Dan Lorenc

New York Cybersecurity Summit is happening tomorrow! Mike Palumbo and Chel Pelletier will be there with insights into how network digital twin technology can strengthen your attack surface management, vulnerability management, and security posture. https://hubs.li/Q02Yhz590

17

🚨 CISA Adds GeoServer Flaw to KEV Catalog! Critical RCE #vulnerability CVE-2024-36401 is actively exploited, affecting all default GeoServer installations. Read: https://lnkd.in/gVpHsD5k Your geospatial data & systems are at severe risk of unauthorized access & manipulation.

62

This article explores container tech, explaining how runtimes use cgroups and namespaces for security. It highlights the Open Containers Initiative's role in standardizing tools to ensure system compatibility: https://zurl.co/xBmV

3

Don't Miss VStrike™ at AFCEA TechNet Baltimore! Unlock Hidden Efficiency in Your Multi-Cloud Environment We're thrilled to announce that Aaron Boteler, CTO & Founder of CloudCurrent, will be presenting VStrike™ at the AFCEA TechNet conference in Baltimore, Maryland! Join us on Thursday, June 27th at 10:30 AM in the SIGNAL Innovation Theater - Booth #2872 to learn how VStrike™ can help you: Gain complete situational awareness: Experience a user-friendly, immersive 3D view of all your cloud assets, topology, and physical locations. Overlay this with security and vulnerability scans for a holistic understanding of your multi-cloud infrastructure. Optimize cloud costs: Continuously monitor performance to identify and eliminate idle instances, slashing unnecessary spending. Boost infrastructure performance: Track configuration drift and pinpoint topology bottlenecks to ensure smooth operation. Gain deeper insights: Leverage pattern-of-life views to fully grasp the impact on your infrastructure and individual instance behavior patterns. Stop by booth #2872 to see VStrike™ in action and discover how it can empower your organization to thrive in the cloud! #AFCEATechNet #CloudManagement #CostOptimization #VStrike P.S. Can't make it to Baltimore? Follow us on LinkedIn for upcoming webinars and events!

1

AFCEA TechNet Cyber Day One in Baltimore is underway! Come visit us at Booth #3349 and meet the teams from Phoenix TS, OffSec, and Alliance Cyber. Rebecca G. Eddie Chang Christine Harper Michael Cornecelli Learn about our latest cybersecurity training, certifications, and consulting services, and how our offerings can help elevate your cybersecurity game. #TechNetCyber #PhoenixTS #OffSec #AllianceCyber #CyberSecurityTraining #CyberSecurityConsulting

8

Threat modeling provides savings in remediation, finances and resources. It has evolved over time with differing use cases and implementations. But one thing that remained consistent is its ability to produce secure by design software. Check out the history of threat modeling here: https://hubs.li/Q02Ylsxp0 #threatmodeling #history #securebydesign #securedesign #threatmodelingconnect #owasp

5

1 Comment

Webinar tomorrow! OCG Federal, Saviynt, and Strata Identity will be discussing the challenge of maintaining identity continuity and operating at the tactical edge in #DDIL environments - and how you can address that challenge. Register: https://hubs.li/Q02WzgtD0

2

1 Comment

Thursday Thoughts 🧐 - how do you deply FIDO passkeys and other credentials at scale with Entra ID? Good question, join Michael Thelander and Tim Larson to discuss simiplifying credential management! 𝗪𝗲𝗯𝗶𝗻𝗮𝗿 𝗗𝗮𝘁𝗲 & 𝗧𝗶𝗺𝗲 Wednesday, October 30, 2024  8 AM Pacific / 11 AM Eastern 𝗪𝗵𝗮𝘁 𝗬𝗼𝘂'𝗹𝗹 𝗟𝗲𝗮𝗿𝗻: • How Microsoft’s 𝗻𝗲𝘄 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗 𝗙𝗜𝗗𝗢𝟮 𝗽𝗿𝗼𝘃𝗶𝘀𝗶𝗼𝗻𝗶𝗻𝗴 APIs can be harnessed by the Axiad Cloud credential management solution to deliver FIDO2 passkeys in the ways enterprises need them: o in 𝗽𝗵𝗶𝘀𝗵𝗶𝗻𝗴-𝗿𝗲𝘀𝗶𝘀𝘁𝗮𝗻𝘁 forms; o on behalf of IAM administrators; and o in a unified, single-workflow system that works with other credential types.  𝗪𝗵𝗼 𝗦𝗵𝗼𝘂𝗹𝗱 𝗝𝗼𝗶𝗻: • IT Security Pros • IAM Leaders • IAM Solution Architects and Engineers • Anyone involved in designing or managing credentialing processes 𝗥𝗲𝗴𝗶𝘀𝘁𝗲𝗿 𝗡𝗼𝘄 👇 👇 https://lnkd.in/eaaGPcAa #fido #identitySecurity #cybersecurity Microsoft Security

