Anil Kishan Zutshi ☁

https://lnkd.in/gjJpsfC5 👉 Cybernews : A new unknown, unaware, sophisticated attack has been faced in 2024, called side-channel attack. ⚡ As we are moving towards a world of Automation, AI & IoT, in parallel new tactics, types of scams, and threats are coming our way.   #awareness #cybercrimes #cyberfrauds #scams #frauds #cybersecurity #infosecurity #onlinescams #onlinefrauds #protect #AI #IOT #automation

3

*Cyber Security Association of India (CSAI) Industry Delegation meeting with DG Cert-In on 29th July 230PM* Lt. Gen. (Dr.) Rajesh Pant, Chairman CSAI, Former NCSC invites you for industry meeting with Dr Sanjay Bahl, DG Cert-In and share industry issues with him. Cybersecurity is one of the most important challenges faced by any Nation. Major Cyber-attacks have hit Critical Information Infrastructure of Nation. The world is more connected than ever before, but developments in cyber security levels are not matching the need for keeping the world safe. With every new device and emerging telecommunications development comes new vulnerabilities for exploitation. A point of vulnerability may exist in IoT, especially when a manufacturer may cut security features in the name of reducing costs. Based in past response from stakeholders, following agenda is proposed and we welcome comments/issues form all stakeholders for discussions in meeting: Challenges to be addressed in National Cyber Security Strategy. -       Reporting incidents -       Audit empanelment -       CISO network -       Threat intel -       Cyber Swatchhta -       Security ratings -       Reporting -       Review of Cyber Crisis Management Plan -       Security Level Labelling to be mandated for IoT devices -       Governance framework for ensuring secure by design A cheap consumer drone might sell on the basis of fun and convenience, it can also represent the ability to launch distributed denial-of-service (DDoS) attacks, to present advanced persistent threats (APTs), and to deploy ransomware. -       Access Policy for use of IoT devices -       Insider threat to be addressed more closely. -       License the critical cyber security services. -       Any other issue, if any. *If you are interested to join also, please confirm at [email protected] by 24th July 2024 4.00 PM. The selected delegates for personal meetings would be informed the venue of the meeting* All issues would be taken up. Prof NK Goyal, President CSAI what’s app 95 822 25882 [email protected] Navtesh ED & CEO CMAI/TEMA/CSAI What’s App 97 118 69771 [email protected]

29

2 Comments

♦️Secure Talk: Singularity XDR: Your Unified XDR Solution The cybersecurity landscape is a treacherous battlefield. New cyber threats pop up all the time, attackers are getting craftier. Old security tools miss important stuff. Security teams, often understaffed and overwhelmed, struggle to keep pace. But fear not! Here comes SentinelOne Singularity XDR, your shining Armor in this digital war. Unify, Extend, Conquer: Singularity XDR Singularity XDR represents a paradigm shift in Extended Detection and Response (XDR) solutions. It transcends the limitations of point tools, offering a holistic approach that: Click to read on … https://lnkd.in/gB7vqTe7

11

1 Comment

🔒 The Critical Role of Regular VAPT in Sustaining Corporate Cyber Hygiene In today's rapidly evolving digital landscape, the importance of regular Vulnerability Assessment and Penetration Testing (VAPT) cannot be overstated. Regular VAPT not only identifies security vulnerabilities but also ensures that our defenses are up-to-date against the latest cyber threats. By integrating VAPT into our cybersecurity strategy, we can proactively safeguard our systems and data, maintaining a robust security posture that supports sustainable corporate operations. Let's prioritize our cyber hygiene to protect our critical assets and ensure business continuity. How often does your organization conduct VAPT? Share your thoughts! #CyberSecurity #VAPT #CorporateHygiene #DigitalDefense #BusinessContinuity

