I wanted to give a shoutout to the best events I attended in 2025 - and hopefully give you some ideas of what to look out for next year. @bsideslondon.bsky.social @bsidesbirmingham.bsky.social @steelcon.info #bheu2025 @csidesummit.bsky.social wp.me/p2Xih2-8F

Pretty cool sticker sheet for those of you (like me) with a memory and interest in legacy vulnerabilities.

Good morning #bheu2025

From draft to deployment: How the Cyber Security and Resilience Bill could redefine UK cybersecurity. I've been following the progress of this Bill throughout the year, and it was great to write this overview for TechFinitive in the past week. share.google/AYAj0PV9PH9t... #csrb

Great to have @danraywood.bsky.social on the "Smashing Security" podcast! We discussed how America’s broadcasters leaving their hardware open to attack, giving hackers the chance to hijack TV shows, blast out fake emergency alerts, and even replace religious sermons with explicit furry podcasts.

A very entertaining and informative talk on whether or not incident response teams should “pull the plug” in response to a cyber attack by @danraywood.bsky.social at #irisscon

It's my second #Irisscon appearance tomorrow: I'll be breaking down my Computer Weekly article research on the ethics of pulling the plug to stop an attack. Knowing I am meeting @brianhonan.bsky.social and co tonight, the 930am spot isn't phasing me at all. Grab a ticket and join us in Dublin.

Went to the first #csides in Weston Super Mare, and it was fantastic. A really good collection of speakers and attendees, a fantastic venue - including a free go on the rides - and an overall great vibe. More of this please, especially in seaside towns in the later months! #defendtogether

Early start and out west for CSIDES today. I'll admit I found this event by scrolling through Eventbrite and just decided to buy a ticket, speaker line up does look great - and any chance for this Sussex boy to see the sea again (admittedly it's quite far away currently).

Today's office, looking forward to presenting at the #magnetforensics event here today on 'why does the media love a cyber crisis?'

I'm currently running a poll on LinkedIn, does 'pulling the plug', or taking servers and systems offline, stop an attack and an attacker in their steps? I would love your vote here - www.linkedin.com/posts/dan-ra...

Here's the 51 new ransomware groups that launched in the first half of the year medium.com/s2wblog/rans...

Last week, the Department for Science, Innovation and Technology put out results from its survey of red teamers. The results were interesting, and @danraywood.bsky.social Raywood looked at the top ten things we learned from the research. insight.scmagazineuk.com/ten-things-l...

Maybe the Online Safety Act *will* make the U.K. the safest place in the world to go online - because we’ll all be using VPNs to connect, and VPNs make us safer.

A new one from me for #smartframe, looking at how a manipulated image could impact a business' reputation, what sort of damage could (and has been) done, and what efforts would be needed to repair the situation. smartframe.io/how-can-mani...

The third, and possibly last part of my look at the impact of the Cyber Security Challenge. In this I look at the other options for training, gaining skills and contacts in preparation for a career in cybersecurity. insight.scmagazineuk.com/cyber-traini...

Generally avoided covering this until I got something more concrete, but with tales now that Adarma is in administration - and potentially closed down - it was time to post. I contacted them for a response, but unsure if emails are being received. insight.scmagazineuk.com/scottish-con...

In #spurs colours for #england #womenseuros

We're live in one hour with a new webinar, looking at 'Managing Cyber Risks Within a Modern Attack Surface' with guest speakers from Outpost24 joining @danraywood.bsky.social. Join us at 3pm BST for the discussion. insight.scmagazineuk.com/managing-ris...

Good afternoon from Prague, next few days to be spent with @zscalerinc.bsky.social

I could deny, but I'll never realise. I'm just chasing rainbows (over Excel and #infosec2025) all the time.

@rikferguson.com kicks off the afternoon of #infosec2025 talking about 30 years of Infosec, the differences from 1995 in computing, trustworthy memo and malware "the only thing we could do was disconnect everything to get some breathing space."

Landed this morning from Toronto, managed to stay awake on 2 hours airplane sleep, and through all of the SC Awards. Obviously fell asleep on the train on the way home. Fantastic night, will upload winners' details in the morning but sleep needed. Will be at Infosec tomorrow at some point.

7am in Dublin airport, coffee is by my side. Just did the red eye from Toronto and homeward bound to tackle a week's worth of emails ahead of @scmediauk.bsky.social Awards Europe tonight. Will be dropping into #infosec2025 for some of tomorrow and Thursday, once the jetlag has subsided.

New by me for ComputerWeekly.com, looking at the soft skills and preparation for incident response. Yes you know the technical elements, but what about the mental considerations upon your staff in a pressured situation? www.computerweekly.com/feature/Prep...

