Frances Zelazny

⚡️Some domains likely used by #transparentTribe #APT36 counciling[.]com nbssedelhi[.]org ashifdigitalseva[.]xyz birthdeath[.]in gov-certificate[.]com viewss[.]click admin-mcas-df[.]ms admin-mcas[.]ms mcas-df[.]ms mcas[.]ms verifycertificate[.]info nimsme[.]org

1

1 Comment

🥜 Peanut Butter & 🍇 Jelly Meets Cybersecurity and Compliance A Smucker’s of Protection with a Skippy in Strategy. ☺️PB&J has always been more than just comfort food for me—it’s a yummy blend that brings simplicity and satisfaction to the table. Similarly, cybersecurity and compliance offer comfort to small businesses by providing a reliable framework against cyber threats and regulatory challenges. 🍇 Reliable Protection Just as PB&J is my go-to for a quick, tasty meal, having robust cybersecurity and compliance frameworks gives businesses the assurance they need to operate smoothly and securely. 🍇 Simple and Effective Cybersecurity doesn’t have to be complicated. It can be as easy as whipping up a PB&J sandwich, simple yet effective measures can provide significant protection. ✌️Peace of Mind Knowing that your business is protected and compliant can bring peace of mind just like the familiar taste of PB&J. Here’s why this duo is essential for #MSPs: 💪Strength in Unity Like peanut butter complements jelly, cybersecurity provides the protective measures while compliance ensures they align with regulations by following a framework that enhances security postures. 💪Better Together Alone, each has value, but together, they address both protection and adherence to standards, delivering comprehensive risk management. 💪Synergistic Impact The integration of cybersecurity and compliance streamlines processes, reduces vulnerabilities, and increases operational efficiency, just as PB&J merges flavors for a delightful result. So fuel your fun and mix some #compliance into your #cybersecurity and be the bread that holds it all together.

12

10 Comments

Are you a publicly traded company in America? Then put your cybersecurity team and your securities attorneys on speed dial. The #SEC is now imposing unreasonable burdens on publicly traded companies to determine the severity of a cyber intrusion within 24 hours of discovery and also report it to the SEC if it is more than a de minimis impact. As cyber attacks become more sophisticated, compliance with this rule will become more impossible, leading to double expenses for smaller companies already stretched thin by the increasing cost of compliance. As a result, I think we will see fewer companies list and more companies delist, shrinking the pool of investment opportunities available to the mainstreet investor and centralizing the power of public markets in the hands of even fewer big corporate players. In short, I think this harms everyone except the few folks who will benefit from it by capturing an even larger market share of remaining investments. #blockchain #fintech #bitcoin #crypto

6

2 Comments

Own Company's Eoghan Casey emphasizes the importance of seeding high-quality data into realistic production environments for secure digital services delivery to government agencies. Learn more: https://lnkd.in/giMZhNif ___ #Data #Cybersecurity

1

New FTC requirements for reporting are in effect and penalties can be severe. Noncompliance penalties include fines of up to $100,000.00 per violation for the financial institution and fines of $10,000.00 for the individual found in violation. In this article, Hinshaw states they are seeing regulators holding the executive officers responsible for violations.  https://lnkd.in/eYpz_iM5 #FTC #Financial #Cybersecurity

1

🚨 Teen Safety Alert 🚨 Anonymous Messaging App The FTC and LA DA are taking action against an anonymous messaging app linked to teen cyberbullying. Get the facts and learn how to safeguard your teen's online experience. https://lnkd.in/e2riMF83 #OnlineSafety #TeenProtection #BetterEverydayCyber #AnonymousMessageApp #FTC #CyberBullying

3

1 Comment

TEDCO announces the unveiling of the “Cybersecurity Workforce Analysis and Study.” This study, performed by Lightcast, found that, although an epicenter for cybersecurity talent, the National Capital Region is only meeting 33% of the current cybersecurity workforce demand. This reality has led to the creation of TEDCO’s Cyber Maryland Program; with the insights from this study, the group of talented and diverse individuals will use the study’s findings and recommendations to bring a strategic change to the current workforce pipeline. Learn more about this study and the recommended steps forward at https://lnkd.in/eWugaQBb Read the study in its entirety at https://lnkd.in/eTuNrN88 #maryland #mdtedco #cyber #technology #innovation #cybersecurity Alex Choi Mindy Lehman Lightcast Troy Stovall DeJonna Farrar Cassy Haber Rachael Kalinyak Cybersecurity Association of Maryland, Inc. (CAMI) Maryland Marketing Partnership (MMP)