39

11 Comments

13 Sep 2024: Yogosha cybersecurity expert Sriram U. speaks on ‘Offensive Security Testing in the era of AI’ at ISACA Industry conference in Chenai, India. #offensivesecurity #pentesting #penetrationtesting #vapt #continuoustesting #crowdsourcedtesting #vulnerabilityassessment #vulnerabilitytesting #vulnerabilitymanagement #offensivetesting #ethicalhacking

35

While the number of firms breached by #ransomwareattack may have gone down, the impact on victims has grown more severe, with heightened ransom demands and higher recovery costs. Need to: Develop an #incidentresponseplan outlining the steps to be taken in the event of a security breach. Conduct drills regularly to practice the steps taken by stakeholders as per #cybercrisismanagement plan (CCMP), create and customize #playbooks to respond to different types of #cyberattacks #cybersecurity #tabletop exercise #informationsecurity #itsecurity #networksecurity #bcp #ciso #cro #cto #ceo #cofounder #enterpriserisk

6

1 Comment

Mr. G Vimal Kumar (GVK) Chief Technology Officer (CTO), Cyber Privilege Private Limited Real Time Assignments with Law Enforecement Agencies (LEA) with Techniques & Procedures Social Media Intelligence Geographic Intelligence Cyber Privilege Private Limited is a premier cybersecurity firm recognized as a local leader in ICS/SCADA, network, cloud, and application offensive security training. Our comprehensive security strategy framework and service support cater to both B2B and small-scale clients across various domains. We also collaborate with government bodies on national security initiatives, providing specialized assistance to intergovernmental agencies on a case-by-case basis. Our mission is to expand the talent pool and enhance cybersecurity discussions to safeguard the global digital economy. Mr. G. Vimal Kumar's dedication and expertise were showcased at the 8th INTERPOL Digital Forensics Expert Group (DFEG) in Kuala Lumpur, Malaysia. His contributions to cybersecurity were further recognized at the 75th AZADI KA AMRIT MAHOTSAV, CYBER SAFETY & NATIONAL SECURITY event on June 17, 2022, at the Command Control Room, Vijayawada Police Commissionerate, NTR District. Most recently, he was honored with the Cyber Excellence Award for Cyber Investigator on June 30, 2024, at T-HUB, Hyderabad, Telangana. Core Services: Vulnerability Assessment & Configuration Review Network & Application Penetration Testing Threat Intelligence & Dark Web Monitoring Application Security Review Cloud Security Strategy & Testing (AWS, Azure, GCP, Private Cloud, etc.) Security Architecture Review Firewall and Security Solution Efficiency Review Governance, Compliance & Auditing (ISO, GDPR, CCPA Review) SOC Setup and Framework Review Red Team and Blue Team Lab Cyber Range Setup Counter Fraud Solutions Physical and On-Premises Security Management Counter Terrorism (For Registered Law Enforcement Agencies) Security Solution Deployment Support Security Hardening Incident Management Support Criminal Profiling (For Authentic Law Enforcement Agencies) Mentorship and Client Relations: Conclusion: Let Cyber Privilege Private Limited be your trusted partner in cybersecurity, ensuring your digital assets are protected with the highest level of expertise and dedication. Cyber Privilege Private Limited, under Mr G. Vimal Kumar's leadership, has made significant strides in combating cybercrime and cryptocurrency fraud. The organization has been instrumental in addressing Bitcoin trading crimes and supporting victims of cryptocurrency frauds. By collaborating closely with law enforcement agencies, investigations into hacking, identity theft & fraud, meticulously collecting evidence to support successful prosecutions. Contact Us For service requests, training, or inquiries, please contact Email: [email protected] [email protected], Phone: 8977308555

