Kat Traxler

Collaboration between IT staff & management is one of the most important parts of building and maintaining a strong #cybersecurity posture, but LMG Security often discovers gaps in this area when working with clients. Read Madison Iler's blog for advice: https://lnkd.in/gUS7k4K4

12

1 Comment

Episode 3050 - Jason (Jay) Mar-Tang, CISSP, CCSP of Pentera discusses how ransomware continues to plague organizations. Pentera's RansomwareReady provides a unique offering, enabling organizations to proactively test their defenses against the threat of ransomware on-demand. Pentera just announced a major update to expand the capabilities of the product. RansomwareReady can now test against the Lockbit 3.0 campaign as well as test against the impact of ransomware campaigns like Lockbit 3.0 within vulnerable Linux environments https://lnkd.in/gBXBHmH9 #bhusa #bhusa2024 #blackhat #blackhatusa #blackhatusa2024 #pentera #cybersecurity #pentesting

15

1 Comment

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

I wrote about the various rule combinations I’ve been testing in this post to block known bad and reduce load on the firewall. ~~ Are Your pfSense Filters Really Working? ~~ Too many rules and logs (?) makes them randomly fail ~~ To spot this you need to be monitoring your logs. I have been testing various combinations of rules and noticed this issue in certain scenarios. https://lnkd.in/eknrE6zG

3

It is easy to protect PL/SQL from security vulnerabilities. - https://lnkd.in/eqdFZB9n #plsql #protect #databreach

2

Like A Good Neighbor, Huntress Is There Huntress has recently been authorized by the Common Vulnerabilities and Exposures (CVE) Program as a CVE Numbering Authority (CNA). The Program is an international and community driven-effort with a mission to "identify, define, and catalog publicly disclosed cybersecurity vulnerabilities". The essentially all knowing directory relies on established cybersecurity experts to spot and name security threats in order to centralize the knowledge and establish a single source of truth for vulnerabilities. Huntress's participation means they are contributing to a global database helping everyone, not just clients, to build better protection for systems worldwide against attacks. #cyberresiliency #huntress #cna #stayvigliant #msp

7

Basics and common sense ? Nope, not present in the room "Rockwell Automation warns admins to take ICS devices offline" Had to state the obvious, obviously. connected=hacked Reduce your attack surface, don't add even more low hanging fruits ! #cybersecurity #ICS #IIOT #iot https://lnkd.in/eJ3PSUWU

26

2 Comments

Erich Kron - I have immense respect for @KnowBe4's honest and open approach regarding their recent hiring incident involving a North Korean cyber threat. This situation offers a crucial lesson for all businesses—whether small, medium, or large—that depend on remote talent for their workforce. As they highlighted, their endpoint protection successfully detected and contained the breach early, showing the importance of identity proofing as a key process for preventing such incidents. Together, these measures are incredibly powerful in helping businesses protect themselves from cybercriminals. 🔒👨‍💻 #CyberSecurity #RemoteWork #DataProtection #ThreatDetection #BusinessSecurity

2

1 Comment

Cybersecurity is more than an IT issue—it's a business issue. Yet, many companies struggle to communicate cyber risks in terms that the board and executives can understand. This disconnect often leads to poor prioritization and costly mistakes. #cyberrisk #cybermaturity

10

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

I went on a theme of parsing and protocols this week -- talking about the consequences when a design is under-specified and even when it specifically reminds implementers to take certain actions. John Kinsella brought up a Safe C++ proposal, which gave us a chance to talk about C++ vs. Rust, learning curves, and how horrible C++ template errors can be to debug. We also talked about an #appsec angle for WordPress that involves an insecure plugin (not at all surprising) and an insincere security effort (both surprising and worrying). Show notes at https://lnkd.in/gHd-Xekb https://lnkd.in/gJTDK5EB

6

ATTN: New Cyentia Institute study. If you're responsible for managing or remediating security vulnerabilities, you'll want to read this one. #vulnerabilitymanagement #cybersecurity #infosec #vulnerabilities

44

2 Comments

We're thrilled to announce a groundbreaking feature at Fleet that transforms how security teams collaborate with their users when devices fall out of compliance with security policies. Instead of disruptive browser reminders that interrupt important workflows and force users into context switching, Fleet takes a smarter approach. Our new feature automatically detects free time in your end-users' calendars and sets up maintenance windows without any hassles. What's more, Fleet enhances transparency by including AI-generated explanations within these calendar events. These explanations detail why updates are essential and what changes to expect, clarifying the update process and building trust between admins and end-users. We're excited about making security endpoint management smoother and more user-friendly! Come check it out! :) #easeofuse #security #maintenancewindows

18

2 Comments

Identity Deception in ITDR - Yes this is the old Honey Pots concepts There is another interesting concepts in ITDR called as Identity Deception, it is conceptually similar to honeypots used in networking. Both involve creating decoy elements designed to attract and engage potential attackers Honey Accounts: These are fake user accounts created within identity stores (like Active Directory) that are designed to attract attackers. When an unauthorized user attempts to access these accounts, it triggers alerts and allows security teams to respond quickly. Honeytokens: These are deceptive credential profiles placed in identity caches on endpoints. They serve as early warning signals when accessed by unauthorized users, helping to identify potential breaches before they escalate   These identities should be known to your ITDR systems though, this is not a way of checking which ITDR tool is more effective. https://lnkd.in/e7ckJxGQ #TheIdentityNavigator #iam #ITDR #IdentityAndAccessManagement

21

2 Comments

Often, we get asked about when MFA Auth Methods are changed and where that is logged and what is updated. Great detailed article. https://lnkd.in/g_hP_GTA

10