners are experts who run facial recognition analysis. In the case of the Netherlands
Police and INTERPOL, for example, the examiners operate autonomously from the investigation teams, and do not have knowledge of the prosecution that requires them to run facial recognition analysis.
18 February 2022
|
Report
:
A Policy Framework for Responsible Limits on Facial Recognition Use Case: Law Enforcement Investigations
Publicly shared principles for the responsible use of facial recognition technology for law enforcement investigations.
This proposition of principles focuses on law enforcement investigation activities. Law enforcement activities related to passport, residence permit and ID card issuance/ verification are not included in these principles. As such, facial recognition used to verify the identity of applicants – to make sure that the photo provided in the application matches the applicant and prevent fraud – is outside of the scope of this work.
18 February 2022
|
Report
:
A Policy Framework for Responsible Limits on Facial Recognition Use Case: Law Enforcement Investigations
Increase in the use of sensors, such as cameras or trackers that monitor and record your movement, to promote quality of life and safety
In the Netherlands, sensors, such as cameras or trackers that monitor and record your movement, are increasingly being used to promote quality of life and safety. Citizens
and companies have about 1.5 million security cameras, municipalities have over 3,000 surveillance cameras and the police have about 500 to 1,000. As new technology becomes smaller, more mobile and cheaper, they can be more easily built in, such as with cameras in smartphones. In addition, collection and processing of data is becoming increasingly easier, such as with smart algorithms in apps. This has created an extensive network of sensors that produces a large amount of data. This network consists not only of new sensors, but also of new actors and forms of supervision. Because citizens are not only monitored by the government and companies (surveillance), they also use sensors themselves to monitor each other (horizontal surveillance) or to keep an eye on the government and companies (sousveillance).
20 May 2021
|
Report
:
Burgers en Sensoren
Municipalities are increasingly experimenting with Smart City projects
More and more municipalities in the Netherlands are investing in smart city projects, or are considering doing so. Data promises efficient solutions for the challenges facing municipalities. Namely, it promises to make our lives more efficient, comfortable, sustainable and safer.
31 May 2021
|
Report
:
Voeten in de Aarde
The implementation of Smart City projects has proven to be difficult due to several challenges
Smart city projects look good on paper, but implementation proves difficult. The main challenges are: It is not easy to bring and keep all participating parties (government, institutions, companies and citizens) on the same page. Furthermore, new practices are created by digitization that are not yet sufficiently covered by law. There is also a challenge to develop revenue models that respect public values and citizens' interests. In addition, the learning capacity of municipalities has not yet been professionalized enough in the usually experimental projects.
31 May 2021
|
Report
:
Voeten in de Aarde
Risk management of dependencies and vulnerabilities in the IT supply chain is increasingly important
Due to the increasing (digital) entanglement of (digital and physical) supply and production chains, disruptions in these chains can have a major impact. Organizations are increasingly dependent on a network of providers for the continuity and security of their processes, with whom they do not always have a contract. Risk management on all those dependencies in the supply chain is becoming increasingly important, both to provide insight into risks and to control them with possible measures.
3 June 2021
|
Report
:
TNO 2021 R10245: Vraagstukken en perspectieven voor ICT SCRM – een initiële verkenning
A broad view of supply chain risks is important but sometimes difficult to organize in practice
A broad view of supply chain risks is important but this is sometimes difficult to organize in practice and is certainly not always well invested. The complexity of supply chains means that only a part of suppliers and dependencies can be mapped. Is it a supplier's product or one of the components, such as firmware or chips, does it deal with outsourcing or even the subcontractors? They do not have the capacity to map out more than the first-line suppliers in their own IT chains and the complexity of these relationships is also too great. There is a need to get a better grip on this and to engage with sector partners.
3 June 2021
|
Report
:
TNO 2021 R10245: Vraagstukken en perspectieven voor ICT SCRM – een initiële verkenning
Increasing use of cloud services poses cybersecurity risks
Managing the risks arising from the purchase of cloud services has emerged as a challenge. The trend of migration from IT infrastructures to cloud services will play an important role in the SCRM issue. The customer of the cloud service has no insight into which suppliers contribute to product development within the cloud environment, which is precisely the strength, the knowledge lies with the supplier and the customer does not have to worry about this, but one needs more insight here. Moreover, there is a limited number of large suppliers of cloud services, as a result of which different organizations (will) purchase the same service from the same party. This results in a shared dependency, which means that a disruption of this service can manifest itself all the more extensively. On the other hand, in general, these larger suppliers are reliable in cloud services and this is also the reason that many organizations use them. When looking at what kinds of risks or challenges are seen, this ranges from general cybersecurity threats, such as data leaks, hacked data, or a vulnerability that is used as a stepping stone, to specific risks.
3 June 2021
|
Report
:
TNO 2021 R10245: Vraagstukken en perspectieven voor ICT SCRM – een initiële verkenning
Society is confronted with new risks under the influence of developments in technology, demography and climate
Society is confronted with new risks under the influence of developments in technology, demography and climate. Although risks are inherently uncertain, the uncertainty surrounding new risks is even greater, partly due to the lack of risk data and the multitude of factors that influence the risk. The new risk and crisis types are clearly different from the more regular or routine crises, such as fires and minor floods. These new or unprecedented crises are difficult to identify, are not limited to one particular sector and can escalate very quickly. New technological risks also lead to more fear and uncertainty.
8 June 2021
|
Report
:
Cyberrisico's en Veiligheidsregio's
Most safety regions prepare for cyber scenarios, but many are still looking for ways to adequately prepare for digital disruptions
The majority of security regions are already preparing for possible cyber scenarios. The main activities are building and maintaining regional/national networks, building cyber knowledge and expertise, and practicing cyber scenarios. The security regions rate their own preparation for cyber vigilance and cyber-consequence response with a 5 and 6 respectively. However, The ambiguity and unfamiliarity exist about roles, tasks and powers of the actors involved, procedures for alerting, scaling up and decision-making, and the required own expertise in the field of cyber-consequence prevention.
8 June 2021
|
Report
:
Cyberrisico's en Veiligheidsregio's
Less than half of the safety regions actively collaborate with partners in identifying cyber risks
Currently, less than half of the security regions actively collaborate with partners in identifying cyber risks. Where exchange takes place, vital partners and other security regions are mainly consulted. Sharing 'risk information' between security regions and their partners is not always self-evident.
8 June 2021
|
Report
:
Cyberrisico's en Veiligheidsregio's
Safety regions have difficulty translating national risks into regional risks
Methods such as the 'Regional Risk Profile Guide' offer little substantive guidance and, above all, process information for the inventory of (cyber) risks within one's own region. In addition, it is not always transparent how security regions assess risks, which makes it difficult to compare the methods and outcomes used. 'The Cyber Security Image Netherlands' (CSBN), on the other hand, contains important information for security regions about developments in the field of cyber. The main challenge for many security regions is translating these developments to their own region.
8 June 2021
|
Report
:
Cyberrisico's en Veiligheidsregio's
In most safety regions' risk profiles 'cyber' is regarded as a possible cause of a physical incident
Most risk profiles focus on the failure of utilities (especially ICT and telecommunications), failures at hospitals and BRZO companies and cascade effects. The top 4 risks include failure of vital infrastructure, disruption of the continuity of own assistance, disruption of BRZO companies, and hack of data centers.
8 June 2021
|
Report
:
Cyberrisico's en Veiligheidsregio's
Hybrid conflict has become more salient
Hybrid conflict became more salient during the 2010s and is not likely to wither away in the 2020s. The Netherlands, together with likewise partners in its network of alliances, requires a strategic posture to deal with it. In the case of hybrid threats, a strategic posture
can:
• assist in defining and preparing the pre-requisites for counter hybrid action in terms of capabilities, legal and doctrinal frameworks, and mandate allocation;
• be instrumental in creating unity of action and synergy between counter hybrid measures by tying them together in one coherent whole;
• help in communicating to opponents and allies what are considered to be acceptable forms of hybrid behavior. It can thereby be instrumental in the development of international norms that limit hybrid threat behavior;
• thus ultimately shape the cost calculus of an adversary which in turn can prompt changes in adversarial behavior.
15 June 2021
|
Report
:
A Framework for Cross-Domain Strategies Against Hybrid Threats
The effectiveness of strategies against hybrid threats varies by domain of application
Modern communication technologies allow for diplomatic negotiations to take place faster as well as more frequently. Likewise, the contemporary information environment presents aggravated asymmetries between offense and defense, as the attack surface of open societies is large and vulnerable to aggressive state and criminal non-state actors. Similarly, the growing prominence of cyberspace as a domain presents new issues to traditional deterrence, given its novel asymmetries of ambiguity and relatively inexpensive offense, and expensive and rarely effective defense. Meanwhile, the military instrument remains a class of its own because it is the only one via which violence and damage can be applied directly. In contrast, the economic domain continues to grow in importance due to the ever-increasing interconnectedness of the public and private sector. In comparison to other domains, the shaping power of law is most dependent upon the perception and commitment of all parties. But even in an antagonized world, law can be a relevant instrument, if only because abiding by its tenets may convey a moral high-ground which can be capitalized on.
15 June 2021
|
Report
:
A Framework for Cross-Domain Strategies Against Hybrid Threats
Hybrid threats are difficult to prevent through deterrence alone, different strategies are necessary
Two axes differentiate between the range of strategies that can be applied against hybrid threat actors. The vertical axis consists of five general strategies: cooperation, persuasion, protection, coercion, and control. In addition, one can also escalate horizontally. For this, the framework uses the well-known DIMEL categorization of instruments and measures of state power, distinguishing between diplomatic, information, military, economic, and legal domains. Five kinds of assessment need to be conducted before, during, and after the employment of strategies in the cross-domain context: cost-benefit assessment, cross-domain orchestration assessment, proportionality assessment, signaling assessment, legal and normative frameworks assessment.
15 June 2021
|
Report
:
A Framework for Cross-Domain Strategies Against Hybrid Threats
Cyber specific threat within the agricultural sector
A cyber specific threat within the agricultural sector is a stepping stone-attack. In general, installations of agricultural companies (control equipment) can be controlled remotely and are controlled by suppliers managed. The devices are therefore susceptible to takeover by malicious parties via the network of suppliers (stepping stone attack). The security of such devices is often not enough, according to a ICT service provider.
19 June 2021
|
Report
:
Cyber-Ketenweerbaarheid
Impact of organised crime on the rule of law in The Netherlands
The murder of Peter R. de Vries and threats to lawyers, journalists and others are putting increasing pressure on the rule of law. The line between the underworld and the upper world is blurring, in part because criminal networks - sometimes through corruption - are making use of the legal world. Companies and social organizations that fall into criminal hands do not function optimally and harm the economy. This threatens the security and well-being of society.
16 February 2022
|
Report
:
Strategisch Omgevingsbeeld 2021
Technological opportunities and weaknesses in The Netherlands
The role of advanced technologies, such as virtual reality, augmented reality and Artificial Intelligence, is growing. Risky applications, such as deepfakes, call for vigilance to safeguard privacy and fundamental rights. In addition to risks, advanced technologies also provide opportunities for an open, prosperous society and more efficient service delivery. For example, advanced technology is helping to combat the corona crisis. Technology is also being used and further developed for the benefit of detection. Applications that are
currently under development, such as metaverse and quantum computing, will also find their way into government, business and society.
16 February 2022
|
Report
:
Strategisch Omgevingsbeeld 2021
Strategic view on national security in The Netherlands
The security of the Netherlands is constantly threatened by foreign government agencies in order to promote their own economic and political-strategic interests. They use espionage (digital) sabotage and (covert) influence. This affects the prosperity, stability and openness of our society. Government agencies also outsource operations to criminal groups. Advanced digital means are used. Classic means, such as influencing companies through investments and theft of company secrets, remain part of the modus operandi. In the Netherlands, companies and knowledge institutions are the main targets. But vital infrastructure, such as energy supplies and water management, is also targeted,
and Dutch social cohesion are increasingly under threat.
16 February 2022
|
Report
:
Strategisch Omgevingsbeeld 2021
The roles and duties of CSIRTs and LEAs in Europe in 2021
The main objective of this report is to present a detailed analysis of the roles and duties of CSIRTs and LEAs and required competences, showing synergies and potential interferences in their activities related to their responses to incidents of a criminal nature and their fight against cybercrime. By facilitating the cooperation between the CSIRT and the LE communities and the interaction with the Judiciary, this work has the final aim to contribute to better respond to cybercrime, which, as reaffirmed at the Octopus Conference on Cybercrime organised by the Council of Europe in November 2021, affects significantly the individuals and ‘often represents a serious interference with the rights and lives of victims’ (Council of Europe, n.d.g).
6 May 2022
|
Report
:
2021 Report on CSIRT-Law Enforcement Cooperation
Dutch citizens believe they are well informed about digital and online security
Most Dutch people think that they are (reasonably) well informed about online safety (65%). Only a small number of people feel that they are under-informed (9%). A number of digital dangers have been presented to people in this study. Of most of these dangers, the Dutch indicate that they know what they are, especially identity fraud (89%). The high level of awareness of identity fraud may be caused by the fact that this form of fraud can also occur offline. Furthermore, about a quarter of Dutch people (23%) indicate that they have had to deal with phishing and 60% are familiar with phishing.
22 January 2021
|
Report
:
Veilig Online 2020
Two-thirds of Dutch citizens have come into contact with a digital risk in the past year. Dutch citizens have basic knowledge about how to recognize phishing messages
Almost half of Dutch citizens (45%) have received emails in the past 12 months with attempted phishing in a private situation, and 16% received such emails in a work situation. Phishing is therefore the most common digital threat. It is therefore important that Dutch citizens are familiar with phishing and can recognize phishing in order to protect themselves. More than four in five Dutch people (83%) are familiar with phishing, and of this group almost everyone knows how to recognize phishing (98%). Particular attention is paid to the e-mail address (59%), the request for personal data (52%) and the language use (50%).
To recognize phishing, the Dutch mainly look at the e-mail address of the sender (59%), whether personal information (52%) or money (40%) is requested and what the language use or writing style of the e-mail is (50%). ). Links in emails are viewed by 29%, and 34% look at the target address behind the link. Phishing is also increasingly done via SMS and WhatsApp. To unmask those phishing messages, Dutch people check whether the messages ask for certain information (55%), whether they are asked to enter login details and passwords (51%), whether money is requested (49%) and whether personal information is requested (44%).
22 January 2021
|
Report
:
Veilig Online 2020
Dutch citizens estimate that the chance that they will be harmed by digital risks is low
People's risk assessment of various digital risks is low. Risks are often abstract, so it is difficult for people to imagine. An added problem with this is that people tend to ignore risks. As a result, they often do not take preparatory measures or adjustments to their behavior to reduce their personal risk. In addition, people are often inclined to estimate risks lower or think that it is mainly other people who are at risk.
22 January 2021
|
Report
:
Veilig Online 2020
Dutch citizens have limited concerns about their digital security
46% of Dutch people indicate that they are only slightly concerned about their online security in their private situation. 6% are very concerned. Dutch people who are very concerned or somewhat concerned about their online security indicate that they are concerned because they are afraid of not being aware of cyber criminals' approach (48%), because they are afraid that people will be able to view their data (47%) and because they fear financial data will be stolen (44%). Dutch people who are not concerned about their online security say that they are not worried because they always check whether websites and links are false (43%), because they update their devices (43%) and because they regularly perform virus scans ( 42%). The degree to which Dutch people are concerned about their online security in their private situation has remained stable over the past three years (44-46% are (very) concerned).
22 January 2021
|
Report
:
Veilig Online 2020
The need among Dutch people who are lagging behind in online security to improve themselves in online security is low
Most Dutch people who are willing to take action are also those who have already taken action (61%). The need to improve their own online security in the group that has taken fewer actions for the time being is relatively low. Actions that these Dutch people may be willing to take are using antivirus software (48%), regularly performing (security) updates (43%), checking links (40%), regularly making backups ( 40%) and immediate software updates (39%).
22 January 2021
|
Report
:
Veilig Online 2020
Dutch citizens do not want to pay for better services to increase security and have difficulty with security instructions
Most obstacles Dutch citizens experience are of financial nature. 58% does not want to pay for a service (such as a password manager) and 40% thinks the price of security software / virus scanner is an obstacle. Free services for password managers and virus scanners are not trusted by a third of Dutch people (33%). Most Dutch people indicate that they have no trouble making backups (57%) and know what a good virus scanner is (45%). The Dutch have more difficulty with security instructions (35%) and constantly creating new passwords (34%). They also find it a hassle to have a different password for each device and account (44%). However, they do indicate that they handle their passwords well (69%) and use different passwords (66%).
22 January 2021
|
Report
:
Veilig Online 2020
Dutch citizens often consider their online behavior to be safe
A majority of the Dutch people consider that they deal reasonably to very safely with the various issues presented with regard to safe online behavior. For example, a majority consider that they are good at updating their software (79%), with attempts at phishing emails (73%), the use of their devices by others (61%), making backups (58%), the granting of permissions on web shops (56%) and the use of USB sticks (55%).
Furthermore, Dutch people indicate that they have often adjusted the privacy settings of their social media accounts (48%). In addition, the Dutch pay attention to locks on websites (55%). 60% think a website is safe if it has a lock on it.
The Dutch people give themselves an average of 7.0 when it comes to dealing safely with online dangers. Dutch people who give themselves an unsatisfactory score feel that they have little understanding of online dangers (37%) and indicate that they are not always aware of them (27%). Dutch people who give themselves a satisfactory score, think that they are well informed (30%) and indicate that they are alert to online dangers (20%).
22 January 2021
|
Report
:
Veilig Online 2020
Few worries about digital security in a work situation
73% say they worry very little about their online safety in a work situation. This percentage is higher than last year (66%).
22 January 2021
|
Report
:
Veilig Online 2020
Employees' home network is the weak spot for companies: Three out of ten people who work from home still have the default password on their router
The occurrence of online risks is more closely monitored and observed in the work situation than in the private situation. Companies do a lot to have online security in order. However, with a lot of people working from home due to the pandemic, the home network and home situation could well become the Achilles heel of the corporate network; router passwords are not changed and children use company hardware.
Most Dutch people also do not have a clear picture of what safe online behavior means at work (57%) or in a private situation (52%). The corona crisis has forced more people to work from home. 48% of working Dutch people indicate that they have worked from home in the past 12 months. They often use a network connection with a password at home (78%). This password still appears to be the default password of the router relatively often (29%). Employees are often unable to state what their employer has done about special measures to make working from home possible since the corona crisis (57%). 16% indicate that his / her employer has made business equipment available.
22 January 2021
|
Report
:
Veilig Online 2020
Most companies have agreements about how to behave safely online. It is not difficult to keep to work agreements, but these agreements can be communicated more clearly
Seven out of ten (69%) working Dutch people indicate that agreements have been made with their company / organization about online safe behavior. 13% indicate that no agreements have been made at their company / organization. Agreements that have been made often concern the secure sending / exchange of files (35%), the use of websites and / or e-mail (33%), that only system administrators can install software (31%) and send exchange of personal data (31%).
Those who have work agreements (69%) do not find it difficult to (always) keep those agreements (81%). About half (46%) do experience obstacles in guaranteeing agreements about safe online behavior. This is mainly due to the way of communication. This is not always clear (13%), not sufficient (13%) or unambiguous (12%).
22 January 2021
|
Report
:
Veilig Online 2020
The distribution of security jobs mirrors the distribution of economic activity in the Netherlands
Zuid-Holland has the greatest number of security jobs, both in terms of primary and secondary security jobs. Utrecht had the largest share of security jobs of all provinces. Generally, the distribution of security jobs mirrors the distribution of economic activity in the Netherlands. The provinces Zuid-Holland and Noord-Holland are economically large and populous, whereas this is less so for Drenthe and Zeeland.
20 May 2021
|
Report
:
Education and Labour Market in the Security Domain
In 2018 over 1.1 million employed persons were employed in a security related occupation
In 2018 over 1.1 million employed persons or 13 percent were employed in a security
related occupation. Almost 11 percent of all employed persons worked in an occupation
classified as secondary security. The remaining more than 2 percent worked in an
occupation classified as primary security. Compared to employed persons in other occupations, employed persons in security related occupations more often have a full-time job, are more often employee with a permanent contract, often fall into the middle age range (25–45) and are more often highly educated.
20 May 2021
|
Report
:
Education and Labour Market in the Security Domain
The share of students following security related courses increased between school year 2013/’14 and school year 2018/’19
Generally, we see that the share of students following security related courses increased
between school year 2013/’14 (9.3 percent) and school year 2018/’19 (10.6 percent).
This trend is mainly due to the increase in students studying at higher professional level, although there is also a slight increase at university level. Upper secondary vocational security education decreased however (from 7.1 percent in school year 2013/’14 to 5.7 percent in school year 2018/’19). This reduction was particularly severe between school years 2015/’16 and 2018/’19.
20 May 2021
|
Report
:
Education and Labour Market in the Security Domain
Increase in highly educated security workers and the education of security workers is more often security related
In general, we see a trend towards more highly educated security workers and that
education of security workers is more often security related. The share of employed persons who are highly educated has increased from 54 percent in 2013 to 58 percent in 2018. However, we also see that only 22 percent of all employed persons with a security related education actually worked in a security occupation, and this percentage has stayed
relatively constant over time. In other words, while those working in security were more
often educated to work in security, the share of those educated in security and working in
security has not increased.
20 May 2021
|
Report
:
Education and Labour Market in the Security Domain
More security graduates are finding work, wages vary by province and level of education
The share of graduates of different programmes who found work after study was
marginally lower for security related programmes than the overall share. For example,
83 percent of graduates in upper secondary vocational security related programmes of
school year 2015/’16 found work within one year, whereas the share for all upper
secondary vocational programmes in that year was 85 percent. This difference was smaller
for higher professional programmes and was effectively zero for university programmes.
Over time the general trend is that more graduates are finding work. This trend is
particularly pronounced for university graduates from engineering programmes; 72 percent
of the university graduates in security related programmes of school year 2015/’16 found
work immediately and 89 percent within one year. Hourly wages varied per province. Generally, wages seem to be higher than the national median in Noord-Holland and Zuid-Holland. The level of education was however an important determinant of hourly wages per province. Wage growth was positive for all programmes in higher professional and university education.
20 May 2021
|
Report
:
Education and Labour Market in the Security Domain
Dutch people are more aware of online risks, whilst the number of cybercrime victims is increasing
Two-thirds of Dutch people find their knowledge about digital and online security fairly to very good, and more than half of the people (56%) take measures after a cyber-attack, an increase compared to last year. At the same time, the number of victims of cybercrime are increasing: 71% of the Dutch people have had to deal with this at some time.
More than ever before, the Dutch are aware of digital risks. For instance, the number of people who are familiar with phishing mails is growing, they more often only visit websites with a green lock (51%), more often make backups (46%) and are more secure with their passwords. Almost a quarter uses a password safe or manager to protect their passwords.
24 August 2021
|
News
:
Dutch People More Aware of Online Risks, but Number of Victims Increases
Cyber-espionage threat actors adjust their tactics, techniques and procedures to embrace new technologies
Cyber-Espionage threat actors adjust their tactics, techniques, and procedures (TTPs) to embrace new technology, while keeping their tried-and-true TTPs operational. For example, Phishing (Social) and Backdoor (Malware) have served as go-to Action varieties. Downloader (Malware), Capture stored data (Malware) and Spyware/Keylogger (Malware) have all steadily declined from the 2014 DBIR to the 2020 DBIR, with Scan network (Malware) completely falling off the top 10 list by the time we get to the 2020 DBIR.
25 August 2021
|
External
:
Cyber-Espionage Report
34% of all cyber-espionage breaches occur in Europe
From 2014-2020, most cyber-espionage breaches occur in the Asia-Pacific region (42%), followed by the Europe, Middle East and Africa (EMEA) region (34%), and North America (NA) (23%) region.
This contrasts sharply with all breaches for this same timeframe, as NA (65%)
dominates, followed by APAC (17%) and EMEA (16%).
25 August 2021
|
External
:
Cyber-Espionage Report
Most cyber-espionage breaches occur in the public domain
Some industries are impacted more heavily by cyber-espionage breaches than other industries. In particular, Public (31%), Manufacturing (22%) and Professional (11%) topped the list for Cyber-Espionage breaches.
25 August 2021
|
External
:
Cyber-Espionage Report
The top compromised attribute by cyber-espionage breaches is software installation integrity
Looking at cyber-espionage breaches and the top compromised attribute varieties for the 2014-2020 DBIR timeframe, it can be seen that software installation (Integrity) (91%), alter behaviour (Integrity) (84%) and secrets (Confidentiality) (73%) as the top compromised Attribute varieties.
25 August 2021
|
External
:
Cyber-Espionage Report
The top discovery method for cyber-espionage breaches is screening suspicious traffic
In terms of top discovery methods for cyber-espionage breaches in the 2014-2020 DBIR timeframe, it can be seen that the top two methods are Suspicious traffic (48%) and Antivirus (23%), with Emergency response team a distant third (7%). This contrasts sharply with the top discovery methods for all breaches for the same timeframe, in which it can be seen that Law enforcement (28%), Fraud detection (19%) and Customer (15%), respectively, at the top.
25 August 2021
|
External
:
Cyber-Espionage Report
External actors are the most involved actors regarding cyber-espionage
From 2014-2020, external actors have been the dominant actor regarding cyber-espionage, ranging 69% to 88% over this timeframe. In contrast, internal actors range from 12% to 34% in the same timeframe.
25 August 2021
|
External
:
Cyber-Espionage Report
Financial motives are the most prominent motive for cyber-espionage breaches
Over the course of 2014-2020, the most prominent motive for cyber-espionage breaches was financially related. In this timeframe, the financial motive lay between 67% and 86%.
25 August 2021
|
External
:
Cyber-Espionage Report
Cyber resilience for SME's
Cyber resilience is defined here as the ability to resist known and unknown forms of cyber
crime and recover quickly from a cyber crisis. The report investigated how SMEs in the metals sector organize their cyber-security and related security measures and how this process can be improved. It turns out that the companies surveyed are fully digitized and dependent on ICT for their primary process. The implementation and maintenance of this ICT is outsourced to external ICT suppliers. Many directors also (partially) outsource security to these ICT suppliers. As a result, these ICT suppliers implement generic technical measures without specifically looking at the organization in question and its risks. Crucial measures aimed at the organization of the company and the behavior of personnel are then often omitted.
30 November 2021
|
Report
:
Van Theorie naar Praktijk
Key Cyber Trends in The North America Region 2023
The region referred to as the North America region includes Northern American countries (United States of America, Canada, Bermuda, Greenland, Saint Pierre and Miquelon) and English-speaking Caribbean nations (Anguilla, Antigua and Barbuda, Aruba, Bahamas, Barbados, Belize, British Virgin Islands, Cayman Islands, Curaçao, Dominica, Greenland, Grenada, Jamaica, Montserrat, Saint Kitts and Nevis, Saint Lucia, Saint Vincent and the Grenadines, Sint Maarten, Trinidad and Tobago, and Turks and Caicos Islands).
3 April 2024
|
Report
:
Group-IB Report Hi-Tech Crime Trends 2023/2024
Despite an increasing awareness of the risks of cyber criminality, there is still little alertness in the work environment.
Because of the increasing digitalization criminality also made a move in that direction. Cyber criminals have become increasingly professional and make use of advanced and refined techniques. Because there is relatively a lot of news coverage on cyber incidents and there is a significant threat of cyber criminality in the privates sphere the awareness of the threats has increased. Unfortunately this awareness does not translate into awareness on the work floor even though companies are also a target of cyber criminals.
20 April 2021
|
Report
:
Handvatten Cybersecurity in de Logistieke Keten
The Internet of Things (IoT) is growing at a staggering rate
The Internet of Things (IoT) is growing at a staggering rate. It is forecasted that the number of connected things in use globally will surge from 8.4 billion in 2017 to 20.4 billion by 2020, with total spending on endpoints and services exceeding $2 trillion. IoT unlocks tremendous value for the individual, for organisations and for governments.
4 June 2021
|
Report
:
The IoT Security Landscape
There is a need for stronger collaboration towards tackling IoT security challenges
Many government agencies, academic institutes, industry alliances and individual vendors have made efforts towards tackling IoT security challenges; however, there is limited collaboration between these initiatives. Consequently, there exist hundreds of documents with significant duplications and possible contradictions. IoT product developers, and vendors involved in the IoT supply chain and life cycle, may find themselves overwhelmed – or they may take advantage of the lack of clarity to do nothing at all. There is an immediate need for harmonisation on security recommendations and guidelines as well as coordination on security assurances in the form of regulation and certification. Given the continuing exponential growth in the number of IoT devices, there is no time to lose.
4 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: cybersecurity and privacy by design
To build cybersecurity and privacy by design into IoT, a set of security principles should be adopted and adhered to. There is currently no single set of IoT security and privacy principles that is internationally recognized and adopted. The diversity in proposed IoT security principles between different countries and initiatives illustrates a lack of collaboration, especially between governments. Due to the lack of globally-adopted principles, a language towards common understanding of shared IoT challenges and issues is lacking. Such a language is required to define a global governance process. Consumers and companies are not uniformly aware of the cybersecurity risks and may not be equipped to respond properly.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: lack of standardization
Security standards and guidelines are required for development and operations to stimulate the adoption of secure IoT devices. While numerous standards exist in the IoT space, IoT security has not been standardized significantly until now; a recent ETSI standard is one of the first efforts to standardize IoT security. Manufacturers may not have the expertise to make use of the available guidelines and recommendation. Usability of security guidelines is a challenge and requires more research. While numerous sets of IoT security recommendations exist, it is important to harmonize and align these for global acceptance and adoption as a precursor to developing evaluation and certification schemes.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: evaluation and certification
There is a distinct lack of labels to inform end users about IoT device security and risks. However, efforts to create a labelling scheme are under way in various parts of the world. It should be ensured that these schemes are aligned in order to create a level playing field for
vendors. There are as yet no CC cPPs specifically for IoT devices. It should be determined whether these can be generic or specific to application domains. Non-CC alternatives can provide a light-touch approach to certification and should be explored.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: future-proof legislation
Although there are numerous industry initiatives and best practices in this area, their adoption is voluntary. IoT security legislation is in its infancy and virtually nonexistent outside the US and EU. Enforcing procurement by governments of secure IoT devices can contribute towards IoT security when large countries participate; smaller economies such as Singapore and the Netherlands can work together for greater impact. The EU’s single digital market approach can support IoT security as well. Legislative policy solutions should be sufficiently flexible to deal with societal needs as well as constantly evolving technologies. Regulatory measures for IoT security should make use of inputs from consumers as well as industry representatives on the rights and responsibilities of consumers and vendors.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: responsible industry ecosystem
Owing to the lack of legislation and regulation to enforce security in IoT devices, there is no level playing field for IoT device vendors nor a common expectation of security functionality. Liability is likely to be an effective mechanism to drive the industry towards IoT security, but legislation needs to be modernized to address IoT. Encouragingly, numerous industry collaborations exist and provide opportunities for knowledge sharing and mutual learning; however, the role of governments in such initiatives appears limited especially outside the EU.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: supply chain security
Modern products are assemblies of parts and components supplied by multiple vendors. To accelerate time-to-market and to reduce costs, device manufacturers increasingly use as many as possible off-the-shelf components using complex, globally distributed, and interconnected supply chains composed of various entities with multiple tiers of outsourcing. However, vulnerabilities can be introduced and exploited at any point in the supply chain. IoT hardware and software manufacturers and suppliers should adopt a cyber supply chain risk management framework (ISO28000, NIST). Cybersecurity requirements, risk and liability should be cascaded into the supply chain via contractual agreements. Organisations wield both contractual and economic power over suppliers. It is important to encourage the use of open frameworks and provide transparency for supply chain security information flows.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: device identity and root of trust
A hardware RoT is the only immutable trust anchor; the chain of trust should build on a hardware RoT. Currently, only 4% of IoT devices use a hardware RoT. RoT-based cybersecurity can be provided by several solutions including Secure Elements, TPMs, TEEs, Cisco Trust Anchor, Microsoft’s Pluton Security Subsystem, and SIM cards. Solutions to secure firmware and booting are being proposed as a joint effort of the hardware and software industry, however, their adoption for IoT devices is still in the initial stage.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: secure OS, cloud and applications
The diversity of operating systems, cloud solutions and application development frameworks that populate the IoT market is large. An in-depth evaluation is required on
the security claims made for each solution. Standards are required for software development, deployment and operation processes to secure the OS, cloud back-ends, and applications. IoT-specific secure software development life cycle (SDLC) guidelines need to be defined for developers of IoT applications.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: secure communications and infrastructure
The networking and interoperability challenge has seen extensive work as well as significant standardisation; however, an in-depth review is required of the security of these communication solutions and the security and privacy requirements on each level of the communication stack in the IoT ecosystem. Good practices are lacking regarding the technical feasibility of security controls running on resource constrained devices. Security reference architectures are required. Secure gateways can provide high-security deployments even with low-cost IoT devices.
7 June 2021
|
Report
:
The IoT Security Landscape
IoT security challenge: security monitoring and analytics
Data collection and analytics for massive numbers of IoT devices is a major challenge. New metrics and methodologies are required to support IoT infrastructure analytics given the data characteristics of resource-constrained IoT devices. Monitoring and analytics capabilities should provide input for vulnerability management programs. In case vulnerabilities are not solved by the supplier, monitoring tools should be able to detect and disconnect vulnerable devices from the internet. The industry should act as a global community when learning from incidents. This requires an open culture of sharing incidents and mutual learning where security is a joint responsibility.
7 June 2021
|
Report
:
The IoT Security Landscape
Cyber risks while working from home
Due to the coronavirus and the corona measures in 2020 and 2021, probably never before have so many Dutch people worked from home at the same time. In the media, several experts have pointed out the cyber risks of working from home. This is highly relevant for SMEs because SMEs are the backbone of the Dutch economy (61% of GDP, 70% of employment, total turnover of €888 billion), while we also know that this group of companies is relatively often the victim of cyber-attacks and has few resources at its disposal to guard against them. At the same time, SMEs are probably not well equipped to support (massive) home working and have therefore had to improvise in a hurry and with mostly limited resources to enable home working.
30 November 2021
|
Report
:
Van Theorie naar Praktijk
Quality of life and nuisance in residential areas in the Netherlands in 2021
There has been little change in social cohesion in the Netherlands since 2005. This snippet provides an overview of how residents rate the quality of life and nuisance in their neighborhoods.
6 May 2022
|
Report
:
Veiligheidsmonitor 2021
Safety perception in the Netherlands in 2021
Since 2005, feelings of unsafety in the Netherlands have decreased. Women and young people feel unsafe more often. Overall, one out of three Dutch citizens feel unsafe sometimes.
