Under attack?

Get in touch

Cybersecurity challenges

Identify Your Vulnerabilities and Risks

Develop and Manage Your IT Securely

Detect and Respond to Intrusion

Respond to and Quickly Overcome a Cyber Attack

Get Cybersecurity Advice

Essential cybersecurity capabilities

How We Help

Predict

Prevent

Detect

Respond

Recover

Our Services

Are you under attack?

Why Truesec

Who We Are

Cases

Our Experts

Career

Knowledge & Resources

Events

Tech Talks

Trainings

Blog

News

Knowledge Hub

Main menu

UAParser.js npm Package Supply Chain Attack: Impact and Response

Cybersecurity

Supply Chain

Kaseya Supply-Chain Attack Targeting MSPs to Deliver REvil Ransomware

Human Threat Intel

<h2>The jury’s motivation: </h2>
<blockquote>“In the last 12 months, we have seen both substantial growth in volume and several large well-known cases of cyber breaches and ransomware attacks. Consequently, increased security is now on everyone’s agenda and top-of-mind for far many more than before. Therefore, it feels safe to have the “Security Partner of the Year” in our corner: <a href="https://www.linkedin.com/company/truesec/">Truesec</a>!”</blockquote>
<figure><img src="https://optimise2.assets-servd.host/jealous-emu/production/MicrosoftTeams-image-18.png?w=1800&auto=compress%2Cformat&fit=crop&fp-x=0.5&fp-y=0.5&dm=1633331351&s=e9c912674bfbb6e8f56c49d9739bdea4" alt="Microsoft Partner of the year" /></figure>

Truesec awarded Microsoft's "Security Partner of the Year" 2021

When the Cyberthreat Comes From the Inside

Using PetitPotam to NTLM Relay to Domain Administrator

HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows - CVE-2021-36934

How the Kaseya VSA Zero Day Exploit Worked

Threat Intelligence

Origin of the Kaseya Breach

Secure Your Software Supply Chain – Trusting 3rd Parties

Secure Development

Secure Your Software Supply Chain  – Threats And Mitigations

Fix for PrintNightmare CVE-2021-34527 exploit to keep your Print Servers running while a patch is not available

Exploitable Critical RCE Vulnerability Allows Regular Users to Fully Compromise Active Directory – PrintNightmare CVE-2021-1675 CVE-2021-34527

Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS) – ADV210003 – KB5005413 – PetitPotam

Ransomware continues to increase in both frequency and scope. <a href="https://www.willistowerswatson.com/sv-SE">Willis Towers Watson</a> and Truesec have therefore determined guidelines for how each company should establish a good cybersecurity posture.
An increasing number of companies are suffering from cyber attacks, and in recent times this has led both to the suspension of healthcare and to entire communities being affected when critical infrastructure is attacked, an example of that is the US fuel pipeline that led to rising gasoline prices and pains.
To make it easier for organizations that want to strengthen their cybersecurity, Truesec, and WTW, have developed clear guidelines that support companies to establish good cybersecurity. The guidelines are intended as a basic level, where each organization can decide the next steps, based on its conditions and goals.

Truesec and WTW Announce Joint Guidelines to Help Companies Strengthen Their Cybersecurity

