varsha yadav

When was the last time you updated your software? Regular updates are crucial for cybersecurity. Here’s why: Let's be friends! Follow Me Ikechukwu Enuosa #Cybersecurity #SoftwareUpdates #Canada #DigitalSafety #CyberTips

2

What is #PAM and #IAM, where do you get #SSO and where #JIT access? #identityaccessmanagement #iam #identitymanagement #cybersecurity #security #identityaccessmanagement #fortune #technology #accessmanagement #tiiam #it #technews #informationtechnology #companies #identitygovernance #issquared #dataprotection #sailpoint #iag #cti #ti #iiam #ethicalhacking #futureofsmartlife #globalcost #cybercrime #threathunting #orsus #decentralizedidentity #threatintelligence  #stayaheadofbreaches #iamcloud #itnews #cybersecuritynews #threatvector #cryptojacking #riskassessment #cloud #zerotrust #iamwithzerotrust #ginfrastructure #datasecurity #tech #iga #cloudsecurity #workfromhome #pechakucha #remotejobs #usermanagement #microsoft #distributiongroups #activedirectory #education #identitysecurity #software #access #iampam #groupmanagement #itupdate #iamtechnology

1

🔍 Unveiling NIST CSF v2.0 Audit Checklist - Part 5: Respond (RS) & Recover (RC) 🔍 Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance, & join our exclusive infosec group for early access to creative infosec content PS: Infosec Community Link shared in Comments Section 1️⃣ Introduction to the Document: Delve into the final stages of the NIST CSF v2.0 framework with our latest checklist, focused on the crucial Respond (RS) and Recover (RC) functions. 2️⃣ What's in the Document: This part of the checklist offers detailed guidance on how to effectively manage and recover from cybersecurity incidents. It includes actionable steps, best practices, and key metrics to ensure your organization’s swift response and recovery. 3️⃣ Conclusion: Enhance your audit preparedness and resilience with this comprehensive guide. Download now to ensure your organization is ready to respond and recover from any security challenge. #NIST #NISTCSF #Respond #Recover #audit #checklist #infosec #cybersecurity #Governance #Risk #Compliance #incident #management #SOC #Disaster #recovery #Guidance #document #free

255

21 Comments

🚀 Excited to announce that I will be attending the upcoming Operation: Defend the North event, organized by siberX in Toronto from June 10-12, 2024! This unique three-day cybersecurity readiness exercise will bring together public and private sector stakeholders along with the Canadian Cybersecurity community to enhance our collective response strategies against cyber threats. 💡 Why Attend? Simulated Cyber Attacks: Experience firsthand how experts navigate and respond to a live cyber breach, gaining real-time insights into strategies and decisions. Expert-Led Sessions: Learn from industry leaders about best practices and the latest insights in cybersecurity. Networking Opportunities: Connect with fellow participants through the siberXchange platform and during dedicated networking breaks. A big thank you to Mahdi Raza and the entire siberX Team for organizing this incredible event. Your efforts in strengthening Canada's cybersecurity readiness are truly commendable. 🎟 Have you got your tickets yet? Don't miss out on this opportunity to be part of an engaging and impactful cybersecurity readiness exercise. 🔒 Operation: Defend the North: 3 Days of Defending Against a Live Cyber Attack. Join us and discover how leaders from across Canada will keep us safe amidst a simulated attack on our power grids. ✅ Register and learn more at siberx.org/defendthenorth Let's come together to build a more secure and resilient cyber environment. See you there! #wearecyber #ohcanada #canada #operationdefendthenorth #readinessexercise #cybersecurity #event #cybersecurityconference #defence #defendthenorth #hack #training #cybersecuritytraining #gamification #cyber #tabletop #gaming #eSportsCyber #cybersecuritytalks #threatintelligence #virtual #conversation #event #online #privacy #datasecurity #databreach #security #technology