6 May 2022
|
Report
:
Veiligheidsmonitor 2021
Traditional crime in the Netherlands in 2021
In total, 17% of Dutch citizens was the victim of traditional crime in 2021. On the long term, traditional crime victimship decreased with 59% since 2005. In 2021, 38% of victims reported the crime against them.
6 May 2022
|
Report
:
Veiligheidsmonitor 2021
Online crime in the Netherlands in 2021
Online crime is steadily increasing, a majority of Dutch citizens has said that they have been confronted with (attempted) online crime in 2021.
6 May 2022
|
Report
:
Veiligheidsmonitor 2021
Citizens and police in the Netherlands in 2021
Dutch citizens are increasingly satisfied with their contact with the police. Almost half is satisfied with their contact with police in general. This snippet shows more information on citizens and police in the Netherlands in 2021.
6 May 2022
|
Report
:
Veiligheidsmonitor 2021
Prevention in the Netherlands in 2021
Dutch citizens are aware of the importance of prevention. This snippet shows more information on prevention in the Netherlands in 2021.
6 May 2022
|
Report
:
Veiligheidsmonitor 2021
Supply chain vulnerability and resilience
Supply chains contain cyber risks. Cooperation in the system is usually based on mutual trust and mitigating the cyber risks is mostly absent. Stepping stone attacks are used to infiltrated a vulnerable organization in the supply chain in order to attack a larger and better protected company. Investments in the resilience of the supply chain as well as the individual organization is necessary to contain threats.
30 March 2021
|
Report
:
Cyber-Ketenweerbaarheid
Those wanting to protect cyberspace have struggled to keep up with those who want to undermine it
Those concerned with the stability of cyberspace have struggled to keep up with those who seek to undermine it, as well as keep pace with technological developments and the evolution of geopolitical conflicts. This is partly due to the fact that cyberspace has transformed the way actors pursue political and military objectives and have new technology in their toolkits.
20 May 2021
|
Report
:
Advancing Cyberstability
Cyber attacks make clear that the world needs a Cyberstability Framework
Over the last decade, the number and sophistication of cyber attacks have increased, including attacks on government systems and critical infrastructures. Cyber attacks, which are conducted by both state and non-state actors, make clear that the world needs a Cyberstability Framework. Such a framework will serve to reduce the potential for significant disruptions of cyberspace that will undermine its benefits and reduce people’s well-being, including their rights and freedoms
20 May 2021
|
Report
:
Advancing Cyberstability
Technologies such as artificial intelligence will be further implemented in the coming years, with positive and negative consequences for digital security
The coming years will be characterized by the further implementation of technologies that have been written about and discussed for some time. An example is the application of artificial intelligence. The dissemination of autonomous systems increases digital vulnerability, and smart algorithms have positive and negative effects on digital security.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
In the coming years, digital security will be affected by the interaction between technology and other developments
1. For example, the further transition to a data-driven economy, with additional concerns about privacy and digital security, will increase the importance of digital security.
2. The COVID-19 pandemic has further increased the use of digital services and the digital space. This can be an incentive for further digitization. That also increases the importance of digital security.
The increasing dependence on foreign technology also increases the importance of digital security. This offers opportunities, but also makes it vulnerable to actions by malicious parties, especially when it concerns foreign parties assertively pursuing their own geopolitical agenda, and to dropouts. Dependence on ICT products or services from countries that have been identified as having an offensive cyber program against the Netherlands is a risk-increasing factor.
4. And rising geopolitical tensions will increase the digital threat from state actors.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Threat against primary targets and targets as a springboard
The annual report (= het jaarbeeld) shows that many types of organizations are targeted by attackers. It can vary by country and by type of espionage at which state actors focus their political espionage activities. For example, top sectors in the Netherlands are an obvious target for economic espionage and the national government for political espionage. Vital processes are a popular target for sabotage by state actors. Wealthy organizations are a favorite target of cyber criminals. In addition to the "primary" targets mentioned, attackers also target targets that can form a springboard to other targets. The digital space, the mostly global supplier chains and concentrations of personal data are ideally suited for this. This concerns, for example, suppliers of hardware and software, vital processes, such as those of telecom companies, or organizations that collect and process personal data on a large scale, including medical and employee data. For these "derived" targets, actors actively look for weak links in chains, as a stepping stone to (more) interesting targets. This means that sectors or organizations that seem to be of no interest to attackers can still be interesting as a stepping stone to another primary target.
The threat also exists because outages can occur at or via these targets. For example, system failure due to technical failure or failure due to human errors in implementation
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Digital risks seem to be underestimated
Despite the potentially major impact of cyber incidents, they are difficult to put on the agenda. To be able to make a decision, parties must be aware of digital risks. The Scientific Council for Government Policy (WRR) argues that the absence of truly disruptive events makes it difficult to put disruption on the agenda, let alone underline its urgency and gain it widely accepted. investing in digital security is not easy. Ideally, an assessment is also required of the risks, possibilities and costs of increasing resilience, but that is not easy. According to the Central Planning Bureau (CPB), organizations have an incomplete picture of the costs and benefits of investing in cyber security and there are various uncertainties. The investment level can then be too high or too low. The first reason for the incomplete picture is that several advice and guidelines are circulating about the optimal level of investments and about necessary measures. A second reason is that information is lacking about the magnitude of digital risks and the financial consequences because organizations: 1) do not notice every attack, 2) do not want to make every attack public, and 3) cannot always estimate the consequences of an attack. are the long term. A third reason is that some of the consequences of inadequate cybersecurity can affect third parties, the aforementioned external effects. Scientific - especially economic - literature also points to an "information problem" for making decisions about cybersecurity.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Organizations are unable to cope with phishing
It is complex for organizations (and citizens) to arm themselves against phishing, which is again the most used (first step of an) attack method in the past reporting period. Nevertheless, basic measures can be used to create barriers or limit further damage. To make phishing less effective, more and more organizations are running campaigns among employees to raise awareness of the dangers of phishing. The government also started an awareness campaign. Research has shown that this has an effect: click rates in phishing exercises drop. In 2018, Google reported that, due to the use of security keys (physical hardware keys, for example USB), none of their more than 85,000 employees has been successfully phished. Due to the use of the keys, the click behavior of the user was no longer relevant. The use of security keys is not (yet) considered a basic measure, but it does show that it is possible to greatly reduce the success rate of phishing. Phishing requires constant vigilance. There is less and less clicking on wrong links, but it still happens. Attackers also adjust their working method. Phishing traditionally takes place via e-mail, but the annual report indicates that cyber criminals also use phishing via SMS (smishing). Attackers also increasingly successfully steal sensitive information via social media in order to approach someone in a targeted manner, which is so-called spear phishing. This makes it difficult for a recipient to recognize that it is phishing.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Resilience against digital threats is not yet in order everywhere. Parties are therefore extra vulnerable to cyber incidents.
This is certainly the case when insufficient basic measures have been taken to create initial barriers against attacks, limit damage and simplify recovery when incidents do occur.
The vast majority of cyber attacks still use simple methods. These remain effective because basic measures are insufficiently implemented. Basic measures can also help against advanced attacks.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Unsafe products and services are the Achilles heel of digital security
Digitally unsafe products and services are still a fundamental cause of cyber incidents. They lower the threshold for attackers because they make it easier to carry out successful attacks. The insecurity can for example arise because suppliers supply insecure configurations by default. For example, 2019 saw an increase in abuse of misconfigured cloud applications. This included publicly accessible cloud storage, unsecured databases and unprotected backup servers. Insecurity can also arise because suppliers no longer make security updates available, or because these updates are not easy to install or because update mechanisms can be compromised.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Complete and clear picture resilience of vital processes is (still) missing
A complete and clear picture of the digital resilience of vital processes and associated systems is (still) lacking. Gaining a complete understanding, including the extent to which measures are effective and efficient, is complex. For example, reliable methods and techniques to measure resilience for an assessment of the risks to national security are still under development. The supervision of cyber security in the context of the Wbni has not existed for very long for a number of supervisors. This year, however, the first effects are visible of better insight among regulators into the digital resilience of providers of vital processes.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
According to the Court of Audit, the information security of the ministries and government organizations investigated is still not in order.
In May 2020, the Court of Audit found that the importance of information security is more prominent than it previously was at ministries and government organizations and that efforts have been made nationwide. Six of the sixteen ministries and government organizations surveyed have information security in order instead of the three from the previous year. Nine others are not that far yet. The Court of Audit notes that the level of security differs per ministry and points out that the ministries are dependent on each other when exchanging (secret) information. Here, the weakest link determines the strength of the chain.
As in previous years, the Court of Audit has critical comments on the management and maintenance of ICT. Management is about whether the systems are working properly and whether there are few failures. The IT management still leaves something to be desired. Good management means, among other things, that only authorized persons have access to the systems, that employees do not have wider rights than is necessary and that changes are tested before commissioning. Maintenance must ensure that the systems keep up with the times and that they continue to function in the future. The Court of Audit finds that six of the eleven ministries examined have sufficient knowledge about the state of the ICT systems, what it costs to keep them up and running and the risk of malfunctions. The Court of Audit is more critical of the other ministries.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Investment in innovation grows
The good news is that most organizations, on average, spend 10.9 percent of their IT budgets on cybersecurity programs. Leaders spend slightly more at 11.2 percent which is insufficient to account for their dramatically higher levels of performance. And their investments in advanced technologies, such as artificial intelligence, machine learning or robotic process automation, are rising substantially. Today, 84 percent of organizations spend more than 20 percent of their cybersecurity budgets on tools that use these three technologies as fundamental components. The finding represents a good step up from the 67 percent being spent three years ago. The increase is even more impressive with respect to the leaders. Three years ago, only 41 percent of leaders were spending more than 20 percent of their cybersecurity budgets on advanced technologies. Today, that has doubled, to 82 percent.
22 January 2021
|
Report
:
Third Annual State of Cyber Resilience
The basics seem better
The suggestion that organizations are making progress in cybersecurity is valid. In fact, more than four out of five respondents agreed that cybersecurity tools have advanced significantly over the past few years and are noticeably improving their organization’s cyber resilience.
Improvements in basic security hygiene back up this finding. Being able to accurately assess the number of cyberattacks against an organization depends on the ability of each organization to detect them. On the other hand, security breaches are real events and likely to be more precisely recorded. With this in mind, cybersecurity teams across industries and geographies deserve recognition for the improved levels of cybersecurity protection over the past year. For example, the total number of cyberattacks dropped 11 percent, from 232 to 206 targeted attacks. At the same time, we have seen a larger drop of 27 percent in the number of security breaches which indicates the basics seem to be improving. On average, organizations now face 22 security breaches per year compared with 30 in the previous year.
22 January 2021
|
Report
:
Third Annual State of Cyber Resilience
Progress masks hidden threats
Indirect attacks against weak links in the supply chain now account for 40 percent of security breaches.
A closer look at the sources of cyberattacks reveals 40 percent of security breaches are now indirect, as threat actors target the weak links in the supply chain or business ecosystem. This shift is blurring the true scale of cyberthreats. If we apply the same average number of security breaches to indirect cyberattacks, the total number—both direct and indirect—could jump to about 280, a potential increase of 20 percent over the prior year.
Organizations should look beyond their four walls to protect their business ecosystems and supply chains as well. On average, cybersecurity programs actively protect only about 60 percent of an organization’s business ecosystem. That is an issue when 40 percent of breaches come via this route. In such an environment, few organizations have the luxury of standing still. Fully 83 percent of our respondents agreed that their organizations need to think beyond securing their enterprises and take steps to secure their ecosystems to be effective.
22 January 2021
|
Report
:
Third Annual State of Cyber Resilience
Unsustainable cost increases
Another threat is cost increases beginning to reach what many respondents consider unsustainable levels. Despite rising investments in new technologies for cybersecurity programs, our research highlights many areas where the cybersecurity technologies being purchased by this spending are failing.
Looking at a broad range of 17 different components of cybersecurity protection, 60 percent of respondents reported cost increases on all 17 components over the last two years. A significant number, almost one quarter, reported cost increases of more than 25 percent a year across all 17 components. The three areas of cybersecurity protection with the largest increases in cost are network security, threat detection and security monitoring. Reflecting these trends, 69 percent of our respondents said staying ahead of attackers is a constant battle and the cost is unsustainable
22 January 2021
|
Report
:
Third Annual State of Cyber Resilience
Security investments are failing
Failures lead to gaps in protection, lower detection rates, longer business impact and more customer data loss.
More bad news is threatening organizations’ cyber resilience in several areas and causing security investments to fail. Our research identifies serious gaps in protection, very low detection rates, much longer business impact and customer data being exposed. Yet, our leaders are, once again, proving the exception in many of these areas.
With only a little more than half of their organization covered by their cybersecurity programs, non-leaders are at risk of having many areas unprotected. This contrasts with leaders who are able to cover 85 percent of their organization with their cybersecurity programs. The difference reflects a substantial gap in protection between the two groups.
22 January 2021
|
Report
:
Third Annual State of Cyber Resilience
Despite a decrease in instances ransomware remains the top threat according to cybercrime investigators and the second most prominent threat for the private sector.
The volume of ransomware attacks decreased throughout 2018. The decrease may be a result of increased awareness of potential victims, increased use of mobile devices, declined usage of exploit kits and more focused targeting of private and public entities. This more specialized focus on more valuable targets thus compensates the for the lower volume of attacks and does not diminish the threat ransomware poses.
14 April 2021
|
Report
:
Internet Organised Crime Threat Assessment 2019
Primary infection methods for malware remain social engineering, targeted phishing emails and Remote Desktop Protocols.
The more focused targeting of victims for ransomware attacks require specific tactics. According to different reports spear-phishing is the primary infection vector for 65% of hacker groups. Remote Desktop Protocols can be breached through brute force attacks or through buying access exploits on criminal fora. This latter method once again highlights the importance of good patch management.
14 April 2021
|
Report
:
Internet Organised Crime Threat Assessment 2019
Activity around the distribution of child sexual exploitation material online appears to be on the increase
Based on a number of indicators the activity around the distribution of child sexual exploitation material (CSEM) appears to be on the increase. Indicators are:
- The number of referrals from NCMEC/NCECC: there appears to not be a significant increase in the number of referrals.
- Information from national law enforcement authorities on the number of searches being carried out online for CSEM: Countries have reported an increase in the number of attempts to access illegal websites featuring CSEM blocked in their filters.
- The number of reports from the public to law enforcement or other institutions (hotlines)
- The nature or volume of new posts on online forums dedicated to child sexual exploitation compared to established baselines
- Conversations between criminals on forums
- Number of detected connections from which CSEM has been downloaded over peer-to-peer file-sharing networks: Spain has reported an increase, other countries have also reported similar trends.
15 May 2021
|
Report
:
Catching the Virus Cybercrime, Disinformation and the COVID-19 Pandemic
Initial fluctuation and stabilisation in sales via the dark web at beginning of COVID-19 crisis
Initial fluctuation in sales via the dark web at beginning of COVID-19 crisis in Europe which stabilsed throughout March 2020.
- The COVID-19 crisis provided new business opportunities, for example test kits and masks. the intentions might be good, but this is an easy way to sell fake, or poor quality articles anonymously.
- Only a small number of sales of these items have been recorded so far on the dark web, probably due to availability of similar goods on the surface web and the wider customer base not being traditional dark web users.
- Child Sexual Exploitation Material (CSEM) also continues to be distributed via dark web platforms and there are signs of increasing activity around this criminal domain on the dark web during the duration of the COVID-19 pandemic.
- The users of dark web marketplaces, vendor shops and other platforms include both individual citizens and criminal groups seeking to obtain illicit products.
- The technical barriers to entry are minimal and the dark web is freely accessible to anyone with basic understanding of online technologies.
Outlook for the future:
- Changes in supply and demand can be expected
- For drug-related items, the outlook depends largely on supply chains and the ease with which certain drugs can be obtained.
- For COVID-19 related items, demand will likely continue to mirror products sought after on surface web platforms
16 May 2021
|
Report
:
Catching the Virus Cybercrime, Disinformation and the COVID-19 Pandemic
Increased problems with the spread of disinformation during the COVID-19 crisis
Many Member States have reported problems regarding the spread of disinformation during the current COVID-19 crisis. Hybrid threats are broad and complex attacks on governance. A wide range of measures applied in hybrid campaigns include cyberattacks and disinformation, disruption of critical services, undermining of public trust in governmental institutions and exploiting social vulnerabilities.
- Spread of fake news is a key fixture of the hybrid threat landscape
- Both seasoned cybercriminals and opportunistisc individuals spread disinformation in order to benefit.
Disinformation and misinformation around COVID-19 continue to proliferate around the world, with potentially harmful consequences for public health and effective crisis communication. Some state and state-backed actors seek to exploit the public health crisis to advance geopolitical interests, often by directly challenging the credibility of the EU and its partners.
Outlook for the future:
The spread of disinformation and misinformation around COVID-19 has potentially harmful consequences for public health and effective crisis communication. On a broader level, coordinated disinformation campaigns can feed distrust in the ability of democratic institutions to deliver effective responses to the current situation. Criminal organisations, state and state-backed actors seek to exploit the public health crisis to advance geopolitical interests.
16 May 2021
|
Report
:
Catching the Virus Cybercrime, Disinformation and the COVID-19 Pandemic
The threat of DDoS-attacks in the Dutch healthcare sector remains relatively low
Whilst an increase can be seen regarding the number and intensity of DDoS attacks across many domains, the threat of DDoS attacks in the Dutch healthcare sector remains relatively low. However, it is concerning that cybercrimegroups are actively using DDoS attacks as a tactic. DDoS attacks can for example be bought on the darkweb for relatively little money, but suppliers of DDoS attacks are also advertising more and more on regular social media platforms.
19 May 2021
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2020
An increase in phishingcampaigns in the Dutch healthcare sector
In 2020, an increase can be seen in the number of performed phishingcampaigns, specifically targeting the Dutch healthcare sector. Actors are for example utilising COVID-19 related subjects in their phishingmails in order to persuade receivers to click on malicious links. Subjects such as 'vaccins', 'medical research' and 'face masks' were frequently used.
19 May 2021
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2020
Three types of financial fraud targeting the Dutch healthcare sector
In 2020, three types of financial fraud, specifically targeting the Dutch healthcare sector, were detected. Often, the same type of fraud attempt would occur at multiple healthcare organisations.
1. CEO-fraud. The attacker sends a fraudulent email on behalf of the CEO of an organisation, often with the request to transfer money.
2. Fake (medical) invoices.
3. Fraudulent requests to change bankaccount numbers.
19 May 2021
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2020
Ransomware is seen as the largest threat to the Dutch healthcare sector
Specifically targeted ransomware attacks, conducted by cybercriminals, are seen as the largest threat to the Dutch healthcare sector. Ransomware has the ability to affect the availability of data, operational processes and patient security. Although no ransomware attacks, resulting in major impact, were conducted in the Dutch healthcare sector in 2020, the threat remains high and present. The threat is seen according to three factors:
1. Dutch healthcare institutions are frequently scanned by malicious actors.
2. Dutch healthcare institutions received malware that was configured to download ransomware.
3. Dutch healthcare institutions frequently received malware (Emotet) through email. Such malware is often an indication for ransomware.
19 May 2021
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2020
Data leaks are a regular occurrence in the Dutch healthcare sector
Data leaks that occur in the Dutch healthcare sector are mainly caused by malware, human mistakes, phishing and vulnerable web applications. (Personal) data that is released during such data leaks is known to be traded by cybercriminals on the dark web.
19 May 2021
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2020
Credential phishing attacks targeting the Dutch healthcare sector have decreased in 2020
In a credential phishing attack, usernames and passwords of individuals are stolen by letting them log-in on a fake website. In 2020, such incidents occurred less in the Dutch healthcare sector, compared to the year before. A possible explanation for the decrease is the implementation of multi-factor authentication in many healthcare institutions.
19 May 2021
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2020
Emotet malware has led to data leaks in the Dutch healthcare sector
In 2020, cybercriminals have caused a large scale spread of the malware Emotet. This type of malware has affected multiple health institutions in the Netherlands. The malware has the ability to steal an individuals' e-mail, which has directly led to multiple data leaks in the Dutch healthcare sector.
19 May 2021
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2020
Outlook for the distribution of child sexual exploitation material online
Outlook for the future:
Offenders are likely to attempt to take advantage of emotionally vulnerable, isolated children through grooming and sexual coercion and extortion, while children that are allowed greater unsupervised internet access will be increasingly vulnerable to exposure to offenders through online activities. Adults working remotely subsequently are not as able to supervise their children’s internet activity or actively engage with them offline to effectively monitor for signs of stress, isolation and loneliness. Furthermore, Children could be more exposed, through less secure online educational applications, to unwanted attention from adults or identification of their personal information. Also children may be more inclined towards self-production of CSEM for exchange with peers or to send to others including adults depending on various factors.
29 May 2021
|
Report
:
Catching the Virus Cybercrime, Disinformation and the COVID-19 Pandemic
Fintech’s with a predominant tech focus or tech driven solution outperform in the market
Overall the Holland fintech's top 20 by growth is dominated by those companies that have a strong tech component or offer a tech driven solution, confirming that tech is the predominant driver for fintech adoption. In 2019, Factris, Geophy and Onegini saw the largest growth, in number of employees. Though all have a very distinct offering they also are very tech driven companies. Factris offers an online platform with financing solutions for the SMB market, Geophy uses data science and AI-powered valuation solutions to
value commercial property, Onegini offers secure identity cloud offerings for regulated industries. This top 3 is indicative of the current trends in fintech, where we see an increased focus on alternative finance platforms, continued growth of sub segments like regtech, legaltech, wealthtech, Proptech and insurtech, and the increased focus on secure identity solutions. In addition, enabling technologies, such as robo-advisory, AI, biometrics, blockchain, API’s and data analytics tools transition the fintech industry into a more mature phase. These enabling technologies continue to spur investments in the Fintech scene,
emphasizing the tech side more than ever.
10 June 2021
|
Report
:
State of the Dutch Fintech Market 2020
The second most significant threat encountered by European cybercrime investigators in 2018 was compromised data.
Compromised data refers mostly to easily-monetized financial data such as payment information or personal data and login credentials that can be used in subsequent cyber attacks. Employed means for stealing data are phishing, data breaches and information gathering malware. Increasingly the threat comes from malicious insiders.
14 April 2021
|
Report
:
Internet Organised Crime Threat Assessment 2019
DDoS attacks to deny outsiders the access to a system or service were the third most prominent threat identified by European cybercrime investigators in 2018.
The 'strength' of DDoS is increasing fast with constantly record breaking amounts of data packages are employed against organisations in the financial sector, public institutions and critical infrastructure, forcing them to increase mitigation activities. Employing a DDoS has a low threshold which leads to anyone, including Darknet marketplaces, being a potential target.
14 April 2021
|
Report
:
Internet Organised Crime Threat Assessment 2019
Collaboration is a strategic imperative for growth & expansion of the fintech market
The Achilles Heel lies in the fact that it is still relatively complicated to achieve successful cooperation between large companies and startups, 18% of the respondents indicate poor conditions here. A missed opportunity as most studies indicate that collaboration is essential to stimulate and grow innovation. In this respect, collaboration should not be seen as a ‘nice to have’ but should be seen as a strategic imperative to further grow and expand business opportunity.
11 June 2021
|
Report
:
State of the Dutch Fintech Market 2020
Risk & security is high on the agenda of many in the fintech industry
82% of the respondents made regular or substantial investments into risk & security in 2020. Fintech's are extremely vulnerable when it comes to data and security breaches. The more an industry gets digitized, the higher the digital or cyber threat will become. With online banking emerging and digitization of banking and related financial services, this topic will remain high on the agenda for the foreseeable future. 74% of the respondents indicate that they invested a considerable or substantial amount into general software development this year. This includes elements such as security or compliance. Compliance in general is high on the agenda of Fintech’s as well.
11 June 2021
|
Report
:
State of the Dutch Fintech Market 2020
The Dutch market for cloud services continuous to grow
The Dutch market for cloud services continuous to grow, especially cloud-based services in the area of application hosting, web hosting, server platforms, as well as storage, backup, security and workplace automation is growing fast in the Netherlands. Leading vendors are Amazon Web Services (AWS), Microsoft and Google. Overall, the financial services industry is highly digitized, and therefore technology adoption rates are
relatively high. At the same time, the uptake of cloud services in this industry has been relatively slow, due to concerns on compliance, security and privacy.
11 June 2021
|
Report
:
State of the Dutch Fintech Market 2020
Data security is one of the main drivers for development of the Dutch fintech scene
Access to funding, data access & data quality as well as the entrepreneurial business climate were considered drivers for the Dutch fintech scene, the COVID-19 virus has shifted that completely to the entrepreneurial business climate. Respondents indicate that they expect this to be an important driver for growth post-lockdown. This is followed – though with some distance, by existing customer trust & data security, assuming that respondents see the developments in open banking and the associated regulation as well as the increase of attention on data security as a driver for customer trust.
11 June 2021
|
Report
:
State of the Dutch Fintech Market 2020
The use of API’s in the fintech sector will be one of the most promising developments
App to app integration - is probably the most dynamic technology area at the moment as it
has the largest proportion of respondents planning to invest. With the emergence of open banking, increased data accessibility and interconnectivity, the use of API’s in the Fintech
sector will be one of the most promising developments to watch for the time to come. With the implementation of PSD2, more and more API opportunities will open up in the financial services industry.
11 June 2021
|
Report
:
State of the Dutch Fintech Market 2020
Decrease in crime in comparison to 2009, increase in crime in comparison to 2018
In 2019, the police and KMAR registered 817,000 crimes. This is a 4% increase when compared to 2018. Since 2009, registered crime has decreased by 35%. This increase in 2019 when looking at the numbers of 2018 is the first increase in crime since 2011. However, not every type of crime is represented equally. The increase in crime concerned most types of crime, however violence and sexual crimes are on the decrease. Over half (60%) of crimes are property crimes. Vandalism, traffic violations and violent crimes combined together account for 10% of all registered crime, where drugcrime accounts for 2%.
16 June 2021
|
Report
:
Criminaliteit en rechtshandhaving 2019
The most mentioned safety and security problems for multinationals in The Hague are cybercrime, reputational damage and lack of innovation
According to research conducted by the HSD, the most mentioned safety and security problems for multinationals in The Hague are cybercrime, reputational damage and lack of innovation. Other problems that arise are: interruption of business operations, distribution or logistic failure, failure to attract or retain talent, economic slowdown, unethical behaviour, geopolitical tensions and occupational accidents.
22 June 2021
|
News
:
HSD Research: Utilization of Transactional Environment for Safety & Security within Multinationals
Most commonly feared cyberthreats amongst Dutch organisations
The most commonly feared cyberthreats among Dutch organisations are data leakages (40%), phishing attacks, malware attacks / vulnerability exploits (35%) and extortion / destruction of the organisation's data (25%). In case of a ransomware attack, 30% of Dutch organisations would pay the ransom in order to get their data back. However, opinions vary widely on this topic. For example, about 50% of the surveyed CxOs would pay the ransom, compared to the 29% of CISOs.
23 August 2021
|
News
:
Results Dutch Cyber Security Landscape Survey
92% of Dutch organisations claim to have an up-to-date cyber security strategy
92% of Dutch organisations claim to have an up-to-date cyber security strategy. On the other hand, 6% of Dutch organisations are starting to set up their strategy, while 15% are already working on a next-level strategy.
Furthermore, many success factors are cited for achieving cyber security goals. The most frequently cited factors are increased operational excellence, clear cyber security communication, cyber security awareness training and compliance.
23 August 2021
|
News
:
Results Dutch Cyber Security Landscape Survey
Researchers are collaborating on an international scale against DDoS attacks
Over forty researchers from the Netherlands and the United States are sharing knowledge, insights and experiences regarding Distributed Denial of Service (DDoS) attacks. For example regarding orphan domain names can be used for malicious content and DDoS attacks that are conducted via poorly secured IoT devices.
24 August 2021
|
News
:
International Collaboration Against DDoS Attacks
1.2 million people have fallen victim to cybercrime
8.5% of internet users in the age group of 12 years and older stated that they were a victim of digital crime in in the past twelve months in 2018. This concerns 1,2 million people. Especially young people fell victim. Financial fraud was on top of the list of crime according to a recent report.
24 August 2021
|
News
:
CBS: 1,2 Million Victims of Cybercrime
Ethiopia is at risk of multiplying conflicts stretching the capacity of the state
Several groups, driven by ethno-regional nationalism seek formal recognition, authority, and territory in Ethiopia. Administrative recognition and dominance are the basis of most conflicts that the current government confronts. Over the past year, ethnic political parties from various regions have generally become more radical in their claims for self-determination. Furthermore, armed groups are challenging federal government troops across areas of the country, while ethnic violence and killing occurs on a weekly basis.
15 February 2023
|
External
:
Ten Conflicts to Worry About in 2021
People Centric Security Trends
Although the 2020 pandemic changed how many people work and interact with organizations, people are still at the center of all business. And they need digitalized processes to function in today’s environment.
30 March 2021
|
External
:
Gartner Top Strategic Technology Trends for 2021
Location Independent Strategic Technology Trends
Location independence: COVID-19 has shifted where employees, customers, suppliers and organizational ecosystems physically exist. Location independence requires a technology shift to support this new version of business.
30 March 2021
|
External
:
Gartner Top Strategic Technology Trends for 2021
Avoid Supply Chain Disruptions By Tooling Its Management
The current pandemic has greatly contributed to supply chain failures and, consequently, disruption of critical services. Forrester predicts that firms will use supply chain risk intelligence solutions and mapping tools integrated with GRC solutions to mitigate supply chain risk and improve overall business resiliency.
30 March 2021
|
External
:
The Top Security Technology Trends To Watch, 2020
COVID-19 Forces Changes To Access Controls And Adoption Of New Security Tooling
COVID-19 will lead to reduced security budgets, forcing firms be more efficient in their security spend. In response, firms will use the MITRE ATT&CK framework, adopt Zero Trust-based identity-centric access controls, protect data with antisurveillance tools, and invest in securing and protecting cloud platforms and workloads.
30 March 2021
|
External
:
The Top Security Technology Trends To Watch, 2020
Doing Less With More Bolsters Security Resourcefulness And Automation
Companies facing security budget cuts will need to become more resourceful: Focusing
on automation, building in-house security technologies, and increasing customer-facing security are early areas of investment. Firms striving to be leaner will need to develop stronger business justification processes and reduce internal process complexities for easier security to keep firms protected.
30 March 2021
|
External
:
The Top Security Technology Trends To Watch, 2020
Virtual meeting platforms have become a popular medium for BEC-scams.
During the pandemic a lot more business was conducted in online work/meeting spaces. This is also abused by threat actors via a compromised business e-mail adress in combination with video/audio spoofing.
11 January 2023
|
Report
:
Internet Crime Report 2021
Confidence fraud and romance scams result in a near billion dollar loss for citizens.
Confidence fraud and romance scams is still a prominent form of internet crime. These types of fraud target people with little knowledge about scams by pretending to be a relative in need of monetary support.
11 January 2023
|
Report
:
Internet Crime Report 2021
Ransomware stays relevant amidst digitalisation of workspaces.
Ransomeware threat actors are growing in technical sophistication. Due to the rise in online work/meeting spaces the remote attack surface for the actors has increased.
11 January 2023
|
Report
:
Internet Crime Report 2021
In recent years, more focused forms of ransomware attacks have been performed
In recent years, malicious individuals have conducted more focused forms of ransomware attacks, targeting individuals and organisations which can pay larger amounts of ransom. Once a malicious individual has access to the systems of a target, an evaluation can be made of the 'worth' of the target. The asked amount of ransom is adjusted according to the estimated worth of the target.
14 April 2021
|
Report
:
Ransomware
Cybercriminals specialise in offering ransomware as a service
Within the domain of cybercrime, cybercriminals are professionalising and specialising in offering ransomware as service. Cybercriminals exploit access points to networks and other vulnerabilities, for example through ransomware attacks. The obtained information is thereby sold to other individuals or groups.
14 April 2021
|
Report
:
Ransomware
In order to prevent ransomware from infecting systems it is necessary to first protect systems against phishing attacks
Protecting organisations against phishing attacks entails multiple components. First of all, the security of e-mails can be improved through SPF, DKIM and DMARC standards. Secondly spamfilters and phishingtests can be applied to reduce the risk of phishing attacks form occurring. Lastly, the awareness of employees regarding phishing attacks can be enhanced through trainings and structured processes.
20 April 2021
|
Report
:
Ransomware
Protecting vulnerabilities against ransomware
Some variants of ransomware abuse vulnerabilities in operating systems, webbrowsers, browser plug-ins and applications. Vulnerability management (updating systems), patch management (patching systems) and network segmentation are important processes in protecting such vulnerabilities. For example, the utilisation of secure VPN connections and the identification of users through Multi-Factor Authentication (MFA) are forms of network segmentation.
20 April 2021
|
Report
:
Ransomware
The principle of zero trust is emerging
The principle of zero trust refers to an information-security framework in which zero trust is placed on the existence of a safe network. This principle essentially removes the distinction between internal and external networks. Organisations that for example apply a Bring Your Own Device (BYOD) policy can implement the zero trust principle. Also, processes such as 'micro-segmenting' and Privileged Access Management (PAM), in which a whitelist is composed of individuals that can access certain systems, are (zero trust) solutions that can mitigate risks.
20 April 2021
|
Report
:
Ransomware
Increasing use of sensors and sensor data by the police
The police are increasingly working with sensors. In the late 1990s, the police also used sensors, such as cameras to photograph crime scenes and surveillance cameras on the street. But the number and type of digital sensors that the police have at their disposal has grown enormously. Police officers on the street are supported by digital sensor technology. This affects the role of the police officer. Agents make decisions based in part on information that comes from sensors. In this sense, the actions of the police are informed
by data. It is conceivable that sensor data will play a more guiding role in the near future.
20 May 2021
|
Report
:
Burgers en Sensoren
The police automates some of its core activities with smart sensor technology
A smart sensor can also perform core police activities. By the "smart sensor" we actually mean an automated robotic system. The definition of a robot is a "machine that can perceive, think and act". In that case, the three steps of the cybernetic loop are automated. For example, an ANPR camera can collect images continuously. A police officer still decides on the basis of an analysis of these images what action is needed. A fully automated intervention is also conceivable. For example, the Central Judicial Collection Agency (CJIB) could have ANPR cameras automatically issue fines for section controls. In that case, the ANPR camera system collects the data, analyzes it and takes action without human intervention.
20 May 2021
|
Report
:
Burgers en Sensoren
Citizens, businesses and municipalities are collecting more and more sensor data
In the past twenty years, the use of digital sensors in society has grown explosively. Citizens and businesses own a thousand times as many security cameras as the police. That is without all smartphones and other sensors. In practice, these are a great many digital witnesses who can support police work.
