Shikhil Sharma

Security can't be an afterthought. At the Merchant Payments Alliance of India (MPAI) annual summit, I highlighted the importance of integrating #security by design from the beginning. #DevSecOps practices are key to creating secure user experiences. Let's prioritize security in the payments ecosystem and beyond. #apisec #appsec #SecureBlink #threatspy

8

1 Comment

“The credential doesn’t get issued to the wallet it gets issued to the holder. The holder can store it anyway they want. Of course we’d prefer a privacy enhancing approach with certification. The holder needs to choose or we’ll have wallet based silos.” Very interesting comment from Pramod Varma of EkStep Foundation regarding choice and full user-centric design. #EIC2024

149

23 Comments

Urgent Chrome Update Needed in India! High-severity vulnerabilities reported in Chrome versions before 124.0.6367.78/.79 (Windows & Mac) could allow attackers to remotely harm your system. Fix it now! Update Chrome through Settings > About Chrome. #Futuristicgeeks #ChromeSecurityAlert #CybersecurityAwareness #ProtectYourData #UpdateYourSoftware #IndiaCyberAlert #StaySafeIndia #CERT_in #UpdateChromeNow #PatchYourSystem #DigitalHygiene #BeCyberSmart #tech

1

I too feel that the CISO is being framed. Plus, how can any CISO be that naive or dumb to have officially negotiated such things on record? We are talking about a CISO here, not someone fresh out of college. On another note, if the CISO is being made a "bakra" here, perhaps we need to look deeper. Is this an attempt to take the focus away from something more important? Like the breach itself? Sometimes the most honest people in the system are made targets and made scapegoats. All in all, there is no credibility to this, and it's unfortunate that most people from the Media, do not apply their brains or do enough research when writing stories on cyber security incidents.

14

4 Comments

🔔 Urgent Security Alert for Apple Users in India CERT-In has issued a high-severity alert for critical vulnerabilities in Apple devices. Affected devices include: - iPhones/iPads: iOS versions < 18.1 & 17.7.1 - Macs: Versions < 15.1 (Sequoia), 14.7.1 (Sonoma), 13.7.1 (Ventura) - Apple Watches, TVs, Vision Pro, Safari 💥 Risks: Unauthorized access, data breaches, DoS attacks, data manipulation, code execution. ✅ Actions Required: - Update devices immediately. - Check updates under Settings > Software Update. - Enable automatic updates for prompt protection. Stay safe and update now!

6

1 Comment

🔐 Backup Firewalls: Tomorrow’s Non-Negotiable Asset Ever wondered what keeps a business afloat in a digital storm? 🌩️ Once, I watched an enterprise crumble due to a single cyber incident. Witnessing this underlined a simple truth: preparation is everything. 1. Riding the Tide of Future Trends In a world where cyber threats evolve faster than ever, business continuity is no longer an option—it's a mandate. Forward-thinking companies must integrate technological advancements, aligning strategic planning with emerging cyber threats. 2. Backup Firewalls: A Cornerstone of Security While many invest in primary defenses, it's the backup firewalls that catch what slips through the cracks. They remain an essential infrastructure element, resilient against unexpected breaches and aligned perfectly with risk management goals. Brilliant, right? 3. Crafting an Implementation Strategy Don't just install—plan. Assess your current setup and future-proof it with cutting-edge, scalable solutions. This means regular audits, employee training, and aligning your IT strategies with overarching business goals. 4. Why Non-Negotiable? The landscape of cybersecurity isn't forgiving. Backup firewalls are your safety net, ensuring continuity and safeguarding intellectual property. In strategic planning, their value is unprecedented, elevating your response from reactive to proactive. Wondering how many companies really emphasize backup firewalls today? Here's your chance to ponder: Is your business truly protected for the future? Dive into the conversation and share your insights or stories on maintaining robust business operations amidst digital threats. Let's build a safer tomorrow together!

1

1 Comment

Today, I had a discussion with a bank regarding compliance. We reviewed each and every point mandated by the RBI concerning the Cyber Security Framework. However, many banks still have not implemented the RBI's CSITEG advisory alerts on their networks. It seems like some banks are waiting for their own cyber security breach story to unfold..