Scarborough, Ontario. It's colder than it looks.

Heading out for a while, will be back for SC Awards and some of #infosec25

New from me for Computer Weekly, 'Is IPSIE the game changer that SaaS security demands?' After attending Okta's Oktane conference last year, I realised there was a longer tale to tell about the IPSIE framework - namely are other vendors backing it? www.computerweekly.com/feature/Is-I...

Holiday reading sorted, thanks @joetidy.bsky.social

A joint statement between the UK and Germany's defence secretaries concludes "we are intensifying our co-operation in the field of digitalisation and cyber." www.gov.uk/government/n...

Delighted to discover I've been nominated for a European Cybersecurity Blogger award, for the "contributor" category. This is my first nomination since getting IT Security Guru 3 nods in 2014, so please vote for me here - docs.google.com/forms/d/e/1F...

Started @scmediauk.bsky.social analysis of the Gov's Cybersecurity Breach report, looking into the section on Awareness and Analysis. How aware are boards of cyber issues, and how much do businesses know about the likes of Cyber Essentials? insight.scmagazineuk.com/cyber-breach...

A bank holiday listicle for you, a year on from my article about 10 years of #Heartbleed, here's 11 ways Heartbleed changed cybersecurity. Been throwing this idea around my head and mobile notes for years, and time to get this down as a published piece. insight.scmagazineuk.com/11-ways-hear...

Summary of my day at the debut of #bsides Birmingham. Lots of learning, new and familiar faces and and an all round awesome day. everybodylovesraywood.wordpress.com

...and we're off #bsidesbrum

First BSides of the year and a new T-shirt! I'll be at #bsidesbirmingham all day.

Great to make my debut this week for Infosecurity Buzz, with my interview with ARMO CEO Shauli Rozen talking about why Cloud-Endpoint-Application Detection and Response needed to be joined together for better visibility. informationsecuritybuzz.com/expla-protec...

I've been trying to place an article on attribution, and whether it matters. Imagine in a cyber insurance claim that Disney had said it was a Russian - does this prove that we DO need to know who we're facing against?

This week saw the launch of the 18th edition of the Verizon #DBIR, and crammed full of useful information, here are our top ten takeaways from the 2025 edition. insight.scmagazineuk.com/top-ten-take...

A year today since I started my regular gig creating content @scmediauk.bsky.social My first big piece was on ten years of Heartbleed, and vulnerabilities have remained one of the most consistent news factors over the past year. insight.scmagazineuk.com/ten-years-of...

FOI on the ChatGPT history for ministers in DSIT is "exempt from disclosure under section 14 of the FOIA because complying with the request would place a grossly oppressive burden on the department’s resources." www.gov.uk/government/p...

A late addition, but I'll be speaking this Thursday at #NCSS on the decline of APT campaigns and rise of ransomware in the 2010s - and switch back recently - at the SASIG Cyber Leaders Summit at the National Cyber Security Show. www.nationalcybersecurityshow.com/national-cyb...

This morning's dilemma in one screenshot. Enter mobile number as normal, rejected. Enter with space, rejected. Enter with 44 instead of 0, rejected. Enter with +44, rejected. Every format, rejected.

I had the pleasure of meeting Betty Webb at Bletchley about 10 years ago, and did this video for ITSecGuru with her - www.youtube.com/watch?v=VQO4...

New from me on @scmediauk.bsky.social, I talked to participants and competitors from the Cyber Security Challenge about their experiences and careers since their time involved with the games. insight.scmagazineuk.com/cyber-securi...

New interview on SC UK, @danraywood.bsky.social met Dr Claudia Natanson, CEO of UK Cyber Security Council to discuss her concept of 'professionalisation' of cyber careers. In short, pathways. competence, and let's stop talking of falling into cyber careers. insight.scmagazineuk.com/interview-cl...

i have enjoyed my times speaking at SteelCon and would highly recommend it to new speakers, and established ones too. It has that old BSides vibe with a wonderful engaging audience. If you have any doubt, trust me, you'll love it

May as well share the story about how George Foreman wasn't the original first choice celeb to endorse the grilling machine. www.thesportster.com/ridiculous-s...

A pleasure to attend the Cyber Leaders Challenge this afternoon, second time at the BT Tower (and first time in daylight). After my first Cyber Security Challenge legacy article was so well received, this will form part of the series on where that level of gamification goes next.

This morning at the UK Cyber Security Council conference, themed on "the journey to professionalisation." First time dealing with this company, and waiting to hear how we are/are not/on the way to being more professional - look for updates later. Also is this a bad spot for a headshot photo?