30

If you're looking for a great way to get started with your school's cybersecurity protections, why not carve out an hour or so next week and join me for this webinar? 😀

9

1 Comment

🎙️ New Episode of Critical Point War Stories: "The Reporter Called Her Christmas Day" 🎄📞 I recently had the pleasure of interviewing Discernible Inc's Melanie Ensign, former Global Head of Security, Privacy, & Engineering Communications for Uber, for my podcast. In this episode, we dive deep into: 1. How to build an effective #bugbounty program 2. The value of running #cybersecurity incidents using the same #incidentresponse process that the rest of the company uses 3. How to improve external security communications by improving internal security communications 4. The value of prioritizing the relationship over "being right" in internal and external communications 5. “And to be honest, sometimes you need to reassure the other person that the relationship is the priority in order for them to accept when you are right.” –Melanie 6. What #SCUBA taught Melanie about incident response Melanie shares her story about handling a security researcher's frustration that escalated to media attention - on Christmas Day, no less! Her insights on cross-functional collaboration, proactive communication, and the importance of well-practiced incident response are invaluable for anyone in tech or security. 🔑 Key Takeaways: * Use your incident response plans every day * Cultivate strong cross-functional relationships before crises hit * Consider the long-term impact of your communications * "Be kinder than necessary" - it transforms team dynamics Melanie also draws fascinating parallels between SCUBA diving and incident response, emphasizing the importance of training, preparation, and trusting your team. Whether you're in cybersecurity, communications, or leadership, this episode offers practical wisdom for navigating high-stakes situations. Watch on YouTube: https://lnkd.in/dccvts9B Or listen now in your podcast app of choice and let me know your thoughts! https://lnkd.in/dQa7GAHq #Cybersecurity #BugBounty #IncidentResponse #Communications #LeadershipLessons #TechPodcast #CriticalPointWarStories

7

This is exciting news for K-12. Your application for FCC pilot funds will go live next week. However, you will have a higher chance of getting approved with an intentional approach and strategy. TriVigil can absolutely help you get there in 4 hours and with E-rate funds through TIPS (The Interlocal Purchasing System). #cybersecurity #K12 #digitalinfrastructure #FCC #erate

19

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) facilitated the federal government’s inaugural #tabletopexercise with the private sector, focused on crafting effective, coordinated responses to AI security incidents. Held at Microsoft Corp.’s facility in Reston, Virginia, the exercise gathered over 50 AI (artificial intelligence) experts from various government agencies and industries. The simulation supports the creation of an AI Security Incident Collaboration Playbook led by JCDC.AI—a specialized division within the Joint Cyber Defense Collaborative (JCDC) that aims to foster an operational community among AI providers, AI security vendors, and key infrastructure stakeholders. Participants included Amazon Web Services (AWS), Cisco, Cranium, HiddenLayer, IBM, Microsoft, NVIDIA, OpenAI, Palantir Technologies, Palo Alto Networks, Protect AI, Robust Intelligence, Scale AI, Federal Bureau of Investigation (FBI), National Security Agency (NSA), Office of the Director of National Intelligence (ODNI), United States Department of Defense (DOD), and U.S. Department of Justice (DoJ), and other technology firms. #AISecurity #ArtificialIntelligence https://lnkd.in/gVGH99VG

27

At this year’s Times Now Summit, I talked about the rapidly evolving world of cybersecurity, a field that’s becoming increasingly vital due to the rise in digital interactions and complex security threats. We’re at a crucial juncture where the industry’s value is expected to jump from $3.97 billion in 2023 to $9.21 billion by 2028. But with growth comes challenges. There were 40,000 job openings in cybersecurity in India in 2023, reflecting a strong demand for skilled professionals—a demand that's not being met due to a notable 30% skills gap. This gap is more than a statistic; it's a call to action for both aspiring and existing professionals to rise to the occasion. In India, the academic degree offerings are sparse in the area, with few universities providing advanced degree programs in cybersecurity. Recognising this educational gap, Deakin University took a decisive step to introduce the internationally recognized Master of Cybersecurity (Professional) program at our Deakin University GIFT City Campus, India for the July 2024 intake. As we face a future where cyber threats are only going to get more complex, understanding and contributing to cybersecurity isn’t just a career move—it’s a necessary step towards safeguarding our collective digital future. Register your interest to learn more about this program: https://lnkd.in/dze86uwc #cybersecurity #skillgap #DeakinUniversity

112

3 Comments

Check out the recent article about Indians trafficked to Southeast Asian Countries for Scamming. Kamal Raj Cross Global

