Colin Ridlon

🔴 #AI #GUIDELINES for #CRITICAL #INFRASTRUCTURE 🔶️ Cybersecurity and Infrastructure Security Agency (#CISA) today released safety and security guidelines for critical infrastructure, a move that comes just days after the Dept of Homeland Security (#DHS) announced the formation of a safety and security board focused on the same topic.     🔶️ The guidelines are meant to address both the opportunities made possible by AI for critical infrastructure — which spans 16 #sectors, including farming and information technology — and the ways it could be weaponized or misused. 🔶️ CISA instructs operators and owners of critical infrastructure to govern, map, measure, and manage their use of the technology, incorporating the National Institute of Standards and Technology (#NIST) AI risk management framework. 🔶️ The guidelines emphasize a range of steps, including understanding the dependencies of AI #vendors that operators might be working with and inventorying AI #use #cases. They also encourage critical infrastructure owners to create procedures for reporting AI security #risks and continually testing AI systems for #vulnerabilities. #innovation #technology #AI #cybersecurity #risks #opportunities #guidelines #USA

13

11 Comments

However, adversaries are no longer just human actors; they are now highly advanced organizations that use integrated tools and capabilities with machine learning and artificial intelligence. The threat is becoming more widespread, and no organization is safe. Along with big businesses, municipalities, state and federal governments, and small and midsize businesses are all exposed to these dangers. No matter how good they are now, even the most advanced cybercontrols will eventually become outdated.

2

Summary of the 2024 Cyberthreat Defense Report: 🔭 Survey Scope: 1,200 IT security professionals from 17 countries and 19 industries. ☑Key Finding: 82% of organizations experienced at least one successful cyberattack in 2023. ☑Top Concerns: Ongoing shortage of skilled IT security personnel, high concerns over malware, phishing, and ransomware. ☑Trends: Slight decrease in successful attacks compared to the previous year. For more detailed insights, you can access the full report here: https://lnkd.in/druQ3aDf

1

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

6

Navigating the Evolving Threat Landscape: i4 Solutions W.L.L Role in Strengthening #SOC Defense In the dynamic world of #cybersecurity, the Security Operations Center (SOC) serves as the nerve center of an organization's defense strategy but faces persistent challenges such as burnout, staffing issues, false positive churn, and an ever-expanding attack surface exacerbated by cloud services and remote work. Despite implementing numerous controls, security leaders struggle with inherent vulnerabilities in #processes, #people, and #technology. Key issues include the need for interoperable #infrastructure and the importance of placing skilled personnel in critical roles. Effective #securitymanagement demands investing in both technology and the human element, ensuring SOCs are equipped to tackle the evolving #threat landscape and reduce the impact of successful #attacks. Why i4 Solutions W.L.L? We are equipped to continuously and proactively monitor and improve your businesses online security through the prevention, detection, and immediate action against possible threats to your network. i4 Solutions leverage its skilled and certified #cybersecurity professionals, interoperable infrastructure, advanced threat detection, comprehensive support, reduced burnout, and scalable solutions tailored to your organization. To know more, check https://i4.com.qa/ and email at [email protected] #Cybersecurity #SOC #SecurityOperationsCenter #DefenseStrategy #SecurityChallenges #Burnout #StaffingIssues #FalsePositives #AttackSurface #CloudSecurity #RemoteWork #SecurityLeaders #Vulnerabilities #Interoperability #SkilledPersonnel #EffectiveSecurity #TechInvestment #HumanElement #ThreatLandscape #SecurityManagement Boutros El Haddad, Khaled Mhawish, Rita Geagea, Caroline Kazanjian, Dominii Antoine

17

From Fuzzy Problems to Quantitative Solutions Bridge the gap between fuzzy risk problems and quantitative evaluation. Learn proven risk methodologies in the Certificate in U.S. National Security Risk Analysis this November. https://loom.ly/krF8WBk #NationalSecurity #RiskManagement #DataAnalysis

5

Success Factors CIOs and CISOs Are Using To Unlock Innovation. https://lnkd.in/gAKq5Ubh

2

Unlock the power of data-driven security. Subscribe to The Clarity Factory newsletter for in-depth analysis, case studies, and practical tips to optimize your security operations. https://buff.ly/401m9jU #CorporateSecurity #OperationalResilience #RiskManagement #Insights #Data #Knowledge

2

💡Exciting Insights on Cybersecurity Maturity and Business Enablement!💡 We are thrilled to share the findings from AT&T Cybersecurity's latest report, created in collaboration with ESG, exploring the relationship between cybersecurity maturity and business outcomes. Here's a quick overview: 🔍 Research Highlights: - 500 Professionals Surveyed: Insights from cybersecurity and IT experts in North America. - NIST CSF Framework: Evaluated organizations based on Identify, Protect, Detect, Respond, and Recover functions. 📊 Key Findings: - Maturity Levels: Organizations were categorized as "emerging," "following," or "leading" based on their cybersecurity practices. - Strong Correlation: Higher cybersecurity maturity correlates with better business outcomes and a strong security posture. - Dynamic Adaptation: Emphasized the need for real-time risk identification and adaptable incident response strategies. 🟡Conclusions: - Continuous Improvement: Strong cybersecurity is a journey, not a destination. - Business Integration: Successful organizations align cybersecurity with business goals to achieve significant benefits. For more details, delve into the full report and discover how enhancing your cybersecurity maturity can drive business success! Editor : Abul Hasnat Sohel #Cybersecurity #BusinessEnablement #NISTCSF #ATTCybersecurity Source: "The Relationship Between Security Maturity and Business Enablement," AT&T Cybersecurity .

