Gabrielle Dewes

Check out these stats.

9

Unveiling startling truths: millions of potential Kinsing attacks emerge daily. Explore Aqua Security's latest report, "Kinsing Exposed: From Myth to Architecture - A Complete Cybersecurity Chronicle." With Kinsing's multi-layered approach, robust cybersecurity measures are crucial. This report equips security teams with vital insights and defense strategies. Check out the details here 👉 https://lnkd.in/e59Um2qF #kinsing #threatintelligence #AquaNautilus #AquaSecChampion #ciso #cybersecurity

10

When traditional systems fail, disruption and chaos can leave you feeling out of control and disconnected. BlackBerry® AtHoc® enables your messages reach everyone, everywhere. Experience reliable communication:

2

Here's a little throwback to an excellent #RSAC2024 and Keyfactor's Digital Trust Lab, featuring our PKI experts, informative presentations, and beaker pong! See where we're headed next in our Events & Webinars calendar: https://okt.to/AnEdpV #PKI #postquantumcryptography #cryptography #digitaltrust

13

There are many managed detection and response (#MDR) services on the market. How does #BlackBerry's new solution take a different approach? Joined by a special guest and customer on May 21st, #BlackBerry SVP of #Cybersecurity Nate Jenniges will lead an in-depth discussion on how to confront the ever-evolving threat landscape head-on with #CylanceMDR (backed by a $1M warranty). Secure your spot today!

8

No hassle of vendor lock-in here! Join us on September 10 to learn how #CylanceMDR integrates seamlessly with your existing security tools. 🖇️ Discover integration tips. 🌐 Grasp real-world applications 🎙️ Q&A with our experts. Secure your spot!

6

In a world of ever-evolving cyber threats, the importance of #SecureByDesign principles cannot be overstated. Ivanti's Field CISO, Mike Riemer, stresses the critical need for security from the start in software design in our latest blog post.

3

Want to learn more about how Cato Networks CEO Shlomo Kramer plans to "SASE-ify" the IT security market? Read this profile story in VentureBeat: https://lnkd.in/gABibXbF #IT #security #SASE

8

There are many managed detection and response (#MDR) services on the market. How does #BlackBerry's new solution take a different approach? Joined by a special guest and customer on May 21st, #BlackBerry SVP of #Cybersecurity Nate Jenniges will lead an in-depth discussion on how to confront the ever-evolving threat landscape head-on with #CylanceMDR (backed by a $1M warranty). Secure your spot today!

4

Another cool feature from Huntress Managed #EDR - Active Remediation. This powerful feature allows you to pre-authorize Huntress to take action on your behalf without requiring your manual review and approval.

19

Here's a thought: Imagine if your security tools could talk. What would they say? "Oh, great, another misconfiguration! Just what I needed to make my job harder." But fear not, because there’s a way to turn those grumpy grumbles into grateful grins! Remediating security control misconfigurations is like sending your security tools on a luxurious retreat. They come back stronger, more efficient, and ready to tackle threats with renewed vigor. Security controls are not just pieces of software; they’ve got feelings too, you know. Every time you fix a misconfiguration, it’s like telling them, “Hey, I appreciate you!” And trust me, they respond better to appreciation than to frustration. So, let’s give a shout-out to all the firewalls, EDRs, SSEs and all the other heroes out there. By keeping them well-tuned and properly configured, you’re not just improving your security posture; you’re boosting ROI and making the world a safer place. Plus, your security team will love you for making their lives easier, and your bosses will be impressed with the seamless, secure operations. #NoHashtags VERITI

9

1 Comment

Great article by Michael Vizard on the latest and greatest from Opal!

2

📣 Announced live from #RSAC: CrowdStrike Falcon® Next-Gen SIEM innovations to liberate customers from the constraints of legacy SIEM products and power the AI-Native SOC. ⚡ Falcon Next-Gen SIEM is the industry’s answer to power the AI-Native SOC, delivering up to 150x faster search performance and an 80% lower total cost of ownership than legacy SIEMs and solutions positioned as SIEM alternatives. 💬 “The vast majority of the critical security data is already resident in the Falcon platform, saving the time and cost of data transfer to a legacy SIEM. Our single-agent, single platform architecture unifies native and third-party data with AI and workflow automation to deliver on the promise of the AI-native SOC.” —George Kurtz, CEO and Co-Founder of CrowdStrike ➕ To accelerate SOC transformation, all Falcon Insight customers will receive 10 gigabytes of third-party data ingest per day at no additional cost to experience the speed and performance of Falcon Next-Gen SIEM. Falcon Next-Gen SIEM is generally available. For more information: 📰 Read our news release: https://lnkd.in/gtRBnd5Y 💻 Explore the product page: https://lnkd.in/gefdFejy

