Michael Kohli

Data Loss/Breaches Are Biggest Concerns of Cloud Deployment: Vipin Kumar Magazine: https://lnkd.in/gxVQyJHj Vipin Kumar, Global CIO, Uflex Ltd. Quote: “Managing malware and phishing attacks on the cloud has become a significant problem for enterprises.” Sophos Sunil Sharma Mehul Thakkar Anjali Sethi Joshi Puja Bhardwaj #CloudSecurity #CyberSecurity #CloudComputing #DataProtection  #InfoSec #CyberThreats #CloudTech #DataSecurity #SecurityTrends  #CloudSolutions #SOC #AIinSecurity #CloudNative #TechLeadership  #SecureCloud #CIOInsights #CloudInfrastructure #ThreatProtection  #DigitalSecurity #CloudManagement

24

3 Comments

Peter Theobald, thanks for starting this thread Security automation is a profoundly intricate topic, so much so that I could write a book. (Pun intended) ;) However, the following are a few key considerations. -   As I've mentioned, the predictability of the task's outcome and, more importantly, the reliability of that prediction is crucial in the realm of security automation. -   How many times does the task get executed? It is probably not a good idea to spend 50 person-hours automating something that I need to do three times a year and takes 5 hours each time. -   Another important consideration is to do a what-if analysis of "how bad things can get" if automation fails or, worse, is manipulated by a threat actor or disgruntled employee. I remember once when my endpoint update playbook worked perfectly in a test lab and then in production, but it messed up when an application was upgraded. While automation is great, it's important to remember that it’s not a panacea. Effective automation requires meticulous planning, skill, and effort.

6

1 Comment

♦️Secure Talk: Singularity XDR: Your Unified XDR Solution The cybersecurity landscape is a treacherous battlefield. New cyber threats pop up all the time, attackers are getting craftier. Old security tools miss important stuff. Security teams, often understaffed and overwhelmed, struggle to keep pace. But fear not! Here comes SentinelOne Singularity XDR, your shining Armor in this digital war. Unify, Extend, Conquer: Singularity XDR Singularity XDR represents a paradigm shift in Extended Detection and Response (XDR) solutions. It transcends the limitations of point tools, offering a holistic approach that: Click to read on … https://lnkd.in/gB7vqTe7

11

1 Comment

As a part of the VeeamOnIndia 2024, Veeam Software has launched a compelling initiative - "Bharat Cyber Suraksha", aimed at fortifying India's digital landscape against cyber threats and ensuring robust data protection - in alignment with the national agenda of "Pragatisheel & Atmanirbhar Bharat". This comprehensive ransomware regulations report for Indian public and private sector organisations explains how you can stay resilient against ransomware attacks - aligned to the Digital Data Protection Policy, Government of India. Download the report here: https://lnkd.in/d_CXRseh #Veeam #BharatCyberSuraksha #VeeamONIndia #DPDP

2

🚨 Urgent Alert: Major Cybersecurity Breach in India - March 2024 🇮🇳 India's government and energy sectors recently faced a significant cyber espionage campaign. The breach, characterized by a sophisticated methodology, targeted critical offices responsible for national defense and IT governance. Attackers disguised a malicious file as an official communication from India’s Royal Air Force, underscoring the need for enhanced vigilance against evolving cyber threats. Key Highlights: 🔒 Sectors Impacted: Government and energy sectors. 🎣 Attack Method: Phishing campaign via a disguised malicious file. 💥 Impact: Compromised critical offices crucial for national defense and IT governance. 🛡️ Response: Immediate investigation and heightened security measures. This breach serves as a stark reminder of the critical importance of advanced threat detection and response mechanisms in safeguarding national infrastructure. As cyber threats continue to advance, maintaining continuous vigilance and implementing robust cybersecurity strategies are paramount. For further insights on this breach, refer to the full report. #Cybersecurity #DataBreach #India #Infosec #CyberThreats

3

In many Security vendors during their sales pitch mentioned they can protect organization from Ransomware attack. If you get it next time please ask HOW?? And in which steps of Cyber Kill Chain they are going to protect you. In Ransomware there are 7 steps of Cyber Kill Chain as per picture and you should have your detection or protection techniques which could (may) help you to hold this to happen in your organization. Which is strategic game combination of PEOPLE->PROCESS->TECHNOLOGY with better Governance model of Identify, Detect, Protect, Response and Recover. So when anyone commit to save you from Ransomware attack please ask USE CASE of HOW???????????????

