Brian Westnedge

VM remains a cornerstone of preventive cybersecurity, but organizations still struggle with vulnerability overload and sophisticated threats. Tenable’s new Exposure Signals gives security teams comprehensive context, so they can shift from VM to exposure management and effectively prioritize high-risk exposures across their complex attack surface. http://ow.ly/oGFk105PbnX

3

The CDK breach is a major event that also showed that threat actors are willing and able to target end users of MSPs and Vendors. If you’re not sure yet whether this is coming to your doorstep as an MSP we’ve already had several MSPs tell us they have been impersonated by bad actors. Give your clients a path to know for sure that it is your team calling for support and prevent bad actors from gaining access through your end users. #MSP #ZeroTrust #MSSP #TrustNoOne.

7

Pssssst-NISsssssT - are you ready for the future because it is here now? #NIST is close to making one of their most #monumental announcements in decades. #Cybersecurity is at the precipice of a global game changing moment. A critically relevant #quantum computer (#CRQC) is nearly upon us and QuSecure is the leading company that can help #protect you and your #data. Reach out to QuSecure to learn more about how you can be prepared with our QuProtect #PQC #crypto agile software today. https://lnkd.in/gpdXmmBJ.

23

My good friend Patrick Garrity 👾🛹💙 has done phenomenal work on vulnerability research in the last couple of years. His most recent research, analyzing vulnerabilities from the past 10 years, indicated that only 1.1% of vulnerabilities are publicly known to get exploited in the wild 😮 [credit to: Patrick Garrity 👾🛹💙for this data point] Just 1.1% ... Separate research by Alex Pinto the DBIR team (Verizon Business) suggested that vulnerabilities tagged/added to CISA KEV have a very short exploitation window, while non-CISA KEV vulnerabilities usually have longer time frames for exploitation. While these studies are independent and run on different data sets, the reality is similar. Your organization could have thousands of vulnerabilities at any given time, but only a very small number of them truly matter. The best vulnerability program should be foundational in prioritization. Ideally, using data/context from the organization will help focus on what you should remediate/resolve. If any of this research interests you, we will discuss this and more in our upcoming webinar with Alex Pinto & Aravind Iyengar (Head of engg and AI at Balbix). https://lnkd.in/guk-isza

22

2 Comments

Read this important advisory from CISA regarding Operational Technology and Industrial Control Systems vulnerabilities. #ICSsecurity #OTsecurity

13

1 Comment

#cyberinsurance claims are rising and unfortunately the big contributors are #phishing and #socialengineering. The latest and excellent #claims report and analysis by our friends at Coalition, Inc. highlights that more than half of all claims were business email compromise (BEC) or funds transfer fraud (FTF), highlighting the importance of email security as a key aspect of cyber risk management. Check out KnowBe4's blog where in our CEO Stu Sjouwerman, SACP shares his thoughts on the report and what organizations can do to stay informed and one step ahead Joshua Motta Shawn Ram Matthew Dort

51

Check out the latest blog by Patrick Garrity 👾🛹💙 covering our release of the VulnCheck CLI tool. Whether you are a researcher, analyst or vulnerability manager, the VulnCheck CLI provides an efficient way to query through vast amounts of vulnerability data. You can work online with live API calls or offline by downloading full backups on demand and querying locally. Supported on Windows, Linux and MacOS. https://lnkd.in/gfWi3BB6

17

Great news from NIST as they adapt digital identity guidelines for state and local benefits programs. This collaboration with the Digital Benefits Network and the Center for Democracy and Technology to refine digital identity measures is a step in the right direction. It's essential to ensure that as we enhance digital services, we also safeguard privacy and equity, particularly in public benefits administration. Looking forward to seeing how these guidelines will foster more secure and inclusive digital environments. https://bit.ly/3KYuH5J

22

Great story on how to apply Cyber Risk Management to design a more effective Cybersecurity strategies and align security budget and investments with the business.

5

3 Comments

Beyond Compliance: The Advantage of Year-Round Network Pen Testing Why more frequent testing makes sense: >Cybersecurity Control and Validation >Regulatory Compliance >Cyber Insurance Requirements What is your company doing? #pentesting #cybersecurity #veterans

7

We're bringing Endpoint Inspector SaaS to Amazon Web Services (AWS) Marketplace, helping businesses collect and analyze #data faster to best protect their organizations.    Cellebrite’s role in the Amazon Partner Network helps customers reduce risk, boost collaboration and lower costs. Offering this solution from our Case-to-Closure platform to millions of active AWS customers worldwide is critical to allow more people to deploy it simply and quickly.       Using AWS #cloud infrastructure, Endpoint Inspector SaaS will empower secure, real-time data access from a range of remote devices – without compromising on consent and #security. Read more from Cellebrite Enterprise Solutions: https://lnkd.in/d9Cc7Tfd

126

3 Comments

The why... Everything we do at Axon starts and ends with the mission that we share with our law enforcement partners to Protect Life. Click the link to watch our next Safe Journeys episode featuring Scottsdale PD and how transformative TASER 10 technology + effective training + a commitment to de-escalation saves more than one life during one call for service. #ProtectLife #ThisIsAxon #OurMoonshot #Moonshot50in10

58

Continuing the team's video series: compliance control mapping. This approach helps you identify and remediate identities that do not meet the compliance frameworks your organization adheres to. Here’s an example for PCI.

