Stuart Williamson

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

Traditional endpoint architectures, originally designed with Windows systems in mind, simply cannot compete with the distributed and automated nature of today’s cloud attacks. 🌩️ 👉 Sysdig CTO & Founder, Loris Degioanni, shows us a better way. Examining the differences between traditional and modern instrumentation approaches, his latest white paper reveals why a cloud-first approach to detection & response is key. Read the full white paper to uncover how Sysdig’s cloud-first instrumentation delivers faster detections, richer context, and the agility needed to outpace modern attacks. 🔗: https://okt.to/IzKnUS

2

Best practice guide: security posture management VIRTUAL EVENT Wednesday, July 17, 2024 8am PT | 11am ET | 3pm GMT | 5pm CEST Get the top tips and tricks to set up your cloud environment for success Learn the importance of a comprehensive security posture management program and how to leverage our platform to effectively achieve your goals. Join this interactive session to: Learn the fundamentals and strategic importance of security posture management Gain comprehensive visibility into your environment Dive into practical steps to operationalize your security Plus, one lucky attendee will win a Meta Quest 2 advanced all-in-one virtual reality headset. Don’t miss your chance to gain key insights and uplevel your cloud security posture — register now to secure your spot. Note: This event and all prizes are exclusive to current customers of Lacework. Players are only eligible to win (1) Meta Quest 2 advanced all-in-one virtual reality headset throughout the webinar series. https://lnkd.in/epXSf9kh

5

Have you seen our current article on the Crowdstrike Disaster? It explains how it happened and gives some options to solve the problem. The first solution is to rehire your Company: CIO, CISO and Network Engineers and Administrator. Other solutions include Virtual Machines, VMs, getting rid of Consoles and Automated Service, Backups, VM Images and Library, and Using Linux to run your Virtual Workstations and Servers. This article is also for business owners and corporate executives. There are links to 2 videos by my friend Mark who retired from Microsoft and works on ALL Windows Operating Systems and Servers. We also recommend reverting to Command Line Interface, CLI, over using Consoles or Automated services. This post is a must for all IT techs, students, administrators, company owners, board of directors, executives and large Corporations. Be sure to watch the videos and then share this post or that article with your tech friends and company leadership. Regards, Todd W. Byars Computer Dudes Global Operations, Services, Research and Aerospace Homebase: Tallahassee, Florida #computerdudes #crowdstrike #disaster #automation #consoles #linux #virtualmachines #vm #workstation #server #VMlibrary #hire #computer #technicians #administrators #enginers #cio #csio #microsoft #executives #corporation #backups https://lnkd.in/g5-ECU-p

1

1 Comment

I met Mick Hollison in 2017 at a Cloudera roadshow event. He sat next to me at lunch. Our conversation went like this: Mick: Hi, I'm Mick Hollison, Cloudera CMO Me: Oh, hello. I'm Thomas, a blogger Mick: Hi Me: How long have you been the CMO? Mick: Oh, about eighteen months Me: So, you're midway through your tenure. He got the joke. Mick used to say there are only three messages that work: (1) Increase your revenue (2) Reduce your cost (3) Keep you out of jail I've heard the idea attributed to other executives, so I don't think Mick originated it. Tie your messaging to those three things and cut through the clutter.

28

2 Comments

🔒 "How do we really know whether or not our defenses are really acting and working as they should? You spend a lot of money investing in this, but how do you know that you're getting the biggest bang for your buck or that you're actually protected?" Jason (Jay) Mar-Tang, CISSP, CCSP talked with Matt Nelson, Aaron Bregg, and Anthony Coggins about moving beyond the yearly checkbox pen test. Tune in to hear more: https://okt.to/Z6t8YW Pentera #CyberSecurity #AutomatedSecurityValidation

10

Amplify detection capabilities with Recorded Future's Validated Sigma Rules, crafted by our research team to minimize false positives. Watch to see how to easily search, implement, and configure Sigma Rules without ever leaving Splunk.

3

Big changes this year in Identity and Access Management with more to come! Last year was a mega one with mergers & acquisitions galore... SailPoint acquiring Osirium, itsme® acquiring nextAuth, Ping Identity X ForgeRock to name only a few! This year's got off to a good start & I'm sure we'll continue to see more: 🚀 Ark Infotech LLC acquired Slauth.io 🚀 Delinea acquired Authomize, now part of Delinea 🚀 HID acquired ZeroSSL 🚀 1Password acquired Kolide by 1Password 🚀 SecureAuth Corporation acquired Cloudentity 🚀 Delinea acquired Fastpath Solutions, LLC 🚀 AyoPajak acquired by Privy ... any key ones I've not highlighted?? 🤓 Looking forward to seeing what's next! #cybersecurity #identity #iam #identityandaccessmanagement #pam #privilegedaccess #identirati