28

https://lnkd.in/gjJpsfC5 👉 Cybernews : A new unknown, unaware, sophisticated attack has been faced in 2024, called side-channel attack. ⚡ As we are moving towards a world of Automation, AI & IoT, in parallel new tactics, types of scams, and threats are coming our way.   #awareness #cybercrimes #cyberfrauds #scams #frauds #cybersecurity #infosecurity #onlinescams #onlinefrauds #protect #AI #IOT #automation

3

Cyber Awareness Month Post - 10/31 🗓 In March 2024, Bira 91, one of India’s top craft beer brands, was hit by a ransomware attack from the BianLian group 🍺🐞 This breach resulted in the theft of nearly 2TB of sensitive data, including financial records, human resource files, and even secret beer recipes. Information about the company’s partners, customers, and vendors, both local and international was also compromised. Coming just after a $25 million funding round, the timing couldn't have been worse. Although the company hasn't made an official statement about the ransom or the full extent of the damage, this attack shows serious gaps in its cyber security defenses. The attackers likely exploited weaknesses in Bira’s IT systems, where stronger security measures like regular audits, better data encryption, and robust access controls could have helped prevent the breach. Organizations need to enhance their security infrastructure, adopt stronger ransomware protections, and put in place a well-prepared incident response plan. #DataBreach #InfoSec #Cybersecurity #Ransomware #cybersecurityawarenessmonth

24

*Real world cyber security challenges for security managers and CISOs: rarely discussed and acknowledged* These factors play pivotal role in organisation security posture irrespective of you are certified/regulated/audited organisation or not. Please feel free to add your view. 1)Unclear expectations from the business and the management. 2)No proper reporting structure of CISO function, involving dotted line reporting to more than one vertical. 3)CISO is not given enough designational power or autonomy to get the things done. 4)Considering CISO function as support/operational function. 5)Unrealistic expectations and ownership from CISO functions. 6)Reluctant/ Resistance to change approach. 7)No proper resource strength to carry out in-scope activities or not sufficiently budgeted team and not able to provide flexibility to retain the talent. #ciso #cybersecurity #organisationalsecurity #cybersecuritychallenges Image credit:unknown

28

1 Comment

#vulnerabilityassessment #networksecurity #dos vulnerability #updates #patches #itsecurity #cybersecurity #itinfrastructure #threathunting #redteamassessment #enterpriseriskmanagement #headitinfra #cto #attacksurfacemanagement image credit: ET Telecom

6

🔒 **You’ve got cybersecurity basics covered… what next ….? Identity Governance and Administration has to come next 🔒 sorry not sorry long post!!! Implementing basic cybersecurity controls is a significant first step in protecting any organisation. If you stand still at the implementation of basic controls, you will move backwards in a world of increasing risk and evolving threat. Identity Governance and Administration (IGA) is a critical next phase that ensures continued protection, ensuring users have the right access at the right time for the right reason. 🎯 **Why IGA Matters:** 1. **The castle and moat model no longer reflects reality**: Organisations data no longer lives within a single boundary. We have data everywhere and an IGA enables real-time monitoring and management of user access, preventing unauthorized access and potential breaches. 2. **Protect business value**: ensure users have the right access at the right time for the right reason and nothing more. 3.. **Be efficient and simple**. Give the access they need on day 1. Give them a single portal for all IT requests including access to resources. Remove access when it’s no longer needed- automatically. 4..**Risk Mitigation**: Automate access controls and reviews, to meet internal audit findings of access controls and prevent manual audits taking weeks of time. 5. **Operational Efficiency**: Streamline identity processes and self-service capabilities to free up IT resources for other value added initiatives. 🔗 **Integrated Approach**: Combining cybersecurity basics with comprehensive IGA strategy creates a multi-layered defense system that is resilient against evolving threats. Combined with Network Access Contol it goes a long way to a Zero Trust Network Access approach. Safeguarding identity is not just an IT task but a strategic imperative. Let’s prioritize IGA to build a secure and compliant future. #CyberSecurity #IdentityGovernance #IGA #DataProtection #Compliance #RiskManagement