Getting Started with Microsoft Security Baselines

From May 1, 2021, the specialist company Angelis &amp; Hansen will form Truesec's new business area, Human Threat Intelligence, led by Carolina Angelis and Leif Hansen. With 20 years in the Swedish Intelligence Service, Carolina has a unique insight into the methods used to conduct intelligence gathering and how to counteract them. Leif has a background in the military and is a specialist in security protection and background checks.
<blockquote>”Recently, we have seen that qualified threat actors combine cyber attacks with person-based methods to gain physical access to IT environments, for example, by recruiting agents. We are happy for Carolina and Leif to join Truesec to help society and our customers protect themselves against this type of threat”, says Marcus Murray, Founder of Truesec. </blockquote>
<figure><img src="https://optimise2.assets-servd.host/jealous-emu/production/News/carolina-angelis-truesec-human-threat-intelligence-lead.jpg?w=6112&auto=compress%2Cformat&fit=crop&fp-x=0.5&fp-y=0.5&dm=1633331359&s=6ce0cf13ef47451f437fd82f39d2259b" alt="Carolina Angelis" /><figcaption>Carolina Angelis, Human Threat Intelligence Lead</figcaption></figure>
<h2>Humans Are the Greatest Vulnerability</h2>
Through Human Threat Intelligence, Truesec strengthens its ability to help organizations prevent and avert hybrid threats involving methods such as infiltration, psychological influence, espionage, extortion, digital interception and personal threats. 
<blockquote>”The attackers are looking for vulnerabilities that they can exploit. The methods today are not only technical or human but a hybrid of both. In order to counteract, we must reflect the attackers and their methods, says Carolina Angelis”, Human Threat Intelligence Lead at Truesec. </blockquote>
<blockquote>”We are enthusiastic about developing the area of ​​Human Threat Intelligence together with Carolina and Leif. Angelis &amp; Hansen has been a close and long-term partner which has helped us minimize the risk associated with recruitment. Now that we are joining forces, we are strengthening our ability to prevent cyber breach by being able to anticipate risk and vulnerabilities with Human Threat Intelligence", says Anna Averud, CEO of Truesec Group.</blockquote>
<h3>For more information, contact:</h3>
Anna Averud CEO Truesec Group anna.averud@truesec.com +46 (0)70 918 30 48
Marcus Murray Founder Truesec marcus.murray@truesec.se +46 (0)70 918 30 01
Carolina Angelis Human Threat Intelligence Lead Carolina.angelis@truesec.se +46 (0)73 378 28 26
<h3>About Truesec</h3>
As a global cybersecurity company, we’re proud to be at the forefront of protecting organizations and our society against cyber threats. Our purpose has been clear since day one: Creating safety and sustainability in a digital world by preventing cyber breach and minimizing impact.

Truesec Launches Human Threat Intelligence

Are Evil Corp Actually Russian Spies?

Secure Your VMware ESXi Hosts Against Ransomware

Russia is Part of the Ransomware Problem

<blockquote>
“The development of Ransomware-as-a-service platforms combined with inadequate cybersecurity capabilities have contributed to a record increase in ransom attacks in Sweden during 2020. Compared to 2019, the attacks have tripled”, says Marcus Murray, founder of Truesec.
</blockquote>
<h2>Companies are Blackmailed for Record-high Ransom Amounts</h2>
The Truesec report shows an increase in ransomware attacks paired with another form of ransom attack. Attackers steal data from the victim´s network and then blackmail them by threatening to release sensitive corporate information on the internet. There are cases of demands over 290 million SEK.
<blockquote>
“More and more cybercriminals steal data and threaten to release sensitive corporate information unless the targeted companies pay multimillion ransom amounts. This means it’s not enough to have backup of data, it´s crucial to detect and disarm the attacks in time”, says Marcus Murray.
</blockquote>
<h2>The Cyberthreat in Sweden is Greater Than Ever</h2>
Truesec’s <a href="https://www.truesec.com/hub/report/threat-intelligence-report-2021" target="_blank" rel="noreferrer noopener">Threat Landscape Report</a> offers an overview of the current cyberthreats in Sweden. It is based on Truesec’s Threat Intelligence analysis, including its own global incident responses, SOC-monitoring, and collaboration with external partners. The report shows an apparent increase in attacks on Swedish organizations during 2020.
<ul>
	<li>The costs of cybercrime in Sweden 2020 amounted to over 30 billion SEK, almost double the previous year's cost. 
 
</li>
	<li>Half (49%) of all severe cyberattacks were so-called ransom attacks aimed at blackmailing victims and demanding a ransom amount. There is an increase in cybercriminals also threatening to release sensitive corporate data that has been stolen in ransom attacks. 
 
</li>
	<li>Truesec has extensive experience in Threat Intelligence analysis, aiming to increase awareness of cyber threats and threat actors, to apply correct preventive measures. 
 
