Victor Tong

The ICO has posted a document discussing #CyberSecurity areas to learn from others regarding previous breaches (https://lnkd.in/esvupixY) and apparently failing to patch systems processing personal data isn't one of the biggest issues. Does anyone believe that? #BeyondCyber #GovernanceMatters #DataProtection

5

🚨 The Great Data Heist: When PLM Goes From Secure to Exposed 🚨 What if your most guarded trade secrets—your crown jewels—were left in plain sight, ready for anyone with a little skill to grab? That’s the chilling reality with CVE-2024-21287, a zero-day vulnerability targeting Oracle Agile PLM. 💎🔓 Here’s the twist: no passwords. No authentication. Just one exploit, and sensitive files are in the hands of attackers. Why You Should Care: Oracle Agile PLM isn't just software; it's the backbone of collaboration and innovation for countless businesses. With this vulnerability, attackers can remotely grab files under PLM’s application privileges—without ever needing to log in. This isn't just a security breach; it’s a blueprint theft waiting to happen. 🏗️ The Heist in Motion: CrowdStrike confirms this isn’t theoretical—it’s happening right now. 🎯 CVSS score? 7.5. Serious enough to warrant immediate action. Think of it as leaving the vault door open while attackers walk in and help themselves. The Countermove: 🔧 Patch it: Oracle released a fix—don’t delay. Upgrade your PLM environment now. 🛡️ Isolate it: Limit network exposure until the patch is applied. Think of it as shutting the gates. 🔍 Hunt it: Monitor for signs of compromise. If it’s been exploited, act fast. The Bigger Picture: Vulnerabilities like this aren’t just about stolen data—they’re about trust, reputation, and competitive edge. Staying ahead means taking the fight to the attackers, not waiting for them to strike. It’s time we stop treating patching as optional and start treating it as an act of survival. So, will your organization act like the impenetrable fortress it’s meant to be—or leave the drawbridge down? #PLMSecurity #Oracle #ZeroDay #VulnerabilityManagement #DataProtection #StayAhead" https://lnkd.in/evSgAyUD

2

Last month I published a blog around access control and its importance in Cyber Essentials and ISO 27001. Please find my blog below and feel free to post your thoughts and any questions you have. https://lnkd.in/ejv_NHi8

5

SUMMARY: Security vulnerabilities in Citrix Virtual Apps could allow attackers to gain unauthorized access and control over affected systems, with potential severe implications. MAIN POINTS: - New flaws in Citrix Virtual Apps can lead to privilege escalation and remote code execution. - Attackers exploiting these vulnerabilities could fully control compromised systems. - Citrix has not yet released updates to address these security issues. TAKEAWAYS: - Organizations using Citrix Virtual Apps should implement additional security measures immediately. - Regular vulnerability assessments can help mitigate the risks associated with these flaws. - Stakeholders must stay informed about updates from Citrix to protect their systems. #Citrix #Vulnerabilities #NetworkSecurity #cybersecuritynews

3

*New Video* 🔔 - Let's discuss replacing Legacy Microsoft Entra ID MFA settings with the "Report Suspicious Activity" service settings. It's important to note that the legacy MFA settings will be deprecated as of 1st March 2025, so organisations should plan their transition to the new settings to maintain optimal security. 🔐 #security #entra #mfa #community #mvpbuzz #identity #Microsoft365

74

IBM Patches Critical RCE Vulnerabilities IBM has fixed two high-severity RCE flaws: 🔹 CVE-2024-52899 (CVSS 8.5): Arbitrary code execution in Data Virtualization Manager via malicious JDBC URL parameters. 🔹 CVE-2024-45801 (CVSS 7.3): Prototype pollution in Security SOAR allowing RCE through the UI. 💡 Fixes: Update Data Virtualization Manager to the latest fix packs (v1.1/v1.2). Upgrade Security SOAR to v51.0.4.0. Act now to secure against potential exploitation! #CyberSecurity #IBM #PatchNow #IncidentResponse https://lnkd.in/eDtYrDTf

1

#CyberSecurity #PCIDSS4.0 #ContinuousLearning #Deepaksecurity 📚🔒 In PCI DSS Version 4.0, Requirement 9 holds paramount importance. It emphasizes the need for robust controls to restrict physical access to cardholder data and systems. Join Deepak as he explores how continuous learning about Requirement 9 enhances cyber resilience and fortifies your organization's security posture. 🛡️💡

3

Unified security and observability is key to ensurring that digital resilience can be delivered, and if an incident happens you learn and act quickly to resolve the incident and not see the same incident again, #splunk Omdia

2

RFC 9635 (This is now a Proposed Standard) Grant Negotiation and Authorization Protocol (GNAP) This protocol solves many of the same use cases as OAuth 2.0 [RFC6749], OpenID Connect [OIDC], and the family of protocols that have grown up around that ecosystem. However, GNAP is not an extension of OAuth 2.0 and is not intended to be directly compatible with OAuth 2.0. GNAP seeks to provide functionality and solve use cases that OAuth 2.0 cannot easily or cleanly address.