8

A report by Lineaje Inc revealed that 84% of software contractors missed the requirements set by Executive Order 14028, which had a deadline of yesterday. The order, issued by Cybersecurity and Infrastructure Security Agency, mandated software contractors to implement a "Software Bill of Materials" (SBOM), an inventory of software components crucial for supply chain risk management. The primary reason for non-compliance? Staffing shortages. “These findings demonstrate that, in many cases, the federal government’s efforts to prevent cyber infiltration have yet to translate into real-world action,” according to the report. It's underwhelming uptake like this, that inevitably leads to federal legislation. #CyberSecurity #ExecutiveOrder14028 #CISA #SoftwareBillOfMaterials #SBOM #SupplyChainRiskManagement #StaffingShortages #CyberInfiltration

7

Clock’s ticking! Only two days left until our webinar on disaster recovery and data security for K-12 schools. Hurry and grab the last few spots to learn how to mitigate risks and cut cybersecurity costs. Register now before it’s too late. https://lnkd.in/dYHCxsZk #disasterrecovery #cybersecurity #cloudbackup #K12Education

4

The latest update for #SedaraSecurity includes "Hardening Systems through Security Benchmarks" and "Succeeding at #Cloud #VulnerabilityManagement". #Cybersecurity #MSSP #PenTesting https://lnkd.in/eQYauAct

1

Today at #Cloudscape2024, Blue Mantis cybersecurity specialists Jay Pasteris (COO) and Jay Martin (CISO) teamed up with Boston College Sentinel Mintz to engage in an eye-opening panel discussion. They explored a unique roleplaying scenario focusing on the technical details, legal ramifications, and financial impact a data breach can impose on organizations and their C-suite leaders. #LetsMeetTheFuture #OneTeamOneMantis #Cloudscape #SecuringThePresent #InnovatingTheFuture #SecureOurWorld #CybersecurityAwarenessMonth #CyberSecurity

59

1 Comment

Microsoft Access Databases has for many organizations been spreading like a virus over the years, consider #Investigatorplusforaccess the cure: https://lnkd.in/dB74pCTq #msaccess #access #microsoftaccess #db #accessdatabase #microsoft #lowcode #nocode #migration #analysis #adopteq #mspartner #microsoftpartner #power #powerplatform

7

With adversaries skilled at evading conventional cybersecurity stacks, it’s time for a change. Join Lumu Technologies at the Massachusetts Public Sector Cybersecurity Summit to see how we support local government agencies stay steps ahead with automated threat detection and real-time responses. >> https://zurl.co/AFlo #Cybersecurity #Technology #Local #Government #GovTechLive

11

1 Comment

Staying on top of third-party updates shouldn’t be a hassle. Check out this Bacon Bits to see how Bacon simplifies vulnerability detection and remediation for third-party applications! https://hubs.li/Q02TK5_f0 #BaconUnlimited #VulnerabilityManagement #LetBaconDoTheWork

5

3 Comments

Good news! Customers on 9.3.0+ versions of Splunk Enterprise can now access file system destinations for ingest actions, giving you more control over where data lives. Check out this Splunk Lantern article to learn how to configure this new capability: https://splk.it/3MDLE63

55

BigID is the first and only DSPM certified by the EDM Council for the Cloud Data Management Capabilities (CDMC) framework! 🎉 This #cybersecurityawareness month, see how BigID can help orgs like yours secure your cloud data, comply with emerging regulations, & optimize cloud migrations. https://bit.ly/3XUAtMP

11

Skyhigh Security: Curious about Skyhigh Client Proxy (SCP)? In his new blog post, Jeff Ebeling, Cloud Security Architect at #SkyhighSecurity, breaks down how SCP fortifies your employee systems and data while enhancing visibility and control over HTTP/HTTPS traffic. Check out "The Skyhigh Client Proxy Context Advantage" for use cases, an example ruleset, and more! 🌐💻 https://bit.ly/4cT7zS1

15