24

1 Comment

The increasing relevance of data sanitization in classified data environments...

23

1 Comment

Have questions about what compliance applies to your business, let us help you. We frequently hear businesses say, "compliance is expensive", my answer is always the same: "your correct but not nearly as expensive as one fine" #compliance #cybersecurity #OCCSI

2

This weekend’s news coverage of #DeltaAirlines and #Crowdstrike’s … disagreement?… about who’s responsible for the July 19 outage that Delta claims caused a half-billion dollars of damage to their business raised an interesting incident response planning question. If news reports are to be believed, Delta either never received or directly refused an offer of assistance from Crowdstrike’s during the outage that was hobbling the services of the largest commercial airline fleet in the world. This discussion isn't really about Delta or Crowdstrike: it's about how you can learn from their problem. If you have a vendor that’s deeply in your technical environment, and they are implicated as a proximate cause of serious disruption, do you actually want their help? What guidance can you get from your continuity and response plans for this? Ultimately, it’s going to be a risk management decision, balancing risk of downsides against probabilities of upsides. Organization might benefit from a short series of tabletop discussions based on variations of the reported situation between Delta and Crowdstrike. Tailored to your organization, consider each of the following realistic possible situations: 1. If the disruptions appears to have been caused by the vendor making a material error (like pushing an update that cripples millions of systems globally, but which had inadequate controls and thus did not undergo appropriate QA and testing). 2. If the disruption appears to be caused by an unforseen interaction with the specialized nature of your environment. 3. If the disruption appears to be caused by some kind of error in your organization in how you use or integrated vendor products and services. Ask yourself: is your response planning adequate to address these kinds of disruptions? Note that this isn’t really a technical problem: this is really a business decision problem. What information do your executives need to have to make an informed decision as to whether to accept the help or not, and how will you, advising on security, help facilitate them getting that information? Playing these scenarios openly and honestly can help to expose your executives’ risk tolerance, and help them to make easier, faster, and ultimately better decisions for your business.

8

1 Comment

Address both- Proactive threat exposure management and reactive detection and response with Invinsense.

9

All treats, no tricks this Hallowe'en for ContraForce! Congrats to the team for raising a $3.25M round under the leadership of founders Stan Golubchik and Ricky Melendez and board members Maurice Boissiere and William Kilmer. ContraForce is transforming how managed security services are delivered by allowing service providers to jumpstart a new line of business, improve their margins and deliver better client outcomes. Security operations management represents a $500B total addressable market with only a ~5% current penetration today. The MDR market itself is growing at 26% CAGR. No surprise, given that adding an MDR service is a top priority for over 300K MSPs around the world. ContraForce Storm allows MSPs to deliver an MDR service immediately without investing in a SOC or security staff for most use cases. Unlike other outsourced MDR services, with Storm MSPs can: -Outsource threat detection, investigation ... and remediation! ... while maintaining 24/7 visibility of their client's environment. -Manage their clients existing EDR and SIEM tools without having to license new proprietary solutions. -Maintain the integrity of their client's environment. There are no agents to deploy. Client data stays with their clients. MSSPs can use the AI and automation of the ContraForce Spark workbench to efficiently deliver managed EDR and SIEM services themselves, at an affordable per user/month price. For more information on Storm and Spark: https://lnkd.in/ebetY4UP

40

5 Comments

The riskiest project for most security teams is insider risk management. In my experience, most of these initiatives will drag on as a science project for a few years before being scrapped by new leadership. That’s reflected in industry stats like 88% of insider threats taking over a month to detect. The problem? We’ve mixed up insider threat detection, user behavior analytics, and machine learning. By now, we should recognize that catching malicious insiders is hard and that anyone counting on an AI/ML magic solution is dangerously optimistic. That’s why this week’s post channels one of the 20th century’s most famous pessimists. It presents an approach to insider risk detection that is much more likely to succeed and has applications beyond insider risk. Introducing “Mencken’s Law of Threat Detection”: Never rely on machine learning to detect a threat you haven’t modeled. Read on at the link below.

48

2 Comments