</li>
</ul>
<h3>For more information, please contact:</h3>
Marcus Murray 
Founder and cybersecurity expert 
+46 (0)70 918 30 01 
marcus.murray@truesec.se 
Mattias Wåhlén 
Threat Intelligence Lead 
+46 (0)76-004 05 14 
mattias.wahlen@truesec.se
<h3> About Truesec</h3>
As a global cybersecurity company, we’re proud to be at the forefront of protecting organizations and our society against cyber threats. Our purpose has been clear since day one: Creating safety and sustainability in a digital world by preventing cyber breach and minimizing impact.

Cyberattacks Against Swedish Companies Have Tripled

The threat actors are well funded, well organized, and in many cases quite skilled. Our job at Truesec is to find them, contain them, and take them down in close collaboration with our customers and law enforcement. To live up to our mission of making the world a more secure place and to better serve our customers in North America, Truesec is investing for significant growth during 2021.
We see the demand for our services within Secure Infrastructure, Cybersecurity, Incident Response, and Managed Detection propel our footprint in the U.S. In the past thirty days, we are pleased to announce the addition of four new fighters to our team, bringing with them a combined 70+ years of experience: 
 
<a href="https://www.linkedin.com/in/solutionsguru/">Spencer Hyde</a>, with more than 20 years of consulting experience focusing on network security. He has worked with several Fortune 100 companies. 
 
<a href="https://www.linkedin.com/in/mtwetherell/">Matthew Wetherell</a>, with a background as a system architect and over 20 years of experience working in highly regulated businesses. 
 
<a href="https://www.linkedin.com/in/john-louch/">John Louch</a>, adding 20 years of experience managing very large, complex, global Active Directory and MS3665 environments. 
 
<a href="https://www.linkedin.com/in/%F0%9F%92%AF-benjamin-bidmead-645a47164/">Ben Bidmead</a>, founder of the 0x00sec.org security community and creator of several tools for pen-testing. He also brings with him 5 years of experience working with offensive cybersecurity assignments. 
We will continue adding to the team and will have more exciting announcements to share in just a few weeks.
<h2><a href="https://career.truesec.com/">Join an exceptional team of experts!</a></h2>

Truesec investing for success in the U.S.

Tracking Microsoft Exchange Zero-Day ProxyLogon and HAFNIUM

Infrastructure

Today, cybercrime has grown into a trillion-dollar business, and companies in all industries and of all sizes have become potential targets. The demand for Truesec's cybersecurity experts' assistance during incident response is greatly increasing, together with the need for proactive, secure designs and solutions. Tomas Sjöström will focus on growing the US team and helping customers with Forensic, Recovery, and Rebuild and providing proactive services to prevent cyber breaches.
<blockquote>
”An investment in the US is a natural development for Truesec, and Tomas is the right person to lead our continued growth in the US market", says Anna Averud, CEO of Truesec Group."</blockquote>
<h3>About Thomas Sjöström </h3>
Sjöström has more than 15 years of senior management experience, including a decade of strategic development and plan execution at multi-national companies, most recently as Global Sales Director at RapidiOnline, a cloud-enabled integration service company. Before that, Sjöström served as Senior Director of development at Verifone and Head of Development &amp; Innovation at PostNord Group. Sjöström holds a BSc Degree from the University of Georgia and a diploma in Business Management from the Stockholm School of Economics.
<blockquote>
"Truesec has an exceptional mix of talent dedicated to a clear mission. I believe the need for security providers such as Truesec has never been greater, most recently demonstrated with the SolarWinds compromise”, says Tomas Sjöström. “Bringing Truesec concepts of prevention, detection, and protection against cyber threats to the larger US market has shown great potential over the past years. I am looking forward to leading the expansion of our US business."
</blockquote>
<blockquote>

“I'm thrilled that Tomas chose to join Truesec to lead our continued growth in the US market”, says Markus Lassfolk, CEO of Truesec AB, a Swedish subsidiary of Truesec Group. "Our international customers are seeking more security expertise from Truesec in the US and being in several time zones has many benefits for our customers, especially during time-critical assignments and incidents".

