Ben Trook

We just published our 2nd Annual Cyber Risk Landscape Peer Report. Lots of interesting insights but most importantly, we learned that while MDR is crucial, it cannot operate in isolation. The 2024 Cyber Risk Landscape Peer Report survey responses highlight the need for a symbiotic relationship between MDR and proactive security elements. This integrated approach involves: • Regular evaluations to identify and prioritize potential threats. • Maintaining a comprehensive inventory of all IT assets to detect vulnerabilities. • Proactively identifying and mitigating vulnerabilities to prevent exploitation. • Ensuring all endpoints are protected and monitored for suspicious activities. • Event and threat analysis using cybersecurity frameworks for standardized threat identification and targeted mitigations. If you are working with an MDR provider today, how are they checking the boxes on this type of integrated approach? #MDR #BlackHat

14

Hear from my colleague Neville Pattinson in the article below as he discusses the promise of W3C verifiable credentials and the way they are being built into trust frameworks for #ID and other credentials.

1

From 𝗟𝗟𝗠𝗷𝗮𝗰𝗸𝗶𝗻𝗴 draining cloud resources to 𝗥𝗨𝗕𝗬𝗖𝗔𝗥𝗣 operating in stealth for over 10 years, Sysdig's 2024 𝘎𝘭𝘰𝘣𝘢𝘭 𝘛𝘩𝘳𝘦𝘢𝘵 𝘙𝘦𝘱𝘰𝘳𝘵 uncovers the tactics, targets, and trends shaping the threat landscape. 🌐 Dive into Sysdig Threat Research Team’s findings on the 𝗳𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝗿𝗶𝘀𝗸𝘀 and 𝗲𝘅𝗽𝗮𝗻𝗱𝗲𝗱 𝗮𝘁𝘁𝗮𝗰𝗸 𝘀𝘂𝗿𝗳𝗮𝗰𝗲 facing cloud-based organizations. 🌩️ Is it time to rethink your cloud defense strategies? The research points to one clear truth: 𝗿𝗲𝗮𝗹-𝘁𝗶𝗺𝗲 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗿𝗲𝘀𝗽𝗼𝗻𝘀𝗲 𝗶𝘀 𝗻𝗼 𝗹𝗼𝗻𝗴𝗲𝗿 𝗼𝗽𝘁𝗶𝗼𝗻𝗮𝗹. 👀 Learn why in the full report 👉 https://okt.to/tuCxkJ

5

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

Stay Ahead of Cyber Threats with PacketWatch MDR+DFIR PacketWatch offers comprehensive Managed Detection and Response (MDR+) plus Digital Forensics and Incident Response (DFIR) capabilities to help you detect, respond to, and eliminate threats before they can impact your business. ✔️ 24/7 Monitoring by elite threat hunters ✔️ Full network visibility through Full Packet Capture (FPC) ✔️ Rapid threat containment and expert-led investigations ✔️ Actionable recommendations to close security gaps The PacketWatch™ proprietary platform and expert team ensure your organization is protected from even the most advanced threats. Are you ready to strengthen your security posture? Reach out to learn more... #Cybersecurity #MDR #IncidentResponse #ThreatHunting #DFIR #PacketWatch #Partnerships CrowdStrike SOCRadar® Extended Threat Intelligence Converge Technology Solutions Corp.

12

Come join Binary Defense for a live webinar – JUNE 19 at 2 PM ET Why? You will hear from our founder David Kennedy and Director of threat research John Dwyer on managed deception and its role in enhancing threat detection and response. This session will cover why deception works, introduce the concept of Managed Deception, and explain why it should be part of any comprehensive Detection and Response strategy. We will also explore why deception should be considered when evaluating the maturity of your Managed Detection & Response provider. Attendees will gain practical insights and real-world examples of how Managed Deception can bring direct insights into attacker behaviors that help your detection and response efficacy and build cyber resilience. Hit the link to register and will see you there!

6

Read about automating your cybersecurity compliance, safeguarding customer data with ownership, and bulletproof documentation with the latest from Deadbolt Security https://lnkd.in/epVahtXD

7

🪧 SIEM ≠ MDR Welcome to part one of our three-part blog series where we share the difference between a SIEM system and MDR and how MDR can transform and augment your SIEM tool investment.

1

Looking forward to seeing the impact of MITRE EMB3D on #SupplyChainSecurity

3

Another Permiso Security open-source tool to help secure the community from malicious activity in Snowflake. The recent Snowflake compromises shine a light on the limitations of posture focused security solutions including CSPMs and SSPMs -- although useful, these tools are unable to detect advanced use cases of account takeover or impersonation attacks. Reach out to understand why having runtime security scanning capability in your Snowflake environment is essential. See our collection of open source tools on GitHub: https://lnkd.in/gqhHPhb7 #cybersecurity #cloudsecurity #runtime #snow #snowflake #opensource #itdr

