Andrew R.

Oh dear - fake news just got even fake-r? https://www.linkedin.com/posts/activity-7336410387707232257-PjU9/?utm_source=share&utm_medium=member_ios&rcm=ACoAAAAxBQ8B8KaFInyjBOeE8ZlA3QdUSTp5hvg And for those of you upset that the article has been taken down.. never fear! I've got you! https://archive.is/2025.05.25-135622/https://www.telegraph.co.uk/money/earn-345k-soaring-private-school-fees/

Some nice content from the UK's NCSC about building a cyber security culture. They do decent work in this space! https://www.ncsc.gov.uk/collection/cyber-security-culture-principles

Anyone looking for some nice footage to communicate to your staff about the risks associated with text to video deepfake, this may help! https://www.youtube.com/watch?v=xyaSVBXF1K8

Oh this is a good one - and one that aligns well with a recent SoSafe talk track about AI being "Attack surface/ Accomplice/ Artefact". It's 120 pages so throw it through your preferred AI agent to summarise, but the risks are notable. AI resorted to blackmail for self preservation; demonstrated 'scheming' behaviour and strategic deception; wrote self-propagating worms & fabricated documentation and attempted to act differently when it knew it was being monitored!! Apparently it also left hidden messages for future versions of itself! https://www-cdn.anthropic.com/4263b940cabb546aa0e3283f35b686f4f3b2ff47.pdf

Hi everyone - so I'm Andrew Rose, Chief Security Officer here at SoSafe. I'm based in London and have been with SoSafe for around 18 months. Prior to SoSafe I have been CISO.CSO at multiple places including: Mastercard (UK); UK Air Traffic Control; Proofpoint; Clifford Chance LLP, and AO Shearman LLP. I also spent around 4 years as the Principal Analyst at Forrester Research, which is where I developed my passion for the human aspect of cyber security. I've been fortunate enough to collect some awards in my time, including European CISO of the year (2018) and UK's best security awareness programme (2015). I'm really hopeful that this community will be able to share interesting stories and insights that we can all learn from. There is so much news and noise out there, if we can help each other identify and access the useful stuff, that's a great timesaver for us all. Look forward to meeting and interacting with you all!! Have a great day!

Another story that's interesting - this one is a little dated, but relevant all the same. It talks about 3rd party risk, and user behaviours - two crucial areas of focus for infosec professionals! https://www.linkedin.com/posts/chriscooperuk_this-17b-airline-stored-their-admin-pass[…]m=member_desktop&rcm=ACoAAAAxBQ8B8KaFInyjBOeE8ZlA3QdUSTp5hvg

So, deepfake.... I'm advised that this video is all fake but, know what? I can't even tell anymore!! Veo3 AI software - terrifying... https://www.reddit.com/r/singularity/s/nHAGrrvbAY

Interesting to see that the tactics used by this very successful Russian hacking group are the same ones we see daily - password guessing, spear phishing and social engineering - https://www.bbc.com/news/articles/c17rrjdr79po