32

2 Comments

DORA: Impact of the Digital Operational Resilience Act on the Internal Audit Function Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance, & join our exclusive infosec group for early access to creative infosec content PS: Infosec Community Link shared in Comments Section 🔍 Introduction: The Digital Operational Resilience Act (DORA) is reshaping the financial sector's approach to operational resilience. This document dives deep into how DORA impacts the internal audit function and the necessary adjustments organizations need to make. 📑 What’s in the document: 1. Overview of DORA’s key provisions 2. Insights into how DORA strengthens operational resilience 3. Specific requirements for internal audit teams under DORA ✅ Conclusion: As organizations prepare for DORA’s full implementation, it’s critical for internal audit functions to align with its expectations. Download the document to stay ahead in the compliance journey! #DORA #InternalAudit #OperationalResilience #DigitalResilience #Compliance #resilience #finance #infrastructure #business #continutiy #BIA #BCMS #disaster #recovery #operations #impact #governance #risk #internal #audit #infosec #informationsecurity #cybersecurity

126

10 Comments

🚨Cybersecurity Alert for Canada🚨 A recent investigation has uncovered a potential cybersecurity threat aimed at the Canadian Government. During an OSINT session, a suspicious domain was identified that mimics the official government website, likely intended to harvest sensitive data from Canadian residents. 🔹 **Domain Name:** `www.canadaembassy.co` 🔹 **Hosted in:** India 🔹 **IP Address:** 46.28.45.170 This finding is crucial for our community to be aware of as it poses significant risks. I urge everyone to stay vigilant and share this information widely to help prevent potential cyberattacks. Let's work together to keep our digital environment safe! #CyberSecurity #Canada #DigitalSafety #InfoSec For more details on this alert,👎 New Threat Targeting the Canadian Government](https://lnkd.in/g9yGwWdG)

35

What is the completion date for PCI DSS assessments documented in a Report on Compliance and its related Attestations of Compliance? In PCI DSS assessments documented in a Report on Compliance (ROC), the "Date of Report" is considered the completion date, marking when the QSA Company and assessed entity agree on the final version of the ROC. This date can be found in Section 1.2 of the ROC and on the cover page and in Section 3 of the ROC Attestations of Compliance (AOCs). The AOC includes a Merchant (or Service Provider) Attestation and a Qualified Security Assessor (QSA) Acknowledgement, both requiring signatures within a reasonable timeframe (typically two to three weeks) of the Date of Report. These signatures confirm the ROC's accuracy but do not indicate the actual completion date of the assessment. Any questions about these dates should be directed to the relevant submitting entity, such as an acquirer or payment brands. https://lnkd.in/gQ_yKQkX

11

Some useful tips for security leaders to counter this. 1. Increase Threat Monitoring and Analysis : Analyze recent network activity for suspicious behavior and indicators of compromise (IOCs) associated with the attack type mentioned in the RBI warning. 2. Review and Update Security Protocols: Conduct an immediate review of your existing cybersecurity policies and procedures. 3. Simulate a Cyberattack Drill: Consider conducting a tabletop exercise or simulation drill to test your incident response plan and team's preparedness in case of a real attack. 4. Patching and Vulnerability Management: Double-check that all systems and software are fully patched with the latest security updates to address known vulnerabilities. 5. Data Backups and Disaster Recovery: Test your backups regularly to ensure they are functioning correctly. https://lnkd.in/gh3EiyVG

17

CISSP CERTIFICATION #cissp #isc2 #cybersecurity #linkedin #cyber #technology #tech #toronto #canada #newyork #rail #railnetworks #networking #networks #ai #future #innovation #futurism #jobs #hiring #talentacquistion #talent #hr #job #i

13

2 Comments

🤯😱 What is going on #OLX. Selling #IllegalDevices. is this true ❓😱 Must Watch this full Video 👇🔗💯 #viral #hacking #cybersecurity #olx #viralhacking https://lnkd.in/gVegGGPB