</blockquote>
<h3>For more information, contact:</h3>
Anna Averud 
CEO Truesec Group 
+46 (0)70 918 30 48 
<a href="mailto:anna.averud@truesec.se">anna.averud@truesec.se</a>
Tomas Sjöström 
CEO Truesec Inc 
+1 (904) 441-9873 
<a href="mailto:tomas.sjostrom@truesec.com">tomas.sjostrom@truesec.com</a>
Markus Lassfolk 
CEO Truesec AB 
+46 (0)70 918 30 12 
<a href="mailto:markus.lassfolk@truesec.se">markus.lassfolk@truesec.se</a>

Tomas Sjöström new CEO of Truesec Inc

In global comparison, Swedish companies are heavily exposed to cyber attacks due to digital transformation. The fact that many companies have facilitated work from home during the past year has also proved to be a major safety risk – and has resulted in many more attacks compared to previous years. 
 
”We know who the attackers are”, says Marcus. These are large criminal organizations that make a lot of money from hacking and demanding ransom. 
 
<a href="https://www.svt.se/nyheter/inrikes/cyberattacker-med-utpressning-okar-kraftigt-mot-svenska-foretag">Watch the SVT video interview with Marcus (in Swedish)</a> and get a glimpse of how our security experts work behind the scenes.

Marcus Murray on Swedish Television About Ransomware Attacks in Sweden

Avoid Supply-chain Attacks Similar to SolarWinds Orion

Collaboration Between FIN7 and the RYUK Group

Truesec’s founder <a href="https://www.linkedin.com/in/ACoAAAAoHsQBkZfKtXncHMB4lU0m3zHr_LMBo5s">Marcus Murray</a> was interviewed yesterday on Swedish national television, <a href="https://www.linkedin.com/company/svt/">SVT</a>, about the SolarWinds supply chain attack, and shared insights about the impact on Swedish organisations. 
 
MSB, The Swedish Civil Contingencies Agency, is now urging large Swedish companies to act immediately. (interview in Swedish).
<a href="https://www.svt.se/nyheter/svt-avslojar-hackare-byggde-bakdorrar-in-i-svenska-storforetag">Watch the news segment on SVT here &gt;</a>

Marcus Murray about the SolarWinds Supply Chain Attack

Foreign criminal and state-sponsored actors carry out daily cyberattacks against Swedish corporations and government agencies. In the current threat landscape, there is an increasing importance of Threat Intelligence that can be translated into preventive actions that can significantly minimize the risks.
Mattias Wåhlén's task is to lead and further develop Truesec's Threat Intelligence capabilities for anticipating data breaches and averting threats. The goal is to map all major actors threatening Swedish and global interests and monitor their activities. <blockquote>"The unique expertise and experience that Mattias brings in the field of Threat Intelligence has great value to our customers. Together, we increase security in society by being one step ahead of the threat actors," says Marcus Murray, Founder of Truesec.</blockquote>

<h2>Mattias Wåhlén Has a Background in FRA</h2>
Mattias has for the past 12 years been active as a senior analyst in FRA's cyber defense operations. Mattias has extensive experience in the field and has spent almost 35 years in the Swedish intelligence services, both at FRA and Swedish Defence Forces.
<blockquote>"In order to overcome your adversaries, you have to understand how they operate. Through improved threat analysis, we can strengthen our ability to closely monitor the attackers' activities. It gives us a strong advantage when it comes to protecting our global customers against cyber-attacks”, says Mattias Wåhlén.</blockquote>
<h2>Brief Facts About Threat Intelligence</h2>
<ul><li>Threat Intelligence includes charting threat actors and their activities – it provides valuable insights into investigations of cyberattacks.</li><li>The need for Threat Intelligence increases as cybercrime grows while few threat actors are prosecuted.</li><li>Truesec has been working with Threat Intelligence for many years. This includes intelligence collection from our own global incident investigations, SOC monitoring, and cooperation with external partners.</li></ul><h3>For more information, contact:</h3>
Marcus Murray Founder &amp; VP Cyber programs +46 (0)70-918 30 01 marcus.murray@truesec.se Mattias Wåhlén Threat Intelligence Lead +46 (0)76 004 05 14 mattias.wahlen@truesec.se

Truesec Recruits Mattias Wåhlén From FRA

The SolarWinds Orion SUNBURST Supply-Chain Attack

Lets Automate Things Securely!

