Dan Lorenc

More bricks for your SCADA wall "Here are some of the best SCADA protection strategies to ensure your organization's safety. Late last year, Pennsylvania's Municipal Water Authority of Aliquippa (MWAA) fell victim to a sophisticated cyberattack, targeting its SCADA system at a key booster station. This station, crucial for regulating water pressure across Raccoon and Potter townships in Beaver County, experienced a temporary loss of communication, triggering an immediate investigation. Upon closer examination, the technicians discovered a clear indication of a cyberattack: a message declaring, "You have been hacked." This startling discovery led to the swift activation of manual control systems, ensuring that water quality and supply remained unaffected despite the breach." Like this? Subscribe to Cyberwarfare, Espionage & Extortion for more: https://buff.ly/3tXXx16

1

Tanium Extends Endpoint Management Platform to Enhance Visibility, Control, and Remediation for Containerized Workloads https://ow.ly/zXrK50UaGxM #Technologynews #AI #Technews #cioinfluence #Tanium

1

Armis is uniquely capable of managing and prioritizing risk in complex higher education environments. Learn how Lehigh is using Armis to see, protect, and manage IT, IoT, OT, all the T's!

7

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

What defines value? After three years of effort, this week marks the start of the federal government's enforcement of new secure software development requirements. Starting with GSA and then shifting to all commercial vendors selling to all agencies, the Office of Management and Budget industry-changing mandate is now in action. For years, vendors commented that they thought this would never happen, but guess what? It did. Attacks on nations' software are skyrocketing, and as a nation, we need to take steps to produce more secure software by design. Before implementing tools such as application security testing (SCA/SAST/DAST), you must ensure your organization has a proper foundation. This is why the NIST 800-218 Secure Software Development Framework (#SSDF) starts with organizations preparing themselves to ensure that their people, processes, and technology are prepared to perform secure software development at the organization level. CodeLock, Inc. received a grant from VIPC | Virginia Innovation Partnership Corporation to develop a dashboard to provide companies across the country with the resources they need to get started and comply with these new requirements. Over the last month, we have uploaded templates for policies and procedures that your organizations need to have in order to meet specific practice areas. Rather than you having to create this from scratch, we did the work for you, saving thousands of hours and the finances associated with that work. You can get a CodeLock account today and access all of these resources for only $19/month. Do no wait to take action, get started with the compliance process today. If you made it this far into my post, congratulations! Send me a message, and I will give you a discount code to get started for free. #ZeroTrust, #CyberSecurity, #SoftwareDevelopment, #DepartmentOfDefense, #InfoSec, #NationalSecurity, #DefenseTech, #CyberDefense, #SecureSoftware, #MilitaryTechnology, #DevSecOps, #InformationSecurity, #CyberAwareness, #GovernmentTech, #CyberThreats, #TechInnovation, #DigitalTransformation, #CloudSecurity, #DataProtection, #NetworkSecurity, #SecurityArchitecture, #CyberResilience, #IdentityManagement, #Encryption, #Compliance, #SecureCoding, #CyberRiskManagement, #AIInCybersecurity, #ThreatIntelligence, #CriticalInfrastructure, #CyberLaw, #CyberEthics, #TechnologyLeadership, #PublicSectorInnovation, #TechGovernance, #SecureByDesign, #PrivacyByDesign, #MilitaryInnovation, #DefenseStrategies, #CyberWarfare, #CyberDiplomacy, #GovernmentContracting, #DefenseContractors, #MilitaryTec, #TechPolicy, #SecureInfrastructure, #NationalCybersecurity, #TechForDefense, #SecureDevelopment, #GovernmentIT

13

1 Comment

Turbocharge your Incident Response readiness with Natsar's Cybersecurity Program Bundle. 17 docs, NIST-based plan, policy, templates. Save 10% when bundled. #IncidentResponse #CyberSecurity https://zurl.co/F3qD

2

Thanks to my friend Mark Schrader for sharing this article on Ransomware and the benefits of storing data on LTO. https://lnkd.in/euAyC3bM. --- If LTO is reliable in protecting against ransonware, I'm confident that it would be reliable -and scalable- for video surveillance storage. And now, working with so many VMS systems, LTO is easy to playback recorded video from the timeline with ease. If you don't know how, I can send you a free eBook on this very topic.

