Forrest Fegert

📣 #NIST just released a 35,000-word guideline update for #password protection. 😵 Here are six takeaways from this lengthy document! 💪 We can help implement each one! ➡️ https://t.ly/O9s7Z #CMITSolutions #ITServices #MSP #Cybersecurity

11

📣 #NIST just released a 35,000-word guideline update for #password protection. 😵 Here are six takeaways from this lengthy document! 💪 We can help implement each one! ➡️ https://t.ly/8VZu7 #CMITSolutions #ITServices #MSP #Cybersecurity

8

Chromium issues a quality ultimatum. In the most recent CA/Browser Forum face-to-face meeting, the Google Chrome root program gave a presentation clearly defining its expectations for quality of incident reporting from CAs with an eye to where many CAs have been failing. Jason Soroko and I relate Chromium's statements and their significance. #pki #security #ssl #cabf https://lnkd.in/ghYPCshs

19

1 Comment

Enabling two-factor authentication is an added security feature in VERIFYiQ so you have an added confidence that all financial information in VERIFYiQ are access by authorized personnel only. For this weeks episode of "Tuesday Tips by VERIFYiQ" let us learn on how to enable 2FA for your VERIFYiQ Log-in. #HowDoYouSetUp2FAinVERIFYiQ #bookkeeping #verifyiq #bookkeepingreview #accountingservices #accountingsolutions #accounting #bookkeepingsolutions

5

Enabling two-factor authentication is an added security feature in VERIFYiQ so you have an added confidence that all financial information in VERIFYiQ are access by authorized personnel only. For this weeks episode of "Tuesday Tips by VERIFYiQ" let us learn on how to enable 2FA for your VERIFYiQ Log-in. #HowDoYouSetUp2FAinVERIFYiQ #bookkeeping #verifyiq #bookkeepingreview #accountingservices #accountingsolutions #accounting #bookkeepingsolutions

2

Come join us for our PNSQC August Meetup An introduction to API security testing w/ Bas Dijkstra Wednesday, August 21, 2024 12:00 PM - 1:30 PM PST Location: Online, Portland, OR Register Here: https://ow.ly/rc3N50SSeAR 🔒 How Strong Is Your API Security? 🔒 In today's digital landscape, APIs are the lifeblood of data exchange between systems. However, they also present a prime target for cyberattacks. Don't wait until you're in the headlines for all the wrong reasons! Ensuring your APIs are impervious to security vulnerabilities is crucial. But here's the great news: securing your APIs doesn't have to be a daunting, time-consuming task reserved for experts. Join us for an exclusive online session with Bas Dijkstra where you'll discover how to fortify your API security effortlessly. Learn to leverage powerful tools like Postman and REST Assured, guided by the latest 2023 OWASP API Security Top 10. Watch as Bas demonstrates live API security testing experiments, sharing his insights and analysis. Walk away with practical techniques you can immediately apply to safeguard your own APIs. 📅 NOTE: This meetup will be conducted online only. Don't miss this opportunity to elevate your API security game. Secure your spot now!

4

Using Tailscale for OPSEC. Not sure if it would help evade fraud detection when creating research accounts, but it's an amazing tool. https://lnkd.in/e_HcpGry #OSINT #OPSEC #tailscale

8

Did you catch our two-part blog series on the importance of an incident response plan (IRP)? Learn what an IRP is and get access to a free template to help you launch your own: Blog part 1: https://ow.ly/Myb250Rzr70 Blog part 2: https://ow.ly/XB3350Rzr71

40

🚨 🇺🇸 Calling Fraud Fighters 🚨 ThreatMark is gearing up for the 2024 IAFCI Conference next month! Join us to dive into discussions on Social Engineering Scams, Account Takeovers, and cutting-edge strategies to prevent real-time Payment Fraud. Come meet our team at booth #13 or check us out on the Whova app and schedule some 1:1 time with our experts to connect in-depth at the conference. See you there! #IAFCI #AccountTakeovers #Scams