Time to Stop Being Defensive and Go On the Offensive!

TIBER - Improving the Financial Stability of Sweden

ConfigMgr Patch Reporting

Invoke-WebRequest or Invoke-RestMethod?

Finding DNS Servers

Consuming ReST API with PowerShell

SIGRed (CVE-2020-1350) affects ALL Windows DNS Servers

<a href="https://www.microsoft.com/en-us/security/business/intelligent-security-association">Microsoft Intelligent Security Association (MISA) </a>is an ecosystem of independent software vendors and managed security service providers that have integrated with Microsoft security to better defend against a world of increasing cyberthreats.
Truesec is proud to have been selected, as one of the only MSSPs in Sweden, to be included in Microsoft Intelligent Security Association. It is an indication for customers that Truesec provides smart and top security services available to defend against a world of increasing threats.
<blockquote>”Our customers security is the most important thing to us. To have a technology partner that delivers continuous innovation and stability is key to our success in keeping our customers safe from cyber incidents. We value our relationship with Microsoft greatly and look forward to develop it further by being a part of Microsoft Intelligent Security Association,”

- Fredrik Sjöberg, CEO of Truesec Detect.
</blockquote>
<div> </div>
<blockquote>
“The Microsoft Intelligent Security Association has grown into a vibrant ecosystem comprised of the most reliable and trusted security experts across the globe. Our members, like Truesec, share Microsoft’s commitment to collaborate within the cybersecurity community to improve our customers’ ability to predict, detect, and respond to security threats faster.”
- Rani Lofstrom, Senior Product Marketing Manager, Microsoft Security
</blockquote>
<div> </div>
<h2>Microsoft technology integrated in Truesec Security Operations Center (SOC)</h2>
Truesec offers a <a href="https://www.truesec.com/security/truesec-managed-detection-and-response-service/">24/7, 365 Detect &amp; Disarm SOC-service </a>to customers using Microsoft’s leading security technology. Adding in-depth knowledge of highly skilled cyber security experts to analyze alerts to filter out false positives to only communicate relevant incidents and recommendations to customers. If needed, Truesec experts can help with incident response or forensics.
By joining Microsoft Intelligent Security Association, Truesec will be able to share intelligence and leverage that intelligence sharing, to keep customers safe.
<h3>Read more about <a href="https://www.truesec.com/security/truesec-managed-detection-and-response-service/">Truesec SOC-service here!</a></h3>

Truesec Now a Part of Microsoft Intelligent Security Association

RemoteApp and the Missing OneDrive Client

Why Your Organization Needs MDM to Protect What Matters

PowerShell - Logging

C# to PowerShell: Finale

Choosing a Windows Release Branch

A Short Story of a Targeted Attack

C# to Powershell: Part Two

Recommended Advanced Audit Logging

MEMCM - Recovery

Case of the Non-working MEMCM Agent

C# to PowerShell: An Introduction

The Ruthless World of Cybercrime

Building a Secure Digital Workplace

The Importance of Protecting Your Service Accounts

Giving Forensics a Log Trail to Follow

Bypassing Modern XSS mitigations With Code-reuse Attacks

Microsoft Exchange Server Remote Code Execution

From S3 bucket to Laravel unserialize RCE

Configuring VSCode - ToDo Tree

Reverse Shell Through a Node.js Math Parser

Introducing LAPS Web UI

Deployment logs with centralized collection

Is Multi-Factor Authentication Being Defeated?

Let’s Hack a Mainframe!

