Many will have seen the news about sustained cyber attacks on the UK and our democracy. I attended an insightful talk by Sophos earlier this week, which suggested that attacks were splitting into two types: One where attackers get in and out quickly, with #dwelltime decreasing to days, if not hours (previously weeks). And the other where dwell time was deliberately increasing to quarters and years (previously months). This is an example of the latter where a sophisticated attacker has thrown significant resources at hacking particularly targets with a specific objective in mind. The tools we need to deal with each type of attack may be different but the concepts are the same; understand your operations, networks and risks; defend in depth; continually monitor, plan your resilience. Edit: I was asked about the picture... this was from many years ago but I chose it to represent the two different dwell times, UK democracy under threat and also resilience. Hope you like it. And don't worry, the clocks are fine at the moment.
