Robert Messner

Cyber Security Incident at Blackburn College 🚨 Blackburn College recently experienced a “cyber security incident” that has impacted its IT network. While this incident is not classified as a cyber-attack, it underscores the growing cybersecurity challenges faced by educational institutions. This follows a significant cyber-attack at Fylde Coast Academy Trust, where attackers demanded a substantial ransom, threatening to permanently block access to systems across 10 schools unless payment was made. As the sector increasingly depends on digital systems, implementing robust cybersecurity measures is more critical than ever. Read more: https://bit.ly/4fqgcEJ #CyberSecurity #DataProtection #Education #ITSecurity #BlackburnCollege #CyberIncident #Ransomware #DigitalSafety #EdTech #CyberAwareness

7

It’s Oct. 31 👀 Enjoy the FINAL 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝘁𝗮𝘁 𝗼𝗳 𝘁𝗵𝗲 𝗗𝗮𝘆 for #CybersecurityAwarenessMonth! Download this recently completed Forrester TEI Study for more #cybersecurity ROI proof points: https://lnkd.in/eFCEZBYM #SMB #CISO #InfoSec #MSP #informationsecurity #MSSP #cybersecurity 

26

CISAs latest toolkit emphasizes six key strategies for schools to consider when addressing anonymous threats: 1 Build awareness about reporting to detect threats early and deter future threats.  2 Develop a partnership structure that will help address threats. This includes school administrators, law enforcement personnel and mental health professionals. 3 Engage law enforcement to manage threat situations and decide when to scale response actions up or down.  4 Balance initial response steps to ensure the campus is safe. Most critically, treat each threat as credible, and from there, work with necessary partners to determine how to approach an immediate response. 5 When appropriate, tap into multidisciplinary threat assessment teams to support interventions and expedite response if the subject who made the threat becomes known. 6 Take steps throughout the school year to prepare for threats. Establish a response protocol and practice other types of emergency management activities, such as training exercises for staff. https://lnkd.in/esmBA69U

3

ICYMI: The DoD Chief Information Officer posted FAQs about Cybersecurity Maturity Model Certification (CMMC), the so-called CMMC 2.0. Download this PDF as a handy reference to help with your questions, and reach out to Project Spectrum for an assessment and resources. #DoD #cybersecurity #CMMC #FAQ

167

6 Comments

A review from one of our satisfied customers that passed their CISSP exam after taking over 1100 practice questions using our quiz engine. Thanks for choosing CCCure as your go-to resource for your CISSP preparation. Ready to also ace your exam? Sign up today! #cccuresuccess #cybersecurity #cissp #infosec #security #informationsecurity

5

🔐📊 The National Counterintelligence and Security Center has published a crucial guide on defending against commercial surveillance tools. This document provides actionable steps to enhance your privacy and security. Learn how to protect yourself in today's digital landscape: https://lnkd.in/dbMZMNmh #CyberSecurity #Privacy #DigitalProtection

2

📣 CMMC Program Final Rule Published 📣 The final program rule for the Cybersecurity Maturity Model Certification (CMMC) Program was published in the Federal Register recently. The key takeaways include: -There are 110 identifiable and applicable security requirements specified in the new NIST SP 800-171. -Firms in the DoD supply chain are now required to provide adequate security on all contractor information systems. For example, defense contractors must confirm that any Cloud Service Providers (CSPs) used by the contractor to handle CUI meet Federal Risk and Authorization Management Program (FedRAMP) Moderate Baseline or the equivalent requirements. It also requires defense contractors to flow down all the requirements to their subcontractors who process, store, or transmit CUI. -NIST SP 800-171 has 3 levels of certification. Level 1, which is self-certified. Level 2 now has 2 separate classifications for certification including a self-certification option and a C3PAO option. For you Star Wars buffs, that is not a typo. It stands for CMMC 3rd Party Assessment Organizations. These are similar to ISO or SOC2 compliance audit agencies. The final level, Level 3 will require DoD certification. -Understanding your contractual requirements based on your defense partnership will mandate the level of certification required, and your obligations to the security, management and accountability your organization will require. Full Ruling here: https://hubs.ly/Q02Wk45N0 With risks and requirements changing quickly, it's hard to know how to ensure your compliance. SkyTerra is here to help, book a meeting with our team to learn if these new rules affect your compliance: https://hubs.ly/Q02Wk2qj0