1

📘 Introducing the Ultimate Internal Audit Manual! 🔍 Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance. Join our exclusive infosec community: https://lnkd.in/gG_aG5AF 1️⃣ Introduction to the Document: Dive into the comprehensive Internal Audit Manual designed to guide auditors through every step of the audit process. This essential resource is perfect for both novice and experienced auditors aiming to enhance their audit practices. 2️⃣ What's in the Document: The manual provides detailed guidance on audit planning, execution, reporting, and follow-up. It includes methodologies, best practices, checklists, and real-world examples to ensure thorough and effective audits. Additionally, it covers risk assessment, control evaluation, and compliance checks to help auditors navigate complex audit scenarios. 3️⃣ Conclusion: Elevate your internal audit function with our meticulously crafted Internal Audit Manual. Equip yourself with the knowledge and tools needed to conduct efficient and impactful audits. Download the document now and transform your audit processes for greater accuracy and effectiveness. #Audit #Internalaudit #ISMS #ISO #manual #auditmanual #checklist #risk #riskmanagement #infosec #informationsecurity #cybersecurity

60

5 Comments

A 𝗽𝘂𝗯𝗹𝗶𝗰 𝗲𝘅𝗽𝗼𝘀𝘂𝗿𝗲 𝗮𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 in OSINT involves identifying and analyzing publicly available information that could pose security or privacy risks. It includes: 1. 𝗗𝗮𝘁𝗮 𝗖𝗼𝗹𝗹𝗲𝗰𝘁𝗶𝗼𝗻: Gathering accessible information from sources like social media, public records, and websites. 2. 𝗥𝗶𝘀𝗸 𝗜𝗱𝗲𝗻𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻: Identifying exposed data, such as personal details (PII), credentials, or sensitive company info. 3. 𝗧𝗵𝗿𝗲𝗮𝘁 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀: Assessing how exposed data could be exploited for risks like social engineering, identity theft, or targeted attacks. The goal is to understand the exposure and mitigate potential threats from publicly available data. #cybersecurity #OSINT

1

🚨 XSS Vulnerability Found in Howrah Municipal Corporation Website 🚨 I recently discovered a reflected Cross-Site Scripting (XSS) vulnerability on the official website of the Howrah Municipal Corporation, West Bengal, India. I have responsibly reported this issue to the CERT-In (Indian Computer Emergency Response Team) for further investigation and remediation. It's crucial for organizations, especially government entities, to prioritize cybersecurity and conduct regular security audits to identify and address vulnerabilities promptly. A proactive approach can significantly reduce the risk of cyberattacks and protect sensitive data. #cybersecurity #cyberawareness #ethicalhacking #cyberresilience #responsibilitydisclosure #dataprivacy #dataprotection #digitalsafety #infosec #xss #crosssitescripting #OSINT #PII #CERTIn #DPDP #GDPR #westbengal #kolkata #howrah #nabanna #municipality #vulnerabilities #threathunting #cyberdefense #digitalforensic #cyberforensic #cyberops #I4C #MeitY #Webel #CSCoE #responsibledisclosure #securitycommunity #compliance #riskmanagement #vulnerabilitydisclosure #vulndisclosure #OWASP #CEH #incidentresponse #india #digitalindia

7

📊 Enhance Your Audit and Risk Assurance Committee's Effectiveness!🔍 Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance. Join our exclusive infosec community: https://lnkd.in/gG_aG5AF 1️⃣ Introduction to the Document: This document is an invaluable resource for organizations aiming to strengthen their governance and risk management practices. 2️⃣ What's in the Document: This tool provides a comprehensive framework for evaluating the performance and effectiveness of your committee. It includes key performance indicators, best practices, self-assessment questions, and actionable insights to help your committee excel in its role. 3️⃣ Conclusion: Elevate your organization's audit and risk assurance functions with this practical and insightful tool. Download now to ensure your committee is operating at peak effectiveness and contributing to robust governance and risk management. #audit #committee #risk #management #infosec #cybersecurity #informationsecurity #isms #information #data #security #governance #checklist #metrix #effectiveness