8

The SEBI Board approved the Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities (REs). CSCRF is a standard-based framework and broadly covers the five cyber resiliency goals, viz. Anticipate, Withstand, Contain, Recover, and Evolve which are adopted from CERT-In Cyber Crisis Management Plan (CCMP), for countering Cyber Attacks and Cyber Terrorism. CSCRF follows a graded approach and classifies the REs in the following five categories based on their span of operations and certain thresholds including number of clients, trade volume and asset under management. 1) Market Infrastructure Institutions (MIIs) 2) Qualified REs 3) Mid-size REs 4) Small-size REs 5) Self-certification REs.  CSCRF framework provides a structured methodology to implement various solutions for cybersecurity and cyber resiliency. CSCRF will assist REs in strengthening the security posture of the REs and provides following notable benefits: a) Cyber Risk Governance and Management Framework b) Data classification and localization: To set up robust security controls for data generated / managed / processed by REs, CSCRF classifies data  in two categories: ‘Regulatory Data’ and ‘IT and Cybersecurity Data’. While ‘Regulatory Data’ is mandatorily localized, dispensation for ‘IT and Cybersecurity Data’ for offshoring has been given with suitable guardrails. c) Implementation of Security Operations Centre (SOC) and measuring its efficacy on a periodic basis. d) Guidelines for API security and mobile application security e) Cyber Capability Index (CCI) to assess cyber resilience f) Software Bill of Materials (SBOM) to mitigate supply chain risks In order to facilitate ease of compliance, REs have been provided with the following glide path to adopt the new standards and controls prescribed in the CSCRF: Six categories of entities where cybersecurity and cyber resilience circular already exists - January 01, 2025. All other entities where CSCRF made applicable for the first time - April 01, 2025 #sebi #listedcompanies #nist #cyber #cybersecurity #cyberprotection #cyberattack

4

Cyber Awareness Month Post - 10/31 🗓 In March 2024, Bira 91, one of India’s top craft beer brands, was hit by a ransomware attack from the BianLian group 🍺🐞 This breach resulted in the theft of nearly 2TB of sensitive data, including financial records, human resource files, and even secret beer recipes. Information about the company’s partners, customers, and vendors, both local and international was also compromised. Coming just after a $25 million funding round, the timing couldn't have been worse. Although the company hasn't made an official statement about the ransom or the full extent of the damage, this attack shows serious gaps in its cyber security defenses. The attackers likely exploited weaknesses in Bira’s IT systems, where stronger security measures like regular audits, better data encryption, and robust access controls could have helped prevent the breach. Organizations need to enhance their security infrastructure, adopt stronger ransomware protections, and put in place a well-prepared incident response plan. #DataBreach #InfoSec #Cybersecurity #Ransomware #cybersecurityawarenessmonth