20 May 2021
|
Report
:
Burgers en Sensoren
The police are looking for new forms of cooperation to use sensor data from society for livability and safety
In the Netherlands we see various examples in which the police cooperate with citizens, companies and municipalities to promote quality of life and safety with sensor data.
An example is that the police stimulate citizens to do their own investigative work, for example by developing new digital platforms that facilitate citizens to do their own investigative work.
20 May 2021
|
Report
:
Burgers en Sensoren
Private parties will carry out and enforce their own investigative work with sensor data
In addition to the police and municipalities, private parties (citizens and companies) are increasingly using sensors and sensor data to make their own living environment more liveable and safer. Citizens and companies not only collect sensor data to share with the police (witnesses), but also analyze the data themselves (detect it) and take action (enforce it). This kind of 'do-it-yourself-policing' takes place on their own initiative. We see this happening more often in the business world, but also by citizens.
20 May 2021
|
Report
:
Burgers en Sensoren
Digital sensors have become more extensive, more mobile and smarter in recent years
Digital sensors have become more extensive, more mobile and smarter in recent years.
More extensive: The functions of digital sensors have expanded and have, in fact, digitized all of our senses: they can "look", "hear, "smell", "taste" and "feel".
More mobile: Digital sensors have become smaller and smaller. This makes digital sensors more mobile. They are in smartphones, can be worn on the body (such as smart watches and glasses) and can be controlled remotely.
Smarter: A camera that can recognize faces is an example of a "smart" camera.
21 May 2021
|
Report
:
Burgers en Sensoren
Multiple factors play a role in people's views on sensor surveillance
Citizens are not simply for or against a particular sensor application. Three personal dimensions can play a role in people's considerations, namely personal characteristics, attitudes, and the direct social environment. Additionally, three dimensions of sensor applications can play a role in people's considerations, namely:
1. Sensor technology: how sensor technology works.
2. Social practice and actors: the social practice in which the technology is applied and the actors who play a role in this.
3. Social, institutional context: the broader social, cultural and institutional context in which the sensor is applied
21 May 2021
|
Report
:
Burgers en Sensoren
Citizens expect the police and society to find a good balance between different values in the use of sensor technology
In addition to security and privacy, citizens find the following values important: democratic rights, efficient and effective business operations, capacity for innovation, transparency, liveability, autonomy or personal freedom and human contact.
21 May 2021
|
Report
:
Burgers en Sensoren
The acceptance of sensor deployment depends on the degree of safety and the type of living environment
The acceptance of sensor deployment depends on the degree of safety: the more unsafe citizens perceive a situation, the more they consider it permissible to use sensors to increase safety and quality of life. The acceptance also depends on the type of living environment: the use of sensors in private space is less acceptable than the application in public space, especially when there is a lot of traffic there.
21 May 2021
|
Report
:
Burgers en Sensoren
Administrative concern about the unprecedented crisis
The Netherlands is faced with new threats. Climate change, the energy transition and advancing digitization create new and complex issues for our society. New and even unprecedented crises seem to be emerging. Concern about the unprecedented crisis is fed by the realization that the increasing interdependence and complexity of technological and infrastructural systems make our society vulnerable to the consequences of minor disruptions in those systems. Such a disruption can cause all kinds of unexpected knock-on effects in other systems and thus suddenly bring entire sectors to a standstill. The social impact of such crises can be great and quickly transcends the regional and even the national level. The question is whether the Netherlands is prepared for such crises and the consequential societal disruptions.
25 May 2021
|
Report
:
Naar een gezamenlijke aanpak van ongekende crises
Societal disruption: small chance, big consequences
social disruption is an unlikely outcome of a complex process. A lot has to go wrong before the conditions are in place that enable a process of social disruption. It is a unique combination: a widely shared fear of a long-term failure of critical facilities, a dwindling confidence in the capacity of government and society to solve the problem and collective behavior that makes the situation worse. It can happen but it rarely happens. But when a society becomes disrupted, the process is difficult to stop. That's because this dynamic process has a self-reinforcing effect (a vicious circle is created). Without timely and adequate intervention, collective behavior can develop that will promote a deepening of the disruption. Here the problem arises that local, regional and national authorities appear to be not or hardly prepared for the specific challenges they will face in such a situation. In fact, the approach and arrangements, which usually seem to work during "ordinary" crises, can be counterproductive in a situation of social disruption.
25 May 2021
|
Report
:
Naar een gezamenlijke aanpak van ongekende crises
Societal disruption requires a specific response: resilience
Limiting the consequences of societal disruption is possible but difficult due to the chance of failure of critical facilities, the difficulty of effective government intervention, the lack of self-reliance in citizens, and the complexity of collaboration between organizations .The most effective response in countering social disruption stems from a high degree of resilience. This is a frequently used term in a variety of policy documents and the confusion surrounding this abstract concept is considerable. There is a distinction between administrative, institutional and social resilience. The general usefulness of resilience is rarely questioned. Now resilience is not something that can be achieved in the short term and with a few simple steps. Organizing resilience requires a long-term strategy and significant investments. However, it is rarely clear how local and regional authorities can strengthen that resilience. Recommendations for authorities therefore include: choose resilience, improve detection and monitoring, work on a resilient organization, and think through planning capacities.
25 May 2021
|
Report
:
Naar een gezamenlijke aanpak van ongekende crises
Cyber disruptions pose specific challenges that can further fuel the process of social disruption
Cyber disruptions can lead to social disruption. Cyber disruptions entail the following specific challenges that can further fuel the process of social disruption:
-Unpredictable consequences and complexity
-Disinformation and fake news
-Lack of expertise and experience
-Cross-border reconciliation
However, the social process - which is accompanied by social disruption - is not very different from a disruption of a different nature.
25 May 2021
|
Report
:
Naar een gezamenlijke aanpak van ongekende crises
2021 Trends in Ransomware and Malware
The occurrence of multiple ransomware extortion schemes increased strongly during 2021. After initially stealing and encrypting sensitive data from organisations and threatening to release it publicly unless a payment is made, attackers also target the organisations’ customers and/or partners for ransom to maximise their profits. However, malware attacks decreased heavily during the reporting period. Research has shown that attacks in North America decreased by 43% in 2020 compared to 2019. This drop was almost same in Europe, while a decrease of 53% was noticed in Asia. One of the key factors for this reduction could be linked to the COVID19 pandemic.
4 November 2021
|
Report
:
Enisa Threat Landscape 2021
2021 Trends in Cryptojacking
Cryptojacking or hidden cryptomining is a type of cybercrime where a criminal secretly uses a victim’s computing power to generate cryptocurrency. This usually occurs when the victim unwittingly installs a program with malicious scripts that allow the cybercriminal to access their computer or other Internet-connected devices, e.g. by clicking on an unknown link in an e-mail or visiting an infected website. Programs called ‘coin miners’ are then used by the criminal to create or ‘mine’ cryptocurrencies. During the reporting period there was a growing trend in cryptojacking, which could perhaps be associated with the increasing volatility in the cryptocurrency market that was observed during the same period. Moreover, given that cryptocurrencies offer (pseudo) anonymity, they become a very attractive and convenient means of exchange by cybercriminals. Accordingly, it should be noted that cryptocurrencies in general are requested when asking for ransom in ransomware attacks
4 November 2021
|
Report
:
Enisa Threat Landscape 2021
More vigilance is needed ahead of the 2024 European elections, increased cyber threats, ransomware remains the prime threat, new emerging techniques with AI
ENISA notes a significant increase in the variety and quantity of cyberattacks, especially on public administration. Therefore, more vigilance is needed ahead of the 2024 European elections. Cybercriminals are influenced by geopolitical events and the war in Ukraine influenced the threat landscape. Ransomware ranks the highest in prime threat. New emerging techniques with the use of AI in attacks.
23 October 2023
|
Report
:
ENISA Threat Landscape 2023
CIO's lead the bold disruptors: 30% of firms will increase spend on cloud, security and risk, networks, and mobility
In 2021, 30% of businesses will continue to accelerate their spend on cloud, security and risk, networks, and mobility — including struggling businesses looking to leapfrog less wily competitors and gain advantage coming out of the pandemic.
Leading CIOs will embrace cloud-first and platform strategies for speed and adaptiveness, eschewing stovepipes for end-to-end solutions. Interviews with leading CIOs found that they are collaborating more across organisations, objectives, and budgets, extending IT-business partnerships into enterprise- level shared accountability. They will also invest aggressively in employees, breaking down old ideals and resolving resistance within the organisation.
In fact, CIOs focused on employee experience (EX) will help their businesses attract, develop, and retain talent that can provide competitive advantage in a critical year. They will make the investments to foster social collaboration, make information easier to find and use, and provide less distracting security. CIOs who are slow or unable to adapt will become mired in short- term fixes that lead to digital sameness, not differentiation, and their top talent will get frustrated and leave for more visionary pastures.
22 January 2021
|
External
:
European Predictions 2021
Insurers hone in on cost control, containing claim leakage becomes the top priority for general insurance
Along with the coronavirus pandemic and social and economic crises, 2020 has been, for insurers, a year of claims. 2021 promises more of the same as the virus and other events continue to pressure insurers globally.
A key focus for insurers will be controlling claims costs. Along with hefty losses from global natural disasters, COVID-19-related general insurance claim losses could reach $100 billion. The magnitude of the losses will heighten focus on claim leakage, or dollars lost through claims management inefficiencies. As one third-party administrator we interviewed noted, claim leakage is “absolutely a big priority because in our world, anything paid incorrectly comes from our bottom line."
In 2021, expect a flurry of smart analytics investments to identify leakage potential at first notice of loss, as well as a sharper focus overall on claim leakage, with management consultants adopting an improved playbook.
22 January 2021
|
External
:
European Predictions 2021
EU takes bold steps in regulating AI, the European Parliament will draft new AI rules and abandon e-privacy reform
We expect that the European Parliament will not only fail to adopt the e-privacy regulation proposal that’s currently on the table in 2021 but will shelve it altogether. But with Google ending support for third-party cookies in its browser and the advertising industry embracing “cookie-less” approaches, the lack of updated e-privacy rules will have limited impact.
Meanwhile, data suggests that many EU citizens find current legislation inadequate for regulating AI-based activities. In just three months, the European Commission collected more than 1,200 formal opinions for its White Paper on Artificial Intelligence. And companies such as Rolls-Royce have announced their own AI ethics frameworks.
Forrester predicts that the European Parliament will finalise a draft of a new AI regulation that will be the world’s first. Thus, companies that do business with Europeans should invest in ethical AI approaches now.
22 January 2021
|
External
:
European Predictions 2021
Critical year for cloud competition in EU, GAIA-X will not make a significant impact in 2021
Europe is buzzing about the new GAIA-X sovereign cloud initiative — but the foundation’s members must now deliver concrete services and a clear value proposition. Three US- based hyperscalers — AWS, Microsoft, and Google — are the primary public cloud vendors for 46% of respondents at European companies, and their expanding network of European data centres and compliance with national rules will help them keep growing.
Despite the invalidation of EU-US Privacy Shield, legal (standard contract clauses) and technical (encryption) measures still help when you must transfer personal data outside the EU. If GAIA-X develops sensible policies for data sharing and use, we expect all major cloud providers to engage; if your provider doesn’t, it’s time to find a new supplier.
But in 2021, satisfied clients of the “keep my data in Europe” services from non-European-headquartered cloud businesses can stick with their current suppliers.
22 January 2021
|
External
:
European Predictions 2021
Risk management becomes a top supply chain priority, supply chains reconfigure to become resilient collaborative supply networks by 2022
To boost supply chain resilience, most large manufacturers will regularly pool data about supplier and carrier performance.
Supplier rationalisation will yield to supplier risk mitigation as most large manufacturers revisit existing ERP capabilities to automate multivendor sourcing based on risk. By 2022, event monitoring and dynamic production or logistics rescheduling platforms will raise a billion dollars in funding. A minority of global manufacturers will source indirect materials through markets like Alibaba or Amazon, but most will source direct materials from specialist industry marketplaces.
Secure product fingerprints will still be too costly for most items in the supply chain to make blockchain verification viable. Companies will focus on working with trusted suppliers using networks such as Trust Your Supplier. Manufacturing leaders must learn to federate data and distribute trust to collaborate with customers and suppliers in multi-enterprise supply networks.
22 January 2021
|
External
:
European Predictions 2021
Increasing attention is given to the issue of attribution in cyberspace
Attribution can be broadly defined as the process of assigning responsibility for a (malicious) cyber activity to a specific actor on the basis of the available evidence, including all-source intelligence, forensic investigation, and taking into account the political context. Given the sensitive nature of such evidence and the implications that a decision about attribution might have on bilateral relations between the accuser and the accused, states maintain their exclusive right to attribute (or not) a cyber operation based on their own methods, procedures and political interests.
the relatively short history of attribution of cyber-attacks, states have used different paths . While many initiatives hardly ever see daylight and are hidden from the scrutiny of public opinion, some states have also opted for more public forms of attribution through indictments under criminal law and political attributions – albeit with a very limited reference to international law and norms that have been violated.
14 April 2021
|
Report
:
Three tales of attribution in cyberspace
NCSC Trend List 2021: Expectations of the NCSC in the field of cybersecurity
The NCSC Trend List helps organizations to look ahead in the field of cybersecurity based on trends and expectations. Trends are things that are already happening and expectations are things that may come into play in the coming years. Depending on developments, these expectations may shift in time and/ or relevance. That is why the NCSC will regularly update the Trend List.
16 February 2022
|
External
:
NCSC Trend list 2021
Lessons that can be learned from a hack and data breach
By using the example of the municipality Buren, it is explained what to do and what not to do when a hack occurs in your municipality. A variety of lessons are described.
22 February 2023
|
Report
:
Lessen uit de hack en datalek bij Gemeente Buren
Supply chain cybersecurity: a sometimes overlooked essential to securing your business.
In today’s networked digital infrastructures, it is no longer enough to ensure the security of one’s own IT networks and systems. Incidents elsewhere in the chain can have an immense impact as they trickle down. Suppliers, vendors, contractors, and other third parties have become part of the security risk area. Meanwhile, hostile hackers no longer require to actually gain access to their main target to get to their end goal. Supply chains have essentially become supply networks. And while the challenges for protecting an organization continue to rise, the connectivity offers a learning opportunity and potential cost savings as well. For companies that have already been attacked, it is worth sharing their experiences and best practices. Those who haven’t would be wise to learn from others, because it’s improving their security posture as well as the supply network that they’re part of.
28 January 2022
|
Report
:
Als de Keten Zelf de Zwakste Schakel is
Increase in operational technology (OT) targeting incidents
According to X-Force data, a 2000 percent increase in operational technology (OT) targeting incidents in 2019 could portend the rising interest of threat actors to attack industrial systems as we move into 2020.
22 January 2021
|
External
:
X-force threat intelligence index
The malware landscape shifted in 2019, with threat actors returning to ransomware and building out botnets
The malware landscape shifted in 2019, with threat actors returning to ransomware and building out botnets. Throughout 2019, X-Force IRIS responded to ransomware engagements in 12 different countries in 5 different continents and across 13 different industries. Additionally, destructive malware activity shows that this potentially catastrophic malware trend continues to be a rising threat.
22 January 2021
|
External
:
X-force threat intelligence index 2020
The top three initial infection vectors were Phishing, Scan and Exploit and Stolen Credentials
The top three initial infection vectors seen in X-Force IRIS engagements in 2019 were a very close first, second, and third: Phishing (31 percent), Scan and Exploit (30 percent) and Stolen Credentials (29 percent). Phishing, most notably, went from making up nearly half of the total incidents in 2018 to less than a third in 2019. By contrast, the scanning and exploitation of vulnerabilities increased to nearly one-third of the incidents from only making up eight percent in 2018.
22 January 2021
|
External
:
X-force threat intelligence index 2020
Spam email continues to use a limited subset of vulnerabilities
X-Force analysis of global spam activity indicates that spam email continues to use a limited subset of vulnerabilities, with particular focus on just two CVEs: 2017-0199 and 2017-11882. Both of these are patched vulnerabilities that have accounted for nearly 90 percent of the vulnerabilities threat actors attempted to exploit via spam campaigns.
22 January 2021
|
External
:
X-force threat intelligence index 2020
Most targeted sectors were financial Services, Retail, Media, Education, and Government
Though Financial Services retained its top spot as the most targeted sector in 2019, industry-specific targeting highlighted shifting priorities for threat actors, with Retail, Media, Education, and Government all moving up on the global chart of the most targeted sectors.
22 January 2021
|
External
:
X-force threat intelligence index 2020
Europe: Mainly financially-motivated threat actors
Unlike Asia, which is mostly affected by rivaling nation states, Europe appeared to be primarily targeted by financially-motivated threat actors. This difference may be explained by the greater potential for theft from European-based companies based on currency exchange rates. Alternatively, criminal motivations could be in pursuit of intellectual property, which can be sold to competitors for significant gain.
22 January 2021
|
External
:
X-force threat intelligence index 2020
The risk surface will continue to grow in 2020
The risk surface will continue to grow in 2020, with more than 150,000 current vulnerabilities and new ones reported regularly
22 January 2021
|
External
:
X-force threat intelligence index 2020
the year 2020 could see another big number of lost records due to breaches and attacks
With over four times as many records breached in 2019 as in 2018, the year 2020 could see another big number of lost records due to breaches and attacks.
22 January 2021
|
External
:
X-force threat intelligence index 2020
Threat actors continue to shift their sights to different attack vectors in 2020
Threat actors continue to shift their sights to different attack vectors, with increased targeting of IoT devices, Operational Technology (OT), and connected industrial and medical systems, to name a few.
22 January 2021
|
External
:
X-force threat intelligence index 2020
Malware use by threat actors continues to fluctuate in 2020
Malware use by threat actors continues to fluctuate, with ransomware, cryptominers, and botnets all taking lead at different points in 2019. We expect this trend to continue in 2020, meaning organizations will need to protect themselves against varied threats that change over time.
22 January 2021
|
External
:
X-force threat intelligence index 2020
Spam activity continues unabated in 2020
Spam activity continues unabated, requiring diligent blacklisting, vulnerability patching and threat monitoring by organizations.
22 January 2021
|
External
:
X-force threat intelligence index 2020
The year-over-year shift in industry-specific targeting highlights the risk to all industry sectors
The year-over-year shift in industry-specific targeting highlights the risk to all industry sectors and a need for meaningful advancements and maturity in cybersecurity programs across the board.
22 January 2021
|
External
:
X-force threat intelligence index 2020
In the Netherlands, there is an increase in registered crimes for the first time in ten years
In the Netherlands (2020), the total number of registered crimes has increased for the first time in ten years. A large part of the total number of registered crimes is related to cybercrime. Also, a large increase is seen regarding the number of human trafficking reports.
20 May 2021
|
Report
:
Strategisch Omgevingsbeeld 2020
The chance of the occurrence of a terrorist attack remains considerable
Jihadism remains to pose the most important terrorist threat to the Netherlands. Most of the jihadist related terrorist threats come from lone-wolfs.
In 2020, right-wing extremists and left-wing extremists have not conducted any terrorist related attacks. However, a small group with anti-government sentiments have caused some violent activities.
31 May 2021
|
Report
:
Strategisch Omgevingsbeeld 2020
Many knowledge institutions have invested extra in measures that increase cyber resilience
Many institutions have invested extra in measures that increase resilience. Investments were made in particular in VPN solutions, multi-factor authentication, patch management, backups and awareness. A new trend is the interest in insurance against cybercrime.
3 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
Increased reliance on a small number of major cloud providers from outside the EEA makes education and research vulnerable
To facilitate distance education and working from home, institutions are deploying new tooling, including video conferencing tools and tools for online proctoring. They usually use cloud services for this. This has made institutions even more dependent on a limited number of large cloud providers, which can disrupt continuity in the event of a disaster.
3 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
Disruption, espionage and sabotage are the largest cyberthreats to the Netherlands
The Dutch society is, for a large part, dependent on digital processes. Datanetworks, data, services and systems are becoming more interconnected, making them larger and complex in nature. If digital (vital) processes are affected, the consequent disruption can lead to large-scale societal damage. The extent of the threat, especially by espionage and sabotage, and the lack of cyber resilience pose major risks to Dutch society.
4 June 2021
|
Report
:
Strategisch Omgevingsbeeld 2020
No major shifts in types of cyber threats over time
There are no major shifts compared to 2019 in the types of threats observed. Obtaining and disclosing data, identity fraud and disruption of ICT facilities are still the most common threats. Takeover and misuse of ICT resources is a threat that has increased in 2020.
4 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
Knowledge institutions pay more attention to knowledge security
Knowledge institutions pay more attention to knowledge security. Partly because of the changed international relations, they assess the exchange of knowledge in partnerships or the participation of some foreign students in a different way. They also check whether unwanted knowledge and technology transfer to third countries cannot take place in this way
4 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
Cybersecurity expertise and resources are still scarce, this calls for even more collaboration
Expertise and resources are still scarce. Collaboration on the theme of cybersecurity within education, research and beyond is as important as ever. Nearly half of institutions spend less than 5% of their total IT budget on information security. It is striking that the percentage of 'unknown' has increased slightly compared to 2019. Almost half of the institutions indicate that they have between 2 and 5 FTEs available for information security. This is a slight increase compared to 2019, but in the coming years, there will still be a great scarcity of cybersecurity expertise
4 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
Cybersecurity awareness and training is increasingly crucial
Phishing attempts have exploded and methods continue to become more sophisticated. Investing in training and awareness is becoming increasingly crucial, so that the user also becomes more resilient against the latest threats. Most institutions regularly conduct awareness campaigns. About a quarter of the institutions indicate that new employees receive awareness training when they are hired.
4 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
Information sharing about ongoing cyber attacks has decreased
The number of institutions that report directly to the board in the event of a serious incident has decreased slightly compared to 2019; then it was 93%, now 85%. However, the percentage that does not immediately report a serious incident has increased from 5% to 11%:
4 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
Cyber risk perception has generally increased
the risks are estimated to be higher in the education process, the research process and the operational management than in 2019. Only in the case of Consciously damaging the image, the risk is estimated slightly lower in all 3 processes. A slightly lower risk assessment is also made for Espionage in the educational process and in operational management.
4 June 2021
|
Report
:
Cyberdreigingsbeeld onderwijs en onderzoek 2020-2021
The digital infrastructure is critical for the functioning of society
The digital infrastructure of a society must remain in order, just like air, water, road and rail. If digital processes do not work properly, this can have major impact on society. Organisations can be unable to do their work, personal data can be exposed and facilities may stop functioning. For example: a hack at a cheese packaging company, a data leak at an ICT service providers for car companies and an ICT malfunction at an hospital can lead to such an impact.
In the past year, a great difference can be seen in the cyber security resilience of companies and organisations. Experts are concerned that this gap will expand in the future. Also, due to the Covid-19 pandemic, more processes have been digitised, thereby increasing the importance of digital security even further.
23 August 2021
|
News
:
Cyber Attacks Affect the Nervous System of Society
Governments are adjusting their cyber ecosystems in order to increase cybersecurity
Cyber attacks can spread and threaten multiple organisations, clients, industries and sectors at once. Governments are interested in utilising the growing information ecosystem. However, this ecosystem is accompanied with new risks. Reliable cybersecurity requires breaking down internal silos, recrafting external relationships, and making sure the public workforce comprises the best cyber talent.
26 August 2021
|
Report
:
Overheidstrends 2021: De rol van de overheid ten aanzien van cyber
In Europe, more supply chain attacks have taken place since 2020
Supply chain attackers managed to have significant impacts in terms of the downtime of systems, monetary losses and reputational damages in 2020. Based on previously observed trends and patterns, supply chain attacks will continue to pose risks in 2021. It is estimated that there will be four times more supply chain attacks in 2021 than in 2020. With half of the attacks being attributed to Advanced Persistence Threat (APT) actors, their complexity and resources greatly exceed the more common non-targeted attacks, and, therefore, there is an increasing need for new protective methods that incorporate suppliers in order to guarantee that organisations remain secure.
26 August 2021
|
Report
:
ENISA Threat Landscape for Supply Chain Attacks
Most common attack techniques and targeted assets in supply chain attacks
Most attack techniques that are used to compromise a supplier in a supply chain attack are unknown (66%), or conducted through exploiting software vulnerabilities (16%). Most assets that are targeted are code (66%), data (20%) and processes (12%). Furthermore, the compromised suppliers' assets are used as an attack vector to compromise customers. Those attacks are most done by abusing the trust of the customers (62%) or by using malware (62%).
26 August 2021
|
Report
:
ENISA Threat Landscape for Supply Chain Attacks
Delloite's 2021 Future of Cyber Survey showcases the current cybersecurity landscape from the perspective of executives.
As organizations navigate an evolving threat landscape and an increase in cybersecurity incidents, it’s important to have plans in place to mitigate such attacks, while also contending with both talent shortages and technology challenges. But how do the cybersecurity views of executives in the US stack-up against those of executives in the rest of the world? Deloitte Touche Tohmatsu Limited’s 2021 Future of Cyber report surveyed over 577 C-suite executives globally –159 in the US and 418 outside of the US in the ROW – across several industries regarding their organizations’ cybersecurity programs.
3 November 2021
|
Report
:
Deloitte Future of Cyber Survey
Software supply chain attacks remain a major problem in 2021 cybersecurity
Throughout 2021, software supply chain attacks grew in both frequency and scale. Researchers concluded that software supply-chain attacks increased by no less than 650% throughout the year. A study issued by the European Union Agency for Cybersecurity (ENISA) reviewed two dozen incidents and found that 66% of supply chain attacks were committed by exploiting an unknown vulnerability, while only 16% leveraged known software flaws. Most attacks actually targeted software code. This year, it seems that organizations were once again caught largely unprepared, as a survey concluded that 82% of companies designate the third party vendors that make up their software supply chain with highly privileged roles. 76% provide roles that could allow account takeover, and, worst of all, over 90% of designated security teams were not aware that such permissions were even granted.
21 March 2022
|
Report
:
Check Point 2022 Cyber Security Report
Cloud services increasingly under attack in 2021
In 2020, the global pandemic brought significant changes to the corporate work environment as well as corporate network architecture. Within those changes, both the shift to cloud-based architecture – meant to address the need for hybrid, remotely- managed networks – and the preference for as-a-service providers over traditional suppliers, have really stood out in terms of the scale of their adoption. Subsequently, in 2021, it became clear that cloud environments were also growing in popularity among end users. By mid-year, Gartner had released its forecast stating that end-user spending on public cloud services was estimated to grow by 23% in 2021 to over US$ 332 billion, compared to US$ 270 billion in 2020 and US$ 242.7 billion in 2019. Enterprises are now allocating large-scale funds to multi-cloud architectures, with Microsoft Azure and AWS leading in popularity, and Google Cloud Platform, IBM, VMWare and others dominating a respectable share of the market.
21 March 2022
|
Report
:
Check Point 2022 Cyber Security Report
Ransomware changed in 2021
Gone are the days when ransomware operators negotiated a ransom of US$ 200 for your family photos. Today’s ransomware economy is a complex operation extorting millions
of dollars per ransom, holding entire organizations captive under the threat of total
system shutdown. The evolution of the ransomware business model is at the core of this phenomenon. Ransomware-as-a-Service (RaaS) introduces affiliate programs at low onboarding costs, enabling any attacker to easily join the trend. The attacker selects one of the leading ransomware “projects” and follows the detailed, easy to follow complimentary operations manual, which contains complete instructions for every stage of the attack. If the intrusion was successful, the ransomware operators and affiliates share a percentage of the victim’s ransom payment. This extremely profitable scheme allows attackers to reach a wider range of victims and offers higher returns to all involved.
21 March 2022
|
Report
:
Check Point Cloud Security Report 2022
The return of Emotet malware in 2021
Emotet, one of the most dangerous and infamous botnets in history, is back, despite the long and synchronized efforts of the international community and law enforcement agencies worldwide that resulted in its take down in January 2021. Emotet, the banking Trojan turned modular botnet, is known for its massive reach of over 1.5 million infected computers worldwide, across thousands of compromised corporate networks. Emotet was used as a distribution platform to deliver other notorious malware families such as TrickBot, Qbot and Dridex, often resulting in network-wide ransomware attacks that crippled entire organizations. Inflicted damages were estimated at around US$ 2.5 billion, before it was forcibly shut down.
21 March 2022
|
Report
:
Check Point 2022 Cyber Security Report
The risk of anarchic uprising
Young activists, fed up with corruption, inequality and suffering, mobilize against elites. AI-powered social media is exploited to spread disinformation, fomenting social chaos.
1 June 2021
|
External
:
The Global Risks Report 2021
The risk of a collapse of an established democracy
A democracy turns authoritarian through the progressive hollowing out of the body of law. A legal rather than a violent coup erodes the system, with knock-on effects on other democratic systems.
1 June 2021
|
External
:
The Global Risks Report 2021
Technological developments ask for new knowledge and skills
There are worries about the preparation of the youth for a digital future. New technological developments, such as artificial intelligence, ask for new knowledge and skills. Specialists working in those areas of technology are heavily needed and will continue to be needed. One way in which we can work on those new knowledge and skills is through education at universities, but also in secondary or primary education by implementing new curriculum.
23 May 2021
|
Report
:
CSR Magazine
Online activities by Dutch jihadists have decreased
The number of Dutch jihadists that are active on Facebook have diminished, as well as the number of Facebookgroups where Dutch jihadists are active in. This is also the case on the social media platform Telegram. Facebook's and Telegram's willingness to remove users with extremist tendencies has contributed to the decrease in online activities by Dutch jihadists. Lastly, the government has arrested multiple individuals over the past years based on the suspicion of spreading online terrorist propaganda and managing jihadist social media channels, which has also contributed to this decrease.
14 April 2021
|
Report
:
Dreigingsbeeld Terrorisme Nederland 53
Since the COVID-19 outbreak, online and offline societal dissatisfaction has manifested itself
Since the COVID-19 outbreak, online and offline societal dissatisfaction has manifested itself even further. Social media plays a facilitating and mobilising role. Some groups and individuals reject governmental policies and distrust the government. They can find confirmation about their ideas in conspiracy theories, misinformation and disinformation.
14 April 2021
|
Report
:
Dreigingsbeeld Terrorisme Nederland 53
The distribution of jobs in the security domain across branches of industry is relatively constant over time
The largest branches, in terms of the number of security jobs (both primary and secondary) are, in order, Health and social work, Public administration and services and Information and communication and this order remained relatively constant since 2013. There is slightly more variation over time in the percentage of security workers within a branch. For example, between 2016 and 2018, the share of security workers in the ‘electricity and gas supply’ branch has become greater than the share of security workers in the ‘Health and social work’ branch). But again, the situation remains relatively constant over time.
19 May 2021
|
Report
:
Education and Labour Market in the Security Domain
Universities of Applied Sciences are collaborating in the field of safety and security
Four Dutch Universities of Applied Sciences are collaborating in the field of safety and security. The themes that are central for the collaboration are subversion, cyber crime and cyber security, data and intelligence. The angle of the research is strongly practice-oriented and therefore directly supportive of what practice demands.
21 June 2021
|
News
:
Institutes for Higher Education Join Forces in National Lector Platform Security
The application of Artificial Intelligence is widespread
Artificial Intelligence can be applied to almost every sector and domain. For example, AI can be used for the development of self-driving cars, intelligent search engines, navigation systems and chatbots. 86% of companies therefore say that AI will have a big impact in their sector.
11 August 2021
|
Report
:
Strategisch Actieplan voor Artificiële Intelligentie
Cross-cutting crime facilitators and challenges to criminal investigations: Social engineering
Social engineering remains a top threat to facilitate other types of cybercrime.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Cross-cutting crime facilitators and challenges to criminal investigations: cryptocurrencies
Crypto currencies continue to facilitate payments for various forms of cybercrime, as developments evolve with respect to privacy oriented crypto coins and services.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Cross-cutting crime facilitators and challenges to criminal investigations: crime reporting
Challenges with reporting hinder the ability to create an accurate overview of crime prevalence across the EU.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Cyber-dependent crime: ransomware
Ransomware remains the most dominant threat as criminals increase pressure by threatening publication of data if victims do not pay. Ransomware on third-party providers also creates potential significant damage for other organisations in the supply chain and critical infrastructure.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Cyber-dependent crime: emotet
Emotet is omnipresent given its versatile use and leads the way as the benchmark of modern malware.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Cyber-dependent crime: DDoS attacks
The threat potential of DDoS attacks is higher than its current impact in the EU.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Child sexual exploitation online
The amount of online CSAM detected continues to increase, further exacerbated by the COVID-19 crisis, which has serious consequences for the capacity of law enforcement authorities. The use of encrypted chat apps and industry proposals to expand this market pose a substantial risk for abuse and make it more difficult for law enforcement to detect and investigate online CSE activities. Online offender communities exhibit considerable resilience and are continuously evolving. Livestreaming of child sexual abuse continues to increase and became even more prevalent during the COVID-19 crisis. The commercialisation of online CSE is becoming a more widespread issue, with individuals uploading material to hosting sites and subsequently acquiring credit on the basis of the number of downloads.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Payment fraud: SIM swapping
SIM swapping is a key trend that allows perpetrators to take over accounts and has demonstrated a steep rise over the last year.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Payment fraud: BEC
BEC remains an area of concern as it has increased, grown in sophistication, and become more targeted.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Payment fraud: online investment fraud
Online investment fraud is one of the fastest growing crimes, generating millions in losses and affecting thousands of victims.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Payment fraud: card-not-present (CNP) fraud
Card-not-present (CNP) fraud continues to increase as criminals diversify in terms of target sectors and electronic skimming (e-skimming) modi operandi.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
The criminal abuse of the Darkweb: the Darkweb environment has remained volatile
The Darkweb environment has remained volatile, lifecycles of Darkweb market places have shortened, and no clear dominant market has risen over the past year compared to previous years to fill the vacuum left by the takedowns in 2019.
The nature of the Darkweb community at administrator-level shows how adaptive it is under challenging times, including more effective cooperation in the search for better security solutions and safe Darkweb interaction.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
The criminal abuse of the Darkweb: Privacy-enhanced cryptocurrencies and privacy-enhanced coinjoin concepts
There has been an increase in the use of privacy-enhanced cryptocurrencies and an emergence of privacy-enhanced coinjoin concepts, such as Wasabi and Samurai.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
The criminal abuse of the Darkweb: surface web e-commerce sites and encrypted communication platforms
Surface web e-commerce sites and encrypted communication platforms offer an additional dimension to Darkweb trading to enhance the overall business model.
