Anne Sofie Roed Rasmussen

Cybersecurity incidents can be tracked and managed in many ways. If not on paper, then in shared mailbox, in excel, or in professional ticketing system. There is new experiment system based on Notion - where it is a set of tables (i.e. like sheets in Excel, with Forms - kind of web browser based, Access-like system, for collaboration): https://lnkd.in/dRszniXg . I have tried it, it is really great to see the data model and relations. How it would work in production for small teams - this needs to be tested (still alfa version, and not suggested to run in production :) Definitely, good tool to test and learn, biggest drawback - it is not migratable, even to newer version. I wonder, probably someone tried as sharepoint system many times before something similar... For Notion lovers - this should be great inspiration #CSIRT #SOC #incidentresponse

87

1 Kommentar

Tomorrow is the #NISDUC conference on NIS2, and we would like to share how the Vulnerability-Lookup software can support NIS2 requirements and best practices. https://lnkd.in/e4kGBySt Vulnerability-Lookup is an open-source platform developed to help organizations identify, track, and manage software vulnerabilities. It aggregates data from multiple trusted sources, allows collaborative input, and supports processes aligned with vulnerability disclosure standards. The NIS2 Directive (Directive (EU) 2022/2555) establishes a high common level of cybersecurity across the EU. This document outlines how Vulnerability-Lookup helps stakeholders meet the directive’s key requirements, especially Articles 11, 12, 21, and 29. The following paragraphs analyse these articles and contextualise Vulnerability-Lookup’s feature support capabilities. #nis2 #cybersecurity #vulnerabilitymanagement #vulnerability CIRCL (Computer Incident Response Center Luxembourg)

111

Are #cybersecurity incidents growing more costly? Cyentia Institute's recent Information Risk Insights Study points to a 15-fold increase in the cost of #incidents and #databreaches over the last 15 years. The chart on the left shows the distribution of known/reported financial losses from incidents across the time period of study. The typical (median) incident costs about $600K, while more extreme (95th percentile) losses swell to $32M. Note that the chart uses a log scale, so the tail of large losses is a lot longer than it appears. The chart on the right trends the escalating costs of cyber events over time. Median losses from a security incident have absolutely exploded over the last 15 years, rising 15-fold from $190K to almost $3 million! The cost of extreme events has also risen substantially (~5x). So, yeah—cyber events are definitely growing more costly. That said, this picture looks a lot different among different types and sizes of organizations. How are cyber losses trending for orgs like yours? Download the full IRIS 2025 to find out! Link in the comments.

102

15 Kommentarer

🚨 Is Your Team Ready? The Power of an IR Playbook 🛡️📖 When a cyber incident strikes, there’s no time for guesswork. A well-defined Incident Response (IR) Playbook ensures that teams respond quickly, efficiently, and consistently to security threats. According to Digital Forensics and Incident Response by Gerard Johansen, an IR Playbook (or Handbook) provides: 🔹 Step-by-Step Response Procedures – Clear guidance for handling different types of incidents, such as malware infections, data breaches, or insider threats. 🔹 Roles & Responsibilities – Defines who does what during an incident, ensuring smooth coordination across SOC analysts, IR teams, legal, and IT. 🔹 Containment & Mitigation Strategies – Specific actions for isolating affected systems, removing threats, and preventing further damage. 🔹 Communication Protocols – Escalation steps for notifying executives, regulatory bodies, and law enforcement when necessary. 🔹 Forensic & Evidence Collection Guidelines – Ensuring that logs, disk images, and artifacts are properly preserved for investigation and legal purposes. 🔹 Post-Incident Review & Lessons Learned – A structured way to analyze incidents, improve defenses, and update the IR Playbook for future threats. 📌 Why this matters: Without an IR Playbook, teams may struggle with slow response times, miscommunication, and inconsistent handling of security incidents, leading to greater damage and regulatory risks. 💡 Does your organization have a well-documented IR Playbook? How often is it tested and updated? Let’s discuss! 👇 #CyberSecurity #IncidentResponse #DFIR #IRPlaybook #CSIRT #ThreatHunting #BlueTeam #DigitalForensics #SOC

19

AI Security Incidents forensics report A year or two ago we constantly heard the same question literally from everyone. "yeah, AI can be vulnerable but are there real incidents already?" we almost ended up paying cybercriminals to perform one ... oh cmon! just joking ;) Now especially last month news were bombarded with quite profound AI security incidents from Asana AI to the latest Amazon Q. It felt like someone in the galaxy knew that we are preparing a report and decided to add a few lines ;) Long story short, we at Adversa AI just released the Top AI Security Incidents (2025 Edition) — a detailed, real-world report that shows how AI systems are actually failing in practice, and what security teams can do to stop it. Show it to your CISO next time if he will ask about real AI attacks. From chatbots leaking personal info, to agents triggering unauthorized crypto transfers, to cross-tenant data exposure via MCP — the incidents are real, and the impact is serious. ↓ Some key points: — Prompt injection caused 35.3% of all documented cases. — Even simple prompts led to $100K+ in real losses. — GenAI was involved in 70.6% of incidents — but Agentic AI caused the most dangerous ones. — Many failures happened outside the model — in Models, memory, MCP and the logic between components. What’s inside: - Vivid visualizations to expose where AI systems are failing — by time, type, sector, and severity. - Data Across Layers: Timelines, exploit complexity matrices, and stack-wide failure maps reveal how attacks evolve - 17 real examples, clearly explained. - A look at how the attacks worked. - Steps teams can take to prevent similar issues. References to AI Security initiatives from OWASP GenAI Security Project , Coalition for Secure AI, Cloud Security Alliance, MITRE ATLAS. Steve Wilson, Christina Liaghati, PhD, Daniele Catteddu, Omar Santos, David LaBianca, Ken Huang, CISSP, Anton Chuvakin, Kapil R. R., Michael Coates → Download the full report: https://lnkd.in/dcFASFcG If you’re building, deploying, or protecting AI systems — this report is for you. Let me know what you think or feel free to share with others who might find it useful. #AIsecurity #GenAISecurity #AgenticAISecurity #CISO #AIRedTeaming #Cybersecurity

47

19 Kommentarer