79

2 Comments

This one slide was one of the most impactful ones I saw during the August 2024 CyberAB Town Hall. I have been following the CMMC program from Canada since 2019 and became certified in 2021, the first one in Canada even though I would not be able to perform assessments. Why? I have been involved with NIST security frameworks since 2005 starting with NIST 800-53. CMMC is based on many source laws, regulations, and policies as well as NIST 800-171 security control practices. But that does not answer why CMMC caught my attention. I knew that eventually CMMC would be adopted by other countries that provide products services for the US DoD. Canada is one of those countries with over 900 companies and 60,000 jobs involved in the Defense Industrial Base. To my way of thinking, it was only a matter of time and in May of 2023 the government announced that implementation of the Canadian Program for Cyber Security Certification (CPCSC). CPCSC is intended too be the reciprocal CMMC program in Canada. So why did the following CyberAB presentation slide catch my attention? Having been at this for almost five years now we are now only six months away from launch! Only six months. Canadian DIB companies acting as secondary suppliers to US DoD Prime companies are already being told they will need to achieve certification if they are going to continue working on US DoD contracts! This is very significant. And we only have six more months to go. With that said, every one of the 900 DIB companies should seriously consider developing a CMMC/CPCSC Assessment Readiness Plan starting with a CMMC Level 1 Assessment Self-Attestation program, sooner than later! Six months is not a long time and will pass very quickly given we will entering the holidays half way through when not much will get done. If you want to talk about your company's direction for CMMC certification while we are waiting for the CPCSC to be implemented please feel free to reach out.

5

5 Comments

Want to know your security posture this month but can’t afford another pentest? Pentera’s Continuous Security Validation Platform is here to help!! You get on demand security validation done without the long and expensive 3rd party engagement. Why pay a pentester? Reduce exposure with continuous, affordable security testing.   Test when YOU want to test! Watch episode 2 on https://lnkd.in/gnCx8i5D 🎁 Pay it forward! The first 100 people to share this post with the #WhyPayaPentester will get an exclusive Pentesters and Sons t-shirt! (Check out the first comment) #WhyPayAPentester  #AutomatedSecurityValidation

46

6 Comments

‘Pig Butchering apps removed from Google Play and iOS stores’ Fake trading apps on Google Play and Apple's App Store lure victims into “pig butchering” scams that have a global reach. The apps have been removed from the official Android and iOS stores after accumulating several thousand downloads, say researcher at cybersecurity company Group-IB, who discovered the fraud. Pig butchering is the name of a scam where the victim is led to believe they are getting high investment returns on a fake trading platform that displays fabricated information. Fraudsters use social engineering to keep the victim depositing funds and prevent them from withdrawing the displayed "profit." The scam is revealed when the victim attempts to cash their money, which the fraudsters have already moved to their accounts. Fraudulent apps in iOS and Android stores The fraudulent apps, which Group-IB categorizes under the “UniShadowTrade” malware family, are built using the UniApp framework and were first spotted in May. Malicious app on the Apple App Store Malicious app on the Apple App Store Source: Group-IB Their names are SBI-INT (iOS), Finans Insights (Android), Finans Trader6 (Android) and a look at the download counter for the last two shows that they were downloaded 5,000 times.

3

2 Comments

I've seen many a QSA-issued certificate of compliance proudly displayed, alongside an entity's other industry-certificates. Whereas, displaying their AOC would not be suitable or appropriate. Consequently, I would argue that there is a place for both types of documents but that they have their specific uses and must NOT be confused. Any QSAC that issues a PCI DSS certificate of compliance has a responsibility to ensure that the receiving entities understand the different uses so that they do not confuse the attestation of compliance (official document) with the certificate of compliance (unofficial document). #pcidssv4 #pcidss #pcicompliance

4