John Morgan

Tired of Cyber Disneyland? Get the facts and find your way around #Cybersecurity #MDR at the N-able Roadshow in #Anaheim today. Hear from vendors, and join us for an incident response tabletop exercise. As pilots are fond of saying, "If it doesn’t feel right, go around. It’s better to explain why you did than have an investigator discover why you didn’t." TTXs are the best way to figure out what's right, before it goes wrong. @N-able roadshows are free--cyber incidents are costly. Register below: https://lnkd.in/g9A8dt8G

19

Are you coming to RSA Conference? If so, join us at SCW Coffee Shop! Bluestone Lane SOMA Coffee Shop 55 2nd St, San Francisco, CA 94103 On May 6th | 12:30PM PST. Join Secure Code Warrior CTO & Co-Founder, Dr. Matias Madou, Jeffrey Martin from Mendio, John B. Dickson from Lasithi Security, and Viswanath S C. from Thales Digital Identity and Security to learn about: Incredible techniques for winning over developers and helping them prioritize security The challenges in measuring security skill development, and how to overcome them Why a developer-centric ‘Trust Score’ could be the missing piece of the compliance puzzle for every top organization and can unlock the benchmarks needed to reach new levels of risk reduction in code. https://lnkd.in/gMzG2WuJ

12

Expel is teaming up with Wiz to change the cloud security game 🔐☁ What does this mean for our mutual customers? ✔ Comprehensive coverage ✔ 24×7 expert support ✔ Enhanced context ✔ Continuous improvement ✔ Real-time updates 🚨 REMINDER: We invite you to join us for a webinar on September 26 at 1pm ET with Expel, Wiz, and AWS to learn just how this partnership can provide value for you as it already is for two of our mutual customers, Inductive Automation and dbt Labs. Register today to join us live! (Link to register within this blog 👇)

3

If you’ve tried to analyze VPC & VNet flow logs in the past, Netography Fusion can help you navigate the chaos.

3

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

171

9 Comments

The much anticipated SoCal CISO Summit is less than one month away! Join Co-Chairs Matt Crouse, CISO, Solar Turbines and Delaram "Lara" Divi, VP, CISO, Dine Brands Global for this session, recapping their journey into IAM implementation. The path to a stronger IAM starts with the customer, whether you’re in the public sector, or selling coffee. CISOs are often challenged with trying to create the best user experience and keeping the company secure. But It’s not just about security it is also about the business. Gaining buy in and building better relationships is key. Join this session to learn: -Why passwordless implementation is a game-changer -How to strengthen relationships with business and tech teams -Where to find solutions for credential stuffing Current community members, register at My.Evanta.com. New members apply to join below! #evantaciso #socalciso #iam

24

Super excited to share that eSentire MDR for GenAI Visibility is now live! Get daily insights into how your team uses GenAI apps and keep your cyber risks in check. This is a game-changer! #GenAI #cybersecurity

4

How do you feel about high impact, low effort remediation? Longbow seamlessly integrates into your workflow and tracks issues back to the root cause and owner. With Best Next Actions™, you can eliminate the most risk with the least amount of effort. Plus, remediation guidance that's ticket ready? Say goodbye to wasted time and stress and check out efficient risk management for yourself. #Longbow #ASPM

16

Remember that time CVEDetails.com was featured on Mr Robot? (It was Season 3 Episode 7 in case you forgot) CVEDETAILS has been revamped and upgraded thanks to SecurityScorecard, and a lot of customer feedback. Discover a number of new benefits and answer questions like: "Does my tech stack have any 0day vulnerabilities/emerging threats, CVEs, CISA KEVs, potential NIST/MITRE violations?" "What is my company's external attack surface, and are there any CVEs, emerging threats, CISA KEVs?" The API is now Enterprise-grade, supplementing NVD and powering a plethora of partner integrations and customer use cases. For example customers are using the API to help avoid SEC disclosure by uncovering "Who in my supply chain has CISA KEVs?" and contacting them to immediately address the concern. All the original benefits still remain with many UX improvements for ease of use. Reach out to me for more info or schedule a demo at https://lnkd.in/etsGbYfd

31

1 Comment

Sigh, another high severity being actively exploited from Ivanti. We must stop listening on the network interface with inbound ports. There are so many techniques to make these attacks hard or impossible: port knocking, SPA, UDP/non-response to unauthenticated packets, and outbound-only connections. For the love of god, various of these have free and open source implementations. For example, OpenZiti (https://openziti.io/) does outbound-only connections (and way more) while having SDKs & tunnel endpoints for any device so it can be embedded in your existing apps or products. This is a solvable problem!! https://lnkd.in/eWqHj4mY

9

3 Comments

Expel 🤝 modePUSH Two of the best in the biz are teaming up! This partnership helps modePUSH customers not only recover from data breaches, but also build a comprehensive security strategy to prevent future incidents. Learn more:

9

In case you missed it: Catch up on our #CPX2024 product announcements, including Infinity AI Copilot and Harmony SASE. Watch the full replay below.

1

How comprehensive are your current OT/ICS system defenses? Let's talk, TXOne Networks can help.

18

Talk about a powerhouse lineup! Do not miss this discussion. Dr. Anton Chuvakin, Security Advisor at Office of the CISO, Google Cloud (who originally coined the term "SOC Visibility Triad" while at Gartner), Corelight co-founder Gregory Bell, Corelight Federal CTO and former Sr Exec at DIA/NSA Jean Schaffer will debate the model's significance as highly dynamic, multicloud environments introduce evolving considerations for the modern SOC. https://lnkd.in/e6VzDK6t

18

We often speak with our customers about becoming PQC ready being a process vs an immediate switch. With PQC now taking the initial steps towards mainstream adoption it is now more important than ever to begin to understand the magnitude of preparation that is required to migrate to quantum-resistant cryptography. This AppViewX blog dives into the Cryptographic Bill of Materials (CBOM) and why it is becoming necessary to fully understand the cryptographic algorithms and libraries used in the software products throughout your organization. Read more here: https://lnkd.in/gSsQpsw6 #PQC #postquantum #CBOM #SBOM #PKI #CLM #MIM

29

Best of breed (the best tools) still matter ...

7

Read about automating your cybersecurity compliance, safeguarding customer data with ownership, and bulletproof documentation with the latest from Deadbolt Security https://lnkd.in/epVahtXD

6

🚨Introducing the industry’s first Runtime security solution enabling enterprises to seamlessly integrate security into every step of the development process, from writing source code to deploying binaries into production. JFrog Runtime enables Security, R&D and DevOps teams to effectively monitor Kubernetes clusters, quickly identify and remediate vulnerabilities, and ensure the integrity of images running in production. It tackles the critical challenge of securing applications in production by focusing on what matters most: real-time visibility into runtime vulnerabilities, and addressing risks that are critical, applicable, and running. Enterprises can shiftleft & right simultaneously, helping developers save time with quick threat detection and risk remediation. Learn more: https://jfrog.co/4dVFudB #Jfrog #Devops #DevSecops #Runtimesecurity #Cybersecurity #SSC

12