13

1 Comment

Less time searching through AI spam. More time triaging real threats. #ArtificialIntelligence #EmailSecurity #phishing The latest update introduces new AI-driven spam reduction capabilities, revolutionizing the battle against phishing emails. This advancement is a game changer for Security Operations Centers (SOCs), allowing them to save valuable time and focus on tackling genuine threats. #CyberSecurity #AI #Innovation #Technology #ThreatDetection

5

We're gearing up for an exciting week at #BHUSA and #DEFCON 2024! Join #TeamTrellix in Las Vegas for cutting-edge talks and workshops on cybersecurity.   Register for Black Hat USA: https://bit.ly/3V688Sh  🎤 August 7: Malware Analyst Max Kersten will lead a 90-minute lab on Reversing Wipers: Digital Damage for Battlefield Advantage  🎤 August 8: CISO Harold Rivas will present alongside XM Cyber on The CTEM Evolution Revolution: Beyond Vulnerability Management  Register for DEF CON: https://bit.ly/4cbvdbA   🎤 August 9: Malware Analyst Max Kersten will present two sessions:     No Symbols When Reversing? No Problem: Bring Your Own is a tried and tested method for dealing with thousands of unknown functions in a given file, significantly decreasing the time spent on the analysis.    Ghidra Analysis & Automation Masterclass focuses on the analyst mindset and fundamental knowledge about reverse engineering, including, but not limited to, understanding Ghidra’s core capabilities. 

30

1 Comment

A great article summarising the merger between LogRhythm and Exabeam and what it means for the future. https://lnkd.in/gC9YUBQ5 #securityoperations #secops #ai #ueba #siem #merger

7

Google distrusting Entrust after October 31, 2024, will impact many large organizations around the world 😫. CA-agility is critical to prevent these events from impacting your business and causing a ton of disruption and costly downtime. Just look at the long history of certificate authority errors below. Transition away from Entrust and future-proof your enterprise against CA distrust events, and evolving PKI standards, including the shift to 90-day TLS certificates and Post-Quantum Cryptography, with TLS Protect. Free Trial: https://lnkd.in/gFe8Bkw9 June 2024 Entrust: inadequate controls A pattern of compliance failures and unmet improvement commitments June 2023 e-Tugra: inadequate controls Security concerns over numerous vulnerabilities April 2021 Camerfirma: inadequate controls A series of compliance issues and failure to maintain industry standards December 2022 TrustCor: abuse of trust Failure to provide satisfactory responses to association with US intelligence community September 2020 PROCERT: human error Numerous incidents of misissuance and poor handling of security concerns. July 2020 DigiCert: inadequate controls Revoked thousands of certificates from intermediaries that were not properly audited May 2020 GoDaddy: hacker compromise Hacker infiltrated CA network to steal 28,000 users' SSH credentials March 2020 Let’s Encrypt: technology malfunction Certificate Authority Authorization rechecking bug caused a mass revocation. Jan 2020 Amazon Web Services: inadequate controls Without standard 5-year rotation, default database certificates expire September 2019 Certinomis: human error Numerous incidents of misissuance and poor handling of security concerns. July 2019 Dark Matter: abuse of trust Root certificates banned after alleged selling of surveillance and hacking tools March 2019 Google, Apple, GoDaddy: human error Over a million certificates issued with misconfigured EJBCA software Mar 2018 Trustico: business partner compromise Reseller triggers immediate revocation by emailing 23,000 private keys Sept 2017 PROCERT: inadequate controls Numerous issues centering around the mis-issuing of SSL certificates Jan2017 (Symantec intermediate) CrossCert: business partner compromise Overriding Symantec compliance flags to bypass domain validations Oct 2016 WoSign and StartCom: abuse of trust Numerous questionable practices, such as backdating SHA-1 certificates Aug 2016 GoDaddy: technology malfunction Faulty upgrade allows certain servers to bypass the authentication process WoSign: abuse of trust Caught issuing certificates to non-domain owners Oct 2016 Comodo: technology malfunction OCR failure results in the issuing of certificates to the wrong entities July 2016 Comodo: technology malfunction Dangling markup injection issues arbitrary wildcard certificates Feb 2016   Symantec: technology malfunction Systems incorrectly parse email addresses, leaving them open to abuse + more #venafi #google

4

2 Comments