Dan Stynchula

If you're writing an RFP for continuous security testing (or even traditional security testing), here's five questions I'd recommend you ask your vendors... 1) How do you ensure that your testing efforts are focused in the right areas 2) How do you avoid inefficient overlap between scanners and manual testing 3) How quickly after a vulnerability is introduced are you likely to detect it 4) How can I use your service to provide customers and auditors with confidence 5) What key value do you provide over traditional penetration tests, bug bounties, and automated scans Now, if you're asking all of that, you may as well ask one more as well 😉 6) What's your opinion of the Cytix approach to continuous testing Let me know how you get on, I'd love to know what they come back with!

3

OWASP AppSec Days Pacific Northwest Conference is coming to an end, but not before Brandon Wu's workshop on Finding Bugs and Scaling Your Security Program with Semgrep! 💪

15

"With our latest release, Push Security takes TI data with stolen credentials sourced from criminal forums and compares it to the actual credentials still being used across customer environments, alerting on validated true positives only to cut through the noise." https://lnkd.in/gErG-Geu

33

9 Comments

Account fraud and account takeover are serious cybersecurity threats. Account fraud and account takeover are growing concerns for businesses and cost billions of dollars globally. Are you ready to predict the next attack? Predict account fraud with Kasada and get your free snapshot 👉 https://lnkd.in/eavdguGv #cybersecurity #threatintel #ATO #credentialstuffing #fraud #stopbots

1

I've been developing, distributing and analyzing browser extensions for well over a decade, and consider myself pretty experienced in that area. The variety of extensions out there range from annoying adware, through silly gags, to productivity tools that could boost up your day to day performance. Even with the ever watching eye of Google over their store - malware finds a way. And it only becomes more and more sophisticated... That's why having trustworthy extension that can protect your browsing experience from such malicious (or even just plain annoying) instances - is very important. You can read more about it on our recently published ReasonLabs blog post: https://lnkd.in/dps3YBjr If you want to skip the reading and go directly to protecting yourself and your identity online, check out our Online Security solution: https://lnkd.in/dFS7ksPH Stay safe!

21

If you heard of Google's recent announcement to distrust Entrust as a public CA and want to learn more about what this means, check out the most recent Root Causes podcast.

12

🔔 Overwhelmed by SIEM alerts? Alert fatigue is a real issue for your SecOps team. Cortex XSOAR helps you cut through the noise by automating your investigation and remediation workflows. When every ping seems critical, it’s easy to miss the truly urgent threats. With XSOAR, you can simplify SIEM alerts, helping your team respond faster and more effectively. So, what’s in it for you? 📉 Reduced alert volume, through identifying and prioritizing high-risk threats ⚙️ Automated responses to streamline incident management 😊 Clear, actionable insights for faster decision-making Give your SecOps team a much-needed break. https://bit.ly/4epHLNA

168

Know your cloud risk, expose your biggest cloud gaps and close your priority cloud exposures fast. This is Tenable. Your cloud exposure ends here.

8

You need to use the findings and automate based on those. eBPF is not enough.

2

SoCal CISO Community, tomorrow is your final Inner Circle Dinner of 2024! Join your peers at Meadowlark Golf Club in Huntington Beach to discuss "Modern CISO, Modern Data Security Strategy." In today's sophisticated threat landscape, data is both a valuable asset and a potential liability to the business. Rapid advancements and adoption of new technologies, increases in data complexity, and expanding regulatory oversight all pose significant challenges for security leaders. However, as the landscape evolves, so does the opportunity for CISOs to securely enable the business. The spotlight is now on CISOs to vigilantly measure and communicate the risks and value associated with data, implement appropriate DLP measures, and establish data security as a shared business responsibility. This conversation will be led by: Rudy Ramirez, CISO, Citizens Business Bank Tina Mitchell, CISO, Covered California Jeff Wade, Global Director, Cybersecurity, Taco Bell Richard Yun, CISO, Masimo There are still a few seats left for qualified InfoSec professionals. Apply to participate below! #EvantaCISO #SoCalCISO #DataSecurity

14

7 Comments

Amplify detection capabilities with Recorded Future's Validated Sigma Rules, crafted by our research team to minimize false positives. Watch to see how to easily search, implement, and configure Sigma Rules without ever leaving Splunk.

2

What can you do if your team can’t afford the SSO (single sign-on) tax and doesn’t want to compromise security? I have some thoughts: 🤝 Negotiate for SSO during the buying process. 🔒Use an enterprise password manager (EPM), like 1Password, to secure every single sign-on. To read more on the SSO tax and what your teams need to know read our blog!

5

Yesterday's tl;dr sec newsletter included a great article from Alex Smolen on why access approvals are considered harmful. Alex talks through several tactics for migrating from ineffective approval workflows that don't actually move the proverbial security needle to context-aware, modern, and agile methods, such as: - safer access paths to perform routine actions - adopting software engineering practices to perform risky activities - vetting the legitimacy of requests through resilient AuthN checks It's a quick and valuable read. Links to the article and the tl;dr sec newsletter in the comments.

14

1 Comment

More details to come, but I will be talking at DEFCON ICS Village in August and HOU.SEC.CON in September! These will be good talks to attend if you like obscure or regional industrial protocols, geopolitics, and China. On another note, this will be my first time at either event, so feel free to pile into the comments if you have suggestions!

44

7 Comments

Are you coming to RSA Conference? If so, join us at SCW Coffee Shop! Bluestone Lane SOMA Coffee Shop 55 2nd St, San Francisco, CA 94103 On May 6th | 12:30PM PST. Join Secure Code Warrior CTO & Co-Founder, Dr. Matias Madou, Jeffrey Martin from Mendio, John B. Dickson from Lasithi Security, and Viswanath S C. from Thales Digital Identity and Security to learn about: Incredible techniques for winning over developers and helping them prioritize security The challenges in measuring security skill development, and how to overcome them Why a developer-centric ‘Trust Score’ could be the missing piece of the compliance puzzle for every top organization and can unlock the benchmarks needed to reach new levels of risk reduction in code. https://lnkd.in/gMzG2WuJ

12

SSO is a great start – but it's not enough to secure unsanctioned apps, poor password practices, and bring-your-own-device (BYOD) policies. As long as there are stray logins SSO doesn’t cover, employees will be forced to manage those logins themselves, and that’s where security problems can begin. Learn more: https://bit.ly/3yOqTBl

5