53

5 Comments

Over the past few posts, I've shared insights on specific solutions like Thycotic Secret Server and ManageEngine PAM, explored the critical role of SOC operations, and even pondered the unsettling possibilities of deepfakes. Here are some of my key takeaways from GISEC Global 2024 The Evolving Threat Landscape: Cyber threats are becoming increasingly sophisticated, highlighting the need for continuous vigilance and adaptation. The Rise of PAM Solutions: Privileged Access Management (PAM) is emerging as a crucial line of defense for securing sensitive accounts and credentials. The Importance of SOCs: Security Operations Centers play a vital role in proactively detecting, investigating, and responding to security threats. The Power of Awareness: Educating employees about cybersecurity best practices and emerging threats is essential for building a strong security posture. Technology is Only Part of the Solution: While innovative technologies offer powerful tools, the human element remains paramount in cybersecurity. Building a culture of security awareness and fostering collaboration are critical aspects of effective defense. Looking Ahead: GISEC 2024 left me feeling optimistic about the future of cybersecurity. The event showcased the constant innovation and development of new solutions designed to combat ever-evolving threats. #gisecglobal #cybersecurity #infosec #futureofsecurity

7

🔒 The Critical Role of Regular VAPT in Sustaining Corporate Cyber Hygiene In today's rapidly evolving digital landscape, the importance of regular Vulnerability Assessment and Penetration Testing (VAPT) cannot be overstated. Regular VAPT not only identifies security vulnerabilities but also ensures that our defenses are up-to-date against the latest cyber threats. By integrating VAPT into our cybersecurity strategy, we can proactively safeguard our systems and data, maintaining a robust security posture that supports sustainable corporate operations. Let's prioritize our cyber hygiene to protect our critical assets and ensure business continuity. How often does your organization conduct VAPT? Share your thoughts! #CyberSecurity #VAPT #CorporateHygiene #DigitalDefense #BusinessContinuity

39

11 Comments

Title: How to Set Up an AI Firewall for SD-WAN In today's rapidly evolving digital landscape, securing your network while optimizing performance is crucial. At P J Networks Pvt Ltd, we specialize in integrating AI-driven firewalls with SD-WAN solutions to provide robust security and seamless connectivity. Here’s a step-by-step guide on how to set up an AI firewall for SD-WAN: Install the SD-WAN Plugin: Begin by installing the SD-WAN plugin on your management server to enable SD-WAN functionalities. Configure Panorama and Firewalls: Set up your Panorama management server and add your SD-WAN firewalls as managed devices. Ensure you activate the SD-WAN license for each firewall to enable full functionality. Create and Configure Interfaces: Set up physical and virtual SD-WAN interfaces, and create default routes to ensure smooth traffic flow. Implement AI-Driven Security Policies: Utilize AI-driven security features such as zero trust protection, network isolation, and segmentation to safeguard your network. Configure firewall policies to inspect and manage traffic flows effectively. Monitor and Optimize: Continuously monitor your network using AI tools to gather insights and optimize performance. Ensure your firewalls are forwarding logs to Panorama for comprehensive visibility and management. At P J Networks Pvt Ltd, we offer expert guidance and support to help you deploy and manage your AI-driven SD-WAN solutions. Our team of cybersecurity professionals is here to ensure your network is secure, efficient, and ready for the future. Contact us today to learn more about how we can assist you in setting up an AI firewall for your SD-WAN infrastructure. #AI #Firewall #SDWAN #CyberSecurity #NetworkSecurity #PJSecure P J Networks Pvt Ltd C-160 Mayapuri Phase II, New Delhi 110064 Phone: 9810198539 Website: pjnetworks.com Feel free to reach out to us for any queries or assistance. Let's secure your network together!