22 January 2021
|
Report
:
Internet Organised Crime Threat Assessment 2020
Key transformative technology that will contribute to the changing dynamics of cyberspace: Ubiquitous connectivity
Devices, networks and services are increasingly hyperconnected and interdependent, operating on sophisticated shared infrastructures. Factors such as the speed, reliability, low latency, agility and intelligence of communications architectures are leading to significant changes in the way in which they are used and relied upon pervasively throughout our environments.
Systemic risks related to this development:
-Scale and criticality: The sheer scale of the connected ecosystem means that the potential attack surface is expanding rapidly. As previously unconnected systems become connected to each other and to the internet, there is an increased risk to the confidentiality, integrity and availability of digital assets – whether it’s data, information, algorithms or digital services. The potential implications in terms of compromise for industry and society are becoming more severe.
-Interdependency: A range of new entangled relationships between actors in the digital ecosystem is evolving. The emergence
of new products and growth of new service-based models is creating complex interdependencies between organizations, supply chains, sectors and individuals. This interdependency creates a risk of unforeseen cascade effects: Incidents occurring in one part of the ecosystem could harm those actors and systems dependent on it. Imbalance in perceptions of risk could lead to situations where high-value business., assets are connected to third-party systems whose owners assess them to be low risk and that therefore do not have the appropriate levels of protection. A failure to maintain the visibility and assign the accountability that is needed to assure end-to-end processes across multiple parts of the ecosystem could lead to gaps in security and heightened risk.
-Shared resources: Many entities are sharing a growing dependence on a concentrated underpinning infrastructure and set of shared services, including cloud, internet service providers, hardware, software and the equipment supply chain. This creates an attack
surface of high-value shared resources with a high probability of attack, and the potential for compromise to have severe and systemic
impacts. The homogeneity of the shared technology infrastructure that results from its being delivered by a small pool of providers may result in systemic risk, as the exploitation of a vulnerability found in a widely used resource could affect vast swathes of the ecosystem. Similarly, there is a risk of collateral damage occurring as a result of targeted attacks against a single client via this shared infrastructure. Identifying the critical shared resources, who owns them and their key dependencies is a complex task.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Key transformative technology that will contribute to the changing dynamics of cyberspace: Quantum
Quantum computers will demonstrate an advantage over classical computers in solving a range of computational and modelling problems (although predictions of the timelines on which this will happen vary). Some problems may become tractable for the first time, enabling new functionalities and presenting new risks to conventional security measures.
Risks:
Disrupting cryptographic infrastructures:
The principal cybersecurity risk is posed by the impact quantum computing will have on currently widely adopted asymmetric cryptography. A sufficiently powerful and error-corrected quantum computer would solve some of the classical mathematical problems on the intractability of which many of these cryptography methods rely. It would therefore have the potential to break the cryptographic security on which enterprises and the wider digital economy rely.
‘Download now, decrypt later’:
The potential future quantum threat to cryptography is relevant to the risk decisions being made today. There is a “download now, decrypt later” risk for datasets with extended periods of sensitivity: data that exists now could be harvested by adversaries for decryption in the future.
Novel and secondary security risks arising from broader economic and industrial transformation:
As organizations face a need to outsource quantum computations on their most valuable IP to third- party services, they could face risks of adversarial interference. There is also a risk that unintended functionalities arising from quantum algorithms. There are also several shared infrastructures that depend on the collective application of quantum-vulnerable cryptography. This includes the interconnected systems and interdependent business models of the industrial internet of things (IIoT), and the distributed-ledger technologies being rolled out across a range of industrial applications. In many cases, “ownership” of these shared infrastructures is highly distributed, and it is not necessarily clear who is responsible for ensuring that they are made quantum-safe.
Geopolitical risk and equitable access:
The potential concentration of the first sovereign quantum capabilities (technologies and experts) in a small number of advanced nations has geopolitical implications. As with all new technologies that raise the bar in terms of competitiveness, there is a global risk that competition and protectionism will interfere with international collaboration and equitable access. This could act as a major barrier to unlocking the full potential economic and societal benefits of quantum technology to the wider economy, and widen asymmetries in terms of security and industrial capability. If equitable access to the technologies is not ensured, nations that have sovereign quantum capabilities may use them to create a strategic advantage, while other nations fall into “quantum poverty”.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Key transformative technology that will contribute to the changing dynamics of cyberspace: identity and access management
Emerging next-generation approaches to identity and access management will enable new services, applications and operating models, with efficiency and low friction that can support the fast speed and large scale of the emerging cyberspace.
The risks to the security of emerging identity systems can be considered in terms of their confidentiality, integrity and availability.
• There will be a major confidentiality risk to the large amounts of personal information managed by identity systems (including personally identifiable information [PII], and biometric, behavioural and locational data). Minimizing the risk to this data will be critical.
• There is a risk that the integrity of the identity ecosystem will be subverted, reducing the confidence of participants in it. For participating actors, there are challenges to establishing the integrity of the components they depend on (particularly in cases where there is a trust deficit), and establishing their competence in protecting their part of the ecosystem against abuse.
• There is an availability risk: that attackers will attempt to prevent access to or use of identity infrastructure. If the infrastructure does not have the necessary resilience and fallback modes, then attacks on the availability of systems on which services depend critically could have grave consequences. Achieving resilience will be particularly challenging in those elements of society where infrastructure (both technical and governance) is weak.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Opportunities for safety from emerging technologies
Advances in robotics are creating opportunities to remove humans from hazardous environments (e.g. in manufacturing) and to remove human error from safety-critical decisions. Advances in sensing and analytics could help predict natural disasters.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Hidden cyber-resilience deficit
It is a fact that even today many organizations can find themselves unknowingly dependent on components of the ecosystem due to a lack of transparency downstream and upstream in supply chains. Without intervention, this may simply grow in complexity: Dependencies will become increasingly unmanageable and opaque as the ecosystem becomes more entangled. This means that it will not be possible to account for the aggregation of cyber risk, and where there is a lack of resilience within organizations, we may be developing a growing and hidden cyber-resilience deficit.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Widening cybersecurity skills gap
There is already a global capacity shortage in cybersecurity (both specialists and across the wider workforce), and as new technologies emerge, the existing skills gap in delivering cybersecurity is likely to grow. Unless education and training are accelerated significantly, the workforce will not have the necessary cybersecurity capacity and mindset. A lack of cyber literacy among leaders and innovators will prevent appreciation of the risks to organizations and the ecosystem, and prevent the necessary investments being made for cyber resilience.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Fragmentation of technical and policy approaches
Emerging technologies are driving an increasing interdependence and entanglement at a time when global governance of cyberspace is weak. Many of the relevant technical standards and governance principles are divided into jurisdictional and sectoral siloes. There is a risk of further divergence at the public policy level; geopolitical divergence and protectionist stances make this difficult to reconcile. A lack of interoperability at a governance level could lead to: a failure to realize the potential value of a secure global digital ecosystem: incompatible security-compliance requirements; and suboptimal (and thus costly) security in parts of the ecosystem.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Existing operational-security capabilities and technologies not fit for purpose
Mitigating threats and responding to incidents individually and collaboratively will require new approaches. Existing operational capabilities are not sufficient technically to address new technologies and data formats and will not deliver the pace and scale
of collaborative operations (including information sharing, collective response, and detection, disruption and deterrence of cybercrime) that will be needed to address the emerging risks. There is a need to increase the level of automation within cyber-defence capabilities, ensure that the cybersecurity tools developed can interoperate effectively, and support enriched intelligence sharing at the pace necessary to address emerging threats.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Underinvestment in support (knowledge, guidance, research investment) and incentives (market forces, regulation) for developing emerging technologies securely
Security is not being considered an integral component of technology innovations. This means it is likely that technologies will be developed with little or no consideration for malicious threats, as has happened in the past. Without the right incentives to prevent this, there is a risk of insufficient security functionality and later costly retrofit. Further, the complexity of supply chains and systems may mean that innovators will make false assumptions about the security inherent in the systems upon which their solutions are layered, causing hidden risk. This hidden risk may also manifest where organizations exploit machine learning without an ability to determine the integrity of and absence of bias in the algorithms.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Ambiguous accountability
While shared dependence widens the pool of actors affected by the resilience of a part of the ecosystem, it can also create ambiguity in the accountability for ensuring this resilience. Complexity and entanglement are exacerbating a lack of clarity about accountability and where the liability lies for assuring end-to-end services and shared critical infrastructures. Risk transfer (e.g. via contracts or via tech E&O [errors and omissions] insurance) cannot cover the full scope of sideways exposure.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
Key transformative technology that will contribute to the changing dynamics of cyberspace: Artificial intelligence/advanced machine learning
As it becomes possible to automate increasingly sophisticated calculations, activities can be carried out in cyberspace faster and on a larger scale – and most importantly, using huge datasets for training. The ability to aggregate and process such data will lead to huge increases in the predictive powers of algorithms. Substantial investments are being made in AI research and development globally, in particular using machine learning techniques. Global spending on AI was estimated to be $37.5 billion in 2019, and is forecast to reach $97.9 billion in 2023,35 with China and the US dominating global AI funding.36 The emerging technologies are capable of faster, more precise analytics and decision-making, and of deriving insights from big data, outperforming traditional digital approaches and some aspects of human capabilities in diverse fields such as transport, manufacturing, finance, commerce and healthcare. Large corporations in every industry are seeking to create value by taking advantage of new means of data exploitation, business-process improvements (e.g. in sales, production and supply-chain management), cost-efficiency gains and the ability to enhance customer experiences.37 It is anticipated that within the next 5–10 years, AI systems will play an increasingly critical and unsupervised role within organizations, including the use of robotics in physical manufacturing tasks, for example.
22 January 2021
|
Report
:
Cybersecurity, emerging technology and systemic risk
A limited number of Smart City initiatives in the security domain move from innovation to implementation
In the Netherlands, there has been a lot of experimentation in recent years with technology and data-driven innovation around security issues in cities, usually under the heading "Smart City". This often takes place in testing grounds, living labs, or in the form of a pilot. However, the operational implementation of successful innovations resulting from those experiments, which can be of great societal value, remains limited so far.
Reasons include focusing too much on the technical solution rather than the societal issue at hand, no clear role division, legal obstacles, a lacking follow up of collected data, obstacles in public-private partnerships, obstacles in collaboration between departments within municipalities, and the complexity of citizen participation.
19 May 2021
|
Report
:
Van Innovatie Naar Implementatie In Smart Cities: Aanbevelingen Voor Succes
Automated 'bulk attacks' are the most frequently occurring external threat to Dutch municipalities
Automated 'bulk attacks' encompasses attacks such as phishing and password guessing. These online attacks can be performed in bulk. For example, thousands of phishing emails are send to available and/or leaked e-mail addresses. The consequences of such attacks to Dutch municipalities can be significant.
19 May 2021
|
Report
:
Dreigingsbeeld Informatiebeveiliging Nederlandse Gemeenten 2021/2022
Business continuity risks are increasing for Dutch municipalities
Risks regarding the business continuity of municipalities is increasing, due to the growing standardisation of online processes. Such risks are both technical (such as faulty hard- and software) and non-technical (such as pandemics, fires and floods).
19 May 2021
|
Report
:
Dreigingsbeeld Informatiebeveiliging Nederlandse Gemeenten 2021/2022
Actors and their roles differ per phase in Smart City initiatives
On average fewer actors are involved in the implementation phase (average 7) than in the innovation phase (average 13) of Smart City initiatives. In addition, the diversity in the types of actors involved also decreases in the implementation phase, as for example citizens and knowledge institutes are no longer involved. In the innovation phase, a relatively large number of roles are divided among several parties. In the implementation phase however, this is no longer the case. local and national public parties (mainly municipalities and the police) have many roles in both phases, divided over departments within these organizations.
20 May 2021
|
Report
:
Van Innovatie Naar Implementatie In Smart Cities: Aanbevelingen Voor Succes
Attacks on healthcare are causing direct harm to people and are a threat to health, globally
When healthcare providers are attacked, clearly it is people who suffer the consequences. The direct victims of attacks are healthcare professionals and patients. The disruption of medical services and IT systems have an immediate impact on patient care.
Attacking healthcare in a connected world is having a societal impact on a global scale. The multiplication of attacks on healthcare, especially during the COVID-19 pandemic, is creating a global threat to health and human life.
28 May 2021
|
Report
:
Playing with Lives: Cyberattacks on Healthcare are Attacks on People
Cyber attacks are increasing and evolving as they continue to exploit vulnerabilities in the healthcare sector's fragile digital infrastructure and weaknesses in its cybersecurity regime
- Attacks are increasing as the arsenal of weapons used to target healthcare is evolving. The COVID-19 pandemic is giving rise to an alarming convergence of malicious and irresponsible behaviors. National statistics have shown that data breaches against healthcare in 2020 have increased significantly
- Ransomware creates both an immediate risk to patient care and long-last impact on healthcare organizations. The escalation of ransomware attacks are particularly dangerous as they put both patient care and healthcare sector capability in jeopardy.
- Healthcare has a fragile digital infrastructure. Threat actors are exploiting the complex, vulnerable, and sometimes outdated healthcare digital environments including medical devices and IT infrastructure. Security-by-design does not apply to legacy systems and is difficult to achieve with the multiplication of connected endpoints.
- Healthcare cybersecurity is under-financed.
- Technical and human resource limitations are preventing a healthy information-sharing environment within the healthcare sector.
Healthcare provides experienced a total of 348 ''hacking/IT incident'' related data breaches in 2020. This is a 39% increase from 2019.
28 May 2021
|
Report
:
Playing with Lives: Cyberattacks on Healthcare are Attacks on People
Criminals and state actors are joining forces against healthcare with varying motives and agendas
Attacks on healthcare are low-risk, high-reward crimes. Acting with near impunity, criminals and state actors are joining forces against healthcare with varying motives and agendas. Attacking healthcare is a lucrative and global business. Attacking healthcare serves geopolitical interests. Not only does attacking healthcare provide state or state-sponsored threat actors with an attractive target for data theft regarding vaccine research and private medical records, but cyberattacks also weaken geopolitical rivals. Attacks on healthcare are widely under-reported. Many organizations don't know what to report and how to do so. The fear of facing liabilities or reputational loss is hampering reporting as is a lack of faith that reporting will lead to prosecution. Threat actors enjoy near impunity, as attribution and prosecution lag behind. There are no transparent and independent mechanisms to track accountability in cyberspace.
28 May 2021
|
Report
:
Playing with Lives: Cyberattacks on Healthcare are Attacks on People
Healthcare professionals and patients do not benefit fully from legal instruments and existing assistance initiatives designed to protect them
States are not availing themselves of the full extent of norms and laws available to protect healthcare. States have notably tread with caution in legal condemnation or prosecution of cyberattacks on healthcare or in conveying their interpretation of how international law applies, too often relying on political and technical attributions as a means of taking a stand against attacks. Assistance initiatives lack adequate visibility, scale and sustainability.
28 May 2021
|
Report
:
Playing with Lives: Cyberattacks on Healthcare are Attacks on People
The COVID-19 pandemic has given rise to a concerning convergence of malicious activities and an exacerbation of its existent threat landscape
The COVID-19 pandemic has given rise to a concerning
convergence of malicious activities as well as an exacerbation of its existent
threat landscape. Healthcare is increasingly under attack owing to a
combination of three factors:
• Healthcare services are critical to maintain as patient health depends on
them. This has made hospitals a target of choice for digital extortion.
• Healthcare is the custodian of valuable and sensitive information, such as
medical records and vaccine research, making it an attractive target for
data theft and cyberespionage.
• Healthcare has found itself at the center of strategic inter-state rivalries
due to the pandemic, which have spilled into malicious activities such as
disinformation campaigns against the sector.
28 May 2021
|
Report
:
Playing with Lives: Cyberattacks on Healthcare are Attacks on People
The Ministry of Justice and Security wants to innovate more easily and faster
The Ministry of Justice and Security (JenV) wants to innovate more easily and quickly. They want to focus on:
1. The actual conversion of innovation ideas into the operational process
2. Making more capacity available to address the major strategic issues (for example with regard to new technologies) for the future
3. Stimulating cooperation between the various JenV units
The Ministry increases innovation from five perspectives: strategy, ecosystem, process & governance, results and culture. These five perspectives are put into practice on 4 levels: basic facilities, structural implementation, managed implementation, and proactive implementation.
15 June 2021
|
Report
:
Vijf Perspectieven Op Een Volwassen Innovatiefunctie
New technologies have potential applications in counterterrorism
TNO has identified eight technologies with potential applications in counter terrorism.
Behavioral analysis, behavioral influence technologies, physical security technologies, integrated sensor technologies, cyber technologies, data technologies, decision support and coordination technologies and finally learning and anticipation technologies.
These technologies have a potential impact on the capabilities of organizations to counter terrorism in the broadest sense, from preventing and protecting from terrorism to reacting, capturing and restoring from terrorism.
14 April 2021
|
Report
:
Technologie Voor Terrorisme Bestrijding
Growing world market for Intruder Alarm/Perimeter Protection (IA/PP) products
The world market for IA/PP products reached $6.98Bn in 2019 and will grow to $8.83Bn in 2024 at a CAGR of approximately 4.8%, the highest growth we have recorded in the last 11 years. Perimeter security has become a much more important issue in critical infrastructures such as utilities, transportation, government and defense establishments because of the increasing number of threats, which could disrupt operations and lead to huge losses across the whole economy. Demand for IA/PP systems has grown at a faster pace through the integration with Video Surveillance and Access Control. Demand for intruder sensors and alarm products being the staple products of this business have had only a marginal impact on growth in demand. IA/PP is now pushing forward by applying and connecting; radar, thermal / multi-sensor cameras, advanced sensor technologies, wireless technology and also deeper integration with video surveillance & access control. The main driver for growth in the next five years will be the increase in investment in industrial complexes particularly in Asia and the BRIC countries and advances in sensor technologies microwave, active infrared, passive infrared, fiber optics and acoustic sensors. These sensors usually cover large areas and offer volumetric protection by detecting the motion of the intruder within the protected space.
12 May 2021
|
External
:
Major Trends in the Intruder/Perimeter Protection Market 2020
Creating a resilient IT-infrastucture with 3 principles
Because of the digitization of our society, many organizations' IT infrastructures are becoming more complicated, and thus also more vulnerable. The Dutch National Bureau for Connection Security (NBV) has developed a simplified approach to counteract cyberthreats. In this approach, the key is an organization-wide plan which looks more broadly than just the technical side of things. This approach is based on 3 main principles with 4 supporting pillars.
15 October 2021
|
Report
:
Verdedigbaar Netwerk: Hoe Doe Je Dat?
NIS-2 shows: chain and network dependencies are increasingly important in risk management
It has become clear that the protection and security of network- and information systems are extremely network dependent. There are certain risks attached to being involved in an ecosystem and being dependent on chains for important processes. In the EU NIS-2 Regulation, more and more sectors are being designated as vital, so that those organisations and sectors will have to take more steps to ensure the safety of their network- and information systems.
10 November 2022
|
Report
:
NCSC Onderzoeksagenda 2023 - 2026
A strict national and international approach to cybercriminals, whereby cybercrime will be less lucrative
The government, together with the business community, has a view
on the digital threat from home and abroad. The Netherlands is above all capable of limiting digital attacks by state and non-state actors through the deployment of broad attribution and response mechanisms, preferably in cooperation and coalitions with EU and NATO partners and other like-minded countries.
11 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
Development of the national covering system
The purpose of the system is
enabling organizations (public and private) to build their resilience
level and thus their effectiveness
increase through information about cybersecurity
widely, efficiently and effectively
11 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
Cyber security requirements for a larger group of companies (NIB2)
Cyber incidents do not stop at national borders.
The EU is therefore also involved in strengthening the digital security and resilience within the Union.
11 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
Organizations respond, recover and learn quickly on and from cyber incidents and crises.
For a response to a national cyber crisis, a
efficient cooperation between government organisations, industry, science and
social organizations of great importance ─
also across local, regional and national borders.
12 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
The Netherlands has a strong cybersecurity knowledge and innovation chain
To be able to take measures now and in the future
taking action against digital threats must involve the development and application of Dutch knowledge and expertise
in the field of cybersecurity are continuously strengthened.
12 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
The Netherlands has a grip on cybersecurity threats from states and criminals
In the coming years, the Dutch government will focus on reinforced
information exchange and increasing resilience, which contributes to limiting digital
threats.
12 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
Alert overload
Organisations worldwide use on average about 29 security monitoring software systems. This can result in an alert overload which causes security teams to wrongly prioritise and maintain cybersecurity risks
23 January 2023
|
Report
:
KPN Cyber Security Perspectives 2021
Citizens respond quickly and adequately to cyber incidents
It is important that citizens are enabled to respond quickly and effectively to digital threats, attacks and disruptions. This can be done by being informed at an early stage about current threats that are relevant to them and, in particular, about what they themselves can do to stay safe from them.
26 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
Governance, direction and cooperation
Within the cabinet, the ministers involved work closely together under the responsibility of the Minister of Justice and Security as the coordinating minister for cybersecurity.
26 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
Financial substantiation for digital resilience.
This government is investing an additional 111 million euros structurally in cybersecurity, the breakdown per department is shown below. These resources are part of a broader structural investment of 300 million that will strengthen the AIVD and MIVD, among other things, and investments will be made in the field of economic security and vital infrastructure.
26 January 2023
|
Report
:
Nederlandse Cybersecuritystrategie 2022-2028
Protect domains against email spoofing and phishing by implementing email authentication with SPF, DKIM and DMARC.
The NCSC advises organisations to protect their domains against email spoofing and phishing by implementing email authentication using SPF, DKIM and DMARC. SPF allows domain owners to specify which mail servers are authorised to send email on their behalf, DKIM allows them to digitally sign emails, and DMARC enables them to publish a policy on how receiving mail servers should handle emails that fail SPF or DKIM checks. For government organizstions, the use of these email authentication techniques is mandatory, while for other organisations it is strongly recommended as an effective way to combat email-based attacks. The implementation of email authentication is considered a best practice that has already been widely adopted.
3 April 2024
|
Report
:
Handreiking 'Bescherm domeinen tegen phishing'
Technological limitations of AI usage for law enforcement agencies
Technological limitations to the usage of AI for law enforcement agencies include the data quality and accessibility, compatibility between systems, scalability and performance under varying conditions and maintenance and technical support.
19 September 2024
|
Report
:
AI and policing - The benefits and challenges of artificial intelligence for law enforcement
It is necessary to AI technology is transparent and verifiable
The public sector is increasingly experimenting and working on a modest scale with Artificial Intelligence (AI), for example in the field of mobility and health. In order to do this in an honest and responsible way, it is necessary that AI technology is transparent and verifiable.
Artificial Intelligence has had a major impact on our daily lives. For example, AI is in our smartphones, helps us shop and contributes to scientific research. As such, AI can have great benefits, such as recognition of speech, images and patterns, translation machines, robots and question and answer systems can improve convenience and our user experience.
24 August 2021
|
News
:
TNO and CBS are Joining Forces on Transparent and Verifiable AI Use
Increase in the use of sensing for safety
Sensing offers a sixth sense for the security sector. The technological developments cannot be stopped. However, ready-made sensing solutions are hardly available. Seven building blocks that provide tools for successful application in practice are: testing in practice, business agility, culture of information-driven action, collaboration in an ecosystem, microservice architecture with open source software, meeting legal and ethical requirements, and IT competences for sensing. With attention to legal and ethical frameworks, sensing can contribute to a safer future.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
The Development of a Recognized Cyber Picture
A military commander wants to gain insight into both his cyber and his regular area of operations at a glance. Such an integral picture does not yet exist.
• The techniques and tactics in the operational cyber domain are constantly changing. In order to achieve and maintain a sustainable strategic advantage, this image must therefore be constantly adjusted. For this, the commander needs an extensive team of analysts, architects and developers.
• Current insights and technology from the civil technology domain are projected on the needs of military commanders. These results are now being processed by NATO in the further development of the Recognized Cyber Picture.
• This will ultimately lead to future military commanders being able to make simultaneous decisions about the deployment of physical and digital weapon systems in their area of operations.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
Citizen participation in online investigation
• Public OSINT initiatives such as Bellingcat are increasingly making important contributions to criminal investigations
• The success of public OSINT researchers is due to a combination of much available open information and a well-cooperating network of various specialists, also internationally.
• Investigation authorities can make passive use of such results, but also actively seek cooperation in hackatons or by consciously sharing certain information.
• Points for attention in this collaboration are the protection of the research, but also privacy legislation and the safety of civilian participants.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
Physical safety feeling decreases, but people do feel safe digitally
Ten years ago, 33% of the Dutch sometimes felt unsafe. Now that is 45%. The Dutch have started to feel somewhat less safe in the past 10 years. Online people do feel safe. The Dutch are increasingly aware of their own responsibility in online security, and they take it too. Almost half of the people are even willing to sacrifice privacy if it benefits the fight against crime. We are concerned about the influence of social media on the information we read, for example regarding the elections.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
Stability and chaos required: on the way to a new control room system
Keeping up with technological trends also requires creating some chaos:
• Room for experimentation offers the opportunity to "do things differently" and to innovate permanently.
• Experimenting with "couleur locale", with data analysis, knowledge technology and with new functionalities is a goal in itself.
• Managing critical data independent of context versus using and analyzing it within any predictable or unthinkable scenario is a basic skill.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
Digital resilience and decentralization require citizen participation and support
• There are many innovations that can be used in the interest of digital resilience, but we must not forget what this security is for.
• The Digiwacht are volunteers who guarantee local digital resilience.
• A municipal cybersheriff, elected by citizens to ensure their digital resilience.
• National artificial intelligence to protect the digital Netherlands, trained throughout the Netherlands.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
Capacity challenges in the police force, shift to Information-Driven Action
• Due to demographic developments, among other things, the police have capacity challenges. In 2040 there will be only 2 working people per 1 pensioner.
• To be future-proof, the police must change their way of working.
• We propose to act Information-driven, to really realize the use of new technologies in a pressure cooker environment and to apply digital triage.
• By working in these innovative ways, the police can solve more cases and strengthen confidence in the police.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
Knowledge and opportunities of artificial intelligence in the security domain
• Artificial intelligence (AI) is still new and unknown to many - and the unknown is scary.
• AI is everything that machines cannot yet do.
• Nuance 'science' and 'fiction' from AI.
• Mirror performance of AI with performance of humans.
• Focus on knowledge and prevent a digital skills gap.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
The decentralization of supervision of Public Order and Safety leads to fragmentation of information
• Responsibilities of the police are increasingly shifting to the municipal BOAs.
• Recording data in municipal systems detracts from the formation of an integrated security picture.
• A more valuable and smarter information provision can lead to early insight and identification, and possible prevention of criminal activities in the future.
• Communication between the authorities remains important. Mainly for information, knowledge
and share "gut feeling" about potential offenders.
20 January 2021
|
Report
:
Trends in Veiligheid 2020
There is a continuing strong relationship between executives and security professionals
Over the years in our survey, we’ve measured four critical practices for fostering a mutually beneficial relationship between executives and the security organization . This exercise evaluates top-down security buy-in, where we’ve found a slight downward trend from last year . Looking at these results:
• Eighty nine percent of respondents said that their executive leadership still considers security a high priority; however, this is down slightly (7%) across the preceding four years.
• The percentage of organizations who have clarified the security roles and responsibilities within the executive team has fluctuated over the past few years – landing at 89% this year. Considering cybersecurity’s growing visibility and the dire need for security leaders at top levels, clarifying roles and responsibilities needs to remain high.
• The incorporation of cyber risk assessments into overall risk assessment processes is down by 5% from last year, but is still high with 91% of respondents saying they use them.
• Although down by 6% from last year, executive teams establishing clear metrics for assessing the effectiveness of security programs is still rather high with 90% of our respondents doing so.
Over four years, these responses are slightly down, which may indicate: 1) that the scope of security responsibility is changing, 2) that communication with the executive team isn’t as clear as it used to be, 3) that executive management has other business priorities, or 4) that CISOs and executives are re-evaluating their metrics.
And although these numbers are down, they are still very high . Perhaps this is because security has now become operationalized, but requires a greater voice at the executive table. The fact that the numbers are still very high indicates a continuing strong relationship between executives and security professionals.
22 January 2021
|
Report
:
Securing What's Now and What's Next
time-to-detect and time-to remediate are important metrics for assessing the effectiveness of an organization's security program
90% agreed their organization’s executives had established clear metrics for assessing the effectiveness of their security program. IT decision-makers responding to our survey rated time-to-detect highest as a key performance indicator (KPI). Establishing clear metrics is an integral activity for a security framework, and it isn't an easy task to agree across multiple executives and security teams how to measure operational improvement and security outcomes .
IT decision-makers responding to our survey rated time-to-detect highest as a key performance indicator (KPI). However, when you’re reporting to the C-suite or board of directors, time-to-remediate ranks just as important, as it represents an aggregate of total impact that may include: system downtime, records affected, cost of investigation, lost revenue, lost customers, lost opportunities, and out-of-pocket costs. It can also be a proxy metric for the overall effectiveness of the IT organization, as remediation can require a lot of collaborative work across departments .
22 January 2021
|
Report
:
Securing What's Now and What's Next
the best way to allocate security spend is through outcome-based objectives and metrics
Sixty one percent are using this planning method, a 10% increase from the previous year and an encouraging trend. ‘Percent of revenue’ and ‘outsourcing costs’ were the least used factors to determine security budgets. Fifty-four percent base spending on the previous years’ budget. Although this may not seem like a precise way to quantify security costs – especially when the average cost of a data breach globally ($3 .92M) is rarely factored in – if your budget is flat year over year or you have predictable SaaS subscriptions, your forecasted budget will probably see very little change .
22 January 2021
|
Report
:
Securing What's Now and What's Next
Organizations are spending more on prevention versus being reactive in their cybersecurity posture
In exploring how security budgets are spent, we surveyed our respondents on five categories (Identify, Protect, Detect, Respond, and Recover) that describe the lifecycle of cybersecurity defense and breach management:
• The category Identify saw a rise in expenditures from 21% to 27% from 2019 to 2020
• Protect and Detect remained basically the same at 25% and 18% respectively
• Spending in the Respond and Recover categories declined somewhat in the same timeframe to 15% and 14% respectively
Enterprises are always trying to find the right balance between being proactive and being responsive and resilient, and that pendulum swings back and forth every year. Last year, organizations may have been concentrating their efforts on the basics (asset inventory, discovery, etc.). And theoretically, if you spend right on Identify, Protect and Detect up front, you shouldn't need to spend as much on Respond and Recover, as they aren’t needed as often.
22 January 2021
|
Report
:
Securing What's Now and What's Next
The business impacts of security breaches
Organizations having more than 100,000 records impacted from their most severe data breach rose from 15% last year to beyond 19% this year.
Large enterprises (10K or more employees) are more likely to have less downtime (0-4 hours), as they will likely have more resources available to help respond and recover . Small to mid-sized organizations dominated the 5-16 hour recovery timespan, and catastrophic downtimes of 17-48 hours were similarly low for organizations of all sizes.
The most impacted business areas were operations and brand reputation.
the number of respondents experiencing a hit to brand reputation from major breaches has risen from 26% to 33% in three years. With the impact to the overall brand on the rise, it’s crucial to include crisis communications planning into your overall incidence response plan.
22 January 2021
|
Report
:
Securing What's Now and What's Next
At 61%, the percentage of survey respondents reporting that they voluntarily disclosed a breach last year is at the highest level in the previous four years
This shows that, overall, organizations are proactively reporting breaches, perhaps as a result of new legislation – or maybe from increased social consciousness and a desire to maintain customer trust.
The upside to this is that more than double the number of organizations that experienced a breach that lasted over 17 hours disclosed the breach voluntarily versus those that disclosed the breach involuntarily or due to reporting requirements.
More than half of all breaches (51%) put organizations on the defensive, having
to manage the public scrutiny that comes with a breach. But while governmental reporting requirements have increased, involuntary disclosure remains largely the same at just over a quarter (27%) of breaches. And 61% of respondents are now finding that their credibility rises when they voluntarily disclose a major breach, thus preserving their brand reputation.
22 January 2021
|
Report
:
Securing What's Now and What's Next
Outsourcing of security has increased significantly
Compared to last year’s report, outsourcing has increased significantly, possibly indicating a historical trend as vendor landscapes become so complex to manage in-house. Interestingly, organizations reported that they’re expecting their outsourcing to decrease in the future.
Our respondents are outsourcing for a variety of core reasons, and it’s not only cost. Cost efficiency is marginally ahead as the number one reason at 55%. However, it's quickly followed by security teams that want more timely responses to incidents (53%).
We found that 34% of you are outsourcing incident response services, and 36% are using external/third-party services to analyze compromised systems, which has risen from last year. Using an incident response service has become an efficient approach for protecting assets, mitigating risk, and maintaining compliance. It can help your organization protect against the unknown by having proactive planning and expertise to coordinate and carry out a response.
22 January 2021
|
Report
:
Securing What's Now and What's Next
Patching is critical in breach defense, as 46% of organizations (up from 30% in last year’s report) had an incident caused by an unpatched vulnerability
In addition, those that had a major breach due to an unpatched vulnerability last year experienced higher levels of data loss. For example, 68% of organizations breached from an unpatched vulnerability suffered losses of 10,000 data records or more last year. For those who said they suffered a breach from other causes, only 41% lost 10,000 or more records in the same timeframe.
It’s well known that patching can be difficult and cause disruptions. However, these results show that there is a tangible ROI in implementing a minimum baseline policy for the most recently released patches. Organizations should maintain an up-to- date inventory of all devices in their environment and perform a risk analysis for any missing patches. Then, create a change management process to enforce version control and documentation.
22 January 2021
|
Report
:
Securing What's Now and What's Next
The most common causes of downtime are malware and malicious spam
Interestingly, the third cause diverges depending on the length of downtime . For breaches with downtime between 0-4 hours, phishing is the third most common cause . For downtime between 4-24 hours, it’s spyware. For anything over 24 hours, it’s ransomware. Significantly, ransomware doesn’t discriminate; it was the most destructive threat for both small and enterprise organizations in terms of downtime. The large amounts of resultant downtime may be due to the depth of investigation needed to assess the damage, attempt to restore backups, and fix the entry vectors.
22 January 2021
|
Report
:
Securing What's Now and What's Next
More than half (52%) told us that mobile devices are now very or extremely challenging to defend
They’ve overtaken user behavior, which was the biggest challenge from last year’s report .
With a zero-trust framework, you can identify and verify every person and device trying to access your infrastructure. Zero trust is a pragmatic and future-proof framework that can help bring effective security across your architecture – spanning the workforce, workload, and workplace.
A zero-trust framework achieves these three success metrics, among others:
• The user is known and authenticated
• The device is checked and found to be adequate
• The user is limited to where they can go within your environment
Having zero trust in place removes much of the guesswork in protecting your infrastructure from all potential threats, including mobile devices.
