Darin Hurd

🚨 Legacy MFA isn’t enough to stop modern threats 🚨 Organizations face growing challenges from MFA bypass attacks, where attackers trick users into revealing not just their credentials but also MFA codes (like SMS or push notifications). The solution? Modernize authentication with FIDO. 🔑 Why FIDO Matters: Built-in cryptographic techniques block credential theft, even if users are tricked. Works seamlessly with operating systems, phones, browsers, SSO providers, and websites. Prevents attackers from logging in , even with stolen credentials. 💡 Case Study Highlight: The USDA deployed FIDO authentication for ~40,000 staff, overcoming challenges like seasonal workers and lab environments. Their success shows that migrating to FIDO is achievable for any organization. Read the USDA’s inspiring journey to modern authentication. 💭 Remember: Malicious actors don’t break in—they log in. Let's stop them. #CyberSecurity #MFA #FIDO

6

The countdown has started ... less than a month away. CornCon X: The Cyber Games, taking place on October 4-5, 2024 in Davenport, IA. This isn’t just another cybersecurity conference. It’s a unique experience that combines top-tier professional insights with a vibrant community atmosphere. What sets CornCon apart? 🌟 - Diverse Topics & Expert Speakers: With over 65 world-class speakers, CornCon covers a wide range of topics from ransomware and IoT to AI and medical devices. - Hands-On Villages & Training: Engage in interactive sessions and hands-on training that provide practical skills you can apply immediately. - CISO Executive Summit: A dedicated summit for CISOs to discuss the latest trends, challenges, and strategies in cybersecurity leadership. - Kids’ Hacker Camp: A unique feature where the next generation of cybersecurity experts can learn and play. A huge shoutout to John D. Johnson, the visionary founder of CornCon. Don’t miss out on this incredible opportunity to learn, network, and grow. Register now and join us in Davenport for an unforgettable experience! https://corncon.net #Cybersecurity #CornConX #CyberGames #CISO #HackerCamp #CyberCommunity

19

🔐 Breaking Down NIST CSF Subcategory GV.SC-06 🔐 When it comes to cybersecurity, it’s not just about what happens inside your organization—it’s also about who you do business with. That’s where NIST CSF Subcategory GV.SC-06 comes into play. GV.SC-06 emphasizes the importance of performing thorough planning and due diligence to reduce risks before entering into formal relationships with suppliers or other third parties. Why is this important? Imagine partnering with a vendor who has weak security practices. That connection could become a gateway for cyber threats, putting your entire organization at risk. GV.SC-06 helps ensure that before you sign any contracts or agreements, you’ve carefully evaluated the potential risks and taken steps to mitigate them. For those unfamiliar with the NIST Cybersecurity Framework, it’s a set of guidelines designed to help organizations manage and reduce cybersecurity risks. It’s a widely respected tool used across various industries to build strong and resilient security strategies. 🌐 By conducting proper due diligence before partnering with third parties, you’re not just protecting your organization—you’re also building a stronger, more secure business network. #Cybersecurity #NISTCSF #RiskManagement #ThirdPartyRisk #DueDiligence

6

I truly enjoy listening in to this crew every week and this week's episode is timely as this is the topic of discussion in my organization, as well as my Advanced Leadership Program studies cohort. I'd be curious to learn what others think about what was shared. Mahalo to Evan Francen, Meg Perron, Certified vCISO, MBA, Jordon Darling, CISSP, CvCISO, CCP, and Jim Perron!

8

2 Comments

This speaks volumes to the importance of having a Board members who are versed in cybersecurity and a correctly constructed Board. Take note, and get ready, there will more callouts.

18

1 Comment

Super excited about this session! AI, the risks and value proposition plus data governance will certainly be topics of great interests for all security professionals.

17

1 Comment

This is an easy one to endorse. The latest draft NIST guidelines on Digital Identity - SP800-63B - remove the need for regular password changes except in cases where there is an indication of compromise. They also recommend significantly longer passwords be used, and for systems with sensitive data a second authentication factor. Bruce Schneier's quick reference to the changes linked here:

12

In the string of reported cyber breaches and changes in reporting requirements, the market still shows there to be a nominal effect on an impacted company's share price. UHG’s fell 6.2% in the 5 days after it disclosed the Change Healthcare breach and per Yahoo Finance, CrowdStrike's share price fell 40% at their lowest point and now sits at 15% below their pre-outage price tag. From a risk view, it seems there's a signal that a one-time event does not carry much weight, material or not....at least not as much as other factors that could have a greater impact on a share price. Begs one to think where security should prioritize efforts at the end of the day. #informationsecurity #innovation #strategy #technology https://lnkd.in/gPNB9rXq

10

Most Organizations Not Prepared For Upcoming CISA Software Compliance Deadline A recent survey has revealed a concerning trend: a staggering 80% of organizations are not ready to meet the CISA's Secure Software Development Attestation Form deadline on June 11, 2024. This form, a critical component of Executive Order 14028, mandates software producers working with the U.S. government to confirm the deployment of key security practices. The implications of non-compliance are severe, ranging from legal and financial penalties to increased susceptibility to cyberattacks and reputational damage. Despite the urgency, 84% of companies have not implemented Software Bills of Materials (SBOMs) into their development process, a requirement made mandatory over three years ago. The survey, conducted at RSA Conference 2024, also highlights a lack of awareness, with 65% of security professionals admitting they have never heard of EO 14028. With software supply chain attacks impacting over 2,700 organizations in the U.S. last year alone, the need for immediate action has never been more critical. #Cybersecurity #CISA #Compliance #SoftwareDevelopment #RiskManagement

7

I often get asked about the threat of deepfakes when I speak at events. Here is a great overview of the threats of deepfakes as related to fraud and cybersecurity. https://lnkd.in/e7mqZiT6

44

1 Comment

October is Cyber Security Awareness Month. Each week is dedicated to a specific topic that will help #SecureOurWorld This week is focused on multi-factor authentication (MFA). MFA provides an additional layer of security to strong passwords (see last week's post) to prevent cybercriminals from gaining access to your accounts. MFA can be a code emailed or texted to you, a code generated from an app, or even biometrics such as a fingerprint. If you have accounts that store or process sensitive information (e.g., social security number, account numbers, credit card numbers, any other personally identifiable information), set up MFA on them to keep your data secure!

