Beau R.

Pssssst-NISsssssT - are you ready for the future because it is here now? #NIST is close to making one of their most #monumental announcements in decades. #Cybersecurity is at the precipice of a global game changing moment. A critically relevant #quantum computer (#CRQC) is nearly upon us and QuSecure is the leading company that can help #protect you and your #data. Reach out to QuSecure to learn more about how you can be prepared with our QuProtect #PQC #crypto agile software today. https://lnkd.in/gpdXmmBJ.

23

Looking for a way to stay cool? Grab a popsicle and catch up on the latest issue of the AuthZ newsletter. If you’re an #identity or #authorization enthusiast, this weekly digest is a must read. Subscribe and share!

2

Great story on how to apply Cyber Risk Management to design a more effective Cybersecurity strategies and align security budget and investments with the business.

5

3 Comments

Expel 🤝 modePUSH There's nothing more gut-wrenching for a company than experiencing a breach. Businesses of all sizes and industries face this threat every day, and despite the best defenses, falling victim is often easier than anyone wants to admit. modePUSH steps in during those critical post-breach moments, helping companies recover and rebuild. Now, with our partnership, Expel and modePUSH are working together to ensure that companies don’t have to make that call twice. Together, we help modePUSH customers not only recover but also strengthen their security posture to prevent future incidents. Discover how modePUSH + Expel can support your security strategy:

17

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

189

2 Comments

↗ The 2024 Gartner® Market Guide for CNAPP confirms what we @ Orca Security long believed: cloud security is evolving towards comprehensive protection, seamless integration, and intelligent risk prioritization. As a recognized vendor, I believe this approach is crucial for businesses navigating today's complex cloud landscapes. It's not just about security—it's about enabling innovation while maintaining a strong security posture. Read Gil Geron 's analysis and get the full Gartner report: https://lnkd.in/d-sD_qyA

3

All treats, no tricks this Hallowe'en for ContraForce! Congrats to the team for raising a $3.25M round under the leadership of founders Stan Golubchik and Ricky Melendez and board members Maurice Boissiere and William Kilmer. ContraForce is transforming how managed security services are delivered by allowing service providers to jumpstart a new line of business, improve their margins and deliver better client outcomes. Security operations management represents a $500B total addressable market with only a ~5% current penetration today. The MDR market itself is growing at 26% CAGR. No surprise, given that adding an MDR service is a top priority for over 300K MSPs around the world. ContraForce Storm allows MSPs to deliver an MDR service immediately without investing in a SOC or security staff for most use cases. Unlike other outsourced MDR services, with Storm MSPs can: -Outsource threat detection, investigation ... and remediation! ... while maintaining 24/7 visibility of their client's environment. -Manage their clients existing EDR and SIEM tools without having to license new proprietary solutions. -Maintain the integrity of their client's environment. There are no agents to deploy. Client data stays with their clients. MSSPs can use the AI and automation of the ContraForce Spark workbench to efficiently deliver managed EDR and SIEM services themselves, at an affordable per user/month price. For more information on Storm and Spark: https://lnkd.in/ebetY4UP

40

5 Comments

Join Prevalent on August 7 to learn how to improve cross-functional collaboration and strengthen your TPRM program. The session will cover strategies to centralize TPRM activities, unify processes, establish a single source of truth, and increase visibility into third-party risk intelligence. #TPRM #VendorRisk #RiskManagement

3

1 Comment

This weekend’s news coverage of #DeltaAirlines and #Crowdstrike’s … disagreement?… about who’s responsible for the July 19 outage that Delta claims caused a half-billion dollars of damage to their business raised an interesting incident response planning question. If news reports are to be believed, Delta either never received or directly refused an offer of assistance from Crowdstrike’s during the outage that was hobbling the services of the largest commercial airline fleet in the world. This discussion isn't really about Delta or Crowdstrike: it's about how you can learn from their problem. If you have a vendor that’s deeply in your technical environment, and they are implicated as a proximate cause of serious disruption, do you actually want their help? What guidance can you get from your continuity and response plans for this? Ultimately, it’s going to be a risk management decision, balancing risk of downsides against probabilities of upsides. Organization might benefit from a short series of tabletop discussions based on variations of the reported situation between Delta and Crowdstrike. Tailored to your organization, consider each of the following realistic possible situations: 1. If the disruptions appears to have been caused by the vendor making a material error (like pushing an update that cripples millions of systems globally, but which had inadequate controls and thus did not undergo appropriate QA and testing). 2. If the disruption appears to be caused by an unforseen interaction with the specialized nature of your environment. 3. If the disruption appears to be caused by some kind of error in your organization in how you use or integrated vendor products and services. Ask yourself: is your response planning adequate to address these kinds of disruptions? Note that this isn’t really a technical problem: this is really a business decision problem. What information do your executives need to have to make an informed decision as to whether to accept the help or not, and how will you, advising on security, help facilitate them getting that information? Playing these scenarios openly and honestly can help to expose your executives’ risk tolerance, and help them to make easier, faster, and ultimately better decisions for your business.