28

2 Comments

Zenity 𝐋𝐚𝐛𝐬 𝐑𝐞𝐥𝐞𝐚𝐬𝐞𝐬 𝟏𝟎 𝐎𝐩𝐞𝐧-𝐒𝐨𝐮𝐫𝐜𝐞 𝐓𝐨𝐨𝐥𝐬 𝐭𝐨 𝐔𝐧𝐜𝐨𝐯𝐞𝐫 𝐕𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 𝐀𝐈 𝐀𝐠𝐞𝐧𝐭𝐬 𝐚𝐧𝐝 𝐋𝐨𝐰-C𝐨𝐝𝐞 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 The Security Assessment Hub is the first-ever collection of open-source vulnerability discovery tools designed to help security teams gain visibility into potential risks associated with AI agents and low-code development across the enterprise. 𝐖𝐡𝐲 𝐢𝐭 𝐦𝐚𝐭𝐭𝐞𝐫𝐬 Security teams now have a free, open-source toolkit to uncover vulnerabilities in AI agents and low-code applications across Microsoft 365 environments. 𝐓𝐡𝐞 𝐛𝐢𝐠 𝐩𝐢𝐜𝐭𝐮𝐫𝐞 Zenity Labs has released the first-ever collection of vulnerability discovery tools designed to help organizations proactively identify security risks in emerging tech landscapes. 𝐁𝐲 𝐭𝐡𝐞 𝐧𝐮𝐦𝐛𝐞𝐫𝐬 ↳ 10 tools targeting Microsoft 365 Copilot, Copilot Studio, and Power Platform ↳ Free self-service resource for threat discovery ↳ Focuses on identifying: ○ Bots with unauthorized access ○ Exposed resources in PowerApps ○ Potential data extraction risks "Our goal is to think like attackers and enable organizations to proactively secure their environments," says Michael Bargury, CTO and Co-founder of Zenity. Explore the Zenity Security Assessment Hub and start assessing your Microsoft 365 environments today—for free! #AI #LowCode #genai #m365 #AppSec #powerplatform #powerapps #powerpages #SecuredByZenity

11

🤔 Thinking about building your own data pipeline? 🩹 You’ll need more than band-aids and bubblegum to keep it together—but don’t just take our word for it. Join Cribl on Wednesday, September 25, 2024 as Matt Snyder and Nate Piquette from Omnissa's Security team share their hard-earned lessons while constructing and scaling a home-grown data pipeline. 🚨 Spoiler alert: it wasn’t always smooth sailing, especially when growing SIEM ingestion to multiple terabytes per day. This live session will cover: 🔄 Exploring the trade-offs between developing your own solution and purchasing one, and why the decisions you make today can ripple into long-term consequences. 📈 The ups and downs of growing a data pipeline from small to massive, and how to keep your sanity intact as you scale from a few logs to terabytes per day. 🧰 Practical strategies for managing unruly data, ensuring reliability, and building a scalable pipeline. Plus, at the end of the session, you can participate in our live Q&A to ask questions and engage with subject matter experts. Sign up today to reserve your spot (and get the on-demand version if you can't attend live): https://gag.gl/LHdQlg

1

If Detection & Response and other security solutions are working… 1) WHY has credential loss from data breaches gone up 500% in the past year? 2) WHY have 68% of enterprises fallen victim to endpoint cyber attacks? 3) WHY do 40% of all data breaches originate from the endpoint? WHY? Because they’re missing a key element in their defensive security posture. #government #healthcare #oil #energy #Aviation #endpointprotection #malware #management #cybersecurity https://lnkd.in/eu_UGUwp..

7

Another cool feature from Huntress Managed #EDR - Active Remediation. This powerful feature allows you to pre-authorize Huntress to take action on your behalf without requiring your manual review and approval.

19

Made some words on Help Net Security about what it means to be an industry leading Enterprise DSPM. Sure, cloud is great and it's benefits are massive, but we can't ignore data on-prem and most importantly, sitting on mainframes processing transactions every day for the last 50-60 years! It's time for contextual visibility across all data domains to ensure proper security, compliance, privacy and governance. Enterprise DSPM the 1touch.io way enables teams to unlock the value of their sensitive data in a privacy-preserving way to drive new business and avoid running into the regulatory buzzsaw. https://lnkd.in/emwjfVG3

17

Check out the latest blog by Patrick Garrity 👾🛹💙 covering our release of the VulnCheck CLI tool. Whether you are a researcher, analyst or vulnerability manager, the VulnCheck CLI provides an efficient way to query through vast amounts of vulnerability data. You can work online with live API calls or offline by downloading full backups on demand and querying locally. Supported on Windows, Linux and MacOS. https://lnkd.in/gfWi3BB6

17

Don't let cybersecurity gaps compromise your organization's digital trust. Get the insights you need to stay ahead of emerging threats and build a resilient security posture for the future of finance.  DigiCert

2

Watch this video with 1Password’s VP of Product, Jason Meller as he uncovers key takeaways from the IDC study, “Future of Access Management: Identity Security Requirements for a Modern Application Access Approach” sponsored by 1Password. If you want to learn more about: 📝How artificial intelligence compounds security risks 📝What the Access-Trust Gap is, and how to close it 📝The future of access management  For more information and a CISO checklist, download the IDC InfoBrief sponsored by 1Password here: https://bit.ly/4g3QoyT #CyberSecurityAwareness

8