77

#promptheal com Recently Partnered with #Comodo Sentigo for End point protection of SME and Enterprise. #crowdstrike attack now hacker started using target SME ans MSME using Deepfake and audio fake Ransomware because sme has limited resources for security. 1. Deepfake video - Duplicate police, Custom officer cloth Hacking 2. Deepfake of Director and actor Modelling fraud 3. Many more ahead Consult us for more information and secure your Endpoint for Ransome ware and other kind of hacking attack. Promptheal.com protect your genai app from hacker attack Contact us for more info

2

We can help you #quickly #respond to an #incident, #uncover full scope of #attacker #activities, #develop a #recoveryplan and #execute it with you. We have full #team of #expert #malwareanalysts, #forensicanalysts, #incidentresponders, #threathunters, #threatintelligence experts have #decades of #expertise helping #businesses to #recover from #securityincidents, respond any #ongoingattack, #remediatesecurity posture. 9719194445

4

Fake - Fake - Fake. I will pay 3,13337 INR to anyone who can bring any credible information about the hacker xenZen identity. Two weeks ago, the press reported, based on evidence shared by a hacker named xenZen, that the Star Health CISO leaked data to a hacker. The argument that the CISO sent the database using his official email ID itself is absurd. But the press is now running on that story. And the hacker xenZen is pushing this story to all media houses - look at the screeshot. Two weeks ago, we posted our analysis blog and confirmed two things: 1) The Star Health data leak was legitimate. 2) However, we found that the Chief Information Security Officer (CISO) did not leak the data. Rather, the hacker framed the CISO by fabricating evidence. Security breaches like the one mentioned above are terrible, but making a CISO the scapegoat is even worse. If a malicious hacker can hack a database and frame the security team, then I don’t think we are heading in the right direction. At the time of writing (2 weeks ago), Star Health was not a CloudSEK customer. Since then, Star Health has reached out, and we have been helping them, but they are still not our customer. And we will help them free of cost until we bring justice to this matter. We have already taken down the hacker's leak site, but he has created other mirror sites. I will keep you posted on this matter. My post - https://lnkd.in/gYH9YBNp Our blog - https://lnkd.in/giX_bckq"

615

49 Comments

Thanks Joni Brennan Store it anywhere they want puts all of the responsibility on the individual and not the service or platform. What infrastructure, not app, needs to be in place on the part of the verifier and issuers, of identifiers and the derived credentials. How do you manage your credz? Who manages those keys? How do I audit the use of my credz in particular for any ongoing AuthZ? EIC in full swing....

20

11 Comments

Why Now is the Perfect Time to Master VAPT Skills ! In today’s digital landscape, cyber threats are evolving rapidly, and organizations need skilled professionals to protect their assets. Vulnerability Assessment and Penetration Testing (VAPT) is a powerful skill set that cybersecurity teams rely on to detect and prevent threats. Here’s why now is the BEST time to develop your VAPT expertise: 📊 High Demand: Companies are actively seeking VAPT experts as threats increase. 💼 Career Opportunities: From financial firms to tech startups, industries are in desperate need of cybersecurity pros. 📈 Future-Proof Your Career: Gaining VAPT skills now positions you for a stable, high-growth career. 💡 Join our Free Webinar to learn practical VAPT techniques and become part of the next generation of cybersecurity experts! Link to Webinar Registration is in first comment. #Career #vapt #Webinar #CareerGrowth #CyberJobs #Cybersecurity

7

1 Comment

We carved a niche in the Cyber Risk Quantification (CRQ) market, rising to become the category leader with a platform that is not just 10%, but 10 times superior to our nearest competitor. Now, we're ready to apply the same playbook to the Third Party Risk Management (TPRM) space. We will bring a fundamental transformation in measuring and managing third-party risks, integrating it seamlessly with first-party risk management on our Safe Platform. We call it Cyber Risk Singularity :)

56

4 Comments

Easiest way you can enter into establishing Zero Trust regime , is to implement Zero Trust access Try Pligence Connect ! #pligence #zerotrust #cybersecurity #cybersolutions #cio #ciso #vpn