PowerShell Dot Sourcing

A Truesec investigation

Imagine two to ten weeks of downtime – how would your organization survive without IT? Having a contingency plan for handling a cyberattack is crucial to minimize the impact of a breach, and securely get your business up and running again in the shortest time possible. In this article, we help you get prepared and incident-ready – before you get hit. Today, everyone with a digital presence is a potential victim of a data breach or a cyberattack. This could mean two to ten weeks of downtime, if not more. So how would your organization manage without IT for at least two weeks? 
Some people might think that their organization isn’t a possible target for a cyberattack – "it doesn't happen to us." However, the most important thing to realize is that everyone is a target for a cyberattack. 
Every organization, regardless of size, runs the risk of being attacked, hacked, extorted for ransom, and face extreme loss of revenue and sensitive data. The technologies and methods for intrusion are now available online for anyone eager enough. In parallel, we face a threat where threat actors crawl the internet for weaknesses rather than targeting specific victims. Needless to say, the threat is imminent. 
At the same time, most organizations are aware of the threat but find it difficult to know how to act in the event of an attack. With an ever-evolving threat landscape, you may find it difficult to understand how to best prepare for a real-life attack situation. If something unwanted or unexpected happens, you must have procedures and guidance in place. This way, you'll know how to respond and use the right resources to meet a potential threat.

“A threat actor sees 10 000 possibilities. As an organization, you must close all gaps or one of the vulnerabilities will be compromised. The balance is enormously unfair”

<h2>Incident Readiness – How to Prepare for a Real-Life Cyberattack</h2>
Incident Readiness is challenging because it requires insight into your vulnerability and how to minimize it to affect the probability of an attack – and the consequences of it. For example, how will you be able to run your business when IT no longer exists? Taking the proper actions can prevent and protect your company. There are things you can control and things you can’t control. By working with what you can control, you can reduce your vulnerability and minimize the risk of being breached. 
<h2>What You Need to Have Under Control:</h2>
<ul><li>Understand the threats your business faces today. The threat actors get more sophisticated and constantly find new refined methods to gain access.</li><li>Without IT – no business. It’s crucial that IT is represented in the Management Team. When all activities and threat go digital, IT security should be on top of the priority list in every company strategy.</li><li>Secure the right resources and skills needed to understand the risk and what measures you need take to minimize them.</li><li>Make an inventory of your protective measures and get a complete overview of what you do in terms of protection today.</li><li>Know the requirements placed on your organization in terms of agreements, laws, and regulations.</li></ul>
<h2>What You Can Do Now:</h2>
<ol><li>Username and password are not enough. Multi-factor authentication is a requirement. This alone will reduce the risk of intrusion immensely.</li><li>All software needs to be updated hastily. Waiting for more than 72 hours after a new patch is released will increase your risk exposure significantly since your systems are now vulnerable.</li><li>Verify your backups and ensure they work and are protected and separated from the remaining system. In more than 60 percent of cases, backups don’t work properly, or are attacked and thus leaving them unusable. Make sure you have enough capacity to restore your entire environment.</li></ol>
<h2>Download our Checklist for Incident Readiness</h2>
We know, safeguarding your company against intrusion it’s not an easy task. And it gets more challenging as the potential threats get more refined each day. What protected your organization yesterday must constantly be updated to protect you from tomorrow's sophisticated methods. Download our checklist to determine if you have taken the proper actions to withstand a possible cyberattack – and give you company a fair chance to survive.

When a cyberattack happens, do you know what to do? Download the checklist to determine if you have taken the proper actions to withstand an attack – and what proactive measures you need to take to protect your company.

Download Guide for Incident Readiness

Checklist to help you get prepared

A CISO's Guide to Incident Readiness

Incident & Response

The growth of the cybercriminal business affecting Swedish organizations reflects the worldwide trend. The number of ransom attacks has tripled during 2020, and more enterprises have been victims of data theft. The cost of cybercrime in Sweden is now exceeding 30 billion SEK per year. This report by Truesec Threat Intelligence Team is a general overview of the current cyber threat landscape in Sweden. The conclusions here are supported by data collected by Truesec during 2019 and 2020.