1

Janelle D. , Steve Taylor, and Nitin Shelar gave an Health-ISAC talk on Thursday about their journey through defining and maintaining a Crown Jewels program. This topic is always a favorite to me. While the concepts of Crown Jewels are not new for cyber programs, the relevance still persists. And far to few organizations utilize this approach. I think the only thing that has changed is the need (on the IT system side of it) to make sure critical applications incorporate more than just sensitive data or “confidentiality” as the focus. This is especially true in the wake of all of the ransomware and business resilience risks. I especially liked how the team integrated their red team to perform exercises against the top assets and most sensitive info. This should be done at the onset and ongoing (prioritized by business risk.) Several of the ideas that resonated well with me in my own experiences in building and improving these programs included: - Senior leadership engagement: make business leaders accountable and engaged in defining and confirming their Crown Jewels. This is not something an IT or security should be doing on their behalf because they don’t want to bother them. - Success in such a program relies on community-based support and organizational change management. In my own experience, this involves a completely different set of soft skills that IT leaders may not be used to. - Assessment Phase, Ethical Hacking Phase, and Remediation Phase are all important to getting results and true risk reduction from a CJ program. A Continuous Improvement phase is critical because nothing is perfect from the start (not should it be), but we can always make it more effective. - I appreciated the concept of having architectural and technical standards for the highest risk assets when it comes to the IT systems that house the data or control business processes. This is something @Tim Sewell and I have done even back in our corporate cyber leadership days. All in all, whether you call it Crown Jewels, or Business-Driven Risk Management, it is important to focus more on what matters most. After all, the ocean cannot be boiled – and most corporate landscapes can feel like they have multiple oceans. #HealthISAC #SpringSummit2024 #Cybersecurity #RevealRisk

28

1 Comment

ICYMI: In today’s tech world, does competition drive innovation and progress, or does relying on a few vendors increase our risk? The recent CrowdStrike outage highlights this issue. Cloud-based security solutions offer great benefits, but a single error can cause widespread disruption.   As a writer for Traffic Technology International, we are conducting an experiment to spark a conversation on key issues.   Join the conversation on preventing future outages by participating in the poll on the article here: https://lnkd.in/ev_vFGRA   Continue the conversation in the comments below this post.

13

The SEC’s recent actions against four companies for misleading disclosures related to the SolarWinds cyber attack underscore the urgent need for transparency in cybersecurity reporting. With the heightened risks of supply chain attacks, the SEC’s move sends a clear message: companies must prioritize accurate, timely disclosure of security incidents to protect stakeholders and maintain trust. This article is essential for understanding how regulatory bodies hold firms accountable for strengthening corporate governance in cybersecurity. As cyber threats grow more sophisticated, companies that downplay or obscure critical information put investors at risk and weaken industry resilience. This is a vital reminder for security leaders to uphold rigorous reporting practices that ensure compliance and trust in a rapidly evolving threat landscape.

2

How can alert fatigue slow down cyber teams?   In this insightful webinar, Robert Kurmiski from Palm Beach County Children's Services Council shares his experience with how the overwhelming amount of alerts and false positives can desensitize or overwhelm security systems.   Rex Johnson of CAI and Hamlet Khodaverdian of LMNTRIX discuss the internal impacts of alert fatigue, highlighting how it can burden teams with unnecessary work to investigate false positives.   View NACo's full webinar replay here: https://lnkd.in/e3ERqzFX [ID: A blue background animates in with text "How can alert fatigue slow down cyber teams?", animating to a webinar view of the 3 speakers discussing over a PowerPoint slide that covers alert fatigue. The video through out has b-roll showcased, putting a visual to the content the speakers are talking about, such as when employees get constant alerts on their devices when they have a alert come in on their device. The video ends with an animation of the CAI logo and tagline, with our website listed at the bottom.]

1

Cybersecurity needs to adapt to how people use technology, not stigmatize it, said Cyrus Tibbs, CISO, PENNYMAC. This was discussed on CISO Series Podcast “Who Knows What Evil Lurks in the Heart of Low Code/No Code? (LIVE in Los Angeles).” Listen to the full episode: https://lnkd.in/gDEFWDxJ #CISOseries #CISO #security #infosec #informationsecurity #cybersecurity

30

With a contentious week ahead, many #security directors are preparing for possible #civilunrest. Are the risk protocols established a decade ago adequate for today's threat environment? Drew Neckar takes a closer look: https://lnkd.in/eHpfEu3v

2