Ken Dunham

🗞️ In CyberScoop: "[T]he years of work to build up federal collaboration with industry are paying off, from the Joint Cyber Defense Collaborative to the National Risk Management Center — the 'proto' version of the JCDC, [Chris Krebs] said — to the National Security Agency’s Cybersecurity Collaboration Center. "'We’re starting to see that these things work with the resources and time into it, but it’s generating results and there’s no better evidence of the results, I think, than when Russia invaded Ukraine, and the ‘Shields Up’ campaign and the breadth to which that was able to change behavior in industry,' said Krebs, now chief intelligence and public policy officer at SentinelOne." To learn more, read the full article by Tim Starks: https://s1.ai/CS-Collab

42

On July 24, 2024, Progress published a knowledge base article disclosing a critical vulnerability (CVE-2024-6327) impacting Telerik Report Server, find Arctic Wolf's recommendations: https://ow.ly/OWVG50SMptG #EndCyberRisk

5

New Blog Post! Ensuring Security: The Crucial Role of NDAA Compliance 🔒 💻 Protects Sensitive Data 🤝 Enhances Trust 🛡️ Mitigates Security Risks ✅ Required for Federally Funded Organizations Explore why NDAA compliance is essential at https://ow.ly/lRPM50U5qt1 #NDAA #Security #Compliance #DataProtection #NationalSecurity #RiskManagement #ComplianceMatters #FederalRegulations #DataSecurity

15

DoD is proposing to amend the Defense Federal Acquisition Regulation Supplement (DFARS) to implement contractual requirements related to the Cybersecurity Maturity Model Certification (CMMC) 2.0 Program. Read the proposed rule here: https://hubs.li/Q02Lt0VR0 #CMMC #CMMC2.0

10

New Blog Post! Ensuring Security: The Crucial Role of NDAA Compliance 🔒 💻 Protects Sensitive Data 🤝 Enhances Trust 🛡️ Mitigates Security Risks ✅ Required for Federally Funded Organizations Explore why NDAA compliance is essential at https://ow.ly/C8JP50U5qr0 #NDAA #Security #Compliance #DataProtection #NationalSecurity #RiskManagement #ComplianceMatters #FederalRegulations #DataSecurity

7

In this article for the IACP's Police Chief Magazine, PenLink's Johnmichael O'Hare and our own Trey Amick talk about how digital forensics and open-source intelligence (#OSINT) are playing crucial roles in modernizing police investigations: https://ow.ly/UH9O50SUg9q #DFIR

29

Arctic Wolf Labs have identified ten major threat actor tactics, techniques, and procedures (TTPs) found in the majority of incident response engagements. Understanding how these TTPs are leveraged, and how you can protect your environment against them, is crucial. https://ow.ly/eqAb50Su7pr #EndCyberRisk

5

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

Learn about freely available resources that can help you implement a #ThreatInformedDefense and see the value of collaborative #RandD. Download the Center for Threat-Informed Defense's latest annual report now. https://hubs.ly/Q02tSpSp0 #cybersecurity #cyberattack #cyberdefense #cyberthreats #ctid #mitre

14

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

6

Episode 2 of our threat modeling series is fast approaching. Want to build a strong core to your threat modeling program? 🔨 Hear from John Taylor, CSSLP, CISSP, SAFe®SPC and Irene Michlin on how processes, tooling, training and support can all help to build those foundations. https://hubs.li/Q02GVMKJ0 #threatmodel #threatmodelingseries #securebydesign

2

The last installment in the series on the 5 steps of CTEM. If setting up a comprehensive CTEM program is in your sights, don't miss this deep dive into how to proactively remediate threat exposures. Check it out now 👇🏻 https://lnkd.in/eUk3Wd_i

6

The last installment in the series on the 5 steps of CTEM. If setting up a comprehensive CTEM program is in your sights, don't miss this deep dive into how to proactively remediate threat exposures. Check it out now 👇🏻 https://lnkd.in/eUk3Wd_i

4