22 January 2021
|
Report
:
Securing What's Now and What's Next
Only 27% of organizations are currently using multi-factor authentication (MFA)
This number is low for such a valuable zero-trust technology. Survey respondents from the following countries showed the highest adoption rates of MFA in this order: USA, China, Italy, India, Germany, and the UK. The industries with the highest adoption rates (in this order) are software development, financial services, government, retail, manufacturing, and telecommunications.
22 January 2021
|
Report
:
Securing What's Now and What's Next
Private cloud infrastructure is a top security challenge for organizations
Private cloud infrastructure is a top security challenge for organizations. (Fifty percent of organizations find it very or extremely difficult to defend).
22 January 2021
|
Report
:
Securing What's Now and What's Next
In 2020, we continued to see more than 83% of organizations managing more than 20% of their IT infrastructure in the cloud (whether internally or externally)
Through our research, we’ve found that increased effectiveness, efficiency, and visibility are some of the main drivers for organizations to move their security (88%) and infrastructure (89%) to the cloud. And it’s not surprising to see that 86% say utilizing cloud security has increased visibility into their networks.
22 January 2021
|
Report
:
Securing What's Now and What's Next
The overwhelming number of security alerts is having an impact on cybersecurity fatigue
Of those who say they are suffering from cyber fatigue, 93% of them receive more than 5,000 alerts every day.
Defined as virtually giving up on proactively defending against malicious actors, 42% of respondents are suffering from cybersecurity fatigue.
The overall number of daily alerts you are dealing with has increased over previous years. In 2017, 50% of organizations were receiving 5,000 or fewer daily alerts; now only 36% are in this category. And the amount of organizations who receive 100,000 or more daily alerts has grown from 11% in 2017 to 17% in 2020.
Perhaps because of this increase in volume and the processing resources needed, alert investigation is at its lowest level in over four years at just under 48%. (The number was 56% in 2017, and it’s been decreasing every year since.) The rate of legitimate incidents at 26% is consistent year-over-year and suggests that many investigations are turning up false positives.
On a positive note, the number of legitimate threats that are remediated has improved since last year’s report, and we’re now back to 2017 levels at 50%. However, this still means that half of all real incidents are being left unattended.
To deal with the increasing noise and volume of alerts, we advocate for an approach that has automation at its heart. Automation enables policies to be enforced more consistently, quickly, and efficiently. When a device is determined to be infected or vulnerable, it’s automatically quarantined or denied access with no action required from an administrator.
22 January 2021
|
Report
:
Securing What's Now and What's Next
Shift in focus towards industry
We have seen a shift in the hackers’ behaviour in the last six to 12 months as they focus more on industries such as energy and manufacturing. We believe there are three reasons for this. Firstly, reliance on automation (i.e. managed by computers). Secondly low maturity in cyber resilience (e.g. poor back-ups, limited disaster recovery planning or testing). Finally, low tolerance to what is often a high-impact outage. This offers rich pickings for ransomware attacks.
14 April 2021
|
Report
:
Hiscox Cyber Readiness Report 2020
Evolved ransomware techniques
We are seeing hackers’ ransomware techniques evolve. Typically in larger attacks there are two distinct phases after the initial infection. The first phase is lateral movement. This is where attackers look for valuable assets (e.g. finance data) and assess the size of the target to set the ransom amount. The second phase is ransomware attack. This often happens at the weekend when there is less chance to react and when hackers can cause the most damage. There can typically be a period of one to three weeks between these two phases. Companies with good detection capabilities can stop the attack in this time and therefore suffer shorter outages, lower overall costs and less impact to business.
14 April 2021
|
Report
:
Hiscox Cyber Readiness Report 2020
Two commonly seen types of ransomware attack
We commonly see two types of ransomware attack. The first is targeted attacks. These are focused on larger organisations (so called ‘big game ransomware’) where a hacker group will specifically target key individuals with highly personalised phishing scams. The second
is mass scanning. This is where hackers will look for key weaknesses in servers exposed on the internet (e.g. remote access and VPN servers). In these cases, the attacks are mostly indiscriminate, and the attackers will infect any company they find vulnerable.
14 April 2021
|
Report
:
Hiscox Cyber Readiness Report 2020
Standalone cyber insurance
As a cyber insurer, it is only natural that we would promote standalone cyber insurance. But it is important to point out that standalone cyber insurance is dedicated to getting businesses back up and running quickly after a cyber attack. Cyber insurance provides a range of services like IT forensic response, crisis communication, legal advice and, if necessary, credit card monitoring. Coverage in other policies rarely provides all these specialised services, and, in some cases, may not respond at all.
14 April 2021
|
Report
:
Hiscox Cyber Readiness Report 2020
More organisations are choosing to use Zero-Trust principles for securing their IT-infrastructure
More and more organisations are choosing to use Zero-Trust principles for securing their IT-infrastructure. Zero-Trust principles provide organisations with new possibilities to minimise (unknown) risks. With the number of malware and ransomware attacks increasing, a new vision on securing IT-infrastructures is necessary.
26 August 2021
|
Report
:
Factsheet 'Bereid u voor op Zero Trust'
Successful implementation of Zero Trust leads to minimal exposure of cyber attacks
When Zero Trust principles are implemented successfully into an IT-infrastructure this leads to minimal exposure of cyber attacks, a higher continuity of critical processes, an increased and cost-effective compliance and a 'future-proof' architecture.
26 August 2021
|
Report
:
Factsheet 'Bereid u voor op Zero Trust'
Trends in Cyber Attacks: 2021 Mid Year report
In the first half of 2021, cybercriminals continued to exploit the Covid-19 pandemic and the amount of ransomware attacks increased drastically (93%). Globally, the amount of weekly cyber-attacks per organization grew as well. For a majority of organizations internationally, a return to pre-pandemic ‘norms’ is still some way off. The enforced shift to remote working in March 2020 undoubtedly fast-forwarded ‘digital transformation’ and brought with it many benefits to our working lives. As such, the first half of 2021 has seen organizations commit to a continuous hybrid model. However, cyber criminals have continued to adapt their working practices in order to exploit this shift, targeting organizations’ supply chains and network links to partners in order to achieve maximum disruption.
28 September 2021
|
Report
:
Cyber Attack Trends
Ransomware negotiation economics; an increasingly relevant topic
Paying a ransom or negotiating with criminals is problematic to say the least. Still, a significant percentage of ransomware-affected businesses see no other option than to negotiate and in the end pay the ransom. But not much is known about the economic backgrounds of digital extortion and about the negotiation strategies in the case of digital extortion. That gap prompted the researchers to investigate negotiations that take place after the decision has been made to pay a ransom after a successful ransomware attack.
20 December 2021
|
Report
:
“We Wait, Because We Know You” Inside the Ransomware Negotiation Economics
Are Dutch cities and municipalities prepared for cyber disruptions?
The following research questions have been formulated in order to identify what knowledge and expertise security regions need for consequence management of cyber incidents and what possibilities exist for mobilizing this knowledge and expertise for regional crisis management:
1. What knowledge and expertise are available in safety regions for the (preparation for the) combating of cyber incidents?
2. What knowledge and expertise is still lacking within safety regions for the (preparation for the) combating of cyber incidents?
3. What lessons on knowledge and skills emerge from evaluated incidents and exercises within safety regions?
4. How can safety regions mobilize needed cyber knowledge and expertise for cyber incident response?
17 March 2022
|
Report
:
Kennis en Kunde voor Regionale Cybergevolgbestrijding
Digital experience, analytics, and cloud as enabling technologies that have proven their value
Digital experience is one of the 9 macro technology forces and a pillar of innovation. Digital experience is an enabling technology that has proven its value. It continues to be a critical driver of enterprise transformation. 64% of participants in Deloitte's 2018 global CIO survey say digital technologies will affect their business in the next three years.
Analytics includes foundational capabilities and tools that generate powerful
insights. Data management, data governance, and supporting architecture are age- old problems that not only are critical building blocks for AI programs but are tactical concerns as organizations work in a dynamic and complex regulatory environment with mandates on data residency, privacy, and usage. CIOs understand what’s at stake: 60 percent of them say that data and analytics will affect their businesses in the next three years.
Cloud's takeover of the enterprise is nearly complete: 90% of organizations use cloud-based services. cloud investments are expected to double as a percentage of IT budget over the next three years.
17 May 2021
|
Report
:
Tech Trends 2020
Digital reality, cognitive technologies, and blockchain as disruptive technology
As the change agents of the coming decade, these newer trends may no longer be considered novel, but they’re on the cusp of becoming as familiar and significant as their predecessors.
- Digital reality technologies have the goal to promote more natural user engagement by seamlessly extending a human-centric experience beyond the confines of keyboards and screens. Commercial application is growing, for example: many companies are using digital reality technologies to deepen emotional connections and empathy among customers and employees.
- Cognitive technologies have the potential to transform nearly every industry. These technologies personalize and contextualize the human-technology interaction, allowing businesses to provide tailored language- and image-based information and services, with
minimal or no human involvement. Demand for these technologies is skyrocketing.
- Financial services and fintech companies continue to lead blockchain development, but other sectors are also advancing blockchain initiatives.
17 May 2021
|
Report
:
Tech Trends 2020
To carry the weight of technology driven transformation foundational technologies need to be stable, strong and sustainable
Three foundational technologies
- Business of technology:
- Risk
- Core modernization
The business of technology, risk, and core modernization are foundational technologies. To carry the weight of technology-driven transformation and innovation initiatives, they need to be stable, strong, and sustainable.
The business of technology, risk, and core modernization may seem prosaic and dull, but these forces are undeniably the heart of the business. And companies continue to make considerable investments and advances in these well-established domains. Combined, they provide a reliable, scalable foundation for digital transformation, innovation, and growth, and are a requirement for successful investments in analytics, cognitive, blockchain, and other disruptive technologies.
17 May 2021
|
Report
:
Tech Trends 2020
Emerging forces on the horizon: ambient experience, exponential intelligence, and quantum
Three technology developments and innovations—the horizon next—are waiting in the
wings. We will begin to feel their impact toward the end of the 2020s.
- Ambient experience: technology as part of the environment. As devices become seamless and ubiquitous, they and we are becoming increasingly inseparable.
- Exponential intelligence: will build on today's cognitive capabilities. Today, AI lacks the ability to recognize and respond to the nuances of human interaction and emotion. The future promises more.
-Quantum: harnesses the counterintuitive properties of subatomic particles to process information and perform new types of computation, communicate “unhackably,” miniaturize tech, and more
17 May 2021
|
Report
:
Tech Trends 2020
Earning trust in a time of constant tech disruption as a challenge and opportunity
With the advent of digital technology, businesses have been asking customers to trust them in new and deeper ways, from asking for personal information to tracking online behavior. In what is recognized as an emerging trend, some companies are approaching trust not as a compliance or public relations issue, but as a business-critical goal that must be pursued.
18 May 2021
|
Report
:
Tech Trends 2020
It and finance leaders work together to develop flexible approaches for funding innovation
An obstacle for innovation ambitions slowing innovation efforts is the sourcing and distribution of funds. IT's operations and development processes are becoming nimbler and product-focused while the finance function continues to budget, fund, and report in the same way as it has been doing for decades, leading to tension between IT needs and finance procedures.
Over the next 18 to 25 months, there is the expectation to see more It and finance leaders working together to develop flexible approaches for funding innovation at the speed of agile.
18 May 2021
|
Report
:
Tech Trends 2020
Leveraging next-generation digital twin capabilities to design, optimize, and transform the enterprise
Companies are using digital twin capabilities in a variety of ways. Digital twins can simulate any aspect of a physical object or process. They may take many forms, but they all capture and utilize data that represents the physical world. As the digital twins trend accelerates in the coming years, more organizations may explore opportunities to use digital twins to optimize processes, make data-driven decision in real time, and design new products, services, and business models. Sectors that have capital-intensive assets and processes like manufacturing, utilities, and energy are pioneering digital twin use cases already. Others will follow as early adopters demonstrate first-mover advantage in their respective sectors. Longer term, realizing digital twins' full promise may require integrating systems and data across entire ecosystems.
Recent MarketsandMarkets research suggests efforts are already underway: The digital twins market had an estimated worth of US$3.8 billion in 2019 and is projected to reach US$35.8 billion in value by 2025. Over the course of the last decade, deployment of digital twin capabilities has accelerated due to a number of factors:
- Simulation: tools for building digital twins are growing in power and sophistication.
- New sources of data
- Interoperability: the ability to integrate digital technology with the real world has improved dramatically.
- Visualization: The sheer volume of data required to create digital twin simulations can complicate analysis and make efforts to gain meaningful insights challenging. Advanced data visualization can help meet this challenge by filtering and distilling information in real time.
- Instrumentation: IoT sensors, both embedded and external, are becoming smaller, more accurate, cheaper, and more powerful.
- Platform: Increased availability of and access to powerful and inexpensive computing power, network, and storage are key enablers of digital twins.
18 May 2021
|
Report
:
Tech Trends 2020
Reshaping human-machine connections through AI, neuroscience, and human-centered design
The way we experience technology will be changed with a growing class of AI-powered solutions (referred to as affective computing or emotion AI). As part of the emerging human experience platforms trend, during the next 18 to 24 months more companies will ramp up their responses to a growing demand for technology to better understand humans and to respond to us more appropriately.
Early trend participants recognize that the stakes are high. The ability to leverage emotionally intelligent platforms to recognize and use emotional data at scale will be one of the biggest, most important opportunities for companies going forward. The human experience platforms trend reverses traditional design approaches by starting with the human and emotion-led experience we want to achieve, and then determining which combination of affective and AI technologies can deliver them. The big challenge that companies will face is identifying the specific responses and behaviors that will resonate with—and elicit an emotional response from—a diverse group of customers, employees, and other stakeholders, and then developing the emotional technologies that can recognize and replicate those traits in an experience.
In the coming months, we expect growing demand for technologies to become more human. We’ve reached a point in the digital revolution at which everyone’s connected to technology but not necessarily to each other
The human experiences platforms trend is fueled by a growing demand from system users that technologies engage us in more meaningful, human-like ways. In the coming years, we expect this demand to become a nonnegotiable expectation. Today, trend pioneers are integrating affective computing, AI, and neuroscientific research into their strategies and systems to transform the rules of user engagement. In the near future, “emotionally intelligent” technologies and tactics will likely give rise to new business models and ways of working.
18 May 2021
|
Report
:
Tech Trends 2020
Evolve the role of architects to transform systems architecture and support the speed of business
The 'architecture awakens' trend is a direct response to external pressures many CIOs face today as established organizations are struggling to keep pace with the changing technology landscape. In the coming months we expect to see more organizations move architects out of their traditional ivory towers and into the trenches with the goal to move the most experienced architect to software development teams that are designing complex technology. Once redeployed and empowered to drive change, architects can help simplify technical stacks and create technical agility that currently gives younger competitors a market advantage.
The role of the architect will be redefined to be more collaborative, creative, and responsive to stakeholder needs. Going forward, their mission will be to do bold new things not only with traditional architectural components but with disruptive forces (blockchain, AI, Machine learning).
18 May 2021
|
Report
:
Tech Trends 2020
Blockchain has great disruptive potential
Blockchain is believed to have great disruptive potential, whether applied alone or in combination with other capabilities. Interest in DLT has exploded, with blockchain- and cryptocurrency-focused startups collecting almost $3.9 billion in investments in the first three quarters of 2018 – that’s nearly three times the total for all of 2017. The World Economic Forum also predicts that blockchain technology will account for 10 percent of the global GDP by 2027. With all the attention on blockchain technology, we’ve also seen great progress in this field – this is mainly driven by smaller open-source parties, rather than bigger technology companies.
28 May 2021
|
External
:
Technology Trend Report 2020
BEC fraud is increasingly occurring in the Netherlands
CEO- and digital invoice fraud, also known as BEC fraud is amongst the top three forms of cybercrime that cause the most financial damage. According to the FBI, between 2016 and 2019, BEC fraud caused 26 billion-dollars in financial damages worldwide. BEC fraud is also increasingly occurring in the Netherlands.
22 June 2021
|
News
:
New Approach Against CEO- and Digital Invoice Fraud to Oppose Cyber Criminals
Annual visual Ransomware 2023
This report gives a brief overview of all the ransomware-incidents reported to the National Cyber Security Centrum and the National Police. The focus is put on how ransomware incidents are reported, who the victims are, how organisations initially respond to them, who the victims are, and the broad variety of ransomware threats.
27 March 2024
|
Report
:
Jaarbeeld Ransomware 2023
In the biological, physical and digital domain, new technologies are rapidly developing
Many new technologies are developing in the biological, physical and digital domain. In particular, the development of Artificial Intelligence (AI) and the emergence cyber-physical systems are important. The latter technology provides a link between the physical and the digital world. Such technologies can provide new ways of delivering services, but can also facilitate new forms of crime. For example, AI can be utilised in order to commit identity forgery, AI snooping and vehicle hacking.
30 April 2021
|
Report
:
The future challenges facing criminal justice systems
Responsive government: further digitization and fast development result in datafication of society and the economy
Responsive government: further digitization and fast development of data technology result in datafication of society and the economy. Data sharing is no longer a means of automation or the digitizing of existing processes. It is the backbone of many public tasks and a source of economic growth. In addition to bringing opportunities, this age of datafication also poses challenges causing more attention is being paid to safeguarding public value in the digital society. Government is increasingly seeking cooperation with business and civil society to seize opportunities and keep a grip on the risks.
23 May 2021
|
Report
:
De Overheid als Partner bij Datadelen
OT reliance threatens secure operations due to increasing cyber risk
There is a wide range of reliance on operational technology (OT) systems ranging from purely manual to highly automated processes. OT is hardware and software that monitors or controls industrial equipment, assets, processes and events. This OT reliance threatens secure operations due to increasing cyber risk. The operational technology domain culturally has been more safety-aware than security-aware compared with IT, challenging effective security governance and policy in integrated IT/OT environments. Additionally, from a security perspective, OT networks have been unmanaged for many years. They are a mix of OT protocols, unidentified assets, legacy systems and devices with unsecure communications. Third, applying a “one-size-fits-all” security controls methodology across IT and OT, as well as not fully accounting for differing security requirements, lead to decreased security efficacy from a cyber security perspective.
1 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
The interconnectivity between IT and OT increases risk of cyber-attacks in both environments
With the raise of technologies such as Big Data, Data Analytics and the Internet of Things, organisations have increasing business needs to integrate OT with IT networks via connections to the internet. This interconnectivity is mostly used for the exchange of data for the purpose of management information and to provide access for suppliers and maintenance personnel. This development introduces the IT personnel as stakeholders in the OT field. Due to the interconnectivity between IT and OT both environments are more conducive to cyber-attacks.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
There is no clear concept of an 'OT security person'
There is no clear concept of an ‘OT security person’. Whereas there is a general consensus on IT roles and functions with their according tasks and responsibilities, these functions are lacking for OT. This hiatus shows for example through the scarcity of OT security job vacancies. Also, the OT counterpart of IT security study programmes is not established. Young professionals in OT usually have a solid basic knowledge, but universities and schools embed little attention to security in their programmes.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Unclarity regarding OT security responsibilities
Who is, or should be, in charge of OT security? Is it someone in the operational part of the organisation? Or an IT or HSE officer? Maybe OT is a shared responsibility, that can not be attributed to one person. OT security often comes down to the IT manager as a side task; but the IT manager also does not have the appropriate knowledge. This may result in a wrong approach to OT security.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Lack of OT security awareness on boardroom level
The general awareness at boardroom level is not sufficient yet. Boardroom members usually do not have a technical background: explaining to them why OT security is important, is therefore a challenge. At the same time, organisations are willing to learn. Internally, stakeholders see that employees at all levels are increasingly open to OT security training and awareness sessions.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Lack of organisational communication about cyber attacks
The general tendency in companies is to not communicate about cyber attacks that they have endured, due to not knowing about the attack, feelings of embarrassment, or fear of reputational damage. The persistent silence about cyber attacks counteracts the learning process. Severe cyber incidents must be connected with business continuity management and crisis management.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Asset management and validation is lacking in OT environments
In OT environments asset validation is lacking – at least on the Dutch market. The problem here is that the source code of OT assets is often not provided by the supplier. As a result, companies possibly use these assets without being able to test these components for security.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Patching is a challenge in OT environments
Patching, the installation of software updates, is a challenge in OT environments. A patch can result in unforeseen incompatibility with connected systems, thereby disturbing the production process. This is even more of a challenge because organisations cannot simply put their systems on hold for a couple of hours. To prevent compatibility issues, organisations usually wait for vendor approval for a patch. Dependent on the vendor, it can
take some time before a patch can be installed, possibly leaving the system vulnerable in the meantime.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Testing OT environments is challenging
Testing within OT environments is not as trivial as testing within IT environments. Testing on the production environment can cause undesired, or severe, disruptions in the production
process. Because, whereas the simulation of IT environments can be done relatively easily and cost effective by cloning the IT environment on a separate network or to the cloud, you cannot ‘copy-paste’ an OT environment with its the physical components. Regarding the latter, the development of OT simulation software is evolving; this software enables so-called digital twins.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Lack of Root Cause Analysis in OT security
A lack of, or unjust, root cause analysis is a problem in OT environments. When a defect or an unplanned disruption in the system happens, it is sometimes classified as a maintenance issue such as ‘component is defect – must be replaced’, while the actual cause could be a hack. In this case, there is a wrongly diagnosed root cause and a solution that will not solve the problem.
3 June 2021
|
Report
:
HSD Report: Implications of OT and IT Integration for Cyber Security
Dynamic important for Ministry of Justice: increasing dependency on the digital domain and shift towards cybercrime
Analyses over the past years have made clear that many societal developments are being influenced by technology. This impacts the tasks and challenges for the Ministry of Justice. These technological developments include: increasing dependence on the digital domain and shifts in crime to the digital domain. Furthermore, extremist content is spread more easily and is more often on the forefront.
13 January 2023
|
Report
:
TechnologieAgenda JenV
Digital Security cluster contains various technologies crucial to a nation's security (JenV)
The cluster Digital Security in the TechAgenda of JenV contains various technologies that are crucial in securing society. These are technologies that impact the security of data-exchange, communication, identification, data storage and use of networks and infrastructure. These include: cybersecurity and post-quantum cryptography, but also blockchain. Important terms and developments within blockchain are privacy enhancing technologies (PETs), self sovereign identity (SSI), smart contracts. Within cybersecurity, automated vulnerability scanning and automated response are crucial and need to be implemented into the ministry.
Digital security is not only important for society, but it is also something that the ministry itself needs to work on.
13 January 2023
|
Report
:
TechnologieAgenda JenV
Cyberthreats in the Dutch healthcare sector throughout 2023
This report titled "Cybersecurity Dreigingsbeeld voor de zorg 2023" by Stichting Z-CERT provides an overview of cybersecurity threats in the Dutch healthcare sector for 2023. It highlights the following key dangers: Ransomware, dataleaks (hacking), espionage, ransomware at distributor, DDoS at distributor, financial fraud, DDoS, and dataleaks (phishing). The report emphasizes the importance of cybersecurity measures like multifactor authentication and vigilance against evolving cyber threats. It also discusses the impact of generative AI in cyberattacks and the need for enhanced security protocols. Additionally, the document addresses the significance of collaboration between healthcare institutions and their suppliers to strengthen information security. Overall, the report underscores the critical need for robust cybersecurity practices to safeguard sensitive healthcare data and systems from malicious cyber activities.
21 March 2024
|
Report
:
Cybersecurity Dreigingsbeeld voor de Zorg 2023
In the US there is a huge need for privacy advice and compliance management
"During my visit in 2018, I saw that the security and compliance market in the US is or can be enormous. That is when I thought, this is the place to be for us!”. We noticed that in the US there is a huge need for privacy advice, also with the CCPA (California Consumer Privacy Act) coming in effect in 2020, and our compliance management framework (software-tooling). In 2020, we have managed to interest the first four partners and are going to be in the US before the phase of a final offer. We extended our lease contract with Bwtech. At the beginning of 2020, we want to go back to the US. We are currently preparing for this.
18 May 2021
|
News
:
How Audittrail Entered the US Market Through Soft-Landing Programme
The dismantling of the EncroChat network has provided important information for law enforcement agencies
On the 2nd of July, the dismantling of the EncroChat network was announced. The encrypted phone network is widely used by criminal networks, making it an important source of information for law enforcement agencies. The access to millions of messages has already been relevant in a large number of ongoing criminal investigations, resulting in the disruption of criminal activities including violent attacks, corruption, attempted murders and large-scale drug transports.
22 June 2021
|
News
:
Encrypted Network EncroChat Dismantled
Cross-cutting crimes and challenges
The continued increase of cyber- and computer-related crime is to a large degree enabled through the evolution and maturation of the criminal markets that provide all the necessary tools, goods and services to novice and established criminals. Network intrusions and social engineering are components of a multitude of attack vectors.
9 December 2021
|
Report
:
Internet Organised Crime Threat Assessment (IOCTA) 2021
Changing DNS settings as an attack technique
Incidents indicate (renewed) interest in changing Domain Name System (DNS) settings as an attack technique, also known as a DNS hijack. By changing DNS settings of organizations, for example by hacking a registrar, incoming network traffic can be temporarily diverted and intercepted. This can be used for espionage purposes, among other things. Cyber attacks against DNS can have a significant impact on the integrity of the Internet.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Hardware vulnerabilities with (potentially) major consequences announced
The past year saw further growth in the number of vulnerabilities in hardware. A certain type of attack (transient execution attack) again led to changes this year in all Intel processors and all popular operating systems. SSDs with hardware encryption contain such serious vulnerabilities that the encryption is of no value. Even newly released memory chips (DRAM) appear to have known vulnerabilities. The "DRAM vulnerability" is particularly worrying because there is no solution for it and will remain for years to come. There are currently no alternatives.
13 January 2021
|
Report
:
Cybersecuritybeeld Nederland
Law enforcement's increased reliance on data with regards to sex trafficking
It seems likely that law enforcement's use of AI-driven analytics will only become greater. However, this presents certain limitations: data gaps and knowledge gaps. Data on victims, traffickers, buyers, and exploiters is often unreliable or partial. Furthermore, there are knowledge gaps of trafficking flows in large parts of the world and estimates mostly stem from non-methodical or incomplete data based on reported cases only. Moreover, reliance on data also presents a security risk.
23 June 2021
|
Report
:
Special Collection on Artificial Intelligence
The cybercriminal ecosystem
A description of the current cybercriminal mature economy. Specified trough cybercriminal service providers; dependent perpetrators and autonomous groups.
9 September 2021
|
Report
:
Cyber Security Assessment Netherlands
How violation of cyberspace affects national security
Violation of (the security of) cyberspace poses a risk to national security. After all, important elements for the functioning of cyberspace are vulnerable to system failure and/or misuse. Boosting resilience to this is a limited possibility for individual states and organisations. The complexity of this global ICT chain is explained within the report.
10 September 2021
|
Report
:
Cyber Security Assessment Netherlands
53% of cybersecurity attacks cause over US$500,000 in damage
53% of cybersecurity attacks cause over US$500,000 in damage
22 January 2021
|
Report
:
2020 Global Networking Trends Report
Increased mobility causes cybersecurity risks
According to the Cisco “VNI Forecast Highlights Tool,” global business mobile data traffic will grow sixfold from 2017 to 2022 at an annual growth rate of 42%.12 Business mobile users will continue to expect immediate and high- performance connectivity anywhere, anytime, and on any device over Wi-Fi and public 4G and 5G networks. At the same time, wireless IoT devices will become increasingly ubiquitous in all aspects of our lives.
Employees accessing cloud applications from corporate and private devices when off network is creating a lack of visibility and control that network and security administrators haven’t faced. And a wave of IoT devices will add to wireless networking requirements in terms of scale, different traffic patterns, and security.
22 January 2021
|
Report
:
2020 Global Networking Trends Report
Cybersecurity threats are becoming increasingly sophisticated and dangerous across a broader attack surface that is no longer contained within well-defined and defended perimeters
Cybersecurity threats are becoming increasingly sophisticated and dangerous across a broader attack surface that is no longer contained within well-defined and defended perimeters.
In particular, as workloads move off-premises, there is a danger that IT will lose visibility.
While the network will continue to be a powerful ally in identifying and containing threats, network and security operations need to share data and integrate tools and workflows to best combat the continued rise in number and sophistication of attacks. In addition, the network can extend the reach of IT into cloud environments to help protect applications and data even when not directly under their control.
22 January 2021
|
Report
:
2020 Global Networking Trends Report
Changing role of network security
Key findings
• Network strategists identified security as a top investment area, second only to AI.
• 43% of network teams identified improved embedded network security capabilities as a priority.
• In 2019, 48% of CISOs identified “time to remediation” as a main key performance indicator (KPI), up from 30% in 2018.
• Almost 75% of network leaders were confident they will have AI-enabled adaptive or automated policy definition and enforcement in two years.
22 January 2021
|
Report
:
2020 Global Networking Trends Report
IT talent survey: Top skills and expertise are needed
Data from our IT talent survey reveals that across IT in general, advanced technologies such as cloud expertise, enterprise architecture, big data and analytics, DevOps, and cybersecurity top the list of technical skills and expertise in need.
Our own IT talent survey reveals that a lack of business acumen is the number-one skills gap in IT today. Filling this gap will be critical as organizations transition to intent-based networks. By speaking the language of the business, IT can effectively translate business objectives, or intent, into high-level IT policies, which in turn can determine infrastructure and device configurations.
22 January 2021
|
Report
:
2020 Global Networking Trends Report
Smaller organizations faced about the same level of public scrutiny as their larger counterparts.
One common myth is that the media only wants to talk about massive and devastating corporate or governmental data breaches. This could lead some smaller organizations into believing that they won’t face much, if any, public scrutiny when they suffer a cyberattack. This is false. Last year, smaller organizations faced about the same level of public scrutiny as their larger counterparts.
30 March 2021
|
Report
:
Big Security in a Small Business World
Downtime
When an SMB gets hit by a cyberattack that results in a level of downtime (loss of business hours), the myth suggests that they don’t have the resources to rebound nearly as fast as their larger counterparts.
This is false. Data suggests that there is very little difference in the amount of downtime suffered by SMBs and larger organizations.
30 March 2021
|
Report
:
Big Security in a Small Business World
Lack of dedicated security personnel
With everyone pitching in wherever necessary in SMBs, there’s an assumption that cybersecurity is just one aspect of someone’s job. And that this person is also balancing other aspects of IT management such as managing data centers and evaluating new hardware. The myth is that SMBs have few, if any, dedicated resources for cybersecurity.
This is false. While this may be the case for some, SMBs overwhelmingly told us that they do have dedicated employees for cybersecurity. In fact, less than 1% of SMBs told us that they didn’t have anyone dedicated to security. Perhaps even more surprising, 60% said they had over 20 people dedicated to security – although we didn’t specify what level of involvement that dedication may entail or if the employees were outsourced with a managed security service provider (MSSP).
30 March 2021
|
Report
:
Big Security in a Small Business World
Keeping infrastructure up-to-date
With the frequency of consumers upgrading to the latest smartphone, it may seem that larger organizations can afford to replace each element of their security infrastructure. But what about smaller businesses, where that cycled investment might have greater impact on their annual IT budget?
This is partially true. When asked to describe their infrastructures, and their strategy for investing and replacing key security technologies, here’s what SMBs told us: Almost all SMBs are diligent about keeping their infrastructure up to date.
30 March 2021
|
Report
:
Big Security in a Small Business World
Difference in threats between SME's and Corporates
Cyber criminals want the biggest prize, so they’ll use their most stealth and dangerous tactics against the larger businesses, right?
This is partially true. We compared the types of cyberattacks that SMBs and large enterprises reported they’ve experienced in the past year, with how much downtime (loss of business hours) the attacks caused. We did this using four categories based on organizational number of employees and ranked the events most likely to create more than 24 hours of downtime.
30 March 2021
|
Report
:
The future challenges facing criminal justice systems
Threat hunting
Threat hunting is a proactive security exercise, with the intent of finding and rooting out attackers that have penetrated your environment and haven’t raised any alerts. This contrasts with traditional investigations and responses that stem from alerts that appear after potentially malicious activity has been detected.
The whole concept of threat hunting sounds like it involves a mysterious crime scene investigation, with its nuances and complexity out of reach for smaller businesses. SMBs have their hands full trying to investigate alerts; they don’t have time to go hunting for other threats, right?
FALSE: From our survey data, not only do 72% of SMBs have employees dedicated to threat hunting, but this is also close to the percentage of large organizations who have a threat hunting department.
Although their levels of maturity may differ from larger organizations due to less resources, our data suggests that SMBs recognize the value of, and are embracing a proactive approach towards cybersecurity.
30 March 2021
|
Report
:
Big Security in a Small Business World
Testing incident response plans with drills/exercises
As Mike Tyson often said, “Everyone has a plan until they get punched in the face.” Until you know how your incident response plan performs in action, it’s only worth the words on the page.
But smaller businesses don’t have the luxury of time and resources to test their plans, right? Surely that would cause more disruption than it would be worth.
FALSE: This myth is simply not true. Only one percent of SMBs never test their plan, and four percent rarely test. Twelve percent test every two years, 36% test annually, and the largest percentage (45%) test every 6 months.
30 March 2021
|
Report
:
Big Security in a Small Business World
SME Leadership Taking Security and Data Privacy Seriously
Here’s the big one – the one that the collective industry has unfortunately been peddling for years. As an SMB, you’re in the dark on how much danger you’re in – and haven’t nurtured an organizational culture around security and data privacy.
FALSE: Our data proves that this myth is very far removed from the actual truth. And there are three ways to prove this from our survey of IT decision-makers from different sized organizations.
30 March 2021
|
Report
:
The future challenges facing criminal justice systems
SME's patching vulnerabilities
Patching often falls under the basics of cybersecurity, but in practice, it can be challenging to implement. One myth suggests that SMBs would rather use their resources elsewhere than find ways to minimize the disruption caused by patching.
This is false: Fifty-six percent of SMBs patch daily or weekly, compared to 58% of large businesses – showing that for the very regular patching routines, all business sizes approach it the same.
30 March 2021
|
Report
:
The future challenges facing criminal justice systems
Measure the efficacy of security programs
Assumptions have been made that smaller businesses employ more of a ‘spray and pray’ approach to cybersecurity. The implication is that they don’t have the measures in place to be able to monitor and measure what’s really working, and therefore can’t optimize what they have.
This is false. An impressive 86% of SMBs say they have clear metrics for assessing the effectiveness of their security program, compared to 90% of larger organizations.