1

As Cybersecurity Career Week wraps up, make sure to visit the National Initiative for Cybersecurity Education (NICE). They are an incredible resource for all things related to cybersecurity careers. This page has an extensive list of resources as you decide which path in cybersecurity you would like to take: https://ow.ly/mT2F50TJ9bm #mycyberjob #cybercareerweek #ChooseCyber #cybersecuritytraining #cybersecurityindustry #CyberSecurityAwarenessMonth #calpolysanluisobispo

3

New Poster Alert! Endpoint Protection We have a new cyber hygiene poster for your organization to download and use! This poster reinforces the importance for understanding endpoint protection. Download this poster and find more resources at 405d.hhs.gov!

16

📢 Webinar Announcement! 📢 "A.I. Driven Cyber Threats" - 12pm EDT Runtime - 1 hour ⌚ Register here 🎟: https://lnkd.in/etfMayry In association with ISACA® Hudson Valley Chapter, Tyler Wrightson, a leading national security expert will share concrete advice on protecting your business in the AI cyber threat landscape. Learn about industry standard best security practices, how to obtain the best cyber insurance at competitive pricing, & new threats like AI-driven hacking. Topics discussed in this talk: ♦ Next generation social engineering ♦ Next generation scenarios such as voice cloning, text cloning/generation ♦ What does this mean for professionals in this audience? ♦ What can we do?! With the evolution of A.I., ChatGPT and many more alike, the cyber threat landscape is growing exponentially, here we will dive into what we can do about it, and how we can be as safe as possible. #infosec #cybersecurityawareness #isacahudsonvalley #capitalregion #albanyny #Hudsonvalley #Cybersecurity #artificialintelligence #cyberthreats #cybersecuritytraining

13

1 Comment

CDSE has access to many important resources, including the “DOD Cybersecurity Policy Chart.” The goal of this chart is to capture the immense breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme. To access this chart, follow the link below. https://lnkd.in/gJ9Tb6n #DOD #Cybersecurity

13

CISA warns chemical facilities of potential data theft - Cybersecurity Dive: CISA warns chemical facilities of potential data theft  Cybersecurity Dive #CyberSecurity #InfoSec #SecurityInsights

2

Stay safe during #InternetSafetyMonth!🛡 Check out some resources below from the Cybersecurity and Infrastructure Security Agency.

7

Are all cybersecurity programs created equally? Not so much, according to EdScoop. If you know someone looking to get into #cybersecurity and #infosec, send them this link!

1

In the face of ongoing #Cybersecurity skills shortages, collaboration between employers and K-12 institutions is essential. Together, we can shape a curriculum that equips students with the skills needed to fill these critical roles: https://lnkd.in/gumGSW6K

3

New Hampshire Public Radio Suffers Cybersecurity Data Breach New Hampshire Public Radio is collaborating with cybersecurity experts and law enforcement to assess a recent data breach. NHPR Chief Financial Officer Travis Boucher shared that the breach appears to have had a minimal effect on the group’s internal systems. The breach only affected a limited number of business-related folders, Boucher explained, emphasizing the preliminary nature of the findings. He reassured listeners and donors that the extent of the breach was contained thanks to NHPR’s strong cybersecurity infrastructure and swift response measures. However, specific details about what the folders contained or the precise timeline of the attack have not been disclosed to maintain the integrity of the ongoing investigation. Boucher’s communication did not specify who the external cybersecurity experts are but confirmed their engagement in a rigorous review process. He also mentioned that while the investigation into the full scope of the breach continues, the impact on the station’s operations has been negligible. NHPR’s news output and programming schedules remain unaffected. The public broadcaster has already taken significant steps towards data recovery and bolstering its defensive measures to protect its databases. https://lnkd.in/gRsebcxU #cybersecurity #cyberattack #cybercrime #cyberrisk #cyberthreats #informationsecurity #infosec #breach #databreach #malware #google #bing #networksecurity #technicalsupport #itservices #itsupport #dataprotection #datasecurity #itnews #hackingprevention #cloudsecurity #riskmanagement #fbi #vciso #securityexpert #cisa #financialrisk #manufacturing #iot #ransomware

6