6

HiveForce Labs reported 1,630 vulnerabilities being actively exploited in 2023. This number includes 170 zero-days. How do you know that you're not at risk? See for yourself with Uni5 Xposure. Explore how: https://hubs.li/Q02BK8VX0 #Uni5Xposure #CyberDefense #ThreatExposureManagement #SecurityPosture #SecurityRisk #HiveForceLabs #HivePro

1

I am demonstrating on how to build a Reddit Scrapper for Reddit scrapping as part of OSINT investigation in this blog post. #osint #syberseeker https://lnkd.in/g6iFMKmN

10

What defines value? After three years of effort, this week marks the start of the federal government's enforcement of new secure software development requirements. Starting with GSA and then shifting to all commercial vendors selling to all agencies, the Office of Management and Budget industry-changing mandate is now in action. For years, vendors commented that they thought this would never happen, but guess what? It did. Attacks on nations' software are skyrocketing, and as a nation, we need to take steps to produce more secure software by design. Before implementing tools such as application security testing (SCA/SAST/DAST), you must ensure your organization has a proper foundation. This is why the NIST 800-218 Secure Software Development Framework (#SSDF) starts with organizations preparing themselves to ensure that their people, processes, and technology are prepared to perform secure software development at the organization level. CodeLock, Inc. received a grant from VIPC | Virginia Innovation Partnership Corporation to develop a dashboard to provide companies across the country with the resources they need to get started and comply with these new requirements. Over the last month, we have uploaded templates for policies and procedures that your organizations need to have in order to meet specific practice areas. Rather than you having to create this from scratch, we did the work for you, saving thousands of hours and the finances associated with that work. You can get a CodeLock account today and access all of these resources for only $19/month. Do no wait to take action, get started with the compliance process today. If you made it this far into my post, congratulations! Send me a message, and I will give you a discount code to get started for free. #ZeroTrust, #CyberSecurity, #SoftwareDevelopment, #DepartmentOfDefense, #InfoSec, #NationalSecurity, #DefenseTech, #CyberDefense, #SecureSoftware, #MilitaryTechnology, #DevSecOps, #InformationSecurity, #CyberAwareness, #GovernmentTech, #CyberThreats, #TechInnovation, #DigitalTransformation, #CloudSecurity, #DataProtection, #NetworkSecurity, #SecurityArchitecture, #CyberResilience, #IdentityManagement, #Encryption, #Compliance, #SecureCoding, #CyberRiskManagement, #AIInCybersecurity, #ThreatIntelligence, #CriticalInfrastructure, #CyberLaw, #CyberEthics, #TechnologyLeadership, #PublicSectorInnovation, #TechGovernance, #SecureByDesign, #PrivacyByDesign, #MilitaryInnovation, #DefenseStrategies, #CyberWarfare, #CyberDiplomacy, #GovernmentContracting, #DefenseContractors, #MilitaryTec, #TechPolicy, #SecureInfrastructure, #NationalCybersecurity, #TechForDefense, #SecureDevelopment, #GovernmentIT

13

1 Comment

⌛Times up for businesses subject to the #MTCDPA! Montana's data privacy law is in effect as of today, October 1. Much like planting trees, the best time to get compliant was in the past; the second-best time is right now. Our blog provides all the information you need to know, from applicability thresholds to major obligations and more. 👇👇👇 https://pvcy.me/4dw4JCa

2

Yesterday, we published our annual report, 'The State of Enterprise Copilots & Low-Code Development.' Our research outlined that these platforms are not only well-adopted within the enterprise, but represent a new attack surface that isn't detectable with traditional #AppSec or #CICD tooling. In addition to the report, we're adding some color commentary and stories around our research in a webinar featuring our VP of Research, 🦾 Inbar Raz. Join us at the link below for some can't miss insights! https://lnkd.in/ew69pdxg

14