24

𝗔 𝗻𝗲𝘄 𝗽𝗮𝗿𝗮𝗱𝗶𝗴𝗺 𝗳𝗼𝗿 𝗰𝘆𝗯𝗲𝗿 𝗱𝗲𝗳𝗲𝗻𝘀𝗲?     I have been posting about the past sponsors of the PCI Asia Pacific Community Meeting (APCM), namely, LGMS Berhad and ControlCase.    This post will cover an interesting report by our Bronze Sponsor, SISA and it was co-authored with the Data Security Council of India (DSCI), an industry body that protects data in India by driving cybersecurity and privacy best practices, standards and initiatives.    The author(s) captured my attention as soon as I started reading by highlighting:   “𝘈𝘭𝘦𝘳𝘵 𝘰𝘷𝘦𝘳𝘭𝘰𝘢𝘥 𝘵𝘳𝘢𝘯𝘴𝘧𝘰𝘳𝘮𝘴 𝘢 𝘸𝘦𝘭𝘭-𝘪𝘯𝘵𝘦𝘯𝘵𝘪𝘰𝘯𝘦𝘥 𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘴𝘵𝘳𝘢𝘵𝘦𝘨𝘺 𝘪𝘯𝘵𝘰 𝘢 𝘴𝘦𝘭𝘧-𝘥𝘦𝘧𝘦𝘢𝘵𝘪𝘯𝘨 𝘰𝘯𝘦.”   This has been one of my focus areas and related to PCI DSS Requirement 10 i.e. “Log and Monitor All Access to System Components and Cardholder Data”.  With more systems getting deployed, it can only get more complex with more logs and alerts generated. This is overwhelming the cybersecurity heroes tasked to detect and defend against attacks in the midst of an avalanche of false positive alerts.  SISA quoted from Statista that organizations take around 204 days to detect a data breach!   Since the publication of PCI DSS v4.0, a new requirement has been added for organizations to use automated mechanisms to perform audit log reviews. This is a future dated requirement and will be effective from 1 April 2025, however you are strongly encouraged to consider adopting this requirement soon given current threats.   Back to the document co-authored by SISA... it introduced me to a new acronym, MXDR (Managed Extended Detection and Response).  To over-simplify, this approach provides a comprehensive view and control across an organization with better identification of threats, an ability to respond more effectively and most importantly, the ability to perform monitoring continuously.  Amazing!   Get the report from the SISA website: https://lnkd.in/gpbfWHA8   SISA will be a sponsor and exhibition partner at the North America CM in Boston and they will be back as an exhibition partner at the APCM in Hanoi in November!  Thank you Dharshan Shanthamurthy and team for your support!  This will be a good opportunity to find out more about MXDR from the SISA experts who will be present at the events.    Disclaimer: PCI Council is a neutral body and my personal post is not an endorsement of any organization or solution. If you have an interest in payments, cybersecurity, compliance, risk management and technology, do consider joining us in either Boston (Sep), Barcelona (Oct) or Hanoi (Nov).  Find out more at the PCI Events link below or drop me a message: https://lnkd.in/g7rBGdSf   #pcissc #pcicommunity #pcidss #pcidssv4 #datasecurity #cybersecurity #payments #paymentsecurity Video credit: Thank you Canva for your platform and the royalty-free video.

28

1 Comment

I have penned down some thoughts on my article in "Cyber Incident Response and Recovery in the Workplace" on the CIONews Webpage Today...Love to see others views and recommendations on this space! #Cybersecurity #Dataprotection #Incidentresponse #Businessresilience #Continouslearning #Securitymatters

96

18 Comments

🌟 Exciting News for IT and Security Leaders! 🌟 Suraksha Catalyst and Data Security Council of India are thrilled to bring an exclusive Masterclass for #CISOs and #CIOs to New York! This event is a must-attend for those ready to explore the latest in cybersecurity advancements and uncover the potential of Generative AI for their organizations. Join me and other industry experts as we dive deep into strategies, innovations, and actionable insights shaping the future of IT security. Don’t miss this unique opportunity to connect, learn, and grow together. 🚀 Let’s make this event impactful. Hope to see you there! 🙌 #Cybersecurity #GenerativeAI #CISO #CIO #NewYork

37

Data Loss/Breaches Are Biggest Concerns of Cloud Deployment: Vipin Kumar Magazine: https://lnkd.in/gxVQyJHj Vipin Kumar, Global CIO, Uflex Ltd. Quote: “Managing malware and phishing attacks on the cloud has become a significant problem for enterprises.” Sophos Sunil Sharma Mehul Thakkar Anjali Sethi Joshi Puja Bhardwaj #CloudSecurity #CyberSecurity #CloudComputing #DataProtection  #InfoSec #CyberThreats #CloudTech #DataSecurity #SecurityTrends  #CloudSolutions #SOC #AIinSecurity #CloudNative #TechLeadership  #SecureCloud #CIOInsights #CloudInfrastructure #ThreatProtection  #DigitalSecurity #CloudManagement