4

As per latest Global Cyber Capability Index (GCCI) , India stands 10th position globally in terms of adherance towards Cybersecurity Commitments. Recently, SEBI #SEBI has launched a revised Cybersecurity framework to Boost Regulated Market Entities Security associated with it, by mandating Market SOC (M-SOC) set up in order to do continous security monitoring these entities and assess their cybersecurity maturity and resilience regularly. This Market driven framework is a part of revised Cybersecurity and Cyber Resilience Framework (CSCRF) and is getting implemented in two phases Jan'25 & April"25 as per new Security Regulations Guidelines from SEBI, India. Some key benefits apart from Risk Governance, Regular Assessment 24x7 monitoring - 1. Data Classification and localisation plays key role here, Regulated data is mandate to be localised while its logs injestion to M SOC goes through well defined offshore gaurdrails. 2. Auto Software Bill of Materials (SBOM) generation to mitigate Security Market Entities supply chain risks. 3. Well defined Guidelines around API security and Mobile app security Its a well defined strategic move by SEBI to safegaurd investors money, improving volatile market stability by maintaining robust Cybersecurity Resilience from Cyber attacks /threats / Risks. Bosch Software and Digital Solutions #bosch #NSE # BSE #cybersecurity #securitymarkets #sebi #SOC

21

Often misunderstood difference between 𝘾𝙮𝙗𝙚𝙧𝙨𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙁𝙧𝙖𝙢𝙚𝙬𝙤𝙧𝙠𝙨 𝙖𝙣𝙙 𝙎𝙩𝙖𝙣𝙙𝙖𝙧𝙙𝙨 is very nicely mapped by Prabh Nair #cybersecurity #informationsecurity #standards #frameworks #nist #cis #pci #iso27001

66

1 Comment

🚨 Cybercrime is on the rise in India 🚨 At the ISACA Annual Cyber Security Conference in Hyderabad, key insights were shared by industry leaders and officials regarding the growing threat of cybercrimes. Alarming figures show that citizens lose ₹1.3 - ₹1.5 lakh every minute to cyber criminals, with the average recovery rate being less than 20%. Key takeaways from the conference: 1. Cybercrime accounts for over 30% of cognizable crimes in the Cyberabad Commissionerate, projected to rise to 50%. 2. The Telangana Government is pushing for AI and Cybersecurity companies to set up in the newly announced AI City. 3. Banks and financial institutions are tightening KYC procedures, and soon, all bank customer care numbers will start with '160', while bank URLs will have .bnk.in to avoid phishing scams. 4. Starting October 1, telecom operators will whitelist SMS links to reduce phishing attacks. Let’s work together to prioritize cybersecurity in the age of AI. Prevention and awareness are key! #Cybersecurity #AI #Phishing #ISACA #Hyderabad #CyberCrime #Technology Link to the full article on The Hindu

7

The Indian Computer Emergency Response Team (CERT-In) has issued a severe warning regarding critical vulnerabilities in Apple products. The advisory, dated August 2, flags high-risk security issues across various Apple devices, including iPhones, iPads, Macs, and other products. Apple Security Alert: Vulnerable Software Versions The vulnerabilities affect several versions of Apple software: iOS and iPadOS: Versions prior to 17.6 and 16.7.9 macOS: Versions prior to 14.6 (Sonoma), 13.6.8 (Ventura), and 12.7.6 (Monterey) watchOS: Versions prior to 10.6 tvOS: Versions prior to 17.6 visionOS: Versions prior to 1.3 CERT-In has highlighted that these vulnerabilities could allow attackers to access sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service (DoS), and perform spoofing attacks. The advisory describes the severity of these flaws as "high." 63SATS Read more at: https://lnkd.in/dgGpHRGm

10

1 Comment