CND News and Blog

Digital Isle has concluded for 2023, CND had a wonderful time. We would like to thank the organisers for putting on such a riveting event. The lectures were all very informative and gave insight into what businesses in IoM will be facing in the years to come! Our CTO, Jeff, was part of the Cyber Blind Spot panel, and it was an exciting chat with ot...

CND is excited to announce that we will be at Digital Isle on 10th November. Digital Isle was created to support the tech sector, developing and implementing a strategy to support sustainable economic growth and establishing the Island as a centre of international excellence for the digital economy. Our very own CTO, Jeff, will be providing a lectu...

CND are delighted to announce that we have been shortlisted for the Techie's Awards' "Tech Team of the Year 2022" award. The Techies award scheme, which is now in its fifth year, celebrate the amazing tech innovation happening in the Swindon and Wiltshire commununity, and is designed to be inclusive with categories recognising organisations, projec...

New Alerts for IBM, HPE, WithSecure, and Linux. IBM  Vulnerabilities in libcurl such as bypassing security restrictions, obtaining sensitive information, and MitM attacks may affect Spectrum Protect Plus and Spectrum Copy Data Management. Highest CVSSv3 score of 9.8.More info. And here.Apache Commons Configuration could allow a remote attacker...

The race continues to achieve high-speed, low-latency broadband internet in remote and rural locations across the globe. Each OneWeb satellite claims to offer seamless coverage as big as Alaska, and with Starlink satellites increasing next year to have full worldwide coverage by 2023, the exciting finish line is in sight! Unlike traditional satelli...

Drones have presented a problem to superyachts for some time, diminishing the guest experience and impacting the privacy of both guests and crew. The impact of this is debatable and some are more accepting of drone attention than others. Although for some VVIP owners and guests, privacy is precious and they do not want their time with family and fr...

UPDATE 13 July 2022 As part of our research into writing this post, we noticed that IACS UR E26 (below) had been released at exactly the same time as the amendment to IACS Rec 166 Recommendation on Cyber Resilience.   Interestingly, the Rec 166 document was amended to replace mandatory wording such ...

Maritime Single Window System, is your superyacht ready?  Are you aware of the Maritime new Single Window IMO proposal for January 2024?  Authorities such as the UK government have mentioned in their border strategy the implementation of 'a single window' in all UK ports by the year 2025 The IMO recently approved changes to their gui...

Maritime Executive produced an interesting article which references some great work by Marie Larsen from the Norwegian University of Science and Technology, around the perception of cyber risk in the maritime domain. I feel that the Maritime Executive title of "Maritime Cyber Security Starts With The Crew" is inappropriate, as the technical co...

CND are proud sponsors of the Isle of Man Code Club Teams that headed to the CyberCenturion National Finals this year! IoM Code Club sent two teams into the top 15 spots in the competition; they scored some of the best scores out of 400 teams. The teams, CyberAces and The Toast Mine of Cookies, competed in the U.K. in April. CyberCenturion is a Cyb...

CND Ltd recently attended the Superyacht Charity Ball 2022 on 2nd April which was held at the St. Mary's Stadium in Southampton. The Superyacht Charity was founded with the main purpose of generating funding for charitable causes through donations and support from the superyacht industry. The 2022 ball generated over £85,000 for the well deserved c...

The Techies Awards 2021, took place on 4th November; organised by The Business Exchange. The Techies Awards showcase the vibrant and innovative tech community of Swindon and Wiltshire, and this year, CND were proud sponsors of the "Best Tech Start-up" category, which celebrates the region's most promising tech start-up. Moreover, CND are delighted ...

In case you've been living under a rock the past week then chances are you have heard either Log4Shell or Log4j thrown around in great anger, and for good reason! Log4Shell is the name that is being given to a critical vulnerability that is sweeping the internet, home users and enterprises alike. The vulnerability is particularly nasty as it allows...

Monthly Patches are out for Qualcomm. New Alerts for Microsoft (Exploit), HPE, and Hitachi. Monthly Patches for mobile devices are expected tomorrow. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index...

As things have changed rapidly over the past couple of tumultuous years, we've largely become accustomed to a new style of working. Whether businesses were keen on the idea initially or not, the idea of home working fast became an unavoidable reality for most within the world of cyber security. But now, at the point where office working can once ag...

What is the Dark Web? Before you dive into the world of the dark web it's important to understand what it is and what you might find on it. The Dark web is a section of the internet that is not indexed by your 'regular' browsers, nor can it be accessed by the generic browsers such as Chrome, Edge or Firefox and instead requires a browser such as th...

My family and I moved home last week and everyone knows what a chaotic and stressful time this can be. There are in-fact quite a few cyber threat vectors when moving and during the move process my conveyancing solicitors e-mail server was targeted by a threat actor; the goal of this is to persuade would be buyers and sellers to ...

All cyber security practitioners will be familiar with that glazed look in the eye of a non IT muggle when you start talking in cyber to them. The same happened when I mentioned the SolarWinds hack yesterday, so I used an analogy based on castles in England 1000 years ago, it went like this: "...King Putinski's greed in stealing the siege weap...

We've raised a Critical Subject Level Alert for the SolarWinds breach, there are an estimated 18,000 customers affected. SecurityWizardry.com - Overall Alerts Computer Network Defence Ltd brings you the SecurityWizardry vendor neutral Security products directory https://www.securitywizardry.com/the-radar-page/overall-alerts#detail

Brilliant it's nearly Christmas and I'm sure everyone is looking forward to a good break and sigh of relief over the Christmas break. However there is one festivity that takes place year round (no it isn't festivus for any Seinfeld fans out there), I'm of course talking about xmas tree scanning. This is a type of port scan whereby your threat ...