10

1 Comment

🔒 Is Your Business Secure? Discover Delhi's Top Firewall Providers! 🚀 In today's digital age, cyber threats are not just a distant possibility—they're happening right now in our city. Did you know that 60% of small businesses close within six months of a cyber attack? That statistic startled me when I first read it, and it highlighted the critical need for strong cybersecurity measures. Here’s why your business needs the best Fortinet firewall provider in Delhi: 1. Fortinet: The Leader in Cybersecurity Fortinet stands out as a market leader in providing robust, scalable firewall solutions. Their security platforms are trusted globally, offering advanced threat protection and helping businesses stay one step ahead of cybercriminals. 2. Top Fortinet Providers in Delhi 🌐 Delhi boasts a competitive market of top Fortinet providers who ensure your business network remains secure. When choosing a provider, look for experience, client testimonials, and a comprehensive service offering tailored to your needs. 3. Why Certified Providers Matter ✔️ Collaborating with a certified Fortinet partner is crucial for optimal security. These providers receive ongoing training and support from Fortinet, ensuring they offer the latest security updates and cutting-edge solutions designed to protect your network. 4. The Benefits of Partnering with the Best - Proactive threat management and real-time monitoring. - Customized security protocols and scalability as your business grows. - Enhanced operational efficiency and peace of mind, knowing your data is safe. Choosing the right network security provider in Delhi doesn't just protect your business; it propels it forward by enabling secure growth and innovation. 🛡️ Take Action! Secure your business network today by partnering with a top Fortinet firewall provider in Delhi. What measures are you currently taking to secure your business from cyber threats? Let’s discuss in the comments! #FortinetFirewallProviders #BusinessSecurityDelhi #CertifiedFortinetPartner #NetworkSecurityProviders #TopFirewallProvider In this digital world, let’s prioritize security and lead with confidence! 💼🔐

7

1 Comment

Thinking about major cybersecurity industry sectors as “estates” has totally changed the way I see the entire ecosystem. Rak Garg introduced the model of estates last year, and I can't stop thinking about it. I'm not kidding — it probably crosses my mind every day. The concept of cybersecurity estates is valuable because it stops your head from spinning. All the acronyms are nauseating. ZTNA, IGA, EPM, GRC, SIEM, yada yada yada — doesn't matter. Once you understand estates, you're in control again. Don't get fixated on the exact definition of "estate." It's a metaphor. All it means is a bunch of similar companies in a sector of the industry...with one super important attribute: they have at least one really big winner. To me, "one really big winner" means an estate is large enough to support one or more public companies and dozens of early and later stage startups. This means we have a small handful of established estates today — and several emerging ones on the way. I’ll be going deeper into this idea over the next few weeks. If you want to go all in right away, check out “The Cybersecurity Revolutions” on my website.

58

20 Comments

🗝️ 𝐏𝐞𝐫𝐟𝐞𝐜𝐭𝐢𝐧𝐠 𝐑𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞 𝐨𝐧 𝐀𝐖𝐒 — Using ‘keys to the kingdom’ to change the locks. How to build a ransomware tool using KMS External Key Stores (XKS). CRED’s Harsh Varagiya shares an excellently detailed walk through on how to build an AWS-RedTeam-Kit for ransomware using a simulated HSM (SoftHSM). Basically, you encrypt everything with a key you control, then take that key offline. The setup involves a modified aws-kms-xks-proxy, and Cloudflare tunnels to create a publicly accessible XKS backend. Mercifully, Harsh shares SCPs to deny the KMS API call for XKS. PoC repo: https://lnkd.in/g_mn-tpX https://lnkd.in/gh-ftMqE #cybersecurity

80

Should we use the carrot or the stick for cyber security behaviour & culture? Rewards or punishment? This is a common question. And - ultimately - an incomplete one. While the positive reinforcement of rewards is always going to get more traction than fear, uncertainty and doubt - you can do better than swag. Understanding and engaging with intrinsic motivation is way more powerful and sustainable. The shine of a new t-shirt wears off, but tapping into intrinsic motivation will last longer. Some intrinsic motivators we often identify in culture assessments include: • professional recognition, eg in annual reviews or even just a quick email cc’ing someone’s line manager (eg if they report a phishing email) • personal and family security knowledge, eg someone becoming a security champion because they want to keep their kids and / or parents safe online • making a difference, eg someone who experiences security headaches getting the chance to contribute to consultation on policy, tools & guidance that will help them, their colleagues & the wider organisation (including you!) These are my common findings but if you REALLY want to know what will intrinsically motivate your colleagues to engage in cyber security - your best bet is to ask them 💡 Thank you to Kathryn Pimblett, Molly McLain Sterling, Bonnie B. and Dustin Lehr for the conversation which spurred me on to share this post!

112

59 Comments