Derek Loomis

#CTI Question of the Day❓ Staying up-to-date on the latest threats is crucial for CTI analysts and security researchers. What are your go-to news outlets, blogs, podcasts, or social platforms/profiles to stay in the know? 🤔 #threatintelligence #securityresearch

5

Turbocharge your Incident Response readiness with Natsar's Cybersecurity Program Bundle. 17 docs, NIST-based plan, policy, templates. Save 10% when bundled. #IncidentResponse #CyberSecurity https://zurl.co/F3qD

2

Discover how WATI enhanced security incident response for the County of Los Angeles with advanced threat analytics and comprehensive penetration testing. Learn how our expert consultants improved the county's security landscape and established a DevSecOps foundation. Read the full case study here: https://lnkd.in/e3fSTmev #WATICybersecurity #ThreatAnalytics #VAPTCaseStudy #SecurityIncidentResponse

7

The last installment in the series on the 5 steps of CTEM. If setting up a comprehensive CTEM program is in your sights, don't miss this deep dive into how to proactively remediate threat exposures. Check it out now 👇🏻 https://lnkd.in/eUk3Wd_i

6

The last installment in the series on the 5 steps of CTEM. If setting up a comprehensive CTEM program is in your sights, don't miss this deep dive into how to proactively remediate threat exposures. Check it out now 👇🏻 https://lnkd.in/eUk3Wd_i

4

If you're struggling with compliance and security challenges, CCM might me the game-changer you need. Here's why: 🏆 Rapid Certification: Achieve compliance certifications like SOC 2, CMMC, or NIST CSF in record time – like a FedRAMP High In Process package in just 3 months. 📊 Automated Evidence Collection: Cut audit prep time by up to 60%, saving costs and improving accuracy. Always be audit-ready! 🗺️ Streamlined Compliance: Map a single control across multiple frameworks, eliminating redundant tasks and ensuring a harmonized compliance posture. 🔄 DevSecOps Integration: Embed compliance checks directly into your development pipeline, maintaining security without disrupting workflows. #ContinuousControlsMonitoring #Compliance #Cybersecurity #RiskManagement #RegScale

4

The new Semperis global #ransomware report 2024 Ransomware Risk Report: Essential Guidance for Building Operational Resilience Against Cyberattacks is garnering a lot of attention for some of the startling results. Did you know... 78% of organizations paid a ransom? 72% of companies paid multiple ransoms? 33% of organizations that paid a ransom received corrupted decryption keys or none? Thank you, Help Net Security for shedding more light on the ransomware scourge.

11

1 Comment

👻 https://lnkd.in/eFHd2fXA Strengthen your organization's defenses against lurking cyber threats with a next-gen SOC. Discover how WEI’s modern SOC solutions can enhance incident response and keep your team a step ahead. #Cybersecurity #SOC #IncidentResponse

🚨New Blog Alert! Vulnerabilities in KnowBe4 Applications: RCE and LPE Exposures. Our own Ceri Coburn uncovered serious vulnerabilities in three KnowBe4 applications—Phish Alert Button, PasswordIQ, and Second Chance. These vulnerabilities include remote command execution (RCE) and local privilege escalation (LPE), posing significant security risks, especially in public Wi-Fi environments like coffee shops. Despite KnowBe4's initial downplay, persistent communication with their team and escalation to KnowBe4's CEO led to the acceleration of a fix. However, challenges persisted as initial patches were ineffective, leaving users exposed and highlighting the importance of proper vulnerability management and response. Read our full analysis and learn how to help protect your systems from these threats: ➡ https://lnkd.in/esnNAsKS Key Findings: RCE via DNS spoofing: CVE-2024-29209 (CVSS: 8.3) LPE via configuration file: CVE-2024-29210 (CVSS: 7.8) Potential DLL hijack vulnerability: Awaiting CVE #CyberSecurity #VulnerabilityDisclosure #KnowBe4 #RCE #LPE #SecurityAlert #CyberThreats #Infosec #TechNews #VulnerabilityManagement #DataSecurity #EthicalHacking #SecurityPatch #CVEs #PublicWiFiSecurity

39

3 Comments

 Discover how the newly released NIST CFS 2.0 cybersecurity framework can significantly improve your network security and overall protection. Click the link below to learn more! https://lnkd.in/gHR4E2Xp

1

To survive the modern threat environment, organizations need to address their cyber risk by implementing a properly fit, vigilant, and continuously improving security operations model. Discover how to do just that in the 2024 Arctic Wolf Security Operations Report: https://ow.ly/Ap0450Tpbix #EndCyberRisk

7

1 Comment

Ready to learn your #EDR platform inside and out? At #RSAC? Stop by booth 15 at the Early Stage Expo to grab a signed copy of Evading EDR from author and Director of Security Research Matt Hand 📖

12

Do HIPAA, NIST, CMMC, or FFIEC add stress to your plate? You won't want to miss this week's NCI Live to meet Control Map: A user-friendly solution that will crush compliance headaches. Join the conversation right here on LinkedIn: https://hubs.li/Q02Ff7fV0

6

1 Comment

What can you learn from examining the vulnerabilities of 265 global organizations? A lot 💯 With the 2024 Unit 42 Attack Surface Threat Report, gain actionable insights to fortify your defenses and proactively identify, monitor and remediate risks before they're exploited. https://bit.ly/3APYzPN

60

Proofpoint: September is Insider Threat Awareness Month. Use this time to assess the effectiveness of your #insiderrisk program. The Risk Program Effectiveness Model (IRPEM) can help evaluate where you can improve and strengthen your security posture. Learn more: https://ow.ly/GcUz50TeYcY. #insiderthreat

6

If you are looking for a Managed Detection and Response provider in the New Jersey Market! Why not have quick conversation with Zack Hoffman and I? Your Arctic Wolf North Jersey TEAM~~ In the meantime take a look at How Arctic Wolf Delivers Comprehensive Response Capabilities!!!

16