Home / Archives For Anthony Perridge

Anthony Perridge is VP International, ThreatQuotient.

Please Mind The Security Gap Between The Premises And The Cloud

Once upon a time, password management emerged to make our systems more secure. At that time, Active Directory was used to manage computers and other devices on a network, and user passwords were stored locally on each device itself. It was almost a fairy-tale except that this turned regular maintenance into a monumental effort and, as a result, a centralised password manager was built. Good news? Not exactly. This effort benefitted system and network administrators but also provided a huge boost to attackers as now compromising an account or two offered significant lateral movement options. Fast forward and organisations have been steadily moving to the cloud – especially in the 12 months since the last State of the Cloud Survey, where we’ve seen both public and private cloud adoptio...

Waking Up To Critical Infrastructure Threats

“Without change, something sleeps inside us, and seldom awakens. The sleeper must awaken.” This quote from Dune is a favourite of mine because it speaks to a phenomenon we see around cyberattacks, particularly those targeting critical infrastructure. In many instances, the industrial control systems (ICS) and supervisory control and data acquisition (SCADA) systems that run such infrastructure have been in place for years. Hesitant to make changes for fear of causing disruption, operators seldom update these systems. But aging infrastructure and other security weaknesses are creating opportunities for hackers. For example, recent evidence suggests that Russia was behind the devastating 2017 cyberattack, NotPetya, which targeted Ukraine’s banks, government and power grid. Back in 2015, Ukra...

What Do Threat Intelligence And Music Have In Common?

I really enjoy watching live music and every time I do I think how great it must be to play in a band. You look totally cool and it looks so easy on stage but I’m sure it must be a challenge, not just learning how to play each song correctly on your own, but then playing together and having it sound amazing. Think about it. Each instrument is supposed to add beauty to the music. But when all the band members come together with different music sheets, from different sources, using different rhythms and interpreted differently you can bet it sounds more like noise when they start playing all at the same time. That’s where a strong band leader really makes the difference – setting a clear direction and making decisions so that the entire band can efficiently and effectively come together to c...

Nobody Said Threat Intelligence Would Be Easy!

A new report by the Information Security Forum (ISF) entitled Threat Intelligence: React and Prepare made headlines last month with its main finding that only 25% of companies surveyed felt that threat intelligence is delivering on its promise. While the findings in the report are all valid, pointing to threat intelligence and crying foul is an easy scapegoat. Nobody said threat intelligence was going to be easy…it is difficult for a number of reasons. But it also delivers tremendous value when it’s approached thoughtfully and strategically. The following address some of the findings within the report… 90% said they would benefit from a single definition. While most people have an understanding of threat intelligence (whether a deep-rooted knowledge or a high-level understanding), ex...