30 March 2021
|
Report
:
Big Security in a Small Business World
AI race underway in the financial services sector
Currently, a third of financial service providers use AI applications on a functional level. In three years, 95 percent of the market expects to use AI in their day-to-day operations. There will be an AI race within the financial services industry. Within the financial services industry, the idea is maturing that artificial intelligence will fundamentally change competitive dynamics. more than half of the companies have prioritized the coordination of the AI strategy to 'board level', due to the expected impact of AI technology on the overall value chain within the financial services industry.
7 June 2021
|
External
:
Ai-race op komst in de financiële dienstverlening
Noticable disaster developing around data leaks
The impact of data leaks is huge and it i noticable that there is a disaster developing concerning leaks. Experts (Bird & Bird, Compumatica) tell us that working with security and privacy in practice is always a balancing act. Business awareness with regards to privacy is very important and that it is important to get clarity of security requirements at an early stage. Adjustments to security will always have to be made to take into account a flexible structure of databases.
14 June 2021
|
News
:
Recap HSD Café Security & Privacy: Noticeable Disaster Developing Around Data Leaks
The number of attacks with ransomware and the damage resulting from such attacks are increasing
There are all kinds of solutions on the market in order to detect suspicious activity. However, some solutions are working insufficiently. For example one network sensor, only recognised 4% of all phishing attempts and was unable to stop ransomware. Also, traffic to the dark web was not considered to be suspicious.
21 June 2021
|
News
:
Research by EYE: Cyber Products For SMEs Are Often Ineffective
AI technologies provide opportunities in the Justice, Police and Defence sectors
AI technologies can be utilised to improve various security related issues. For example, the police can use AI to improve the selection of case material, the selection of promising cold cases or the handling of alerts. In the justice domain, AI can be used to gain insights into child abuse or financial debts. Lastly, defence can use AI to improve weapon- and detection systems.
11 August 2021
|
Report
:
Strategisch Actieplan voor Artificiële Intelligentie
AI technologies provide opportunities in the Healthcare, Agriculture and Energy sectors
AI technologies can be utilised to improve various issues. For example in the healthcare sector, AI is used to precisely analyse cells, read röntgen images or establish diagnostics. In the agriculture domain, AI is used for 'precision agriculture', the selection of new crop strains and system integration. Lastly, the energy sector uses AI to reduce traffic jams, reduce emissions and the automatic detection of flaws in power grids.
11 August 2021
|
Report
:
Strategisch Actieplan voor Artificiële Intelligentie
Vital infrastructure, including French hospitals, is key target of cybercriminals
According to the ANSSI (the French counterpart of the NCSC), one of the main challenges to cybersecurity in France is that there has been an increase in attacks on vital infrastructure, including on hospitals. This could have to do with the implementation of mandatory reporting, but should still be kept in mind. Furthermore, it is important to increase awareness about the existing threat level and to increase cyber resilience.
2 January 2023
|
Report
:
NCSC Magazine - Grenzeloze Samenwerking
Cybersecurity can only be tackled in a holistic way
According to ANSSI, the French counterpart to the NCSC, there are various actions needed to make a country more cyber resilient. First, strengthen prevent and respons capacities. Second, one needs to be able to rely on private partners. Third, the EU Competence Centre for industry, technology and research should work together with national coordination centers to increase knowledge on key technologies. Lastly, we need to facilitate response incident support across EU borders.
2 January 2023
|
Report
:
NCSC Magazine - Grenzeloze Samenwerking
There is a gap in the labor market between the supply and demand for cybersecurity expertise
Developments in the field of digitization are moving at lightning speed and digitization has penetrated into the capillaries of our society. The training or retraining of people who can adequately and efficiently address the safety aspects of this development, both on a technical and social science and humanities level, lags far behind, both in numbers (quantitative) and knowledge levels (qualitative). A gap has thus been created in the labor market between the demand for and the supply of cybersecurity expertise, in all areas, not only technical, but also organizational, administrative, legal, economic and ethical, for example.
24 May 2021
|
Report
:
Dcypher: Nationale Cyber Security Educatie Agenda
More qualified educators with cybersecurity knowledge and skills are needed
By including security and privacy in the digital world in the curriculum of primary and secondary education, young people become familiar with cybersecurity. Cybersecurity also comes into the picture in secondary education as a study choice. In primary education (PO) and secondary education (VO), more qualified teachers with cyber security knowledge and skills are therefore needed. Cybersecurity experts can be deployed to provide short-term knowledge transfer in education, for example to develop teaching materials that can be used by primary and secondary teachers. For the long term, new teacher training courses will have to be developed and current training courses adapted.
24 May 2021
|
Report
:
Dcypher: Nationale Cyber Security Educatie Agenda
A lack of a supported and accepted Body of Knowledge and Skills on cybersecurity hinders the development of the cybersecurity workforce
It is not immediately clear what the profile of a good information security officer or cybersecurity expert is. That makes it difficult for educational institutions to determine what the content of a curriculum should be. Students find it difficult to form an idea of what they want when determining their study choice. It is difficult for employers to formulate realistic expectations for starters. A supported and accepted Body of Knowledge and Skills (BoKS) helps with this. Due to the international dimension of the field, coordination on this is necessary. Professionals must be able to acquire an (inter) nationally recognized level of professional competence if they meet the requirements of education, experience and professional ethics.
24 May 2021
|
Report
:
Dcypher: Nationale Cyber Security Educatie Agenda
The benefits and challenges of large and complex data sets in law enforcement agencies
The application of AI in law enforcement agencies could ease the navigation of large and complex data sets which could lead to faster detection of patterns in criminal activities, correlations between data types and forecast resource requirements. Some challenges that are currently being faced include financial budgets, expertise, compliance to law and regulations and limited interoperability.
13 September 2024
|
Report
:
AI and Policing: The Benefits and Challenges of Artificial Intelligence for Law Enforcement
Usage of predictive policing and its challenges
Predictive policing is a recent use of AI which incorporates vast datasets on crime records, socio-economical data, environmental factors and opportunity variables which leads to criminological insights. Manifesting in two main policies: area-based and individual-based policing. The latter causes concerns regarding its potential to infringe on fundamental human rights.
13 September 2024
|
Report
:
AI and Policing: The Benefits and Challenges of Artificial Intelligence for Law Enforcement
Threats driven by Artificial Intelligence
The use of Artificial Intelligence poses threats to physical systems and in the future to the same extent to digital systems.
-The year 2021 should be a year in which AI is adopted on a large scale by companies
- By 2025, the market of AI software will be worth 37 billion dollers
13 May 2021
|
External
:
What are the cybersecurity trends for 2021?
5G and the IoT will accelerate and multiply cyber-attacks
The roll-out of 5G has started in Europe which opens the way to the development of a real Internet of things (IoT). The nature and applications of IoT will be varied and change the geography of company's networks. this will also increase the attack surface for actors with ill-intent. It has to be said that the distributed nature of 5G networks, to which a multitude of connected objects with dubious security will be connected, further reduces the visibility of threats
13 May 2021
|
External
:
What are the cybersecurity trends for 2021?
EU citizens' awareness of the risks and challenges of cyber space
European Commission prepared a special Eurobarometer survey in 2019 with the aim of understanding EU citizens’ awareness, experiences and perceptions of cybersecurity. The results of this survey show that Internet use in Europe continues to grow, particularly via smartphones, and citizens are more aware of the potential dangers when going online. According to the survey’s findings, concerns about online privacy and security have already led more than 9 in 10 Internet users to change their online behaviour – most often by not opening e-mails from unknown people, installing antivirus software, visiting only known and trusted websites and using only their own computers. While these results are quite encouraging, many users still fall into online fraud and e-mail phishing baits. This reveals that malicious actors are using sophisticated attacks that are harder to detect and avoid. Hence, mitigation strategies have to be updated regularly to accommodate the latest available intelligence (CTI) on attack techniques.
22 January 2021
|
Report
:
The Year in Review
Cyber-offenders: Sextortion attacks
Cyber-offenders are likely to Continue targeting teenagers and young adults with sextortion attacks (webcam blackmail) affecting psychologically and ultimately physically the victims.
22 January 2021
|
Report
:
The Year in Review
Cyber-offenders: Cyberbullying attacks
Cyber-offenders are likely to Increase the number of cyberbullying attacks during and after the COVID-19 pandemic with adolescents using digital platforms even more for personal or educational purposes.
22 January 2021
|
Report
:
The Year in Review
Cyber-criminals: AI-based tools to create deep fakes
Cyber-criminals are likely to Increase the use AI-based tools to create highly believable counterfeits (image, audio and video format) – commonly known as deep-fakes – to defraud companies.
22 January 2021
|
Report
:
The Year in Review
Cyber-criminals: Business Process Compromise (BPC)
Cyber-criminals are likely to Improve the tactics that compromise business processes to obtain financial advantage. The threat = Business process compromise (BPC)
22 January 2021
|
Report
:
The Year in Review
Cyber-criminals: Business e-mail compromise (BEC)
Cyber-criminals are likely to lower one level in the organisation - below executive – to compromise business emails. Business e-mail compromise (BEC)
22 January 2021
|
Report
:
The Year in Review
Cyber-criminals: Managed service providers (MSPs) to distribute malware
Cyber-criminals are likely to increase the use of managed service providers (MSPs) to distribute malware.
22 January 2021
|
Report
:
The Year in Review
Cybersecurity challenge: Dealing with systemic and complex risks
Cyber risk is characterised by the speed and scale of its propagation as well as the potential intent of threat actors. The interconnectedness of various systems and networks enables cyber incidents to spread quickly and widely, making cyber risks harder to assess and mitigate.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity challenge: widespread of adversarial AI detection
The detection of threats exploiting AI to launch an attack or avoid detection will constitute a major challenge for the future of cyber defence systems.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity challenge: supply chain and third party threats
The diversified supply chain that characterizes the technology industry today provides new opportunities for threat actors to take advantage of these complex systems and exploit the multiple vulnerabilities introduced by a heterogeneous ecosystem of third party providers.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity challenge: security orchestration and automation
Cyber threat intelligence and behavioural analytics will gain importance with the automation of processes and analysis. Investing in automation and orchestration will allow cybersecurity professionals to invest in the design of more robust cybersecurity strategies.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity challenge: reduction of false positives
This long waited promise is key in the future of the cybersecurity industry and in the fight against the alarm fatigue.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity challenge: zero-trust security strategies
With an increasing pressure on IT systems from new business requirements such as remote working, digitalization of the business model and data sprawl, zero trust is seen by many decision makers as the solution de facto to secure corporate assets.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity challenge: enterprise cloud migration errors
With many businesses migrating their data to cloud-based solutions, the number of configuration errors will increase exposing data to a potential breach. Cloud service providers will address the issue by implementing systems that identify these type of errors automatically.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity challenge: hybrid threats
New modus operandi adopt virtual and physical world threats. The spread of disinformation or fake news for example, is a key fixture of the hybrid threat landscape. The EUvsDisinfo15 is a flagship project of the European External Action Service’s East StratCom Task Force established to address the disinformation threat.
22 January 2021
|
Report
:
Emerging Trends
Cybersecurity spending
According to Gartner, many boards of directors will demand improved data and understanding of the returns after years of intensive investment in cybersecurity. This is mainly due to a growing spend in cybersecurity proportionately to the investment made in new technologies. According to a report from IDC22, spending on cybersecurity reached $103 billion (ca. €87,5 billion) in 2019, which is 9.4% higher than the previous year. Security managers will soon be scrutinised for the results obtained from years of investment and are essential to maintain improved data about the results obtained.
22 January 2021
|
Report
:
Emerging Trends
Cyber threat intelligence will help defining cybersecurity strategies
Cyber threat intelligence (CTI) aims at helping organisations becoming better prepared by improving their knowledge about the threat landscape. Instead of relying exclusively on information generated by internal systems or feeds (what is known about the known), the effectiveness of CTI will be determined by the knowledge about the why, the how and the what that is unknown to the cybersecurity team. The value proposition of any CTI capability or program is to improve the preparedness of the organisation to protect its critical assets from unknown threats. "With more cybersecurity automation and orchestration seen as a growing trend, cybersecurity teams will spend less time in monitoring activities and more in readiness and preparedness tasks.
22 January 2021
|
Report
:
Emerging Trends
Shortage in cybersecurity skills
The lack of highly-skilled tech professionals is already issue for Europe’s digitalisation ambition. According to a study, over 70% of European firms report that lack of skills is hampering their investment strategies, while 46% of firms report difficulties in filling vacancies due to skills shortages in key areas such cybersecurity.
22 January 2021
|
Report
:
Emerging Trends
Malware is getting an upgrade
Malware family strains are being upgraded into new versions with additional features, distribution and propagation mechanisms. Emotet for example, a malware originally designed as a banking Trojan back in 2014, has become one of the most effective malware distributors of 2019.
22 January 2021
|
Report
:
Emerging Trends
Threats will become fully mobile
Users are increasingly dependent on mobile devices to secure their most sensitive accounts. The use of 2fa tied to an app authenticator or via a text message is one of the examples. With more malware going fully mobile, fraudulent apps, SIMJacking and operating systems exploits make these devices the weakest link and therefore, extremely vulnerable to attacks.
22 January 2021
|
Report
:
Emerging Trends
Attackers are using new file types such as disc image files (ISO and IMG) for spreading malware.
DOC, PDF, ZIP and XLS files are still the most commonly used attachment type for spreading malware but other types are getting popular. A few campaigns distributing AgentTesla InfoStealer and NanoCore RAT were found using image file type in 2019.
22 January 2021
|
Report
:
Emerging Trends
Increase in targeted and coordinated ransomware attacks
In 2019, we saw an escalation of sophisticated and targeted ransomware exploits with the public sector, health care organisations and specific industries at the top of the list. Attackers are spending more time gathering intelligence about their victims, knowing exactly what to encrypt, achieving maximum disruption and higher ransoms.
22 January 2021
|
Report
:
Emerging Trends
Credential-stuffing attacks will widespread
Credential stuffing - the automated injection of stolen username and password combinations through large-scale automated login requests directed against a web application - will proliferate as a result from a decade of an abnormal number of data breaches and trillions of personal data records stolen.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: attacks will be massively distributed with a short duration and a wider impact
These attacks are meant to affect the highest number of devices possible to steal personal information or block the access to data by encrypting the files.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: finely targeted and persistent attacks will be meticulously planned with well-defined and long-term objectives
Malicious actors plan this type of attacks to reach high value data such as financial information, intellectual and industrial property, trade secrets, classified information, etc.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: malicious actors will use digital platforms in targeted attacks
Malicious actors will explore the potential of digital platforms to support targeted attacks (e.g. social media, gaming, messaging, streaming, etc.). From personal data theft for spear-phishing attacks to broad malware distribution, digital platforms with a high number of subscribers are efficient attack vectors increasingly popular among malicious actors.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: the exploitation of business processes will increase
With more automation and less human intervention, business processes can be maliciously altered to generate profit for an attacker. Commonly known as Business Process Compromise (BPC) this technique is often undervalued by process engineering specialists due to the lack of a proper risk assessment.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: the attack surface will continue expanding
E-mail is no longer the prime and only tool and top attack vector for phishing. Malicious actors are now using other platforms to communicate and attract victims to open compromised web pages. A new trend is emerging with the use of SMS, WhatsApp, SnapChat and social media messengers.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: teleworking will be exploited through home devices
With more people in teleworking and connecting their devices to corporate networks, the risk of opening new entry points for attackers will increase. With the COVID-19 pandemic, this trend will urge IT Managers to tighten security policies and make urgent changes in the IT infrastructure.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: obfuscation techniques will sophisticate
Threat actors are continuously innovating to make threats more effective and less susceptible to detections. The Anibus, an Android banking Trojan and bot, has been distributed by masquerading as innocuous app, primarily through Google Play Store.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: the automated exploitation of unpatched systems and discontinued applications will increase
The abnormal increase in Telnet traffic to port 445 observed in 2019 unveiled the expansion of worms and exploits such as Eternal Blue. Telnet, which is no longer used except in the realm of IoT devices, saw the greatest volumes during the period.
22 January 2021
|
Report
:
Emerging Trends
Emerging trend in attack vectors: cyber threats are moving to the edge
Edge devices are deployed at the boundaries between interconnected networks. We have seen a growing trend with attacks targeting these devices — such as routers, switches, and firewalls — having a significant impact to an enterprise and to the connected digital ecosystem.
22 January 2021
|
Report
:
Emerging Trends
Increase in collaborative innovation to tackle societal challenges
The world around us is constantly changing, partly due to rapid technological developments, social media and international connections. More and more challenges arise that are too large for one party to tackle. Think of the climate issue and the climate goals of Paris, or the debt problem. Collaboration with the market, government and science (triple helix) and even with society (quadruple helix) is increasingly taking place to solve these issues and create value together. On both social issues and technological developments. Investing in common ground, formal and informal structures, solidarity and honesty, in independence, is key for successful collaborative innovation
9 June 2021
|
Report
:
Innoveren over grenzen heen
AI will affect all sectors, tackling challenges together is crucial
AI will affect all sectors, if this is not already the case. Many parties run into the same problems, and it is best to tackle them jointly. Then companies can compete on their best propositions
9 June 2021
|
Report
:
Innoveren over grenzen heen
Creating a network in which organizations provide attributes that confirm reliability is key for data security
Data is increasingly taking on a leading role in our society. How do you ensure that that data can be trusted – and at the same time prevent your information from being endlessly double-checked? Collaboration is the key to success. By not placing the verification of data with one party, but by constructing a connection network in which several organizations provide attributes that confirm the reliability.
9 June 2021
|
Report
:
Innoveren over grenzen heen
There are several preconditions for successful application of technology in an urban environment
When applying technology in an urban environment, a number of preconditions are important, namely: privacy and societal acceptance, cybersecurity, embedding in existing infrastructure and processes, and the ability to scale up.
10 June 2021
|
Report
:
Technologieverkenning: Tech voor een gezonde en weerbare stad tijdens COVID-19 en erna
Trends en ontwikkelingen digitale veiligheid
Nieuwe uitdagingen door versnelde digitalisering mede door pandemie: we brengen bestaande ICT-systemen voor beschikbaarheid over naar de cloud, persoonsgegevens die door grootschalig test- en contactonderzoek worden verzameld vormen privacyrisico, werknemers moeten kunnen inloggen vanuit huis met hun eigen apparatuur.
Nieuw inzicht in lokale vitale processen door lockdown: stedelijke functies zoals het onderwijs, gezondheidszorg, lokale distributie van levensmiddelen en de detailhandel worden (deel) opgeschort of moeten online plaatsvinden. Het is zichtbaar geworden wat de stad nodig heeft voor basisniveau van functioneren en belang digitale continuïteit en veiligheid is.
Aanvallen van statelijke actoren: samenleving afhankelijk van grote (buitenlandse) techbedrijven en statelijke actoren vallen grote organisaties aan voor geopolitieke belangen. Zowel medewerkers als toeleveranciers kwetsbaar, systemen worden gemanipuleerd of gesaboteerd.
Digitale criminaliteit: niet alleen statelijke actoren die aanvallen uitvoeren. Ook criminelen voeren voor financieel gewin aanvallen uit. Afgelopen jaar in Nederland talrijke aanvallen met ‘gijzelsoftware’ en aanvallen waarbij een groot aantal persoonsgegevens illegaal werd verhandeld. Door de pandemie is er sprake van een verschuiving van traditionele naar digitale criminaliteit: verkoopfraude, valsheid in geschrifte en hacken. Voor online criminaliteit is sprake van een toename van 54% in vergelijking met 2019. Voor de Eenheid Den Haag was er sprake van een toename van 42%.
4 April 2022
|
Report
:
Agenda Digitaal Veilig Den Haag
Extended detection and response capabilities emerge to improve accuracy and productivity
Extended detection and response (XDR) solutions are emerging that automatically collect and correlate data from multiple security products to improve threat detection and provide an incident response capability. For example, an attack that caused alerts on email, endpoint and network can be combined into a single incident. The primary goals of an XDR solution are to increase detection accuracy and improve security operations efficiency and productivity.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
Security process automation emerges to eliminate repetitive tasks
The shortage of skilled security practitioners and the availability of automation within security tools have driven the use of more security process automation. This technology automates computer-centric security operations tasks based on predefined rules and templates.
Automated security tasks can be performed much faster, in a scalable way and with fewer errors. However, there are diminishing returns to building and maintaining automation. SRM leaders must invest in automation projects that help to eliminate repetitive tasks that consume a lot of time, leaving more time to focus on more critical security functions.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
Enterprise-level chief security officers (CSO's) emerge to bring together multiple security-oriented silos
In 2019, incidents, threats and vulnerability disclosures outside of traditional enterprise IT systems increased, and pushed leading organizations to rethink security across the cyber and physical worlds. Emerging threats such as ransomware attacks on business processes, potential siegeware attacks on building management systems, GPS spoofing and continuing OT/IOT system vulnerabilities straddle the cyber-physical world. Organizations primarily focused on information-security-centric efforts are not equipped to deal with the effect of security failures on physical safety.
As a result, leading organizations that deploy cyber-physical systems are implementing enterprise-level CSOs to bring together multiple security-oriented silos both for defensive purposes and, in some cases, to be a business enabler. The CSO can aggregate IT security, OT security, physical security, supply chain security, product management security, and health, safety and environmental programs into a centralized organization and governance model.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
Privacy is becoming a discipline of it's own
No longer “just a part of” compliance, legal or auditing, privacy is becoming an increasingly influential, defined discipline of its own, affecting almost all aspects of an organization.
As a rapidly growing stand-alone discipline, privacy needs to be more integrated throughout the organization. Specifically, the privacy discipline co-directs the corporate strategy, and as such needs to closely align with security, IT/OT/IoT, procurement, HR, legal, governance and more.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
New "digital trust and safety" teams focus on maintaining the integrity of all interactions where consumer meets the brand
Consumers interact with brands through an increasing variety of touchpoints, from social media to retail. How secure the consumer feels within that touchpoint is a business differentiator. Security for these touchpoints is often managed by discrete groups, with specific business units focusing on areas they run. However, companies are increasingly moving toward cross-functional trust and safety teams to oversee all the interactions, ensuring a standard level of safety across each space where consumers interact with the business.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
Network security transforms from the focus on LAN-based appliance models to SASE
Cloud-delivered security services are growing increasingly popular with the evolution of remote office technology. Secure access service edge (SASE) technology allows organizations to better protect mobile workers and cloud applications by routing traffic through a cloud-based security stack, versus backhauling the traffic so it flows through a physical security system in a data center.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
A full life cycle approach for protection of the dynamic requirements of cloud-native applications
Many organizations use the same security product on end-user-facing endpoints as they did for server workloads, a technique that often continued on during “lift and shift” cloud migrations. But cloud-native applications require different rules and techniques, leading to the development of cloud workload protection (CWPP). But as the applications grow increasingly dynamic, the security options need to shift as well. Combining CWPP with the emerging cloud security posture management (CSPM) accounts for all evolution in security needs.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
Zero-trust network access technology begins to replace VPN's
The COVID pandemic has highlighted many of the problems with traditional VPNs. Emerging zero-trust network access (ZTNA) enables enterprises to control remote access to specific applications. This is a more secure option, as it “hides” applications from the internet — ZTNA only communicates to the ZTNA service provider, and can only be accessed via the ZTNA provider’s cloud service.
This reduces the risk of an attacker piggybacking on the VPN connection to attack other applications. Full-scale ZTNA adoption does require enterprises to have an accurate mapping of which users need access to what applications, which will slow adoption.
21 January 2021
|
Report
:
Gartner Top 9 Security and Risk Trends for 2020
Experts foresee an AI growth path with three intelligence levels and two important conditions
Experts foresee a growth path with three intelligence levels: assisted AI (technology as support for human decision-making), augmented AI (technology as enrichment of human capabilities) and autonomous AI (technology as executing complex tasks without human control or guidance). two important conditions for going through this growth path are access to reliable data and support for experiments in the public sector. AI applications need data to train, improve and execute the algorithms. The required data is often not with one organization, data sharing between organizations and even between sectors is an important precondition for the development of AI solutions. Additionally, if no one dares to experiment, we cannot learn how to develop and deploy AI effectively, which means the technology will increasingly come from other parts of the world where different norms and values prevail.
8 June 2021
|
Report
:
Aan de slag met AI binnen de overheid
The ministry of defense will continue to focus on improving social safety in 2021
The ministry of defense wants to strengthen social safety within the organization with various measures in 2021. For example, there will be a (temporary) reporting and registration system where employees can go with suspicions of abuse, complaints or integrity violation. There will also be an analysis and revision of the internal integrity system. The Ministry of Defense is also committed to professionalizing the employees who deal with reports and complaints.
9 June 2021
|
External
:
Defensie zet in 2021 verder in op verbetering sociale veiligheid
The TU Delft and the FIOD are collaborating to combat digital and financial crime
Students of the TU Delft developed a new way of accurately calculating the revenue made by sellers on 'dark markets', enabling the FIOD to apply an evidence-based approach to seizing criminal assets. Another method they developed helps to identify key players in these markets, making it easier to effectively and efficiently track down facilitators, such as money-launderers.
22 June 2021
|
News
:
FIOD and TU Delft Join Forces in Investigating Digital and Financial Crime
Police and the society, Continuity of the police organization and Tracing are the three central themes of the Kennisagenda 2023-2025
The established themes give direction to the knowledge of the police. There are questions that further elaborate the themes and research is used and other instruments to arrive at the required knowledge.
22 February 2023
|
Report
:
Kennisagenda 2023 - 2025
A growing number of organizations have CISO's
The importance of information security in the highly digitized world has increased significantly in recent decades and will continue to rise in the next decade. A continuous stream of examples of cyber attacks that paralyze entire institutions underlines this importance. It is therefore not surprising that more and more companies and institutions have a CISO (Chief Information Security Officer) or even an entire Information Security Office
27 May 2021
|
Report
:
HSD CISO Whitepaper: een robuustere cybersecurity
In recent years there has been a change in the role of the CISO
In recent years there has been a change in the role of the CISO, from a minimal realization of the role, to a more mature, full realization of the role. For example, the focus of the CISO has moved from technology to the organisation, the CISO has shifted from being difficult to being supportive, and there has been a growth in CISO Office team size as the mindset has shifted to security being essential for an organisation.
27 May 2021
|
Report
:
HSD CISO Whitepaper: een robuustere cybersecurity
Several factors can play a role in an increased focus on resilience and robustness in cybersecurity
factors can play a role in increasing resilience and robustness in cybersecurity:
-The management (board / board of directors) is often still too naive when it comes to cyber incidents and the resulting consequences. A business impact analysis and having the CISO speak the language of the board can solve this.
-Awareness campaigns are too rational, people do not "feel" the risk, and they are too focused on prevention. Practicing cyber incidents can solve this.
-Technical systems can contribute to increased robustness. Make sure to compartmentalize, standardize and simplify them.
-In a society that relies heavily on automation, the shortage of specialists, capacity and knowledge in the field of cybersecurity is a serious risk in the longer term
-The government plays an important role when it comes to the prevention of major cyber incidents and the preparation for dealing with such incidents should they occur.
27 May 2021
|
Report
:
HSD CISO Whitepaper: een robuustere cybersecurity
Safety of OT (Operational Technology) is underexposed
Safety of OT (Operational Technology) is underexposed. There are still too many legacy systems that hang unpatched and unprotected on the internet. More awareness is needed in this area.
27 May 2021
|
Report
:
HSD CISO Whitepaper: een robuustere cybersecurity
The Netherlands has an excellent position in the world when it comes to coordinated vulnerability disclosure
The Netherlands has an excellent position in the world when it comes to coordinated vulnerability disclosure (previously often referred to as responsible disclosure). This contributes to overall cyber security. There is still room for improvement on this.
27 May 2021
|
Report
:
HSD CISO Whitepaper: een robuustere cybersecurity
Privacy-proof data sharing between various parties as a key theme in AI for Safety, Security, and Justice
A vast amount of data is available about people, derived from all kinds of sources, that is not allowed to be analysed because of privacy considerations. If we are to use AI responsibly, it is essential that data can be shared and used in a way that respects privacy – particularly in the security domain, where the privacy of members of the public is an even more sensitive topic than in some other domains. That is why privacy-proof information sharing also acts as a building block for other focal themes.
24 March 2022
|
Report
:
AI Toepassingen voor Veiligheid, Vrede en Recht
AI for cyberseurity
Despite increasing investment in cybersecurity, most organisations are scarcely able to keep pace with the speed of developments and digital threats. A medium-sized company gets hundreds of thousands of alarms per day. Automating cybersecurity work is therefore a key solution for becoming and remaining resistant while only using limited human and financial resources. That is why the emphasis in this focal theme is on designing secure, automated and privacy-friendly systems and products, as well as on developing techniques for making systems and products more resilient and keeping them that way.
24 March 2022
|
Report
:
AI Toepassingen voor Veiligheid, Vrede en Recht
Cyber espionage by state actors
The Dutch healthcare sector is interesting for state actors. A lot of innovative research is taking place in the Netherlands, for example with regard to COVID-19, which draws the attention of state actors. Different branches of the healthcare sector, like hospitals, laboratories, the GGZ and more, are conducting valuable research. Z-CERT is aware of the fact that at least thirteen cyber groups have been paid by states that have shown interest in the Netherlands and in healthcare. This poses a potential threat.
29 March 2022
|
Report
:
Cybersecurity Dreigingsbeeld Zorg 2021
Three reasons to monitor social media for traffic management
There are many challenges in managing mobility and traffic. Incidents, roadblocks, planned events (e.g. concerts) and busy days are only examples of what can affect the traffic flow in a large city. To increase road safety, it is important to know what is happening, how an incident develops and how road users experience the situation. In short, you need as
much information as possible.
19 April 2022
|
Report
:
E-book: The Power of Social Media
Child sexual abuse material (CSAM)
The area of child sexual abuse material (CSAM) has remained a grave concern during the pandemic; with children spending more time online, the potential increase in demand for CSAM and attempt to engage in child sexual exploitation continues to be a considerable threat.
22 January 2021
|
Report
:
How Covid-19-related Crime Infected Europe During 2020
Pandemic-themed campaigns in cybercrime activities
Pandemic-themed campaigns have appeared across a wide range of cybercrime activities, including phishing campaigns, ransomware, malware and business email compromise attacks. Healthcare and health-related organisations have also been targeted and fallen victim to ransomware attacks.
22 January 2021
|
Report
:
How Covid-19-related Crime Infected Europe During 2020
Fake news, conspiracy theories and harmful narratives
The volume of fake news, conspiracy theories and harmful narratives undermining public institutions disseminated online around the COVID-19 pandemic has been substantial.
22 January 2021
|
Report
:
How Covid-19-related Crime Infected Europe During 2020
The first- and second-most commonly cited causes of breach are malware and malicious spam.
The first- and second-most commonly cited causes of breach are malware and malicious spam. Ransomware causes the most destructive amount of downtime (over 17 hours) and also doesn’t discriminate – this includes small, medium and large businesses and enterprises. Brand reputation has increasingly become an area of security breaches, to such an extent that brand reputation is now the second-most impacted business area after operations. Businesses and enterprises who show collaboration between security, networking, endpoint management, or security groups, showed significantly lower breach costs. It therefore comes as no surprise that voluntary breach disclosure is at an all-time high.
21 June 2021
|
News
:
Cisco 2020 CISO Benchmark Report
Forty six percent of organizations had an incident caused by an unpatched vulnerability
Forty six percent of organizations (up from 30 percent in last year’s report) had an incident caused by an unpatched vulnerability.
21 June 2021
|
News
:
Cisco 2020 CISO Benchmark Report
It is necessary to explore the guidelines by which technology serves our society
In 2019, over 80 organisations in the Netherlands signed a declaration to accelerate innovation. One way that this is done is through the implementation of technology in our society, also known as 'Smart Society'.
"Learning from the development of a Smart Society requires us to shift our focus from technology to exploring the guidelines by which these technologies serve our society”.
“There are many opportunities for technology and data to improve the security of our cities. To realise these opportunities, we have to work in an agile way, innovate together and scale-up the discovered solutions”
12 August 2021
|
News
:
The Development of Smart Secure Cities
Digital and physical processes in society have become intertwined and crisismanagement should be able to deal with this
Most measures listed online focus on preventing a cyber emergency, only a very few concern the period during or after the emergency. This approach is too restricted. Digital and physical processes in society have become intertwined very rapidly. As a result, it's conceivable that a future cyber emergency will also affect the physical domains such as healthcare and transport. Fortunately, crisis and disaster management organizations are devoting more and more attention to the intensive interaction between the digital and physical spheres.
25 May 2021
|
Report
:
CSR Magazine
The human factor as a vital but weak link in cybersecurity requires testing and practise
The human factor is vital to achieving effective cybersecurity. There are three levels:
- organizations must have enough people on staff: minimal reliance on external parties
- people hired must be qualified for the job: personal must have mastered yesterday's technology, but be ready to work with the technology of today and tomorrow
- effective employee screening: government services must be kept secure
It is vital to keep conducting drills and surprise the organization with things like pen tests form outside the organization, mystery guests, external ethical hackers and more.
25 May 2021
|
Report
:
CSR Magazine
Water management as a (cyber)security issue
An interesting case for the Netherlands is the issue of water security. It is a traditional and typically Dutch security topic. Today, these efforts are being combined with a cyber related aspect. Today there is a desire to link the information from various water management structures together. However, this does entail increased risks.
25 May 2021
|
Report
:
CSR Magazine
European Commission working to put in place the building blocks of a truly Digital Single Market
Over the last four years, the European Commission has worked to put in place the building blocks of a truly Digital Single Market that supports the development of new technologies and applications and at the same time ensures legal certainty and the necessary protections for consumers and businesses alike. The Commission has proposed a dedicated funding stream for digital as part of the next EU budget period from 2021. The Digital Europe Program will invest over €9bn in artificial intelligence, supercomputing, cybersecurity, digital skills and the modernization and digitalization of the public sector.
25 May 2021
|
Report
:
CSR Magazine
The EU needs to become more resilient to cyber-attacks and create an effective cyber deterrence
Cyber-attacks have increased in numbers, but also in scale and geographical spread. It is clear that the EU needs to become more resilient to cyber-attacks and create an effective cyber deterrence. The human factor plays a very important part in this. With some 95% of incidents said to be enabled by some type of human error – intentional or not - there is a strong human factor at play. Technology can only take us so far in keeping us safe in the digital world. People - but also businesses and public administrations - need to have the skills and the right tools to be able to quickly detect and actively protect themselves against attacks. The legislative framework that is currently in place works to ensure the safety of networks and systems and to raise awareness of the risks. This framework is continuously being reexamined and adjusted, with the additions of Acts.