8

1 Comment

Cybersecurity Threat Roundup #14: Authy, GuardZoo, Medusa, and more. A new VMX Labs Cybersecurity Threat Roundup has been compiled by Verimatrix cybersecurity researchers and data scientists. Give it a read! https://lnkd.in/gjGPZZDh

8

🔒 7 Ways for Critical Infrastructure to Thwart State-Sponsored Attacks State-sponsored hackers targeting critical infrastructure is an escalating concern, highlighted by recent advisories from CISA and other security-focused government bodies. In our latest blog, Shawn Taylor, Senior Director of Solutions Engineering at Xage Security, explores seven foundational protections that can significantly mitigate these threats. 👉 Read the blog to understand how to fortify our critical infrastructure against state-sponsored attacks. #Cybersecurity #CriticalInfrastructure #ZeroTrust #StateSponsoredAttacks

7

Tired of Cyber Disneyland? Get the facts and find your way around #Cybersecurity #MDR at the N-able Roadshow in #Anaheim today. Hear from vendors, and join us for an incident response tabletop exercise. As pilots are fond of saying, "If it doesn’t feel right, go around. It’s better to explain why you did than have an investigator discover why you didn’t." TTXs are the best way to figure out what's right, before it goes wrong. @N-able roadshows are free--cyber incidents are costly. Register below: https://lnkd.in/g9A8dt8G

19

Mimecast and our partner, CrowdStrike, are addressing the need for robust and adaptive solutions that protect against increasingly sophisticated threats. Learn more in the blog, and find us at #FalCon2024!

3

NEW ebook: Cyber Resilience Starts with Trusted Data Integrity 🛡️ Learn how to: • Strengthen cyber resilience to combat ransomware. • Save costs with a faster recovery and reduced downtime. • Use SLAs to detect corruption. Invest smarter in cybersecurity for stronger recovery and protection. https://lnkd.in/eY_UhsKJ Rob Mossi Melissa Romillo Natalie S. #Cybersecurity #DataIntegrity #CyberResilience #Ransomware #BusinessContinuity

19

Everyone is busy but security practitioners will make time for vendors that respect that fact, said Steve Zalewski. This was discussed on CISO Series Defense in Depth “What Triggers a CISO?” Listen to the full episode: https://lnkd.in/gtZtzmuy #CISOseries #CISO #security #infosec #informationsecurity #cybersecurity

3

Cyber insurance companies need a better understanding of cyber risk. CISOs are moving to a risk-based approach to cybersecurity to optimize their budget and resources while also interacting with executives and their board using business-level metrics, not CVE counts. This is exactly what DeNexus does with a unique focus on industrial companies with Cyber-Physical Systems (CPS) or OT/ICS environments. Check us out today at https://www.denexus.io/ #OTcybersecurity #OTcyberrisk #CRQM #cyberinsurance #CPS

14

My good friend Patrick Garrity 👾🛹💙 has done phenomenal work on vulnerability research in the last couple of years. His most recent research, analyzing vulnerabilities from the past 10 years, indicated that only 1.1% of vulnerabilities are publicly known to get exploited in the wild 😮 [credit to: Patrick Garrity 👾🛹💙for this data point] Just 1.1% ... Separate research by Alex Pinto the DBIR team (Verizon Business) suggested that vulnerabilities tagged/added to CISA KEV have a very short exploitation window, while non-CISA KEV vulnerabilities usually have longer time frames for exploitation. While these studies are independent and run on different data sets, the reality is similar. Your organization could have thousands of vulnerabilities at any given time, but only a very small number of them truly matter. The best vulnerability program should be foundational in prioritization. Ideally, using data/context from the organization will help focus on what you should remediate/resolve. If any of this research interests you, we will discuss this and more in our upcoming webinar with Alex Pinto & Aravind Iyengar (Head of engg and AI at Balbix). https://lnkd.in/guk-isza

22

2 Comments

Somedays, maybe most days, it seems like you just cannot get ahead of bad actors' attacks and scams. But you can! Together with Arkose Labs. Check out this new video. #AccountSecurity #BotManagement #cybersecurity #cyberattacks #OnlineFraud #AI

3