Christopher Robinson

👀 Incident Autopsy - another good read Last night I ran into HYPR's posting on fake IT Worker threats and decided to peruse their other reports. Found this one... you know me by now... I love reading autopsies of incidents - what was the threat technique? What were the countermeasures along the kill chain to mitigate? This article nicely lays the answers to this question in an easy to read use-case that I recommend you use to build your knowledge of actionable defensive measures. This will help you with the "WHY" behind many things we do to secure access. Quotable: "In complex enterprise environments, such misconfigurations are all too common. It’s critical for security teams to understand the tactics attackers use and strategies to close these points of vulnerability." https://lnkd.in/gEErtwZm #informationsecurity #cybersecurity

16

Great news from NIST as they adapt digital identity guidelines for state and local benefits programs. This collaboration with the Digital Benefits Network and the Center for Democracy and Technology to refine digital identity measures is a step in the right direction. It's essential to ensure that as we enhance digital services, we also safeguard privacy and equity, particularly in public benefits administration. Looking forward to seeing how these guidelines will foster more secure and inclusive digital environments. https://bit.ly/3KYuH5J

22

What does FISMA have to do with it? ➡ Many critical infrastructure sectors have interdependencies with drinking water and wastewater services. These include the Chemical, Emergency Services, Energy, Healthcare, and more. “Water, water, everywhere, and not any drop to drink” – “The Rime of the Ancient Mariner,” Samuel Taylor Coleridge 🚧 BL: No water doesn't only mean no coffee! ☕ ➡ In November 2023, the Aliquippa Municipal Water Authority in Pittsburgh experienced a cyberattack after one of its booster stations was hacked by an Iranian-backed cyber group known as ‘Cyber Av3ngers.’ Other major critical infrastructure breaches include the 2022 compromise of the Florida water treatment facility near Tampa days before the Super Bowl. ➡ Critical infrastructure is proving to be an easy target with a high margin of success. While the EPA aspires to follow in the footsteps of the Transportation Security Administration and Food and Drug Administration to provide cybersecurity rules for their sectors, Congress will need to provide the EPA with these new authorities. ➡ Immediate action is needed. The EPA and all federal regulators falling under FISMA must prioritize the security of their networks. This is crucial to ensure they can continue their operations, reducing the threat of malicious cyber actors breaching their networks. By doing so, they protect their own digital enterprise and set an example for their sectors. 💡 At Forescout Technologies Inc., We don't just SEE all IT, IoT IMoT, and OT assets on your network; we PROTECT every connected asset - managed and unmanaged. Read the full article here: https://lnkd.in/ezqUfFcC

57

11 Comments

The latest update for #JumpCloud includes "MFA for MSPs: Benefits & Implementation of Multi-Tenant MFA" and "The State of SME IT in the U.S.". #Cybersecurity #IdentitySecurity https://lnkd.in/dRyFad_M

1

This week, on “This Is Fine”, we’re discussing Continuous Monitoring and Risk Assessment in DoD Networks. Join us as Daniel Beller, CISSP, Director of Cloud Solutions, and Chris Sowards - CISSP, GRC expert with Hunter Strategy, share their insights on these critical topics. Whether you're a cybersecurity professional, a student of the field, or simply curious about national security measures, this episode is a must-listen! Tune in now to gain valuable insights into the technical and strategic aspects of cybersecurity within the DoD.  Watch the recording on our YouTube Channel: https://lnkd.in/gffXXj2U  Spotify: https://lnkd.in/gMCqiCYD  Apple Podcasts: https://lnkd.in/gX_dAApT  YouTube Music: https://lnkd.in/gTW5GP8G  Amazon Music: https://lnkd.in/g2jHfRpG    #CyberSecurity #DoD #Podcast #ContinuousMonitoring #RiskAssessment

12