18

4 Comments

An excellent research report by Silverfort on the rising risks of Non-Human Identities, where they zero in on the most prevalent and regularly compromised type of NHIs - Active Directory Service Accounts. Key Takeaways from the report : ▶ 8 out of 10 organisations are unable to prevent the misuse of service accounts in real time, since visibility and security is sporadic or missing. ▶ 30% of a company's users accounts are service accounts ▶ 78% of organisations aren't confident they can stop an attacker performing lateral movement with compromised credentials ▶ 46% of service accounts regularly use a weak authentication protocol (NTLM) leaving them open to credential theft and abuse ▶ only 5.7% of organisations have full visibility into their service accounts We at the NHI Mgmt Group would concur with this research report, having dealt with 50-100k+ service accounts at large global organisations, in many cases we have found a large proportion of these service accounts that : ▶ Stale or Inactive ▶ Lack Account Ownership ▶ Have Excessive Privileges ▶ Lack Environment Segregation ▶ Shared across Applications ▶ Lack Password Cycling ▶ Inventory challenges due to Nested AD Groups The Silverfort solution offers a unique way to handle these service account exposures, including prevention of exposures in real-time. Link to the full report and our Top-10 NHI Risks will be shared in the comments #serviceaccounts #activedirectory #nhis cc Hed Kovetz Alicia diVittorio Jessica Stone Nick Colin Ud (Udi) Peled Catrina Garner Ben Goodman 🇺🇦 Kev Smith Ron Rasin Jonathan Nativ Scott Goodall John Paul Cunningham Shai Haim

80

13 Comments

Unlike traditional Web Application Firewalls (WAFs), Check Point CloudGuard WAF leverages advanced machine learning to block known and unknown attacks, ensuring real-time threat detection and protection against zero-day attacks such as Log4j and MOVEit. CloudGuard's new API discovery feature provides organizations with comprehensive insight into their API inventory across cloud environments, enabling security teams to effortlessly identify publicly exposed or vulnerable APIs. Learn more: https://lnkd.in/gJ_FQw5e

4

1 Comment

Good morning, all! Paul Gogarty and I are proud to be presenting a #webinar on the #CAF guidance framework next week! Are you a power generation company? Do you work in the energy industry? Perhaps you are a site manager for a critical infrastructure facility; if so, you may need to be aligned with #CAF soon! See the link below on the ABB Process Automation post to register your interest 💻🤓

12

Top skills gaps in #cybersecurity professionals: more than half need to develop soft skills, and many need to catch up with #cloud computing. Do you agree with the 2024 #StateofCybersecurity report findings? Read more: https://lnkd.in/eCn7bmna

2

What are the changes from NIST CFS v1.1 to v2.0? 5 Functions -> 6 Functions 23 Categories -> 22 Categories 108 Subcategories -> 106 Subcategories How is this impacting your Organisations? https://lnkd.in/gYvck6Ty #NIST #CyberSecurity #Security #Governance #RiskAnalysis #VendorManagement

1

🔒 Take API security to the next level with Apigee Advanced API Security! Learn how to configure Security Actions to automatically flag and block suspicious traffic detected by Google’s machine learning threat detection models. This guide by Megan Bruce covers best practices for getting started with security actions to protect your APIs and keep your backend services safe. Check out the article ➡ #APIManagement #Security #GoogleCloud #APIs #Apigee

4

This document was commissioned by the eBPF Foundation to provide security information and guidance to large enterprises using or looking to adopt eBPF-based tools. https://lnkd.in/gRXJ6ZUe

2

🛡️ Security Lessons from the DemandScience Data Breach 🛡️ 📰 Brief Summary: The leak of 122 million records from B2B data aggregator DemandScience (formerly Pure Incubation) highlights the risks associated with storing extensive data without adequate lifecycle management. Although the compromised system was reportedly decommissioned, the data was still accessible, illustrating a significant lapse in data protection. 1️⃣ Key Takeaway for Your Security Controls Ensure strict data lifecycle management. Regularly review and securely dispose of or archive outdated or unused systems and datasets. Decommissioned systems with sensitive data should be securely wiped and protected to prevent unauthorized access even after they are no longer in active use. 2️⃣ Mitigation Steps If You Handle Large Volumes of Customer Data Data Minimization: Collect and retain only essential information, and periodically review what data is necessary to retain. Access Controls: Enforce strict access restrictions on all data, including archived or legacy systems, and conduct regular audits to detect unauthorized access attempts. Decommission Protocols: Ensure decommissioned systems are fully secured or destroyed according to industry best practices, such as using encryption and data-wiping procedures. 3️⃣ General Security Actions for All Organizations Managing Data Ask yourself these critical questions: Do we have a data retention and disposal policy for legacy systems? Are decommissioned systems securely archived or disposed of following data protection standards? Is there ongoing monitoring for unauthorized access, even for older or inactive data repositories? 🔍 Security Reminder: Cybersecurity isn’t just about protecting active systems; it's also about managing data throughout its lifecycle. Regularly audit and securely dispose of outdated systems and data repositories to prevent breaches from legacy data. Stay vigilant and always prioritize data minimization and secure archiving. #DataProtection #BreachPrevention #DataLifecycleManagement #CyberResilience #ProtectLegacyData https://lnkd.in/eyw3JzbJ

1