2

Join us on Wednesday, May 29th at 8:30 AM to discover the joint strategies used by CERT Ukraine and CISA for cyber defense! Don't miss out on this opportunity to learn from the experts. Link in bio for more details and to get tickets. #CyberDefense #CERTUkraine #CISA #CyberSecurity #EventAlert

12

The healthcare industry is facing an alarming rise in #cyberattacks, with hospitals and health systems becoming prime targets for hackers and ransomware attacks. Protect your healthcare organization from these threats, forify defenses and safeguard patient data. Reach out to Wipfli for personalized guidance and support.

10

1 Comment

Totally with Matt on this! “Now appreciate all that from an internal controls perspective. Thousands of companies had IT systems that allowed a third party to push a software update without proper testing. That is a terrible practice for IT general controls. So in theory, every publicly traded company that fell victim to the CrowdStrike disaster should disclose a material weakness in their IT general controls when their next quarterly filing rolls around. Every audit firm inspecting those IT general controls should issue some sort of qualified opinion. Right? Right?” RIGHT

2

U.S., Iran held indirect talks this week on avoiding more attacks - Axios: Two top Biden administration officials held indirect talks with Iranian officials in Oman this week on how to avoid escalating regional attacks, two sources with knowledge of the talks told Axios. Why it matters: The talks — involving President Biden's top Middle East adviser, Brett McGurk, and Abram Paley the acting U.S. envoy for Iran — were the first round of discussions between the U.S. and Iran since January, when similar negotiations were held in Oman. The talks occurred just over a month after Iran's unprecedented missile assault on Israel on April 13. The attack put the Middle East on the cusp of a regional war. Driving the news: Iran fired 350 ballistic missiles and drones toward Israel in retaliation for Israel's assassination of Brig. Gen. Mohammad Reza Zahedi, a top Iranian Quds Force general in charge of that nation's military operations in Lebanon and Syria. It was the first-ever direct attack on Israel that had been launched from Iranian soil. Zahedi had been killed in an Israeli airstrike that targeted a building near the Iranian Embassy in Damascus. Iran's attack was defeated in an unprecedented joint air and missile defense effort by Israel, the U.S., the U.K., France, Jordan and Saudi Arabia. Several days after the attack, Israel responded with a targeted strike on an S-300 air defense system at Iranian air force base. The big picture: One of the Biden administration's main goals since Oct. 7 has been to prevent the Gaza conflict from leading to a regional war. The U.S. thinks Iran has a lot of influence over its proxies in the region. Those include Hezbollah in Lebanon, the pro-Iranian militias in Syria and Iraq that conducted attacks against U.S. forces, and the Houthis in Yemen who still attack ships in the Red Sea. Behind the scenes: McGurk and Paley arrived in Oman on Tuesday and met with Omani mediators, the sources said. It's unclear who represented Iran at the talks. The sources said the talks focused on clarifying the consequences of actions by Iran and its proxies in the region and to discuss U.S. concerns regarding the status of Iran's nuclear program. Several Iranian officials hinted in recent weeks about the possibility of Iran moving toward production of nuclear weapons. What they're saying: Vedant Patel, the State Department's deputy spokesperson, said Monday the Biden administration has ways to communicate with Iran when necessary. "The Biden administration continues to assess that Iran is not currently undertaking the key activities that would be necessary to produce a testable nuclear device," he said. Patel added that the U.S. doesn't believe Iran's supreme leader has made a decision "to resume the weaponization program that we judge Iran suspended or stopped at the end of 2003." The White House and the State Department declined to comment on the talks in Oman.

20

6 Comments

[Article]🔐“If an organization has not experienced a significant breach, executives may underestimate the risk.” Says Our CEO, Ilan Barda. Cybersecurity is not just an IT issue but a strategic business priority. C-level executives must lead by example, integrating cybersecurity into business strategies, fostering cross-departmental collaboration, and continuously updating security measures to stay ahead of evolving threats. Strong leadership and a proactive approach are key to safeguarding our critical infrastructures.🔐 Read the full article here: https://hubs.li/Q02D8W_k0 #Cybersecurity #IndustrialCyber #Leadership #CLevel #CyberAwareness Radiflow Ilan Barda David Moss Robbert Ledeboer Jesper Nilsson Jake Leonard-Walters James Sandrone Pablo Carrasco Bernardino TJ Roe Sandy Lipetz Michael Langer Yossi (Konstantin) Tarnopolsky Dave Dusseau Pavel Vild Tomer Erez Rubén Aguilar Rives Brian Hennessy Will Burnett Mario Esposito Paul Gaynor Polina Berman Barak Henig, PMP Roman Oster Anastasia Gulpe

17