31

With Cloud Marketplaces becoming one of the leading ways customers want to transact, having an aligned partner strategy is key to success. I have had the pleasure of working with Darren Sharpe for several years now and with Fortinet priding themselves on there channel approach to customer success it is great to continue with our collaboration as Microsoft continue with there Partner Private Offer launch. With the pre-launch now is full swing it has been great seeing all the interest out there in the market and pipeline grow and grow. If you are still trying to understand marketplace this session below are some great insights. Feel free to reach out if you have any questions or want to learn more. #cloudsecurity #cloudmarketplace #fortinet #fortinetpartner

23

1 Comment

[eBook] Using Vertical Pod Autoscaler (VPA) in Production by Daniele Polencic. You'll get practical, "how-to" advice for configuring the VPA to avoid common pitfalls and unlock its full potential. Learn how to: - Master the art of setting the right requests and limits for CPU and Memory - Understand the two VPA modes: Recommender and Updater - Overcome the challenges of VPA when using garbage-collecting languages, DaemonSets, (Cron)Jobs, and StatefulSets - Handle memory leaks and resource spikes during pod initialization with the VPA - Leverage the VPA alongside the Horizontal Pod Autoscaler (HPA) Download your copy today! https://hubs.la/Q02xWGmG0 #Kubernetes #k8s #VPA #HPA #devopstools #devops #learnk8s

3

Recently I've been using HashiCorp Terraform CDK with the Okta provider. The Okta provider doesn't have nearly enough (any?) validation on configuration. Field lengths, enums, conditionally required fields... none of these things are caught by the provider. There also isn't a "dry run" mode. Without CDK, configurations could merge and then fail in the main pipeline deployment, temporarily blocking deploys at a minimum. With CDK, I can add configuration validations, custom documentation, relational lookup/association between resources. I'm thinking about pursuing an Oktane presentation for this, if it has not been done already.

4

A perfect pair! Rubrik abd Okta ave teamed up to help safeguard your data against identity-based #CyberAttacks. Learn more about the key components of this integration from Rubrik and Okta and find out how your organization can benefit 👉 https://rbrk.co/3XEcrV6

4

🧑‍💻 Every company is now a software company, and innovation is crucial. But new authorization requirements can be a headache for developers. Our Okta blog post explores why traditional Role-Based Access Control (RBAC) methods might not be enough and introduces Fine-Grained Authorization (FGA) as a more secure, precise, and scalable solution. Discover the 5️⃣ key questions to ask to determine if FGA is right for your organization. #ItsOkta #Authorization #FGA #CyberSecurity

2

This is part two of a three-part blog series on how MDR can transform your SIEM investment. Understand the Cyber Kill Chain, the attack lifecycle, and how MDR and SIEM play into each:

1

App outages leaving your teams in the dark? See how unified observability and security from Dynatrace prevents problems before they start and keeps your business working perfectly. No worries, you've got Dynatrace. Learn more at https://dynatr.ac/3yO08gh.

3

Zenity 𝐋𝐚𝐛𝐬 𝐑𝐞𝐥𝐞𝐚𝐬𝐞𝐬 𝟏𝟎 𝐎𝐩𝐞𝐧-𝐒𝐨𝐮𝐫𝐜𝐞 𝐓𝐨𝐨𝐥𝐬 𝐭𝐨 𝐔𝐧𝐜𝐨𝐯𝐞𝐫 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 𝐀𝐈 𝐀𝐠𝐞𝐧𝐭𝐬 𝐚𝐧𝐝 𝐋𝐨𝐰-C𝐨𝐝𝐞 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 The Security Assessment Hub is the first-ever collection of open-source vulnerability discovery tools designed to help security teams gain visibility into potential risks associated with AI agents and low-code development across the enterprise. 𝐖𝐡𝐲 𝐢𝐭 𝐦𝐚𝐭𝐭𝐞𝐫𝐬 Security teams now have a free, open-source toolkit to uncover vulnerabilities in AI agents and low-code applications across Microsoft 365 environments. 𝐓𝐡𝐞 𝐛𝐢𝐠 𝐩𝐢𝐜𝐭𝐮𝐫𝐞 Zenity Labs has released the first-ever collection of vulnerability discovery tools designed to help organizations proactively identify security risks in emerging tech landscapes. 𝐁𝐲 𝐭𝐡𝐞 𝐧𝐮𝐦𝐛𝐞𝐫𝐬 ↳ 10 tools targeting Microsoft 365 Copilot, Copilot Studio, and Power Platform ↳ Free self-service resource for threat discovery ↳ Focuses on identifying: ○ Bots with unauthorized access ○ Exposed resources in PowerApps ○ Potential data extraction risks "Our goal is to think like attackers and enable organizations to proactively secure their environments," says Michael Bargury, CTO and Co-founder of Zenity. Explore the Zenity Security Assessment Hub and start assessing your Microsoft 365 environments today—for free! #AI #LowCode #genai #m365 #AppSec #powerplatform #powerapps #powerpages #SecuredByZenity

11