3

We really need to stop using FTP servers, especially for sensitive data 🛡️ Sensitive data on nearly 1 million Medicare beneficiaries in Wisconsin was compromised in 2023 due to a ransomware attack exploiting Progress Software’s MOVEit file-transfer service flaw. On September 6, The Centers for Medicare & Medicaid Services (CMS) announced that its contractor, Wisconsin Physicians Service Insurance Corp., was impacted by the MOVEit flaw. The compromised data includes names, Social Security numbers, dates of birth, addresses, hospital account numbers, Medicare beneficiary identifiers, and health insurance claim numbers. CMS began notifying nearly 950,000 affected individuals last week, following Wisconsin Physicians Service’s notification of the breach on July 8. The data breach is part of a larger wave of attacks in May 2023 targeting the MOVEit vulnerability. Organizations like the Texas Dow Employees Credit Union have also recently disclosed breaches related to the MOVEit vulnerability. https://lnkd.in/gP8t4E3C

3

Freeze your credit! It’s easy to unlock when you need it. When you apply for a credit card or loans, you will just have to ask them which credit bureau they use and open it for 24 hours while they pull your credit file. It’s that easy to unlock when you need it, versus the process of getting a fraudulent account off of your credit. https://lnkd.in/gN8QfE6i

2

🔐 Cybersecurity and Supply Chain: The Dynamic Duo! NIST CSF GV.SC-09 🔐 Ever think about how your favorite superhero gadgets come together? Behind every great tech product is a supply chain, and keeping that chain secure is just as important as locking down your own organization. That’s where NIST CSF Subcategory GV.SC-09 steps in, making sure supply chain security practices are baked right into your cybersecurity and risk management programs. What does that mean? It’s like making sure your superhero tools (aka tech products and services) are secure from day one—and you don’t just set it and forget it. You’re constantly monitoring how things perform throughout their life cycle, keeping a sharp eye on any weak links or hidden villains. For the newbies, the NIST Cybersecurity Framework is your go-to guide for reducing risks and protecting your organization. GV.SC-09 helps you integrate supply chain security into your big-picture strategy—ensuring that your partners, vendors, and suppliers are as secure as you are. 🌐 In the world of cybersecurity, a strong supply chain equals a stronger defense. So, why not make it a key part of your risk management strategy? Because after all, teamwork makes the dream work! #Cybersecurity #NISTCSF #SupplyChainHeroes #RiskManagement #Teamwork

10

How to protect your dollars from bank fraud - tips for everyone. Here's a Youtube recording from today's broadcast Fromm AARP Michigan: The ever-evolving world of banking fraud should have all of us on high alert and rethinking our banking habits, from writing checks to cash apps and using a cell phone to do banking. Cybersecurity expert Dan Lohrmann and AARP Senior Advisor on Fraud Prevention Programs Liz Buser will provide insights, best practices and answers to your questions. #cyber #cybersecurity #bankfraud #fraud Presidio https://lnkd.in/egkG9DuC

1

SEC takes no action on Progress Software for MOVEit Transfer case The Securities and Exchange Commission (SEC) notified Progress Software on Aug. 6 that it does not intend to recommend an enforcement action against Progress for the MOVEit Transfer vulnerability that impacted 95 million people. Progress went public with the information in an Aug. 7 SEC filing, in which it said the company received a subpoena from the SEC on Oct. 2, 2023 as part of a fact-finding inquiry that sought various documents and information relating to the MOVEit flaw. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations

1

Good insight for all Incident Management teams.

4

Securing Access - Part 1 - Authentication 🔑 In a recent news article, a disgruntled ex-employee 😡 gained unauthorized 🚫 access to his former employer's environment computer test systems and deleted the virtual servers, resulting in significant financial losses. 💸 💭 How can we prevent such incidents? 💭 We can look at three parts:  (i) Authentication🔑, (ii) Authorisation ✅, and  (iii) Monitoring 🔎 🔑 Authentication 🔑 1. Individual accounts Personnel should be assigned individual accounts for their work purposes. Using shared accounts may lead to accountability issues. 2. Remove account(s) Accounts of terminated employee(s) should be removed/disabled timely. For high-risk functions/roles, organizations take proactive action to revoke accounts of laid-off employees immediately after formal notification. Others may take a different approach by off-boarding the access x-days prior last working date. 3. Implement MFA MFA provides an additional layer of security. Despite the knowledge of credentials, perpetrators without the MFA would not be able to complete the sign-in process. 4. Restrict login  Remote access can be further restricted using parameters like IP address, and geographic location, including time-bound restriction on specific hours.  5. Password controls  Lastly, password hygiene. Enforce strong password controls like minimum length, complexity, history, and rotation, etc. Remember to include account lockout after x-failed attempts too. #LBFalumni  #SkyHighTower  #bingshare炳分享4149 #cybersecurity #authentication 

54

4 Comments