Gregory Richardson

Familiar cyber threats have broken the mold in 2024, evolving in surprising ways. Join Cato Networks Chief Security Strategist in the latest Cybersecurity Masterclass to learn new twists in familiar attacks 👉 https://lnkd.in/gZPyuXBQ #cybersecurity #CyberThreats

4

EC2 Compromise Leads to S3 Bucket Exfiltration

53

Encrypted DNS Implementation Guidance - Published by CISA in May 2024. This document provides Federal Civilian Executive Branch (FCEB) agencies with actionable guidance for the implementation of encrypted DNS protocols and for enhancing the cybersecurity posture of their IT networks. It is intended to provide implementation guidance for federal agencies to meet federal requirements related to encryption of Domain Name System (DNS) traffic and enhance the cybersecurity posture of their IT networks, as set forth in Office of Management and Budget’s (OMB) Memorandum M-22-09.1

2

If you're coming to FalCon, you're coming at the right time!! Mainly because it will FINALLY be below 90F 😅. Shoot me a DM if you're in town and want to chat about Threat Research! #FalCon2024 #threathunting #threatresearch #threatintelligence

4

At RSA 2024, Alex Stamos from SentinelOne shed light on the evolving tactics of ransomware actors. With the success of Endpoint Detection and Response (EDR) tools, hackers are now leveraging commercial software tools and Living Off The Land (LOTL) techniques to evade detection. Stamos emphasized the importance of a robust, multi-layered security strategy and highlighted the role of generative AI in enhancing cybersecurity defenses. As threats continue to evolve, every organization must assume a breach mentality and proactively monitor for suspicious activity. Stay ahead of the curve and protect your enterprise in this rapidly changing cyber landscape. #CyberSecurity #Ransomware #EDR #RSA2024 https://lnkd.in/ebnVADMn

6

2 Comments

The White House has recently introduced a comprehensive plan to address security vulnerabilities within the Border Gateway Protocol (BGP). The plan, laid out by the Office of the National Cyber Director, emphasizes the critical need for network operators and service providers to implement measures that can protect BGP from potential abuse and configuration errors. This roadmap aims to enhance the overall security posture of the internet by providing actionable steps to mitigate risks associated with BGP manipulation and exploitation. By following the guidance outlined in the plan, organizations can effectively enhance the resilience and integrity of their networks against BGP-related threats. This strategic initiative underscores the importance of maintaining a secure and stable internet infrastructure in the face of evolving cyber threats. For more detailed information, please refer to the article:

1

How confident are you in the resilience of your password security policies? And is #MFA a vital component of your #accesscontrol strategy?

1

**Critical Security Alert** Security Leaders - please check for and remove domains connected to #polyfill if it exists on any of your organizations websites. Please see write up in link for our initial analysis on the script and potential scope of exposure. #javascript #CVE #breach #CISO #Webappsec

16

2 Comments

CMMC Level 2 Assessment Objective: Flaw Remediation for Controlled Unclassified Information (CUI) Data PRACTICE: Organizations must identify, report, and correct system flaws in a timely manner. ASSESSMENT: All software and firmware have potential flaws. Organizations must identify systems that are affected by announced software and firmware flaws, including potential vulnerabilities resulting from those flaws, and report this information to designated personnel with information security responsibilities. Security-relevant updates include patches, service packs, hot fixes, and antivirus signatures. Be prepared! Your assessor could ask to 🔍 EXAMINE system and information integrity policy. 🗣 INTERVIEW system or network administrators. 📝 TEST organizational processes for identifying, reporting, and correcting system flaws. (CMMC Assessment Guide: Level 2 Version 2.11, page 241) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

57

Built to quickly and effectively close vulnerability exposures in a unified solution, Tenable Patch Management has entered the chat: http://ow.ly/iycb105QJ9S

13

One of the topics I have discussed most since joining CyberRisk Alliance is #securitymetrics. CISOs and senior leaders face a daily challenge of putting their security programs into a context that results in action. I have always said metrics fall into 4 categories, “what should I track”, “what can I track”, “what am I tracking”, and “what doesn’t need to be tracked.” Finding what goes in which bucket is the challenge.

18

2 Comments

Thanks Infosecurity Magazine for amplifying the need to support National Institute of Standards and Technology (NIST) and their maintaining of the #NVD! Great graphic by Patrick Garrity 👾🛹💙 showing the issue at hand over time, and why companies like VulnCheck are filling the gap. With that said - the need to fund NIST is critical. Here's to hoping they get what they need to return operations to normal. https://lnkd.in/gZveaU2u

12