Phil Muncaster
@philmuncaster
Followers
7K
Following
2K
Media
97
Statuses
8K
Freelance technology writer and editor. Director, PM Media. News/features for Infosecurity Magazine.
London
Joined October 2008
Good cybersecurity can be an unsung hero. According to the @NCSC's Paul Chichester, it played an important role in Ukraine's stunning Operation Spider's Web:
infosecurity-magazine.com
Effective cybersecurity played a key role Ukraine drone attack on Russian strategic bombers, a leading government security expert has claimed
0
0
0
Great advice here from a panel of experts at #infosec2025 on how to securely manage the transition to quantum safety. Spoilers: ask more of your vendors!
infosecurity-magazine.com
CISOs should demand more of their vendors and use regulation as an ally to persuade board members to accelerate the transition to post-quantum safety
0
0
0
The @ICOnews is failing badly in answering data protection complaints on time. Just 12% in the past quarter. Too many complaints, not enough staff. Are people more informed about privacy rights or are companies doing worse on data protection?
infosecurity-magazine.com
The UK’s data protection regulator says it is overwhelmed with complaints from the public
1
0
2
What will happen when the US abandons Ukraine? CISOs should take note. My latest for @Assured_Intel:
assured.co.uk
An end to hostilities in Ukraine may free up Russian resources to focus elsewhere. Phil Muncaster investigates how CISOs should prepare.
0
0
0
VC funding for cyber startups surges 35% YoY in Q4 2024, according to @PitchBook. In the UK, deal value for 2024 was down 24% from the previous year. Time to get worried?
infosecurity-magazine.com
VC firms invested 35% more in cybersecurity startups in North America and Europe in Q4 2024 than a year previously
0
0
1
The UK government is talking a good game on AI, but also backing it up with some useful resources. A new code of practice could eventually become an ETSI standard for secure AI development. My latest for @isms_online:
isms.online
The UK's "world-first" code of practice will help guide businesses in building, deploying, maintaining, and monitoring their AI systems in accordance with security best practices.
0
1
1
As the @ICOnews takes a fresh look at its two-year public sector trial, I asked several experts what they thought. They didn't hold back.
assured.co.uk
Is the carrot mightier than the stick in data protection regulation?
0
0
0
Like it or not, geopolitics has a huge impact on the cyber threat landscape. A new @GroupIB report reveals how it played out last year:
infosecurity-magazine.com
Europe is hit hard as geopolitics drives increase in state-backed APT and hacktivist activity
0
0
2
80% of ransomware attacks now don't even feature encryption, but instead focus on data theft, according to @ReliaQuest. Backup all you like, but if you don't have layered protection, detection and response in place, your organisation may be in trouble:
infosecurity-magazine.com
ReliaQuest report claims 80% of ransomware attacks now focus solely on exfiltrating data as it is faster
0
0
0
Interpol wants people to stop talking about "pig butchering" and call the crime "romance baiting" instead, claiming the former demeans victims and may even deter them from coming forward. Does it have a point? My latest for @Assured_Intel:
assured.co.uk
The policing group recently called for a change to the term “pig butchering”
0
0
1
How many ransomware groups do you know operating out of China? Ghost is one, according to CISA/FBI:
infosecurity-magazine.com
CISA and the FBI have released a joint advisory detailing the activity of China’s Ghost ransomware
0
0
0
Infostealers are out of control. @hudsonrockbot has found hundreds of credentials for US military and defence contractors. As little as $10 per log:
infosecurity-magazine.com
Hudson Rock has found evidence that infostealers have compromised hundreds of US military and defense contractor credentials
0
0
0
Meet BlackLock (aka El Dorado), the latest fast-mover up the ransomware-as-a-service charts. @ReliaQuest think it may be the most prolific variant this year:
infosecurity-magazine.com
The BlackLock or Eldorado ransomware gang could be the year’s fastest-growing ransomware-as-a-service group
0
0
1
The British government wants to "mainline" AI into the veins of the UK. Does that also mean shooting up cyber risk? My latest for @isms_online explains:
isms.online
The UK’s new AI Opportunities Action Plan is designed to deliver a “decade of national renewal”. Phil Muncaster discusses its potential risks and opportunities.
0
0
1
The @NAOorguk appraisal of UK government cyber posture is pretty brutal. Here's what it says, and how govt can respond. My latest for @Assured_Intel:
assured.co.uk
A new NAO report reveals just how poor government cyber resilience is. What can be done to plug the gaping holes in visibility and resilience?
0
0
2
According to @getsquarex the company's newly published browser syncjacking attack could enable full browser and device takeover. Yikes.
infosecurity-magazine.com
SquareX researchers warn that browser syncjacking could lead to full browser and device hijacking
0
5
4
Contrary to some breathless mis-reporting in various outlets, Congress is not "under attack". But the emails and plaintext passwords of nearly 2000 political staffers have been found on the dark web:
infosecurity-magazine.com
Some 3191 email addresses for congressional staff are available on the dark web
0
0
0
Looks like a lucky escape (or great incident response) from TfL:
infosecurity-magazine.com
London’s transport body, TfL, is playing down the impact of a cybersecurity incident on its services
0
1
2
Interesting malware find from @ESET: relays NFC card data to enabel attackers to cash out at an ATM.
infosecurity-magazine.com
ESET claims new NGate Android malware relays NFC data to steal card details for ATM cash-out
0
0
0
This new hardware backdoor in Mifare smart cards could really open doors:
infosecurity-magazine.com
Quarklabs researchers claim millions of contactless key cards could be cloned via a backdoor
0
0
2