3

The Department of Defense has finalized the Cybersecurity Maturity Model Certification (#CMMC) 2.0 program requirements, set to take effect on December 16, 2024. All DoD contracters and subcontractors will need to be certified to maintain their eligibility for contracts. Don't wait until the last minute to prepare for this crucial cybersecurity compliance program! Idenhaus Consulting https://lnkd.in/e6KuqDfy

1

In this Bacon Bits we show our one-of-a-kind Endpoint Vulnerability discovery, remediation, and reporting features, such as remediating with configuration changes! https://hubs.li/Q02SGhnH0 #BaconUnlimited #VulnerabilityManagement #LetBaconDoTheWork

3

1 Comment

Check out our latest blog on Progress MOVEit Transfer Authentication Bypass Vulnerability (CVE-2024-5806) and Data Exfiltration and our recommendations. https://lnkd.in/g7kuq7sY #cybersecurity #cyberawareness #cyberthreats #cyberdefense #malware #vmware #pickle #threats #exploits #malicious #attacks #gored #mitigate #excobalt #windows #macos #android #botnet #macoS #data #exfiltration #badspace #hackers #scattered #website #wordpress #account #authentication #sectors #cybergang #vulnerability

16

🖥️ 𝗠𝗶𝘀𝘀𝗲𝗱 𝗼𝘂𝗿 𝘄𝗲𝗯𝗶𝗻𝗮𝗿 𝘄𝗶𝘁𝗵 Evans & Chambers Technology 𝗮𝗻𝗱 Carahsoft 𝗲𝗮𝗿𝗹𝗶𝗲𝗿 𝘁𝗵𝗶𝘀 𝘄𝗲𝗲𝗸? 𝗡𝗼 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. Catch-up with the recording of the 𝗭𝗲𝗿𝗼 𝗧𝗿𝘂𝘀𝘁 𝗳𝗼𝗿 𝗙𝗲𝗱𝗲𝗿𝗮𝗹 𝗦𝘂𝗰𝗰𝗲𝘀𝘀: 𝗔 𝗦𝘆𝘀𝘁𝗲𝗺𝘀 𝗜𝗻𝘁𝗲𝗴𝗿𝗮𝘁𝗼𝗿’𝘀 𝗚𝘂𝗶𝗱𝗲 webinar, and hear from Jonathan Holmes, Robert Jamil Evans, Honey Elias, and Kevin Esoda as they talk about federal ZT mandates, deployment strategies, and how to simplify ZT orchestration. Link in the comments! 👇 #ZeroTrust #ZeroTrustNetworking #ZTNA #Greymatterio

8

1 Comment

This, published in the NH Business review this morning, is a high level overview for the newly enacted (and long awaited) CMMC rules -- Cybersecurity Maturity Model Certification program, enacted by the US Department of Defense and required of every defense contractor as of 12/16. https://lnkd.in/eExhChMJ

7

1 Comment

When it comes to protecting your data, having a reliable backup strategy is crucial for your business. Here are 4 signs it might be time to upgrade yours: ⛔ Incomplete Backups: If your backups are missing recent data or files, it's a clear indication of a problem. 🐢 Slow Recovery Times: Long delays in restoring data can impact business operations. 🤖Lack of Automation: Manual backups increase the risk of human error and missed backups. 💻 Outdated Technology: Using old software or hardware can compromise the reliability of your backups. Take the first step in optimizing your data recovery efforts! Follow this link to Book a FREE cybersecurity consultation with us: https://www.oramca.com/ #OramCybersecurityAdvisors #CyberAttack #SlowComputer #CyberSecurity #ComputerBreach #DataBreach #DataBackup #BusinessSecurity #ITManagement #BackupStrategy #BusinessTips

5

Lehigh University (LU), a private research university in Pennsylvania, turned to Armis to strengthen its cybersecurity posture. By implementing Armis Centrix™ for VIPR Pro – Prioritization and Remediation, LU achieved an 80% reduction in assessment time and a 40% decrease in tool costs. The implementation also streamlined workflows, reducing fix times by up to 80%, and enabled more effective prioritization of security findings, thereby minimizing risk exposure. Discover how Armis helped Lehigh University achieve a proactive security posture: https://ow.ly/nTN250SCHgk #VulnerabilityPrioritization #ArmisCentrix #Cybersecurity #RiskManagement

30

Graphing the MITRE ATT&CK framework: https://hubs.li/Q02G90xZ0 From asset visibility to attack path mapping, API observability to IAM security, keeping systems safe from breach and attack often means knowing your way around a graph. That’s certainly true of cyber threat intelligence, where the interconnected graph format reveals the context, tactics and anatomy of a threat - helping analysts bolster their defenses. In this popular blog post from the archives, Dan, our Head of Product, maps out the MITRE ATT&CK cyber threat framework as an intuitive, interactive graph and timeline visualization. #MITREATTACK #ThreatIntelligence #SecurityTools

2