Dan Raywood

Feel Compliance Confident with IO | ISMS.online Take control of ISO 27001 and information security with IO – where people and platform combine to guide you through your infosec compliance with ease. From first-time certification to scaling complian...

Following last year's announcement of a government consultation on banning ransomware payments, an MP argued that it didn't go far enough - and a private members' bill was read in the Commons. By me for ISMS -

www.isms.online/cyber-securi...

Government cuts cyber-attack fix times by 84% and launches new profession to protect public services The government has launched a new vulnerability monitoring service (VMS) to reduce cyber risks and speed up fixes, and a new Cyber Profession to build long-term resilience across public services.

NCSC's vulnerability monitoring service will reduce cyber risks and speed up time to fix - cutting the average time from nearly 2 months to just over a week.

www.gov.uk/government/n...

Many years of moderating, my experience is you spend the first half worrying you've not enough questions and content to fill the time; the second half worrying you're going to run out of time and not get everything in.

"Beans are for protestants" is the best line I'll hear today.

I'm still up watching this, and just seen your Risky Biz Monday morning email come in, and it's nudging me that I really should be in bed.

Sounds like a great standalone listen. I'll share once I've listened.

How many episodes are you doing? Just so I know whether to stockpile for a binge listen!

You do get a shout out in the fourth paragraph, but I should have made it clearer that this was about UK events.

Also proof that I don't check Bluesky enough as I've only just seen these comments!

Top Five Security Events of 2025 Saturday saw my last voyage out of the office and into the cyber community, whether that was going to an event or a conference. Once upon a time, there would be drinks hosted by PR companies and th…

I wanted to give a shoutout to the best events I attended in 2025 - and hopefully give you some ideas of what to look out for next year.

@bsideslondon.bsky.social @bsidesbirmingham.bsky.social @steelcon.info #bheu2025 @csidesummit.bsky.social

wp.me/p2Xih2-8F

Pretty cool sticker sheet for those of you (like me) with a memory and interest in legacy vulnerabilities.

Good morning #bheu2025

From draft to deployment: How the Cyber Security and Resilience Bill (CSRB) could redefine UK cybersecurity We explain what the Cyber Security and Resilience Bill aims to deliver and hear from a cybersecurity expert on its progress so far

From draft to deployment: How the Cyber Security and Resilience Bill could redefine UK cybersecurity.

I've been following the progress of this Bill throughout the year, and it was great to write this overview for TechFinitive in the past week.

share.google/AYAj0PV9PH9t... #csrb

Smashing Security 445 with Graham Cluley and special guest Dan Raywood

Great to have @danraywood.bsky.social on the "Smashing Security" podcast!

We discussed how America’s broadcasters leaving their hardware open to attack, giving hackers the chance to hijack TV shows, blast out fake emergency alerts, and even replace religious sermons with explicit furry podcasts.

Thanks for inviting me back!

A very entertaining and informative talk on whether or not incident response teams should “pull the plug” in response to a cyber attack by @danraywood.bsky.social at #irisscon

I remember a night in Belfast. The morning after I could barely stand, you were like "I was a bit shaky."

It's my second #Irisscon appearance tomorrow: I'll be breaking down my Computer Weekly article research on the ethics of pulling the plug to stop an attack.

Knowing I am meeting @brianhonan.bsky.social and co tonight, the 930am spot isn't phasing me at all. Grab a ticket and join us in Dublin.

Went to the first #csides in Weston Super Mare, and it was fantastic. A really good collection of speakers and attendees, a fantastic venue - including a free go on the rides - and an overall great vibe. More of this please, especially in seaside towns in the later months! #defendtogether

Early start and out west for CSIDES today.

I'll admit I found this event by scrolling through Eventbrite and just decided to buy a ticket, speaker line up does look great - and any chance for this Sussex boy to see the sea again (admittedly it's quite far away currently).

@jakemooreuk.bsky.social

I've not been to that since you were involved! Hope all goes well.

Today's office, looking forward to presenting at the #magnetforensics event here today on 'why does the media love a cyber crisis?'

I'm working on an article for ComputerWeekly.com around whether "pulling the plug" and taking systems/servers offline can be a way to stop an attack - and an attacker in their efforts. |... I'm working on an article for ComputerWeekly.com around whether "pulling the plug" and taking systems/servers offline can be a way to stop an attack - and an attacker in their efforts. It would be gr...

I'm currently running a poll on LinkedIn, does 'pulling the plug', or taking servers and systems offline, stop an attack and an attacker in their steps?

I would love your vote here -

www.linkedin.com/posts/dan-ra...

Here's the 51 new ransomware groups that launched in the first half of the year

medium.com/s2wblog/rans...

Ten Things Learned from Government's Offensive Cyber Research

Last week, the Department for Science, Innovation and Technology put out results from its survey of red teamers. The results were interesting, and @danraywood.bsky.social Raywood looked at the top ten things we learned from the research.

insight.scmagazineuk.com/ten-things-l...

Macy's parade: 'Shredded police papers in confetti' Some confetti at the Macy's Thanksgiving Day Parade in New York appears to have been made of confidential police documents, a US media report says.

That's almost unbelievable, but then I remember this from many years ago - www.bbc.co.uk/news/world-u...

Maybe the Online Safety Act *will* make the U.K. the safest place in the world to go online - because we’ll all be using VPNs to connect, and VPNs make us safer.

How can a manipulated image damage a business? - SmartFrame The ability to change an image’s content has become easier than ever, […]

A new one from me for #smartframe, looking at how a manipulated image could impact a business' reputation, what sort of damage could (and has been) done, and what efforts would be needed to repair the situation.

smartframe.io/how-can-mani...

There's another element to the discussion - is it easier to record a 15 minute interview with someone and write a 100 word summary (or get GenAI to do it), versus writing an interview article that may take time to transcribe and edit for the best sections.

Cyber Training: Post Challenge, Where Are the Skills Learned?

The third, and possibly last part of my look at the impact of the Cyber Security Challenge. In this I look at the other options for training, gaining skills and contacts in preparation for a career in cybersecurity.

insight.scmagazineuk.com/cyber-traini...