25 May 2021
|
Report
:
CSR Magazine
Efforts to prepare young people for tomorrow's labour market must be speeded up
Digital developments are progressing at lightning speed and their impact on our day-to-day lives is enormous. The application of artificial intelligence, Big Data and robotics serves to accelerate this process. It's crucial that we properly prepare young people for this reality: they are our future and must be ready to enter tomorrow's labour market. That is why it's so important that young people are taught the necessary skills, running the gamut from programming to how to use digital tools prudently and securely. A great deal of effort has already been made, but this must be speeded up. The shortage of teachers in primary and secondary educations means other solutions must be considered.
25 May 2021
|
Report
:
CSR Magazine
Training teacher through the use of hybrid teachers
In order for pupils to learn digital skills, teachers will have to be digitally literate. Public-private partnerships can offer assistance. However, even though most businesses are willing to help, they are often unsure of how to go about it. This is often because schools aren't certain of what they want from the business community.
What is needed: Combining strength and establishing shared goals and hol one another accountable for attaining those goals.
25 May 2021
|
Report
:
CSR Magazine
Decrease in traditional crime while the rate of cybercrime continues to increase
Studies by Statistics Netherlands show that over 1.2 million people in the Netherlands were victims of digital criminality last year. Young Internet users between 12 and 25 years of age were, with 12 per cent, the most frequent victims; of those aged 65 and over, by comparison, less than 4 per cent were victimized. We're seeing a decrease in traditional crime such as burglary and robbery while the rate of cybercrime continues to increase
25 May 2021
|
Report
:
CSR Magazine
Chain dependence increases the cyber threat level in the manufacturing industry
Due to the high level of chain integration companies in the manufacturing industry are increasingly digitally connected. Companies are, generally speaking, very dependent on digital information-exchange, not only within the company, but across the chain. Consequently, it is important that the entire supply chain takes steps to increase cyber resilience. An important development in this industry is the Smart Connected Supplier Network (SCSN), which focuses on the (technical) rollout of digital messaging in the chain.
23 December 2022
|
Report
:
Verhogen cyberweerbaarheid bij bedrijven in de Zuid-Hollandse maakindustrie
Financial technology (fintech) solutions are emerging as a new standard for customers to interact with financial services
Financial technology (fintech) has provided digital online solutions for customers to interact with financial service providers. This has resulted in a leap of usability and accessibility of financial services. However, fintech solutions also pose risks. Customers lack the technical knowledge and experience to use these services proficiently, which makes them vulnerable to cybercriminals. Cybercriminals deploy phishing techniques and malware to gain access to customer's accounts. Fintech has also weakened the know-your-customer (KYC) procedures for financial institutions, due to increased digitalisation and less direct customer interaction. The KYC procedures were put in place to prevent money laundering, tax fraud and illicit use of the financial system.
25 March 2021
|
Report
:
Enterprising Criminals
Expected increased use of eHealth solutions requires more cybersecurity analysis and threat mitigation
Europe's population is aging, causing an increase in healthcare demand and cost. To keep healthcare accessible and affordable, eHealth solutions will play a growing role. As health data is considered sensitive personal information, adequate protection is vital. The impact of cyber attacks in the healthcare sector is estimated at 6 billion EUR per year, with the eHealth market expected to be 280 billion EUR by 2022. Lack of IT spending and lack of awareness of cybercrime make for a vulnerable sector. Strong requirements and efforts on anonymisation and protection of the data processed in healthcare must be made.
14 April 2021
|
Report
:
Healthcare Sector Report
Rapid development of IoT is expected to continue
A new era of connectivity is on the horizon. Over the past years, the number of connected devices out there has grown exponentially, and it is anticipated that figures will only continue to rise. By 2020, it’s predicted that there will be 31 billion connected devices in existence – a statistic that is expected to more than double to 75 billion by 2025. The catalyst that will boost IoT to its long-awaited full potential is the next generation of communication networks, as well as blockchain. The potential impact of IoT will be greatly heightened by other technological trends such as AI, 5G, and voice control technology, all of which ultimately serve to make connected devices smarter than ever.
28 May 2021
|
External
:
Technology Trend Report 2020
Quantum computing has evolved from a theoretical concept to a practical phenomenon
In recent years we’ve seen the relevant hardware and software necessary for QC move out of university labs and into business contexts – that is, the technology has evolved from a theoretical concept to a practical phenomenon. Companies are increasingly aware of this: Research shows that 40 percent of businesses are taking proactive steps towards QC, with 36 percent planning to take steps to invest in QC within the next two to five years. In the financial industry specifically, QC could make a difference in the areas of fraud detection,
dynamic portfolio analysis and optimisation, clustering and arbitrage.That said, QC still has a lot of maturing to do before it’s a viable computing option for enterprises that can deliver meaningful, cost-effective business results.
28 May 2021
|
External
:
Technology Trend Report 2020
Cybercrime, and specifically ransomware, is growing exponentially
Ransomware is a dynamically evolving risk, impacting organizations around the world with rapidly increasing loss frequency and severity. Claims have increased significantly in frequency and severity in recent years and continue to evolve.
- By 2025, Global cybercrime damage costs are expected to reach $10.5 trillion.
Global ransomware damage costs are predicted to reach $20bn in 2021, up from $325m in 2015.
- By 2021 a ransomware attack on businesses is predicted every 11 seconds.
- AIG has seen an increase of more than 150% in frequency of ransom and extortion claims notifications since 2018.
- All sizes of company are impacted by ransomware, across all types of industries.
Ransom and extortion claims accounted for 1 in every 5 cyber claims in 2020, up from 1 in every 10 claims in 2018.
Ransomware is rapidly evolving, fueled by the rise of ransomware as a service (RaaS), data exfiltration prior to encryption, and deeper, more invasive attacks.
28 May 2021
|
Report
:
Ransomware: a call for enhanced resiliency
Initiatives from The Netherlands and Singapore for combating financial crimes
During a roundtable discussion on problems involving cryptocurrency (digital assets) and blockchain applications a number of initiatives came forward. The initiatives are: Transaction Monitoring Nederland; FinTech Regulatory Sandbox Singapor; Takedown of Bestmixer.io; Virtual Assets Red Flag Indicators; Cyber-enabled Financial Crimes Trend Report and A Privacy-friendly Way to Harness Data.
17 November 2021
|
Report
:
Combating Financial Crimes in the Era of Emergent Technologies
Providing guidance for national government organizations to implement references to central government security.txt file on their web servers
This document provides guidance for Dutch national government organizations (Rijksoverheidsorganisaties) on implementing references to the central "Rijksoverheid security.txt" file on their web servers. A security.txt file is a standardized approach for organizations to publish contact information for reporting security-related concerns. The guidance encourages organizations to use a centralized file, with a link to the central security.txt, streamlining the process and improving efficiency. The National Cyber Security Centre (NCSC) serves as the central contact point for Coordinated Vulnerability Disclosure (CVD) for government systems, making a central security.txt file advantageous. The document outlines the benefits of centralization, the risks associated with security.txt, and provides instructions on implementation for Rijksoverheidsorganisaties, including using HTTP 302 Redirects and considerations for IP addresses. The goal is to enhance the reporting of security vulnerabilities while minimizing administrative overhead for government organizations.
18 January 2024
|
Report
:
Handreiking security.txt
Growth in the application of artificial intelligence
With 'big data' as fuel, Artificial Intelligence (AI) has the potential to provide insight into social phenomena and to improve policy and decision-making. Municipalities can use this to create new added value for their residents. The Dutch cabinet and Europe recognize the opportunities offered by AI. The starting shot has therefore been given to get started with this new technology. Narrow AI systems are rapidly penetrating the average living room and workplace.
Opportunities and threats
AI not only creates opportunities, but also presents us with challenges. Consider, for example, the issue of transparency of the operation of AI systems and the outcomes they generate. The social effects that AI systems generate are not necessarily positive. AI systems and the data that feed them, for example, can reinforce existing prejudices, unlawfully discriminate against individuals and systematically stigmatize population groups.
Legislation that offers opportunities and gives confidence
AI is technology in development, also when it comes to embedding it in society. Good, effective legislation can provide powerful support in this regard. An important condition is that sufficient space is built in to exploit the opportunities offered by AI and to strengthen confidence in this technology. Politicians, policymakers and society are faced with a fundamental challenge: how do we ensure that the relationship between desired and undesired outcomes and effects turns in the right direction?
Collaborate and knowledge sharing
Various municipalities are already off the starting blocks with AI projects and are thus gaining valuable experience. However, it is evident that a lot of knowledge still needs to be acquired by the government in general - and specifically by municipalities - in order to fully utilize the opportunities offered by AI. That knowledge is also necessary to be able to conduct the political conversation about socially responsible use of people and AI in a meaningful way.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
Digital security is becoming increasingly important
Digital security is becoming increasingly more important. We are seeing a shift in crime rates from "physical" to digital. Due to the growth in digital products and services, the potential digital vulnerability of society is increasing. In addition, the physical and digital world have become intertwined and that entails new risks. In order to do their job properly, drivers must be aware of these risks and vulnerabilities.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
‘AI for Good’ - values, ethics, legal
Europe is committed to AI that benefits public values, under the motto "AI for Good". This results in a great deal of attention for the ethical aspects of AI. This attention is also seen in the Netherlands, within the Cabinet and the government departments. The Platform for the Information Society recently published the essay "AI and Human Rights" on this subject. This essay convincingly argues that only under strict conditions can ethical frameworks suffice. If the ethical frameworks do not meet those conditions, then such frameworks must also have a legal form. In the letters to Parliament regarding this matter, these intentions to take action on this are expressed as well. However, we must continue to pay close attention that the frameworks for AI are constructed in the right way, also including the perspective of local governments.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
Knowledge gap in the field of AI
In the field of AI, there is a large knowledge gap between the large tech companies on the one hand and SMEs, governments and residents on the other. In comparison, the EU spent 1.1 billion Euros on AI research between 2014 and 2017, whereas big tech companies like Google spent between 20 and 30 billion dollars in 2016 alone. To ensure that public values are safeguarded in the use of AI, governments need more in-house knowledge from various disciplines (policy officer, lawyer, data scientist, financial specialist, etc.). With this knowledge, governments can build their own resources and regulate the market.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
Digital security & Covid 19
With the rapid development of digitization, digital security is a major challenge. The COVID-19 crisis once again underlines how important it is that our digital resources function properly and that residents can rely on government information and act safely in the digital world. However, that safety and reliability are far from self-evident. Europol notes, for example, that the number of cyber incidents since the crisis has increased in line with the widespread adoption of digital working. In the Netherlands, the Fraud Help Desk has to deal with a doubling of the number of monthly reports (from 6,500 per month in December to 15,000 in April), with the increase in Whatsapp fraud in particular being striking. The Tax and Customs Administration also sees more than a doubling of phishing reports. Prior to the current crisis, Statistics Netherlands noted in its annual Security Monitor that the number of victims of cybercrime is increasing, while traditional crime is decreasing.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
Municipalities and digital security
It is important to ensure the safe handling of information and systems in the DNA of the municipality and society. If we consider information as the most important raw material with which the municipality carries out its production, then information security deserves the same place in the organization as finance. In this construct, the Chief Information Security Officer (CISO) and Data Protection Officer (DPO) are the accountant and controller for the purpose of dealing with (information) systems and (personal) data. Municipalities are slowly but surely growing from a reactive and incident-driven approach to a preventive and risk-based cyclical approach. The major challenge is to also create digital awareness and risk awareness in the municipal 'regular' security function. The IT world can still learn a lot from the regular security world in the field of crisis management. Conversely, the municipal security arm can learn a lot from the CISO role about making digital risks transparent and manageable.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
Chain spreading of digital risks
In general, we can say that the opportunities of the information society are also accompanied by shifting risks, new vulnerabilities and interdependencies that are not always predictable.
These risks are not limited to the own organization, but spread easily through chains and networks - also internationally. Responsibility for digital security within such chains as a whole is still unexplored territory. This is risky because a digital disruption can have major social effects.
Digital disruption refers to serious disruptions (intended and unintentional) to society, with both digital and physical dimensions. Consider, for example, the consequences of the ransomware attack on a Ukrainian accounting system that also affected the Maersk shipping company and thus the port of Rotterdam in 2017, or the national failure of the emergency number 112 as a result of a KPN outage in 2019.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
Existing fundamental rights are under pressure due to digitalization
Experts and leading institutions are concerned about the influence of digitization on our democracy and the ability of residents to make decisions about their (digital) living environment. As early as 2011, the Scientific Council for Government Policy (WRR) warned in the iGovernment report against "faltering democratic control". In more recent years, concerns have only increased. Opinion makers, scientists and advisory councils point to the erosive effect that digitization appears to have on democratic processes.
The various advice and reports highlight a number of key challenges. A first challenge is that digitization and social media influence the functioning of our democracy, as noted by the State Committee on the Parliamentary System and the Council for Public Administration (ROB), among others. For many citizens, the rapid technological developments are too complex to really fathom them. There is a knowledge inequality between the market and society. In this context, the Rathenau Instituut therefore advocates strengthening "technological citizenship".
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
There are rights that we require in an information society that we are currently might not possess
In addition to existing fundamental rights that are under pressure due to digitization, experts also identify possible missing rights. One example of this is the right to meaningful contact, as formulated by the Rathenau Institute (2017). The rapid rise of artificial intelligence and robotization raises questions about meaningful and "face-to-face" contact. But is it desirable that people end up in situations where they only deal with robots? The answer to that question almost certainly seems "no". There is a lot of psychological research that shows that people cannot live without contact with their fellow human beings. The right to meaningful contact can stipulate that we must avoid such situations.
Another example is the right to repair. Critics argue that large technology companies are "planned obsolescence." This means that these companies ensure that their products - smartphones, for example - do not last longer than two years, while a longer lifespan is quite possible. For example, research shows that the average lifespan of a desktop computer decreased between 1985 and 2010 from 10.7 to 3.5 years. The right to repair could allow people to access information about the hardware and software of products, enabling them to repair them themselves - rather than buying a new product every two years.
An extension of this is the right to interoparability. A small, accessible example: it is not in the public interest that you need a different charger for Apple smartphones than for all other smartphones. Ideally, there is one type of charger that you can use for everything and is therefore interoperable. This is also applicable in other areas: if systems from different providers of online platforms are interoperable, people can leave a social network without leaving their friends behind.
22 January 2021
|
Report
:
Trends in de informatiesamenleving 2020
Aanpak Identificatie van digitale veiligheidsrisico’s steden
Identificatie van risico’s (mogelijke oorzaak, kans en impact van een incident)
• Identificeer vitale processen en digitale infrastructuur op het niveau van de stad.
• Definieer dreiging en ontwikkel scenario’s.
• Begrijp de risico’s op het niveau van de stad: welke kwetsbaarheden en (keten)afhankelijkheden zijn er? Wat is de waarschijnlijkheid dat een incident zich voordoet? En wat zijn de mogelijke gevolgen hiervan?
• Ontwikkel een doorlopend situationeel beeld en publiceer hier periodiek over.
4 April 2022
|
Report
:
Agenda Digitaal Veilig Den Haag
Aanpak Preventie van digitale veiligheidsrisico’s steden
Preventie (maatregelen om risico’s te verlagen)
• Prioriteer kritieke processen op basis van dreiging en risico’s.
• Zorg voor de juiste contacten met organisaties uit deze processen.
• Werk aan bewustzijn en gedragsverandering bij organisaties en groepen die een hoog risicoprofiel hebben en/of kwetsbaar zijn.
• Agendeer bij organisaties het belang van preventieve maatregelen. Waaronder het gebruik, de ontwikkeling en de inkoop van veilige hard- en software; het waarborgen van redundante connectiviteit; het toepassen van identiteit- en authenticatie management (waaronder Multi-Factor Authenticatie); het zo snel mogelijk doorvoeren van (automatische) updates; het doorlopend uitvoeren van penetratietesten en oplossen van kwetsbaarheden (inclusief Coordinated Vulnerability Disclosure programma); het zorgen voor actuele backups; het beschermen van gevoelige data (onder andere door encryptie); het behalen van relevante certificeringen; en het trainen van gebruikers en medewerkers.
• Stimuleer samenwerking en kennis- en informatiedeling tussen organisaties uit geprioriteerde processen. Bijvoorbeeld op bovengenoemde onderwerpen en het delen van strategische kennis, ervaringen en informatie over risicoanalyses, vertrouwelijke gegevensuitwisseling, inkoopeisen etc.
• Onderzoek stimuleringsmogelijkheden en sturingsinstrumenten in het geval van een collectief actieprobleem of marktfalen.
• Ondersteun de attributie, opsporing en vervolging in het digitale domein door de inlichtingendiensten, de Politie en het OM.
4 April 2022
|
Report
:
Agenda Digitaal Veilig Den Haag
Aanpak Detectie van digitale veiligheidsrisico’s steden
Detectie (maatregelen om incidenten (tijdig) te kunnen detecteren)
• Agendeer bij organisaties in de stad het belang van het continue monitoren van het eigen netwerk, apparaten en applicaties (waaronder een Security Operations Centrum en endpoint detectie); het registreren van het digitale gedrag van apparaten, applicaties en gebruikers (logging); het leren herkennen van afwijkend gedrag en datastromen; het testen en updaten van detectieprocessen en -protocollen; en het samenwerken en elkaar helpen bij incidenten.
• Zoek voor de digitale infrastructuur en lokaal vitale processen actief naar kwetsbaarheden en datalekken via open bronnen en op het darkweb (scannen en threat hunting).
• Onderzoek stimuleringsmogelijkheden en sturingsinstrumenten in het geval van een collectief actie- probleem of marktfalen.
• Zorg voor een construct waarmee informatie over kwetsbaarheden, datalekken en andere dreigings- informatie (technisch en juridisch) kan worden gedeeld met en tussen organisaties in de stad.
4 April 2022
|
Report
:
Agenda Digitaal Veilig Den Haag
Aanpak Respons van digitale veiligheidsrisico’s steden
Respons (tijdens een incident snel en adequaat kunnen reageren)
• Zorg samen met de veiligheidsregio voor adequate voorbereiding op crisisbeheersing van een fysiek veiligheidsincident dat veroorzaakt wordt door een digitaal veiligheidsincident.
• Agendeer bij organisaties in de stad het belang van een crisisplan (inclusief procesafspraken, de technische reactie op een incident, een communicatiestrategie, digitaal forensisch onderzoek en het waarborgen van de continuïteit van bedrijfsvoering & dienstverlening tijdens een incident) en het periodiek oefenen van dit plan samen met partners.
• Creëer een meldpunt waar organisaties melding kunnen doen van incidenten en koppel zulke meldingen ook terug richting andere organisaties in de stad (zie ook bij detectie).
• Moedig getroffen organisaties aan om aangifte te doen bij de Politie.
4 April 2022
|
Report
:
Agenda Digitaal Veilig Den Haag
Aanpak Herstel van digitale veiligheidsrisico’s steden
Herstel (herstellen of beperken van schade na een incident)
• Agendeer bij organisaties het belang van een herstelplan: organisaties kunnen na afronding van het forensisch onderzoek, het verwijderen van alle malware en het oplossen van kwetsbaarheden de getroffen systemen, apparaten en applicaties opnieuw aansluiten en herstarten. Bijvoorbeeld door het herstellen van backups, of bij een zware aanval, het (gedeeltelijk) opnieuw opbouwen van de ICT.
• Evalueer na afloop het incident en de reactie hierop, zodat indien nodig de bestaande plannen, protocollen en contracten met toeleveranciers kunnen worden verbeterd.
• Communiceer na afloop open en transparant met stakeholders (incl. het publiek) over de geleerde lessen.
• Organiseer schadeafhandeling en nazorg in het geval van immateriële schade.
4 April 2022
|
Report
:
Agenda Digitaal Veilig Den Haag
Wet- en regelgeving en rol gemeente op het gebied van digitale veiligheid
Om de (mogelijke) rol van de gemeente op het gebied van digitale veiligheid te duiden is het belangrijk om te kijken naar de juridische context, het nationale stelsel voor digitale veiligheid, verschillende beperkingen en de inzet van andere steden. Het Nederlandse stelsel voor digitale veiligheid is in hoge mate nationaal en sectoraal georganiseerd. Er ligt voor digitale veiligheid op dit moment geen expliciete opdracht (met daaraan gekoppelde versterkings- gelden) van de Rijksoverheid aan de Nederlandse gemeenten, zoals dat bijvoorbeeld bij de bestrijding van ondermijning en radicalisering wel het geval is. Wel zijn er veel verschillende kaders zoals Baseline Informatiebeveiliging Overheid, Algemene Verordening Gegevensbescherming (AVG) en de ‘Wet beveiliging netwerk- en informatie- systemen’ (Wbni). Daarnaast de sectorale wet- en regelgeving en de Europese: 'EU Cyber Security Act' en de nieuwe ‘EU strategie inzake cyberbeveiliging voor het digitale tijdperk’
4 April 2022
|
Report
:
Agenda Digitaal Veilig Den Haag
Data sharing for AI: Data Sovereignty, Trust and Security
The need to get a grip on (the conditions for) the use of data when it is shared with other parties is rising. We do want to share data, but data misuse must be prevented in order to give organizations and individuals the confidence to share their sensitive data. The starting point is therefore "controlled data sharing". Controlled data sharing can be broken down into three aspects:
• Data sovereignty is the ability of a natural person or organization to be fully self-determining with regard to its data, ie the ability for a legal entity to decide exclusively using its data as an economic asset. It requires people and organizations to control the circumstances over how their data is shared and how it may be processed by other parties.
• Trust is the property of obtaining assurance that the entities (persons, organizations, or systems) with which data is shared are actually the entities they claim to be and that they will act accordingly. Trust can be achieved through adequate identification, authentication and certification methods.
• Security is the property of being able to guarantee that the actual sharing of data is protected against unauthorized misuse of this data by security breaches, whether as a result of malicious intent or accidentally. It includes aspects such as encrypted data transport and storage and software certification and attestation
30 March 2021
|
Report
:
Verantwoord datadelen voor AI
Cybersecurity risks will continue to rise
From schools and hospitals to private businesses, there’s been a rise in cyberattacks over the last year. In Q3 of 2020 alone, Trends Micro reported that there were almost 4 million email threats and over 1 million hits on malicious URLs related to COVID-19.
Much of this can be linked to the overnight shift towards remote work, which left organizations scrambling to keep business running while also trying to secure corporate assets. That said, even essential-service organizations such as hospitals and public institutions which require employees onsite were severely impacted by cybercrime.
In today’s world, a secure IT perimeter no longer exists. Physical security professionals must put measures in place to deter hackers and protect their businesses.
Choosing trusted vendors and deploying physical security solutions that come with layers of cyber defenses is critical. Security teams already know built-in encryptions, multi-factor authentication, and password management are the first lines of defense.
Beyond that, taking advantage of other features can improve cybersecurity posture. This includes having access to cybersecurity risk scoring, system vulnerability alerts, and automated reminders for firmware and hardware updates.
12 May 2021
|
External
:
Top physical security trends for 2021
Businesses will focus on privacy protection
During the COVID-19 pandemic, many organizations implemented ‘fever detection’ devices and other new systems. In a rush to keep people safe, they may not have had the time to consider how potential privacy concerns could arise from this in the coming months to come.
In times of crisis, it’s even more important to keep privacy in mind. That’s why more businesses are re-evaluating how they collect, store, and share personal information. With big penalties at stake, they’re seeking ways to better comply with data and privacy protection laws.
We believe that public privacy concerns related to COVID-19 contact tracing and other social challenges will continue to grow. These sensitivities will require the physical security industry to address privacy head-on and find appropriate solutions.
For many physical security professionals, this means facing the reality that their legacy security equipment and older proprietary systems can’t support the fundamentals of data security and privacy. This will increase the demand for newer solutions engineered with privacy by design.
12 May 2021
|
External
:
Top physical security trends for 2021
Demand for cloud and hybrid cloud solutions will continue to grow
According to a report titled Predictions 2021 by Forrester, global public cloud infrastructure will grow 35% to a market value of $120 billion in 2021. The pandemic is largely responsible for the surging demand for cloud. As online usage and remote work spiked, there’s been a global shift to accelerate digital transformation. Even with this movement underway, a recent Genetec report titled the State of Physical Security 2020 found that only 20% of respondents had already deployed cloud solutions in their physical security environments.
To thrive in the long run, physical security professionals will need to follow the lead of other industries and their IT departments and determine how to best leverage cloud technology in the years ahead. In 2021, we believe more chief security officers will let go of the division between cloud and on-premises physical security systems and embrace a hybrid deployment model. This allows them to implement specific systems or applications in the cloud while keeping existing on-premises systems. A hybrid approach makes for an easier transition to the cloud. It can also be the simplest answer when deciding how to enhance scalability, redundancy, and availability to meet changing needs. Beyond that, cloud offerings provide tons of added value. Physical security teams can quickly migrate to newer technologies, minimize hardware footprint, boost cybersecurity, and reduce costs.
12 May 2021
|
External
:
Top physical security trends for 2021
Organizations will invest in new access control and video analytics solutions
In a recent Genetec report, the State of Physical Security 2020, 54% of respondents said that access control will be a big project to focus on in 2021 and 46% said the same about video analytics. Many physical security professionals know that upgrading to modern access control solutions will help them to reach new goals. This might include strengthening cyber hygiene or deploying new a physical identity management solution to automate employee and visitor access requests. During the re-opening phases, the latter will help limit physical interaction while keeping people safe, buildings secured, and compliance in check. Implementing video analytics further strengthens site security and delivers more insights. From people counting and directional flow to object left behind and crossline detection, analytics are giving security teams a clearer picture of what’s happening in their environment. Remote teams can also stay top of threats while securing near-empty facilities during this pandemic. As machine learning continues to push the intelligence of analytics forward, users will see higher accuracy rates, and this will boost confidence in various edge and software-based analytics.
12 May 2021
|
External
:
Top physical security trends for 2021
Personalized solutions will address industry-specific needs
Physical security solutions have traditionally been cookie-cutter. While certain functionality might appeal to one business more than another, rarely have security platforms been designed to address a specific industry. That’s all changing. Customized product portfolios are becoming increasingly popular as users' needs evolve and procuring enterprises seek more sophisticated solutions. Airports, cities, mass transit, cannabis, and other industries require solutions that are designed to help them manage their unique environments. Since custom-built solutions cost a fortune to develop and maintain, vendors will be pushed to provide an easier and more affordable path to address these tailored industry needs.
12 May 2021
|
External
:
Top physical security trends for 2021
The Netherlands lags behind in investing in areas that are central for future innovation
The main areas of concern are the speed of embedding technology, access to markets, capital, talent and the ability to scale successfully. There is insufficient availability of capital,
a small talent pool and a homogeneous startup sector, insufficient market access and a gap between technology and new businesses.
24 May 2021
|
Report
:
Empowering Dutch Leaders in Tech 2020
The Netherlands is moving up the rankings in business dynamics, but moving down the rankings in innovation capabilities
The innovation ecosystem is one of the main indicators of success for remaining internationally competitive. Interestingly, the Netherlands has contradictory trends in the two indicators defining a global competitive ecosystem. The Netherlands is moving up the rankings in business dynamics, but moving down in the international rankings in innovation capabilities. This is an alarming trend for the competitiveness of the country in the near future.
24 May 2021
|
Report
:
Empowering Dutch Leaders in Tech 2020
Scaleups have limited access to the Dutch and international markets
‘Internationalisation’ is indicated as the biggest challenge by founders from mid-stage scaleups (between €1M – €5M revenues). Access to international buyers, local partners and local talent are three of the biggest internationalisation challenges for scaleups. Additionally, ‘market reach’ is one of the biggest disadvantages for the Dutch tech ecosystem. At most multinationals, the sales procurement process is still unnecessarily complex for scaleups.
24 May 2021
|
Report
:
Empowering Dutch Leaders in Tech 2020
There is a modest and fragmented supply of venture funding
Notwithstanding a steady increase in deals, venture capital (VC) fund investment volume and a number of government support programs, The Netherlands is still a long way from realising this vision. There are a variety of issues signaled in the ecosystem and although qualitative data is not readily available, the challenges are apparent:
• There is a modest and fragmented supply of venture funding, spread over regions, sectors, funding stage and fund type (private/ public).
• Overall deal sizes are small causing a relatively small overall impact, where only a few funds invest in multiple stages.
• There is a specific shortage of early and late stage funding and venture debt.
• Dutch VC find it hard to attract Dutch institutional investors in their funds and there is for now low presence of focused foreign VC that could provide material contribution in terms of capital and best practices.
24 May 2021
|
Report
:
Empowering Dutch Leaders in Tech 2020
Limited access to talent for scaleups
Scaleups will need to hire 12,000 individuals every year for the forseeable future. Currently, 48% of all software development roles in the Netherlands are hard to fill. Scaleups must compete for talent with larger companies, and the domestic pool of talent is not sufficient, thus attracting international talent is crucial. Additionally, there is a lack of diversity, as in recent years only 0.8% of venture capital in the Netherlands was invested in female founders and only 5.7% in mixed teams.
24 May 2021
|
Report
:
Empowering Dutch Leaders in Tech 2020
Responsible AI: Connecting the ethics of AI with technological practice
After a period of formulating frameworks, principles and starting points, it is now time to concretely link ethics with practice. A new approach is needed to anchor AI and the underlying data in ethically responsible and socially meaningful applications:
-Focus on the pursuit of social values
-The business community takes joint responsibility for social innovation
-Knowledge institutions provide responsible AI education and research
-Introduce ethical guidance and regulation
-Organize ethics from the perspective of citizens and stakeholders
-Connect AI with sustainability
-Support wide access to responsible and meaningful solutions
25 May 2021
|
Report
:
Mensgerichte Artificiële Intelligentie
Artificial Intelligence (AI) is the most influential technology at the moment
Artificial Intelligence (AI) is the most influential technology at the moment. Algorithms play an increasingly important role in our actions everywhere in society. Three levels of impact of AI can be distinguished. At an individual level, AI systems influence the choices, behaviors and frameworks of interpretation of individual users: search engines color the information with which people build their world view, expert systems provide doctors and judges with a framework for a diagnosis or a judgment. At the social level, this influence is reflected in a wide variety of domains, including healthcare (such as detecting cancer cells in images), education (adaptive teaching materials) and justice (expert systems), traffic and transport (via self-driving vehicles), and journalism. ('automated journalism'). Finally, at the social level, AI influences the organization of society: predictive policing changes the nature of the enforcement task of the police, search engines influence political engagement and algorithms are involved in military decision-making.
25 May 2021
|
Report
:
Mensgerichte Artificiële Intelligentie
The rise of AI ethics in The Netherlands
The major impact of AI on people and society entails a special responsibility. How can we design AI systems responsibly? How can we determine whether these systems use responsible data? And how can we properly embed and use them socially? The importance of these questions is widely recognized and in 2019 there was almost no industry, government, company that had not drawn up an ethical code. The year 2019 has already entered the books as the year of AI ethics. AI ethics themes that have arisen include for example fairness and justice, transparency, and liability. The pursuit of "responsible AI" is also crucial in international relations. Europe is increasingly profiling itself as a "third way", alongside the capitalist approach of "Big Tech" in the West and the centralist approach to state control in the East. In this third way, people are central. The Netherlands has the potential to be a core player in this third way. Scientific research in the field of AI is of a high level and the Netherlands has many successful AI-related companies.
25 May 2021
|
Report
:
Mensgerichte Artificiële Intelligentie
80 percent of large companies have adopted AI to enhance their core business operations
Today, approximately 80 percent of large companies have adopted examples of machine learning and other forms of AI to enhance their core business operations. Five years ago, this figure was less than 10 percent. Nevertheless, most companies still only use AI tools as point solutions – for fraud prevention, for instance – discrete applications that are isolated from the enterprise’s wider IT architecture.
28 May 2021
|
External
:
Technology Trend Report 2020
A rise of broad AI solutions is expected
At present, most AI applications fall under the Narrow AI category – meaning, they’re built for a specific task. In the future, the rise of Broad AI solutions is expected – systems
that can work on a broad range of problems.
28 May 2021
|
External
:
Technology Trend Report 2020
Quantum computing will have a significant impact on the field of AI
While it will still be many decades before we see Quantum Computing (QC) take off on a large scale, it’s predicted that when this happens, it will have a significant impact on the field of AI – leading to enhanced judgement, improved interaction, greater degrees of trust and products that are far more intelligent. In general, AI is going to change almost every aspect of daily life and the nature of work as we know it. To manage AI and harness its power within organisations, new jobs, roles and skills will be required. As AI tackles less complex, more mundane duties, employees can start taking on higher-value, more rewarding tasks.
28 May 2021
|
External
:
Technology Trend Report 2020
AI is bringing about a massive transformation in the banking industry
AI is bringing about a massive transformation in the banking industry. It yields many new data-driven insights, while increasing productivity and presenting new cost-saving opportunities. AI allows banks to enhance the customer experience, accelerate business growth, mitigate risks and increase operational efficiency.
28 May 2021
|
External
:
Technology Trend Report 2020
Despite rapid developments, three challenges hinder the widespread adoption of blockchain solutions
Despite rapid developments, three major challenges continue to hinder the widespread adoption of blockchain solutions:
-limited scalability: As the amount of data stored continues to increase, blockchain systems tend to become slower and have much greater storage demands.
-the competition paradox: . The technology enables or forces competing parties from
all over the world to cooperate equally to redefine markets and improve global industries. It can be difficult to get competitors to work together.
-privacy challenges: how can we justify information and transactions being memorised forever?
28 May 2021
|
External
:
Technology Trend Report 2020
While Extended Reality (XR) is capable of completely changing the way people live and work, barriers exist to its wider expansion
XR-based solutions and innovations are gaining traction throughout the business
world and are starting to feature in a growing number of customer-facing products
and services. In fact, research suggests that by 2022, 70 percent of enterprises will be
experimenting with immersive technologies for consumer and commercial use, and
25 percent will have deployed them to production.
While XR is capable of completely changing the way people live and work, the technology is still predominantly employed only in the entertainment industry, often to enhance (video) games. XR headsets tend to be expensive and relatively difficult to acquire. Another challenge is that, currently, Virtual Reality only allows for single-person use.
28 May 2021
|
External
:
Technology Trend Report 2020
The maturation of sensor and voice control technology
Sensor technology is becoming increasingly sophisticated and this has implications for IoT. Every object can be fitted with multiple sensors that are able to collect useful information on how the item is performing and on its internal and external conditions. This data can then be used to determine if maintenance is urgently required, for example. New human-machine interaction opportunities through voice user interfaces (VUIs) – used in the
case of digital assistants like Siri, Alexa and Google Assistant – also expand the possibilities in the IoT realm. The integration of voice control into IoT devices completely
changes the way people interact with their environment and carry out their work and life duties.
