Daniel Miller

"The modern, AI-based integrated security system provides the ideal blend of technology and human operations and leaves us with the most essential task – deciding what to do with the information it provides." Read the latest from William Plante, ASP ITIL for this month's issue of Security Journal Americas (SJA).

29

Please join #SilverSky in a webinar sponsored by CUNA Strategic Services as Tom Neclerio, SilverSky’s CISO, reviews the benefits of using Continuous Validation Testing to improve your Credit Union’s cybersecurity posture. Tom will cover how this improved testing works and how it better protects against new and known vulnerabilities and they key fact that we want to find them as early as possible. https://lnkd.in/evrgXCwQ #CyberSecurity #CreditUnions

4

Register now for the INCH360 Annual 2024 Cybersecurity conference on October 2 in Spokane: https://lnkd.in/eCucyRrC This year’s topics include: - Current Status of Cybersecurity: Explore emerging trends, technologies, and challenges that will shape the future of cybersecurity. - AI and Machine Learning in Cybersecurity: Examine how artificial intelligence and machine learning are transforming cybersecurity, from threat detection to automated response. - Social Engineering and Current Attacks: Focus on strategies to enhance cyber resilience and effective incident response in the face of evolving threats. - Cybersecurity Governance and Risk Management: Focus on effective governance structures, risk assessment methodologies, and compliance frameworks.

3

In this episode, Host and Principal Security Analyst Jen Stone (MCIS, CISSP, CISA, QSA) and David Sims demystify HIPAA compliance concepts. https://lnkd.in/gSRPut-R #HIPAA #cybersecurity #compliance #datasec #infosec #PCI

8

The October 2024 Edition of the Texas Bank Report is here! This issue discusses important IT Security matters in recognition of October as Cybersecurity Awareness Month, and much more.

19

In March of 2022, the PCI council released version 4 of PCI DSS. Phase one of the new standards must be in place now, and phase two standards are due March 2025. Of the 13 new requirements, there are seven that will impact most merchants. https://bit.ly/3UGHGi1 #payments #pci

1

So, you’ve done a lot of heavy lifting to ensure your company will be compliant with the upgraded Texas Data Privacy and Security Act when it goes live next month; how sure are you that your vendors have done the same? Members of the #KRCL Data Privacy & Cybersecurity team – Michael Twomey, Bryan Sanyi, CIPP/US, Jamie Wilson – explain that you might be held liable for the noncompliance of anyone in your supply chain, particularly if they are processing personal data of your customers. Better to have that awkward conversation now, rather than face costly sanctions later! For a comprehensive overview on the new expectations please visit https://lnkd.in/gUy85CKa; for an 8-step roadmap to compliance, please visit https://lnkd.in/gjmwBXj3. To learn more about KRCL’s Data Privacy & Cybersecurity practice, please visit https://lnkd.in/gpT6e2Uk. One Mission. Your Mission. #WeAreKRCL #TeamKRCL

13

🚀 The Data Perimeter Challenge 🚀 Ashish spoke to Tyler Warren, Lead Cloud Security Engineer at USAA about building effective data perimeters. 🔹 Engaging Business Partners – Without full alignment, you risk causing an outage. Making your partners part of the journey can be your superpower. 💡 🔹 Mastering Communication – The speed of implementation hinges on how well you share your goals. 🔹 Turning Issues Into Wins – Remember that moment when customer service went above and beyond? Sometimes, solving problems together strengthens the trust in your org's priorities. If you are keen to learn about building data perimeter in the cloud, this conversation would be interesting to you. We have linked the full episode in the comments below! #CloudSecurity #Cybersecurity #DataPerimeter

10

1 Comment

Is your team's cybersecurity awareness a strong shield or a weak link? Don't let phishing scams and data breaches catch you off guard!  Our latest blog post, "The Importance of Regular Cybersecurity Awareness Training" reveals the key to developing a cybersecure culture and protecting your organization's sensitive data.  Learn how to:  ✅ Train your team to spot phishing emails and avoid costly mistakes   ✅ Develop a cybersecure culture that promotes good security practices   ✅ Enhance data security and ensure compliance with regulations   ✅ Improve your team's cybersecurity awareness and reduce risks  Read the full post now and empower your team to become a strong defense against cyber threats!  http://www.hcsts.com/ the-importance-of-regular-cybersecurity-awareness-training  #CybersecurityAwareness #CybersecurityTraining #DataSecurity #Compliance

2

What we think is the same threat group 👿 has been hard at work 🛠 these past couple weeks targeting #regionalbanks and #creditunions and their patrons. They're creating fake log-in pages using #phishingkits and deploying bot-detection technology to throw off typical automated scanners. We're detecting new instances of this particular threat by the hour⌛. Each root domain we find is a repository of: -- Up to 2️⃣ 0️⃣ customized phishing kits -- Impersonating up to 2️⃣ 0️⃣ of a repeating group of brands -- With up to 4️⃣0️⃣ different phishing pages (see attached 🖼) Our write-up is hot🔥off the presses on our blog ( 👇 link in comments). Phishing kits, repositories such as this, and attackers abusing anti-bot technology such as #CloudflareTurnstile aren't novel. However, combining them and targeting a particular group of #FinancialInstitutions at an increasing rate is worth spreading the word about. In addition, it's a wake-up call that some financial institutions may need to rethink their current approach to #brandprotection. Typical DIY methods would have missed this threat and we believe the same is true of many vendors' methods. To review our evidence and some recommendations, check out the blog. CC: NCU-ISAO, FS-ISAC, Curql, Member Driven Technologies, Corelation, Inc.

16

2 Comments

comforte AG engaged Coalfire Systems, Inc. to conduct an independent technical assessment of their #SecurDPS Enterprise Solution for PCI DSS compliance. Organizations accepting payment cards must adhere to PCI DSS, ensuring the confidentiality and integrity of cardholder data. SecurDPS provides robust safeguards for protecting Primary Account Number (PAN) data, enhancing visibility, insight, and control for data security. Key benefits of SecurDPS include: 🔹 Support for PCI DSS compliance. 🔹 Reduced risk through effective data protection. 🔹 Tailored security strategies for customer environments. Coalfire's assessment confirms the effectiveness of SecurDPS in improving PCI DSS compliance and data protection. Discover how comforte AG can help your organization stay secure and compliant! 🔗 https://lnkd.in/eDYRVzKG #PCICompliance #PCI4

12

Over the last two decades, technology has developed at an accelerated rate, challenging those in digital forensics to keep pace. Angel Garrow, GCFE, TCDI’s Senior Digital Forensic Analyst, explores the evolution of mobile collections in today’s blog. Angel reviews not only the history of modern digital forensics but also emerging trends and considerations for the future. To read the full article, visit https://lnkd.in/eNmUnwEE #DigitalForensics #MobileCollections #DataRecovery 

5