Dave Barnett

🔑 The #PKI landscape is rapidly changing - is your organization keeping up? With #NIST releasing the first set of post-quantum cryptography encryption standards and shorter certificate validity on the way, it's time to assess your approach to Certificate Lifecycle Management (CLM) 💡 📥 Download The CISO’s Guide to CLM and get insights into streamlining #CLM, adapting to new PKI industry changes, and achieving crypto-agility: https://lnkd.in/e84Ceput

1

This week in cyber - 20th July ->26th July 1. The post incident report (PIR) for the Crowdstrike BSOD event has been released. Crowdstrike delivers configuration content to their EDR in 2 different ways formats, Sensor content (which is used to update capabilities expected to be used long term on the CrowdStrike solution) and Rapid Response content (used to respond to immediate threats at operational speed). The PIR details the event was caused by an issue stemming from a Rapid Response content push which was allowed to be pushed out to all sensors after passing a content validator. A bug in the content validator allowed this content to be pushed out with problem content data which caused the associated Microsoft operating systems to crash. Crowdstrike have now put in preventative measures in place to avoid a similar issue in future. 2. Knowbe4 have released a statement detailing how they employed a North Korean hacker as an IT personnel. A North Korean Hacker was able to steal a real American identity and create a deepfake that passed their internal checks around background, history, video interviews and references. Post the "IT" staff receiving their MacBook laptop, KB4's internal SOC were instantly alerted to an attack happening on the device, it appears the MacBook had been plugged into an IT mule farm and was exhibiting unusual behaviour such as manipulating history files and executing unknown executables. FBI were alerted and Mandian is now involved in digital forensics. Applauds to Knowbe4 for their full transparency. 3. IDC's research into Cybersecurity show that there will be a significant increase in expenditure prior to the Paris Olympics. This olympics will be the most technologically advanced and interconnected Olympics to date with significant advances in cyber defence and offence capabilities since the last olympics. In France, a national service (ANSSI) was created specifically to prepare the strategy around cybersecurity attack prevention at the games and it is believed that French enterprises are wholly prepared for the unprecedented attack amounts that are to come. 4. Wiz has walked away from the $23B acquisition offer from Alphabet. In an internal memo to the business the Wiz Founder, Assaf Rappaport, detailed his confidence in the company reaching $1b ARR before pursuing sales of shares to the public. This is indeed a very bold statement by the company that has been the fastest growing cybersecurity organisation to reach unicorn status. It will be seen how fruitful this play is.

24

3 Comments

Cybersecurity Awareness Month ends on 31st October, but the free Proofpoint #Cybersecurity Awareness Kit will still be available. Download your copy today to equip your employees with the knowledge and tools they need to #StaySafeOnline #SecurityAwareness #CAM

3

In an era of escalating cyber threats, a sophisticated and multilayered strategy is crucial for safeguarding your organisation. At Red Helix, we champion a comprehensive cybersecurity approach to ensure the security and resilience of businesses in an ever-evolving digital landscape. 📽️ Watch the animation below to see how we can deliver simple cyber security for your business. ----------------------------------------------------------------------------------- ⬇⬇⬇⬇⬇⬇ 📩 Reach out via messenger to discuss how we can help fortify your business from cyber attacks and criminals! 🤝🔒💼 #Cyber #Cybersecurity #XDR #MDR #EDR #NDR #SOC #SIEM

8