28 May 2021
|
External
:
Technology Trend Report 2020
5G technology will power billions of new connected devices and supercharge the adoption of transformative technologies
5G technology will power billions of new connected devices and supercharge the adoption of transformative technologies. It will provide the basis for a truly intelligent network of cars, robots, drones, and more — all of which will be able to communicate in real time in response to people’s needs. In many ways, it will reinvent the business world. In the face
of such rapid developments, companies must anticipate and seize opportunities.
28 May 2021
|
External
:
Technology Trend Report 2020
The rise of Secure Multi-Party Computation
As SMPC provides a secure, (more) private platform for the safe interchange of large
amounts of data, it can be deployed in various ways to solve complex issues and
enable better decision-making, for example in the financial industry and food & agriculture. The future certainly looks promising for SMPC, but it must be noted that we’re still in the exploratory stage when it comes to this technology, mainly due to its technical complexity (speed) and issues around scalability.
31 May 2021
|
External
:
Technology Trend Report 2020
Voice technology has rapidly grown in popularity, but challenges prevent wider adoption
In the United States (US), voice-activated technology has become one of the most popular applications for AI today, and it’s predicted that the use of DVAs and other conversational interfaces will only continue to rise. Ease of use and time savings are two of the primary reasons why people choose to use voice assistants. While the technology has evolved rapidly in the US and other parts of the world, developments have been much slower in the Netherlands. The reason for this lag is simple: DVAs aren’t yet fluent in Dutch. That said, as soon as the issue of language is resolved, there’s no doubt that a ton of opportunities will open up in the field of voice recognition here, too.
31 May 2021
|
External
:
Technology Trend Report 2020
Thinking cybersecurity is solely the IT department's responsibility is a common cybersecurity mistake
IT teams are often lacking resources and sufficient support. Taking care of an organization's cybersecurity is not a one-man-job, nor is it solely a technical issue. Cybersecurity must be spread in all levels of an organization.
11 June 2021
|
Report
:
Five Most Common Cybersecurity Mistakes
Forgetting to train employees is a common cybersecurity mistake
Not everyone is interested or familiar with cybersecurity related risks and threats. Employees need assistance and support to become and stay compliant with cybersecurity policies. Offering people training and exercises to make the learning process as comprehensive as possible is necessary.
11 June 2021
|
Report
:
Five Most Common Cybersecurity Mistakes
Overlooking actual cybersecurity risks is a common cybersecurity mistake
Organizations should perform cybersecurity assessments on a regular basis. If an organization does not regularly assess their cybersecurity risks, overlooks them or does not mitigate the findings, the risks of vulnerability to cyberattacks increases significantly. Organizations should constantly be fully aware of both their operating environment and their cybersecurity status and have the ability to implement plans rapidly into action.
11 June 2021
|
Report
:
Five Most Common Cybersecurity Mistakes
Not defining specific security requirements is a common cybersecurity mistake
Cybersecurity related risks and threats pose significant challenges and should not be underestimated - especially for budget reasons. Working with an outsourced IT service company, is vital for the organization to give a clear, comprehensive brief to the service provider about their roles and responsibilities. Always stay alert and involved and always double-check.
11 June 2021
|
Report
:
Five Most Common Cybersecurity Mistakes
Defining security policies, but not implementing them is a common cybersecurity mistake
Writing down the organization’s cybersecurity crisis plan and policies is the right thing do. Unfortunately, policies and plans are useless unless put into use. Enforcing security policies in both processes and ways of working ensures that the organization operates more safely and effectively at all levels.
11 June 2021
|
Report
:
Five Most Common Cybersecurity Mistakes
With the increasing desire and need to move to the Cloud IAM becomes even more important
With the increasing desire and need to move to the Cloud, a good IAM becomes even more important. Due to cost or complexity, an organization cannot transfer all applications or systems to the Cloud at the same time. This requires a hybrid solution in which the old applications ran on location and the new applications in the Cloud. A hybrid solution also requires a Hybrid identity. The scope has been greatly increased due to this hybrid solution. Examples include local Identity Lifecycle Management (ILM), the tightening of laws and regulations, and multifactor authentication.
14 June 2021
|
Report
:
De toekomst van IAM
Increased legislation and regulations lead to more attention for compliance
Due to increased legislation and regulations and industry and company regulations, there is clearly more attention for compliance. IAM is evolving towards Identity and Access Governance (IAG). At IAG, policy is taken to determine who may have access to the information or systems. Stricter laws and regulations force us to approach IAM even more from a policy point of view. This is seen as a major hurdle because requirements are constantly being added or adjusted, which inevitably makes the IAM solution more complex. More complexity is rarely seen as a plus. Checking policy compliance and comparing the used – and administered access rights is becoming increasingly important. This is not easy, which is why the security officer and the compliance officer must be involved in the approach.
14 June 2021
|
Report
:
De toekomst van IAM
Increase in location independent work and self-reliance of employees creates additional risks
there is more interest in location-independent working and self-reliance of employees, and at the same time this creates additional risks. With home workers you can exercise less control on which devices or applications an employee has used to access sensitive company information. IAM must be flexible and be able to deal with these requirements and wishes of internal and external users
14 June 2021
|
Report
:
De toekomst van IAM
Increased attention to scalability of IAM platforms
There is increased attention to scalability of an IAM platform due to exponential growth of data, systems and users, both in-house and in the Cloud.
14 June 2021
|
Report
:
De toekomst van IAM
Outdated and custom applications prevent a link with an IAM platform in the cloud
Because suppliers opt for the SaaS Cloud model, they no longer maintain the local applications and therefore become obsolete. There are still too many outdated and custom applications. These are not suitable for the Cloud and prevent a link with an IAM platform in the Cloud.
14 June 2021
|
Report
:
De toekomst van IAM
SSO allows customers to access applications and products/services with one account and password
In the past, customers had to log in with different accounts in different ways to access, for example, different banking or insurance products. Nowadays they can easily access all kinds of applications and products/services with one account and password, whether or not in combination with MFA. Thanks to Single Sign-on (SSO), you can easily log in anywhere with one account and password. This applies to on-premise applications or Cloud applications for which it is authorized. SSO is extended to the Cloud and all associated SaaS applications. This architecture makes it possible to offer the user a central point (portal or hub) from which he can access all the desired applications with one click, without having to log in again and again.
14 June 2021
|
Report
:
De toekomst van IAM
The future of IAM is cooperation: the development of IAM as a service
The “As a Service” approach appears to be embraced more and more. Organizations can be taken care of in the context of a service and are given more time for their core tasks. In turn, Managed Service Providers use their specialist knowledge and experience to create confidence that things are well arranged. You can also apply this philosophy to IAM. A logical next step is therefore to purchase Hybrid IAM in the form of a service. “IAM as a Service” from a Managed Security Service Provider (MSSP).
14 June 2021
|
Report
:
De toekomst van IAM
The demand for faster delivery of new products and services increases vulnerability
The demand for faster delivery of new products and services is increasing and vulnerability is increasing as a result. Organizations are more open and expose themselves to security risks and this increases the chance of cybercrime, not a nice feeling for a CISO.
14 June 2021
|
Report
:
De toekomst van IAM
Increased (temporary) collaboration may pose security risks
The emergence of chain collaboration ensures that complete IAM environments can be accessed in autonomous domains (Federated Identity Management). This can only be done on the basis of trust in each other. The emergence of more and more temporary collaborations where the identities do not come from an HR system. Think of partners or external users in the form of customers. After the collaboration, it is necessary that you deny access in a controlled manner.
14 June 2021
|
Report
:
De toekomst van IAM
The rise of Consumer Identity and Access Management (CIAM)
Consumer Identity and Access Management (CIAM): An IAM solution specifically tailored to the needs of organizations that process large amounts of information about consumer identities. While similar to traditional IAM at first glance, CIAM solutions should provide a smooth yet secure customer experience, with the ability to scale quickly to handle large amounts of customer data. An example of this is a pharmacy app that keeps track of whether or not a customer wants a reminder message about the repeat prescription.
14 June 2021
|
Report
:
De toekomst van IAM
Increase in scaremongering about the impact of cyberattacks
The flow of messages about cyber attacks is increasing and often the survival of organizations would be endangered. Is this real or just oversimplified scaremongering? Of course there are successful digital break-ins, but unfortunately it is too often scaremongering. This backfires because organizations become desensitized to these kinds of warnings in the long run.
15 June 2021
|
Report
:
Risico onderzoek
Crucial risk analysis on information security requires a rare combination of technical and business knowledge
A risk study on information security helps to cover the risks. Although researching risks is an excellent aid in forming judgments when researching and managing risks, it is certainly not a questionnaire that one can go through. In-depth knowledge of an organization, such as primary business processes in relation to technology, is necessary. And this can hardly be processed in a questionnaire. An ideal, but unfortunately very scarce, combination of technical knowledge and business knowledge is necessary. Only then will you cover the entire spectrum of legislation and regulations, business processes, technology, information security and vice versa during the risk assessment. Consultants often lack technological knowledge and experience, and information security specialists are technology driven and often loose sight of the importance.
15 June 2021
|
Report
:
Risico onderzoek
An integral assessment of chains of collaborating organizations is increasingly important
Information security is only as strong as the weakest link in an ecosystem and cybercriminals know it. An integral assessment is therefore necessary. Not only within an organization but also within the chains of collaborating organizations and suppliers. An integral assessment of the chains in particular is becoming increasingly important. On the one hand, this is due to the increasing tendency towards collaboration to solve complex issues in the healthcare and financial sector and, on the other hand, due to the fact that there are (large) differences between the organizations in terms of policy, approach, risk management and support for security in a chain. And that introduces risks and vulnerabilities precisely at the interfaces.
15 June 2021
|
Report
:
Risico onderzoek
Risk-based security is key for organizations
Organizations have a limited budget, time and resources regarding information security. This requires a targeted use of budget, time and resources. The deployment must correspond to the risks and consequences in relation to the importance of the asset and/or business process. This together determines the seriousness and is a guideline for the deployment of security measures (risk-based security).
15 June 2021
|
Report
:
Risico onderzoek
Eight European security clusters are collaborating on a variety of security related topics
The collaboration between eight European security clusters brings together various skills and competences regarding science, academia, business and the public sector. Joint international R&D and innovation projects focus on the following sectors and topics:
1) Aerospace systems (drones, air systems, and satellite applications for security missions)
2) Information and cyber security
3) Disaster resilience and innovations for law enforcement and border security
4) Critical infrastructures security
5) Dual-use defence technologies for the civil sector
21 June 2021
|
News
:
Eight European Security Clusters Join Forces for a More Secure Europe
Companies are collaborating in order to combat crimes involving dark web and virtual assets
The last few years, it became more and more apparent that cryptocurrencies are abused for several illicit purposes due to their pseudo anonymous characteristics, and structural solutions needs to be implemented in the whole ecosystem from law enforcement, virtual asset service providers, financial institutes and cyber security agencies.
Many dark web crimes are supported by cryptocurrencies, for example for trade in illicit goods, or to hire crypto-mixing service providers to obfuscate money trails to support money laundering, fraud or terrorist financing.
21 June 2021
|
News
:
CFLW And Cointel Partner Against Dark Web And Virtual Asset Crimes
A twofold solution is necessary in order to secure a company from cyber threats
First of all, an entrepreneur can implement simple, often free security measures, such as enabling two-step authentication for e-mail and setting up password leak alerts. Secondly, it could be considered to outsource cyber security to a specialised company and to conclude a cyber insurance contract.
21 June 2021
|
News
:
Research by EYE: Cyber Products For SMEs Are Often Ineffective
Cooperation is necessary in order to increase the resilience of citizens and companies against cybercrime
''Good cooperation between central government and municipalities in securing our digital infrastructure and combating cybercrime is more important than ever.''That is one of the reasons why multiple cities, municipalities and security institutions will be collaborating in order to make citizens and companies more resilient against cybercrime.
21 June 2021
|
News
:
Government Increases Cyber Resilience Through City Deal
SOCs are crucial in detecting cyberattacks
Cybersecurity has become a basic pre-condition for a prosperous and safe society in the 21st century. Automatically carried out cyberattacks are increasing and therefore, countering those attacks cannot only be done through human actions anymore. Consequently, Security Operation Centers (SOC) are crucial in detecting such attacks and are at the core in most cybersecurity strategies.
22 June 2021
|
News
:
Consortium Targets Automatic Prevention of Cyber Attacks
15 countries are working together in order to exchange knowledge and build research, innovation and technical collaborations and capability in host regions
Through the United Nations, the Global Ecosystem of Ecosystems Partnership in Innovation and Cybersecurity (Global EPIC) was established in order to connect ecosystems around the world, with the aim of facilitating knowledge exchange as well as building research, innovation and technical collaborations and capability in host regions.
In particular, the partnership has been designed to combat growing world challenges by facilitating global collaboration while enabling positive local cybersecurity and economic benefits.
23 August 2021
|
News
:
The Value of International Collaboration in International Peace and Security
Organisations are collaborating in the field of automated detection of cyberthreats
The cooperation focuses on the automated detection of cyberthreats using advanced technologies like Artificial Intelligence with the aim of safeguarding a secure and robust digital economy in the region.
The Netherlands is experiencing the fast-growing digitalisation of processes and services and has thus achieved a strong economic position. Critical sectors such as logistics, healthcare and the manufacturing industry are transforming their business models and processes under the influence of digitalisation in order to remain competitive. This growing digitalisation makes the Netherlands susceptible to cyberattacks. This is particularly true in light of the fact that the techniques used by cybercriminals to break into corporate and governmental networks are becoming increasingly sophisticated.
24 August 2021
|
News
:
Signing Letter of Intent Consortium Automated Security Operations
Hacking a city; who are the stakeholders?
In the E-guide ''This is how you hack a city'', the municipality of The Hague and Cybersprint outline what it takes for an organization to prepare itself to continuously improve digital security and how to involve hackers in the process. Working on cybersecurity also means working with various internal and external stakeholders.
17 November 2021
|
Report
:
E-Guide: Zo Hack Je Een Stad
Hacking a city; organizational readiness
In the E-guide ''This is how you hack a city'', the municipality of The Hague and Cybersprint outline what it takes to prepare your organization to continuously improve digital security and how to involve hackers in the process. There are various tools to prepare an organization to implement adequate digital security policies and thus work on their organizational readiness.
17 November 2021
|
Report
:
E-Guide: Zo Hack Je Een Stad
Digital identity and the need for an active government
A trusted digital identity, to which a number of verified attributes or claims are attached,
such as a name, BSN or proof that you are over 18, offers great added value and ease of use in doing digital business with each other. To realize plans around digital identity, the Dutch government will have to change course. The developments in the market and at the European level demand a more active government role in creating trust in a digital identity, enabling careful identification, reliable authentication and controlled authorization in a collaborative system.
22 December 2021
|
Report
:
Digitale Identiteit en de Noodzaak van een Actieve Overheidsrol
Good preparation is essential to cyber resilience
The odds of an organization being affected by a cyber incident are 1 in 8. But preparing for and practicing a cyber crisis is hardly done. "Good preparation is essential to limiting the damage" states Job Kuijpers, CEO at EYE Security. Organizations often discover a cyber incident too late. At that point, something is already wrong; a lot of money has disappeared, data has been stolen or all systems have been locked down by ransomware. That is the moment when processes come to a standstill and it becomes clear that an organization has been affected.
28 January 2022
|
News
:
Cyberaanvallen: ‘Een crisismanager moet inhoudelijk snappen waar het over gaat’
Georganiseerde misdaad trends in Amsterdam
Within organized crime, drugs and money laundering are common offences. Europol recently noted that drug trafficking dominated within criminal networks. Both in terms of the number of criminals active within this domain, as well as in terms of the large sums of money they make with the production, trafficking and distribution of the drugs. In addition, a lot of violence within organized crime is related to the drugs trade. Police employees say that criminals are now using more violence than ever before, which is worrying.
20 April 2022
|
Report
:
Trendbeeld Eenheid Amsterdam: Politiewerk in onrustige tijden
Cyberattacks are increasing in the Netherlands in 2022
Compared to 2021, the Netherlands has experienced an increase of 55% in cyberattacks in 2022. Moreover, almost half of the Dutch companies has experienced a threat in the cyber domain.
2 December 2022
|
Report
:
Position Paper: Van NIS naar WBNI
Global figures on cybercrime in 2022
Globally, every 11 seconds a company has become the victim of ransomware in 2022. The yearly damages of cybercrimes amounts up to 5,5 trillion euro.
2 December 2022
|
Report
:
Position Paper: Van NIS naar WBNI
OT-security is a target for hackers, while the topic lacks awareness
OT-systems are a target for hackers. A lot of companies lack awareness with regards to OT-security, while attacks on OT infrastructure are costly and are not quickly detected.
2 December 2022
|
Report
:
Position Paper: Van NIS naar WBNI
Cyberweerbaar NL is developing a cyber incident monitor
Cyberweerbaar NL is developing a Cyber Crisis Monitor to improve cyber resilience by learning from cyber incidents. The monitor will register incidents and share key lessons learned by participating organisations. It will focus on behavioural and organisational factors that contribute to the occurrence or resolution of cyber incidents.
The project is funded by the SPRONG Grant, awarded by the SIA Directorate to The Hague University of Applied Sciences (THUAS), Saxion, NHL Stenden University of Applied Sciences, and a large consortium of societal partners. The grant aims to enhance cooperation in the field of cyber resilience over the next eight years.
Security Delta (HSD) is contributing to this consortium for approximately two years with 60 project hours per year. HSD has written a memorandum about the success factors of the Cyber Crisis Monitor and has made several connections. The success of the monitor depends on the willingness of organisations and participants to report and upload information about incidents.
21 March 2024
|
News
:
Development Cyber Crisis Monitor: Learning from Cyber Incidents
The critical need for robust security measures in both hardware and software to protect embedded devices from evolving cyber threats.
This document delves into the critical importance of embedded software security in the evolving technological landscape. Here is a summary of the key points discussed in the report:
- Significance of Embedded Software Security: Embedded software plays a crucial role in various devices, systems, and applications, necessitating robust security measures to combat emerging threats.
- Hardware Security: Emphasis on embedding security features directly into hardware components to enhance system resilience against physical tampering and unauthorized access.
- Software Security: Importance of secure coding practices, robust software security measures, and the integration of defensive programming techniques to prevent attacks.
- IoT Ecosystem Security: Highlighting the need for safeguarding IoT devices through encryption, secure communication, and protection against reverse engineering and potential exploits.
- Cyber Attack Resilience: Strategies and technologies to enhance the security of embedded systems against evolving cyber threats, including the adoption of open source software, timely updates, and cryptographic protocols.
- Legislative Measures: Discussion on upcoming legislation like the National Cybersecurity Strategy and the NIST Secure Software Development Framework to enforce security standards and accountability.
- Future Outlook: Anticipation of increased use of AI and ML in IoT devices, the importance of binary transformation technologies, and the role of security solutions like Emproof Nyx in fortifying embedded device security.
Overall, the report underscores the critical need for proactive security measures, the integration of advanced technologies, and adherence to regulatory frameworks to safeguard embedded devices against sophisticated cyber threats in 2024 and beyond.
27 March 2024
|
External
:
Embedded software security: 2024 and beyond
The importance of protecting OT against cyberthreats
Operational Technology (OT) refers to the automation of physical processes. This is different from Information Technology (IT), which is about the automation of information. The resilience of OT against cyberthreats is, and always has been, very low. This was no huge issue in the past, as OT mainly included technology that required physical access. However, with the increasing interconnectedness between OT en IT, OT becomes digitally accessible. Cyberthreats therefore start to pose an increasing risk to OT. Effective drivers for organisations to take action are rules and regulations. Among them is the NIS2 regulation, which forces organisations to implement cybersecurity in OT by applying fines.
23 September 2024
|
Report
:
Understanding OT Security
Proper assignment formulation and thorough supervision of the execution of security tests
Proper assignment formulation and thorough supervision of the execution of a security test ensure a result that meets the needs of the client.
Ideally, security tests do not provide any major surprises, but provide confirmation of the quality of the development process.
30 March 2021
|
Report
:
Whitepaper Securitytesten
Identity and access management (IAM) for secure healthcare
Cooperation with (chain) partners but also with third parties (for example suppliers) requires a number of security measures that do not stand in the way of the cooperation benefits, but at the same time guarantee the security of the data exchange. IAM offers many advantages and lays the foundation for further security. It helps prevent data leaks and increases privacy, it enables integration with partners in the chain and with third parties in the cloud, and it creates administrative relief and operational cost savings.
14 June 2021
|
Report
:
Identity & Access Management voor de Zorg
Investments are made to combat subversive crime
Recent investments have been made in order to tackle subversive crime in the Netherlands. The organisation that received the investment is first in making it possible to map out so-called 'soft information' and to automatically enrich reports with, among other things, cadastral information, the WOZ value and the registered businesses at an address. With the investment, the scale-up wants to develop the platform into a total solution that supports municipalities from first suspicion to legal prosecution.
22 June 2021
|
News
:
Meld een Vermoeden Receives Investment for Total Solution Against Crime
Tools are developed in order to make ICS-SCADA systems more resilient
The 'Security Check Process Automation' has been developed in a public-private partnership in order to make ICS-SCADA systems more resilient. The tool allows organisations to quickly identify potential risks and protective measures they can take against them.
"I am particularly pleased to be able to offer a practical self-scan to organisations that use ICS or OT devices. There is great diversity in security maturity within the ICS domain. There are organisations that are very mature, but there are also organisations that need to significantly increase the digital resilience of their ICS landscape, but unfortunately lack the knowledge to do so. I hope that with this tool we can provide help to all of them."
23 August 2021
|
News
:
Launched: Tool to Increase Cyber Resilience in OT Environments
Companies are collaborating in the field of Customer Identity & Access Management SaaS
Two Dutch companies have merged their forces in order to become the largest European vendor of Customer Identity & Access Management (CIAM) SaaS. The merger expedites the combined vision of making digital business for all European enterprises simple and safe.
Catering for an outstanding omnichannel and frictionless (digital) customer experience is key for online services, no matter whether customers use web or mobile technology. Privacy protection and implementing the highest security standards have defined proper stewardship. Who the user is, what the user is allowed to do, enabling the user to opt-in or out defines the relationship and its governance. Identity management therefor is fundamental to any online interaction.
23 August 2021
|
News
:
Onegini and Iwelcome Merge to Become The Largest European Identity & Access Management Software Vendor
Cybercrime increasingly affects businesses and individuals
“Cybercrime increasingly affects businesses as well as individuals and with a cost of cybercrime in hundreds of billions of euros the demand for skilled professionals will continue to grow.”
24 August 2021
|
News
:
Results International Cyber Security Summer School 2019
Experts from law enforcement, the private sector and academia are sharing knowledge on cybercrime
Experts from law enforcement, the private sector and academia are sharing knowledge on cybercrime. The conference looked at ways how to effectively combine the expertise, resources and insights of law enforcement, the private sector and academia to make the internet a more secure environment, especially in a society, which is becoming increasingly dependent on digital capabilities.
Two conclusions of the conference:
Business Email Compromise (BEC): while BEC is not new, it is evolving, causing increasing economic damage. BEC exploits the way corporations do business, taking advantage of segregated corporate structures, and internal gaps in payment verification processes.
Dark web: as the dark web evolves, it has become a threat in its own right, and not only as a medium for the sale of illicit commodities such as drugs, firearms or compromised data. The impact of law enforcement action in this arena is palpable as the environment remains in a state of flux.
24 August 2021
|
News
:
Recap 7th Europol-INTERPOL Cybercrime Conference 2019
Organisations are collaborating in the field of cyber certification processes
Since the EU Cybersecurity Act came into force at the end of last year, it has become increasingly important for organisations to be able to demonstrate that they have taken all necessary measures against potential cyber threats. This is also mandatory in the critical infrastructure.
Two organisations are collaborating and sharing knowledge in the field of cyber certification processes. The collaboration between both companies, with each their unique expertise and high quality standards, will contribute significantly to the protection of digital resilience of companies and organisations.
24 August 2021
|
News
:
Hudson Cybertec Supports TÜV Nederland With Cyber Security Certification in Critical Infrastructure
Control your digital risks with Attack Surface Management
Your attack surface is the sum of all external facing online assets related to your brand. These can be abused by malicious actors to carry out an attack. It’s vital to know what is in your attack surface, so you understand what you need to protect – and how.
28 October 2021
|
Report
:
Attack Surface Management
Het belang van sterke wachtwoorden
Everyone has difficulties with coming up with strong passwords. And with good reason, as we have more and more accounts for both business and personal use, and the requirements for a strong password seem to get stricter and stricter. But these strict requirements are there for a good reason!
The Question
Passwords are the access to your email, your digital workplace and all your accounts online and therefore a favorite target of criminals. Which is why Awareways have asked 40.000 people in various organizations (and across several of our ongoing security awareness programs) if they find coming up with passwords difficult.
They have divided them into small-, mid-size and large entities according to the number of employees (2.500, respectively). Overall, 47.3 % in small organizations found it difficult, while as much as 61.1% in large organizations admitted to finding it tough as well. Mid-sized organizations were in the middle with 52.1%. What’s the logic behind these numbers?
The Answer
Well, large organizations usually have more apps and infrastructure, and require more authentications, making password management all the more complex.
Employees in small organizations meanwhile are more used to coming up with passwords, because they lack such facilities, and thus have more ‘practice’. Or, if we’re taking a more cynical approach, the requirements for strong passwords haven’t permeated to small organizations. They can come up with easy-to-remember ones, and have less difficulties.
Whatever the reasons, any organization should be aware of the risks of weak passwords, and offer their employees both guidance and help in keeping their credentials safe.
11 May 2023
|
News
:
Strong passwords – difficult to think of, difficult to crack
Artificial intelligence (AI) will play an increasing role in both cyber- attack and defense
AI is the new arms race, but unlike earlier arms races, anyone can get involved – there’s no need for the sort of resources that were previously only available to governments. This means that while AI is undoubtedly being researched and developed as a means of crippling an enemy state’s civil and defense infrastructure during war, it’s also easily deployable by criminal gangs and terrorist organizations.
14 April 2021
|
External
:
The 5 Biggest Cybersecurity Trends In 2020 Everyone Should Know About
Political and economic divisions between east and west lead to increased security threats
In 2019, we saw the US government effectively embargoing partnerships between US tech firms and the Chinese mobile giant Huawei, due to fears over the close links between Huawei and the Chinese state. If more barriers like these go up, it could easily have the effect of preventing international cooperation on both the technological and regulatory challenges of cybersecurity, and that’s only likely to benefit the bad guys.
14 April 2021
|
External
:
The 5 Biggest Cybersecurity Trends In 2020 Everyone Should Know About
Political interference increasingly common and increasingly sophisticated
Cybercrime targeting elections has taken two forms. The first involves the spreading of “fake news” and false narratives – usually designed to slur a candidate – via social media. The second is direct attacks against candidates' or digital electoral infrastructure.
Countering the false narratives means building systems, either automated or manual, that can sift out lies, propaganda, and bad-faith by analyzing both content and metadata – where the information originates from, and who is likely to have created it.
14 April 2021
|
External
:
The 5 Biggest Cybersecurity Trends In 2020 Everyone Should Know About
The cybersecurity skills gap continues to grow
During 2020, research suggests the number of unfilled cybersecurity jobs will increase from just 1 million in 2014 to 3.5 million. This deficit of skills is likely to become a growing matter of public concern during the early part of this new decade.
14 April 2021
|
External
:
The 5 Biggest Cybersecurity Trends In 2020 Everyone Should Know About
Vehicle hacking and data theft increases
Vehicles today are basically moving data factories. Modern cars are fitted with an array of GPS devices, sensors, and in-car communication and entertainment platforms that make them an increasingly profitable target for hackers and data thieves.
Criminals have learned to piggyback into private networks through connected home appliances and smart devices, thanks to the lack of security standards among the thousands of device manufacturers and service providers.
14 April 2021
|
External
:
The 5 Biggest Cybersecurity Trends In 2020 Everyone Should Know About
Hâck The Hague: testing The Hague's security on an international level
On 27 September 2021, the digital infrastructure of the municipality of The Hague was scrutinised by 206 ethical national and international hackers. Among the 125 reported vulnerabilities were; unsafe access to accounts, outdated software, the ability to inject malicious code into a website and an account that could be taken over completely.
11 October 2021
|
News
:
200 Hackers Test Security of The Hague
The NCSC-NL recommends that you ask your email provider to secure all their connections with STARTTLS and DANE
The NCSC-NL recommends that you ask your email provider to secure all their connections with STARTTLS and DANE. DANE is an internet standard that, combined with STARTTLS, prevents stripping attacks. If two email providers both use STARTTLS and DANE, an attacker cannot intercept email that is being send between these providers.
14 April 2021
|
Report
:
European Cyber Security Perspectives 2020
The existing standard of PGP presents various challenges that must be addressed:
the existing standard of PGP presents various challenges that must be addressed:
1. lack of forward secrecy
2. lack of efficient group messaging/email mechanism 3. fossil cryptographic schemes in the standard
4. improper default security settings, e.g. compression before encryption
5. poor usability
6. problematic trust model and key management
7. rather naive design of the key revocation mechanism 8. insecure design of key IDs
9. asymmetric cryptographic schemes that would soon
become broken in the face of attackers who have access to quantum computers
14 April 2021
|
Report
:
European Cyber Security Perspectives 2020
Cyber attacks directed at operational technology can lead to physical harm and undermine the wider market and society
the existing standard of PGP presents various challenges that must be addressed:
1. lack of forward secrecy
2. lack of efficient group messaging/email mechanism 3. fossil cryptographic schemes in the standard
4. improper default security settings, e.g. compression before encryption
5. poor usability
6. problematic trust model and key management
7. rather naive design of the key revocation mechanism 8. insecure design of key IDs
9. asymmetric cryptographic schemes that would soon
become broken in the face of attackers who have access to quantum computers
14 April 2021
|
Report
:
European Cyber Security Perspectives 2020
Supply chains make companies more vulnerable.
Companies are cooperating ever more intensively with partners, suppliers, subsidiaries and the like. “While introducing scalability, cost-effectiveness and increasing efficiency by outsourcing more and more these days, supply chains also make companies more vulnerable”, warns Sander Peters, Head of Security Research at KPN Security. “Cooperation increases the risk of a cyberattack.”
14 April 2021
|
Report
:
European Cyber Security Perspectives 2020
New threats emerge from disinformation and technology evolution
Emerging technologies, such as artificial intelligence (AI), present new avenues of expression for potential geopolitical activity, including disinformation. One menacing use of AI is in the creation of ‘deepfakes’, which are high-quality forged images or videos that could be used for anything from discrediting or blackmailing a political opponent, rival company or extortion target, to causing worldwide panic with a video of a head of state purportedly claiming to have launched a nuclear weapon.
14 April 2021
|
Report
:
European Cyber Security Perspectives 2020
New threats emerge from 5G entering the security mix
Another watershed technology with the potential to enable massive surveillance and disruption is 5G. This technology’s local processing of data means those who control the infrastructure could tamper or spread disinformation to 5G users.
14 April 2021
|
Report
:
European Cyber Security Perspectives 2020
AI has the potential to contribute to the security of The Netherlands
AI has the potential to contribute to the security of The Netherlands, without the government becoming some kind of Big Brother. Not only to fend off cyber attacks, but also (and perhaps especially) in the detection and prevention of crime. But then a good infrastructure is needed that makes this possible, valuing information sharing, collaboration, and a clear focus on the societal goal.
8 June 2021
|
Report
:
Aan de slag met AI binnen de overheid
HCLTech's strategic focus on disruptive technologies, strong partnership mentality, and ability to guide clients through digital transformations position it as a leader in the crowded IT services market
HCLTech's banking and financial services solutions were highlighted during the Financial Services Advisor and Analyst Day in New York City. The event emphasized the impact of technologies like generative AI (GenAI) and sustainability solutions on financial services. Despite being less known outside financial services, HCLTech has successfully built a reputation, particularly with five of the top 10 banking institutions. The company's client strategy focuses on disruptive technologies, including cloud, digital, and AI, guiding discussions around these investments early on. HCLTech's shift from infrastructure-led to business-led offerings supports clients in embracing technology solutions and avoiding disruption. Case studies showcased collaborations with an American financial services company, a U.S.-based insurer, and a U.S.-based credit union. The clients praised HCLTech's partnership mentality and technology expertise. The discussion also covered HCLTech's digital business strategy, with roughly half of Financial Services revenue generated through digital. The company's focus on analytics, data strategies, and a partner ecosystem allows it to serve as a technology partner and guide clients' transformation projects. Overall, the event highlighted HCLTech's ability to create long-term relationships, provide frictionless experiences, and stay ahead of market trends in the crowded IT services market.
18 January 2024
|
Report
:
In a Crowded IT Services Market, HCLTech’s Banking and Financial Services Solutions Shine Like a Diamond
Top threats to business’s cybersecurity in 2023 and beyond
Whether it’s the rise of increasingly sophisticated attack methods, lack of employee knowledge, or insufficient defenses, the threats to your business’s cybersecurity are vast and ever evolving. It's important to explore the top cybersecurity trends and threats that your organization should be protecting against now and in the future.
20 December 2023
|
Report
:
Exploring Modern Cyberthreats and How your Business can Combat Them
The high stakes of ignoring cybersecurity: business survival vs. digital havoc
Cybersecurity awareness and best practices are crucial to the survival of your business. Choosing to ignore cybersecurity’s importance in the face of constantly advancing threats could wreak digital havoc and bring your business to its knees. Consequently, repercussions for businesses that don't prioritize cybersecurity will follow.
20 December 2023
|
Report
:
Exploring Modern Cyberthreats and How your Business can Combat Them
How and why CFOs must take their (financial) responsibility to invest in cybersecurity
The whitepaper highlights the crucial role CFOs play in managing cyber risks and making strategic cybersecurity investment decisions for small and medium-sized businesses. It emphasizes the importance of quantifying potential costs and benefits through risk analysis, measuring key metrics, and implementing a robust cybersecurity program to protect financial stability, operational efficiency, and reputation. The paper provides pragmatic formulas to calculate the financial impact of cyber threats, data breach risks, and vulnerability indices, enabling CFOs to make informed decisions and justify cybersecurity investments. It also offers actionable steps based on risk levels to enhance an organization's cyber resilience, from implementing patch management and security awareness training to deploying advanced threat detection technologies and penetration testing.
1 May 2024
|
Report
:
Kwantificeren van cyberrisico’s
Resilient Delivery Strategic Security Trend 2021
Resilient delivery: Whether a pandemic or a recession, volatility exists in the world. Organizations that are prepared to pivot and adapt will weather all types of disruptions.
30 March 2021
|
External
:
Gartner Top Strategic Technology Trends for 2021
