Charlie Price

The deprecation of WSUS doesn’t mean that it will stop working immediately. It will be supported for as long as Server 2025 is supported. This is a time to begin your review of modern updates (Autopatch, WUfB, Azure update). What about disconnected sites, low bandwidth sites? There will always be 3rd party solutions that will take a file you download from the catalog and will push out. I can see how some companies that are air gapped or even those that are in very slow/limited bandwidth will need to modify some of their procedures. https://lnkd.in/gUukEbQE

1

“What certification do I need for progress in OT security?” This is one of the most common questions I get. The answer is always “It depends on your goals.” OT security (and security in general) is not monolithic, it varies greatly between systems and industries. GICSP or the various ISA62443 certifications are some of the few that actually cover industrial systems. Others might be useful as well. The problem is, however, twofold. Cost and real-world applicability. I’m not going to go into detail here (feel free to contact me if you are interested), but in my humble opinion there is too much focus on certification and too little on practical experience. How can you truly secure a control system if you’ve never seen or worked on a field instrument or sat and analysed a malfunctioning sequence. Certifications are useful to establish a knowledge base but not much more than that. #controlsystems #cybersecurity #ics #certification

14

2 Comments

#Microsoft has released a Recovery Tool to help with the #CrowdStrike problem https://lnkd.in/ghsiss-u Please read the comments to see the one-off type of issues experienced and how to adapt. #MVPBUZZ

1

This link in this post describes a vulnerability in Microsoft 365 Copilot that allowed the theft of a user’s emails and other personal information. The linked article leads to a deep dive into this vulnerability because it combines a variety of novel attack techniques that are not even two years old and are new enough other Blue Team members would benefit from studying these new techniques to better understand them. Now that we have seen them, we will certainly see them again.

3

Think again if you believe hackers are your biggest cybersecurity threat. It's not the shadows we should fear most but the gaps in leadership within our security teams. Here's a secret: the linchpin of robust cybersecurity isn't just more sophisticated tools or stronger firewalls—it's visionary leadership. Why? Because technology evolves, and so do threats. But the human element—how teams are led, motivated, and empowered—decides our fate against cyber attacks. The gap in leadership isn't just a missing piece; it's a chasm where potential falls through. I've seen firsthand how a shift towards strategic, empathetic leadership can transform security posture from reactive to proactive. It's about fostering a culture where every team member feels responsible for the organization's digital safety, continuous learning is encouraged and required, and leadership listens as much as it guides. Imagine a world where cybersecurity teams are led by visionaries who understand the importance of culture, innovation, and resilience. Where leaders are not just commanders but coaches, mentors, and chief motivators. Here's what we can do: start conversations in our networks about the importance of leadership in cybersecurity. Share stories of success and lessons learned. Advocate for leadership development programs within our organizations. Let's not wait for a breach to highlight the importance of strong leadership. The time to act is now. Are you ready to contribute to the change? Join the Next Generation CISO Network. https://lnkd.in/eqZK4GGU

10

1 Comment