An overview of the Swedish cyber threat landscape 2020. Read about the growth of the cybercriminal business affecting Swedish organizations. The number of ransom attacks has tripled during 2020, and more enterprises have been victims of data theft.

Threat Intelligence Report 2021

An Overview Of The Swedish Cyber Threat Landscape 2020

It is by truly knowing your vulnerabilities related to systems, infrastructure, and humans that you can start to mitigate potential threats.

Identify your vulnerabilities and risks

Your Defense Is Only as Strong as the Weakest Link

Red Teaming

Time to Battle-Test Your Company's IT Defense

Hybrid warfare

From Stranger to DA

A SOC is your first - and often only - line of defense

We have dedicated specialists working 24/7 to detect and act on intrusions and incidents. Our detect services are based on our proven approach for effective monitoring, active response capacity and continuous security posture improvement.

Dedicated specialists working 24/7

Detect & Disarm

Stay ahead of the intruders

Why Safeguarding Your Digital Assets Is a Must

Threat Hunting

Detailed description of the exploit in four steps

A Truesec Threat Intelligence investigation

Part One

Part Two

Cybersecurity Expert

Hacker & Creative

Stories From the CSIRT Front Lines

Ransomware continues to increase in both frequency and scope. <a title="https://www.willistowerswatson.com/sv-se" href="https://www.willistowerswatson.com/sv-SE" target="_blank" rel="noreferrer noopener">Willis Towers Watson</a> and Truesec have developed a joint set of guidelines outlining what companies should do to establish a good cybersecurity posture.
An increasing number of companies are suffering from cyberattacks, and recently this has led to the suspension of healthcare, and to entire communities being affected when critical infrastructure is attacked. The latest example of this is the shutdown of the Colonial fuel pipeline in the USA, which led to panic at the pumps and rising gasoline prices.<h2>Guidelines for Establishing Good Cybersecurity</h2>
To make it easier for organizations that want to strengthen their cybersecurity, Truesec, and WTW, have developed clear guidelines that support companies in their effort to establish good cybersecurity. The guidelines are aimed at achieving a minimum basic level, where each organization can decide the next steps, based on its conditions and goals.
<blockquote>Our recommendations are based on our own experience from the countless incidents we have handled over the years. What protections must be in place to prevent or minimize the consequences of intrusion. It is important to understand that we are not talking about advanced protection here, but rather what is to be regarded as security hygiene, says Mats Hultgren, VP Cyber ​​Strategies at Truesec.</blockquote>

Identify Your Vulnerabilities and Risks

Develop and Manage Your IT Securely

Detect and Respond to Intrusion

Respond to and Quickly Overcome a Cyber Attack

Get Cybersecurity Advice

How We Help

Our Services

Are you under attack?

Identify Your Vulnerabilities and Risks

Develop and Manage Your IT Securely

Detect and Respond to Intrusion

Respond to and Quickly Overcome a Cyber Attack

Get Cybersecurity Advice

How We Help

Our Services

Are you under attack?

Knowledge Hub

Report

The Swedish threat landscape

Threat Intelligence Report 2021

All resources

Stay Ahead with Our Cyber Insights and News

Tech Talks

Hosted by Fredrik "STÖK" Alexandersson

Tech Talk

Stories From the CSIRT Front Lines

Tech Talk

Managing Threats and Vulnerabilities from 3rd Party Dependencies

Tech Talk

Are the Notorious Evil Corp Actually Russian Spies?

Tech Talk

Cybersecurity From a Non-tech Aspect

Tech Talk

Why You Need to Understand Supply-chain and Cybercrime

Tech Talk

When Disaster is a Fact, Are You Prepared?

Tech Talk

Everything About Security Operations Centers (SOC)

Tech Talk

The Rise of Leakware

Tech Talk

Security Therapy for Software Teams

Tech Talk

Get the Most Out of a Red Team Exercise

Talk to Us!