Brainstorm Security

24/09/2026

Have you noticed that when there is a major criminal heist or a large high value burglary, that often the bad guys had a ‘Inside man’? That's what I want to talk about…the threat from the inside man.

08/09/2026

💎Diamonds are forever?

The Diamonds777 (luxury jewellery suppliers to the rich and famous) breach,claims are getting bolder by the day, with the threat actor now insisting they hold over 409,000 customer home addresses. But here’s the catch: none of the samples reviewed by researchers show a single home address, only emails, some names and phone numbers. Until verified, that claim sits firmly in “possible… but quite possibly fibs”.

Even more curious: no threat‑actor group has stepped forward to claim responsibility. In the cybercrime world, that silence is unusual, groups normally rush to brand a high‑profile breach.

My take, is the luxury‑sector data is gold for social‑engineering, so customers should stay alert for “delivery confirmation”, “appointment deposit”, or “jewellery fitting” lures. 'IF' home addresses are part of the hack, that would be more worrying.

10/06/2026

A great write up ✍️ by Krebs and Check point security, using OSINT to try and identify the admin of the cybercrime group known as The Gentlemen. This group
Photo by Tim Mossholder on Unsplash has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.

https://krebsonsecurity.com/2026/06/who-runs-the-ransomware-group-the-gentlemen/

26/04/2026

HUGE praise to Google Maps for taking cow privacy so seriously 😂

22/04/2026

Law enforcement seize $10 million in assets from ransomware negotiator following cybercrime offence!

If ever you needed an example as to why you should hire an ex-law enforcement ransomware negotiator, rather than just 'someone who works in cyber security' then this is it.

Trust and honesty is paramount. Make sure you vet and ask the right questions when giving that responsibility to a incident response company.

Would you like to know how the professionals operate to assist you in a time of crisis, yet providing full transparency and clear oversight? Send me a message or make contact to find out more via phone/email at the Brainstorm Security website.

We look forward to helping you.

The accused faces up to 20 years in prison.

13/01/2026

Ransomware isn’t the moment to start looking for help — it’s the moment to use the help you already secured.
A ransomware negotiation retainer gives organisations peace of mind long before an attack ever hits. It means:
Immediate access to specialist negotiators when every minute counts
Pre‑agreed processes that cut through chaos and confusion
Reduced downtime and financial impact through faster, smarter decision‑making
Clear guidance for executives and IT teams under extreme pressure
Confidence that you’re not facing criminals alone
For organisations that take resilience seriously, a retainer isn’t a luxury — it’s a strategic safeguard.
To explore whether it’s right for you, contact Brainstorm Security for details.
Photo by Kevin Horvat on Unsplash

07/01/2026

Today, the UK Government unveiled a groundbreaking £210 million Cyber Action Plan that's set to transform our digital landscape. This isn't just another policy document - it's a critical response to the evolving cyber threats that challenge our national security and public services.

Key Highlights:
• Establishing a Government Cyber Unit to coordinate cross-departmental cyber defense
• Addressing legacy system vulnerabilities that expose us to significant risks
• Potential to unlock £45 billion in productivity savings through secure digital transformation

The plan comes in response to real-world incidents like:
- The British Library ransomware attack in 2023
- NHS service disruptions
- Increasing sophistication of cyber threats

💡 Insight: Cyber resilience is no longer optional - it's a fundamental requirement for modern governance and public service delivery.

For professionals in cybersecurity, digital transformation, and public service, this represents a significant opportunity to contribute to national digital strategy.

What are your thoughts on the government's approach to cyber resilience?

Does it go far enough to tackle cybercrime and ransomware?

https://www.gov.uk/government/publications/government-cyber-action-plan

05/01/2026

Stronger security starts with real‑world testing. Physical pe*******on testing reveals the weaknesses criminals look for — so you can fix them before they’re exploited.
🏢 It protects what matters most:
Your people — by identifying risks to staff safety
Your assets — by exposing gaps in access control
Your data & IP — by ensuring sensitive areas stay truly secure
If you’re unsure where your vulnerabilities lie, Brainstorm Security Ltd offers free expert advice to help you strengthen your defences before someone else tests them for you.

05/01/2026

New Zealand’s largest patient portal, ManageMyHealth (MMH), is currently responding to a major cyberattack that has compromised the personal health records of approximately 126,000 New Zealanders.

Hackers identifying themselves as "Kazu" have demanded a ransom of £51,000 (approx. NZ$104,000) to prevent further leaks. Cyber criminals are back for the new year😕

02/05/2025

The retail sector is currently being hit hard with ransomware attacks. Maybe its time for companies to consider (if they haven't already) what they would do if hit by a cyber attack? How would they be effected? Need some help considering the implications? Feel free to reach out and discuss ransomware tabletop exercises and how they can help.

Shopping for a ransomware negotiator so you are prepared? Let's talk.

DM me or contact via the website Brainstormsecurity.com.

https://www.bbc.co.uk/news/articles/c62x4zxe418o.amp