24

3 Comments

Offensive Red Team Assessment: A Critical Requirement In today's evolving threat landscape, mere compliance with basic security measures is not enough. Regulatory bodies across various sectors, including BFSI, healthcare, and critical infrastructure, are increasingly mandating comprehensive Offensive Red Team Assessments to ensure organizations are not only compliant but resilient against sophisticated cyber threats. So, what exactly is an Offensive Red Team Assessment? It’s a proactive approach where skilled ethical hackers simulate real-world attack scenarios to test an organization's defenses. Unlike traditional penetration testing, Red Teaming mimics advanced persistent threats (APTs), providing a deeper understanding of vulnerabilities that could be exploited by cyber adversaries. Why is it Essential? Regulatory Compliance: Red Teaming ensures organizations meet and exceed these requirements by validating security controls in real-world conditions. Enhanced Resilience: It goes beyond identifying vulnerabilities; it empowers organizations to understand their true security posture, test incident response plans, and build robust defenses. Proactive Risk Management: By identifying weak spots before adversaries do, organizations can take preemptive measures to mitigate risks, reducing the potential impact of an actual breach. Continuous Improvement: Insights from Red Team assessments help in refining and strengthening cybersecurity strategies, fostering a culture of continuous improvement. In Conclusion: Embracing Offensive Red Team Assessments as a regulatory requirement is not just about compliance—it's about being proactive, resilient, and prepared for tomorrow's threats. Let's build a stronger, more secure digital ecosystem together. #CyberSecurity #RedTeamAssessment #RegulatoryCompliance #OffensiveSecurity #RiskManagement #CyberResilience #ThreatHunting #ProactiveSecurity t #CyberDefense #SecurityAwareness #DataProtection

29

Threats in Cybersecurity are well known Mastering Response and ensuring proactive policies and solution is key ! Offering Managed Services to protect you from Data and Image loss

5

I am curious on how seriously corporate India will take DPDP. There is still a need to strengthen RBI and SEBI enforcement of the cybersecurity framework for institutions. I have found this is not yet done with any seriousness For DPDP, the new facet added is that the consumer also is not yet sensitized of privacy and the right to restrict. It is a long journey, but happy that the Indian government is taking the long overdue steps in the right direction. #dpdp #compliance. #cybersecurity.

31

1 Comment

#vulnerabilityassessment #networksecurity #dos vulnerability #updates #patches #itsecurity #cybersecurity #itinfrastructure #threathunting #redteamassessment #enterpriseriskmanagement #headitinfra #cto #attacksurfacemanagement image credit: ET Telecom

6

I had the privilege of attending the ISC2 Bangalore Cybersecurity Summit 2024. This event brought together industry leaders, experts, and visionaries to discuss critical topics shaping the future of cybersecurity and risk management.   Jason Lewkowicz , Chief Services Officer | (CISO) at Optiv provided helpful insights into creating an effective AI governance committee, While AI brings efficiency gains, it also introduces security risks.   🚀 Risk Quantification was a hot topic. Thank you Rohitha Chowdary for your insightful keynote on risk quantification and the methods.   🔐 Identity and Access Management (IAM) took center stage during the panel discussion. Sandipan Basak shared insights on how IAM practices must evolve to meet the challenges head-on and organization should have visibility on their resources, accounts and entitlements including managing identities for external users.   💻 Ransomware as a Service (RaaS) discussions were eye-opening. The rise of RaaS attacks demands a proactive approach. Arpan Raval discussed strategies to prevent, detect, and respond to ransomware incidents, emphasizing collaboration across sectors.   🙏 Special thanks to the ISC2 Bangalore Chapter, who orchestrated this remarkable gathering. It’s inspiring to see professionals from diverse backgrounds come together to shape the future of cybersecurity. Kudos to all the speakers for their thought-provoking sessions!   #RiskQuantification #CyberSecurity #AI #IAM #Ransomware #BusinessStrategy #ISC2

121

1 Comment

It's great to see your dedication towards addressing the security challenges in OT systems, Satish Sharma. Your insights on the hurdles CISOs face in the industrial control system world are enlightening. Keep up the valuable discussions and knowledge sharing! Share this post with anyone interested in Cybersecurity! #cybersecurity #CISO #OT #systems #cfbr #Areweready #views

6