Kenneth Holley

Join DefenseStorm Director of Cyber Risk Management, Jessica Caballero, CERP, CRCM, for an in-depth look at the updates made to NIST's CSF framework with the introduction of CSF 2.0. In this informative webinar, you'll find out everything you need to know about the enhancements to the gold standard in #cybersecurity frameworks and how CSF 2.0 will impact your institution. Register today! https://lnkd.in/gCszt7JW

21

👔 White Collar Forensic LLC - Meet The Investigators 🕵🏽‍♀️ 🤔 Putting a label on a White Collar Forensic LLC practitioner with decades of experience isn't as easy as one might think. So many of them have deep expertise across multiple disciplines. Investigations, forensic accounting, threat intelligence, and compliance remediation. 🦉 One thing that sets our investigative practitioners apart from the crowd is their extensive experience performing investigations of potential compliance violations. 💪🏽 To be truly effective conducting compliance investigations requires a strong foundation in major compliance disciplines such as anti-bribery and corruption, anti-money laundering, sanctions and fraud risk AND a track record of investigating violations of those compliance regimes. ♊ Indeed, many of our team members can seamlessly transition from investigator to compliance officer and back again. Being able to present investigative findings in the context of the victim organization's compliance program requirements is something our client's value a great deal. 👩🏽‍🎓 This dual proficiency enables us to readily explain to leadership what happened, the compliance implications and whether and to what extent the investigation exposed shortcomings in the compliance framework or the internal controls underlying it. 🔮 These insights put our client's in the best possible position to make timely and informed decisions about the people involved in the improper conduct and take concrete actions to remediate any shortcomings in the compliance program or internal controls that may have contributed to the problem. 👓 If you'd like to have clarity the next time you need help with a compliance investigation, why not contact us at https://lnkd.in/exb_Prg8 #WhiteCollarForensic #ChooseClarity #WarHorses Scott Moritz Tanya S. Kim Frisinger Diane Walker Chris Favo John Kula, Certified Fraud Examiner Patrick T. Kramer Christina S. Taylor (Mike) Belcher A.J. Bosco Ingrid Busson Stefan Cassella Dan Dorsky Kevin Doyle, CPA, CFE, CFF, CGMA Timothy Dunfey Esq., CFE, CAMS James G. Odell Guyton Emma Hamilton Barry Koch Patricia McKeown Kevin Mclaughlin Deb Tabacco Patty P. Tehrani

18

👇 🚨#Consumer Alert 🚨 https://lnkd.in/gJvdpP-K Dallas County: Data of 200,000 exposed in 2023 ransomware attack Dallas County has notified over 200,000 individuals about the Play #ransomwareattack that occurred in October 2023, exposing their personal #data to cybercriminals. This #incident affected a wide range of individuals, including residents, employees, and others who interacted with Dallas County's public services. The county, known as the second largest in #Texas with over 2.6 million residents, faced a significant data breach when the Play ransomware gang added Dallas to its extortion portal on the dark web. After the attack, #Dallas promptly acknowledged the situation and assured the public that they were actively reviewing the #leaked data. To address concerns and provide support to those impacted, Dallas set up a dedicated call center in January 2024. Yesterday, Dallas County issued an update on its #website, confirming the #databreach and sending out notices to the 201,404 affected individuals. The types of exposed data varied per individual, highlighting the severity and complexity of the #breach. This serves as a reminder of the ongoing #threat posed by cybercriminals and the importance of robust #cybersecurity measures to safeguard personal information. Stay informed and #vigilant in protecting your data. #endpoint #cloudsecurity #smallbusiness #infosec #bankingindustry #cyber #endpointsecurity #iotsecurity #IoT #cyberawareness #technology #datasecurity #cloud #google #microsoft #windowssecurity #vulnerability #securityawareness #riskmanagement #dataprivacy #infrastructure #globalsecurity #threatintelligence #socialmedia #news #defensivemeasures #knowledgebase #linkedin #networksecurity #vulnerability #internetofthings #ransomware #smartphones #mobilephones #DallasCounty #ProtectYourData

3

[New Webinar] Reclassification Update: OMB Requests Input for SOC Revision. 7/17 at 2 pm ET. Today OMB announced the beginning of a multi-year process to revise the Standard Occupational Classification. Through this process, OMB will consider whether to change the classification of public safety telecommunicators from the administrative/clerical category to the category for Protective Service Occupations. Join us on July 17 for a webinar to explain APCO’s strategy for providing input to OMB, how this effort relates to the 9-1-1 SAVES Act and what you can do to help ensure that OMB finally corrects this outdated classification. https://lnkd.in/ekhmW5am

11

The National Institute of Standards and Technology (NIST) has released updated guidelines for establishing secure and user-friendly digital identity systems, including new recommendations on passwords. Read our most recent blog post to learn more about this revised guideline. #NIST #CyberSecurity #PasswordGuidelines

3

ADVISORY from the Arkansas Cyber Defense Center: Recent Worldwide Software Problem Fuels Cybercriminal Activity On July 19th, CrowdStrike, a U.S. based company that sells cybersecurity services and products to businesses and large organizations, pushed out a faulty update that caused logic errors on Windows computers, causing them to crash worldwide. The incident has caused widespread disruptions across airports, hospitals, financial institutions, government services, and many other entities around the globe. While this issue is not the result of a cybersecurity attack. The Arkansas Cyber Defense Center (ACDC) advises organizations and individuals to remain vigilant, as cybercriminals are exploiting this incident to trick people into giving up access to their data, accounts, and finances. Cybercriminals are creating fake email addresses and websites that closely mimic legitimate organizations in an effort to deceive users into thinking they are receiving help from a trusted entity. These criminals may pretend to be offering services to fix your systems due to the aforementioned incident or preventative services to keep your systems from crashing in the future. For example, they may incite fear and urgency to those that have not been affected by saying things like “Use our free software to keep your systems from crashing from the crowdstrike update!” The “free” software can be a virus or other form of malware or spyware designed to steal your login credentials for any account you access. Avoid downloading anything from unverified sources. Key Points: Phishing Scams: Be cautious of unsolicited emails or messages that reference the CrowdStrike incident. Cyber criminals may use this as bait to trick you into revealing personal information or clicking on malicious links. Fake Websites: Websites with legitimate-looking names are being created in hopes of drawing unsuspecting individuals looking for help into giving up financial or personally identifiable information. Misinformation: Verify any information related to the CrowdStrike incident through reputable sources. Cyber criminals often spread false information to create confusion and panic. Stay Informed: Follow updates from trusted cybersecurity sources and verify the information before taking any action. Trusted sources include places CISA, the FBI, and the Arkansas Cyber Defense Center. Educate Your Team: Inform employees about the potential threats and how to recognize phishing attempts. Strengthen Security: Implement multi-factor authentication (MFA) and regularly update passwords. For more information and assistance, contact the Arkansas Cyber Defense Center at [email protected], or visit our website https://hubs.la/Q02HwMHT0 to schedule free cybersecurity training or a free assessment.

5

3 Comments

We invite public agencies, including counties, cities, and school districts, to join one or both of our Cyber Incident Reporting Webinars: Essentials for Required Entities. https://buff.ly/40FP9RJ Learn about the requirements in the Cybersecurity Incident Reporting law. These webinars will include the same content: Register for webinar 1 on Wednesday, Nov. 13, from noon to 1 p.m.: https://buff.ly/40Hh5EO Register for webinar 2 on Tuesday, Nov. 19, from noon to 1 p.m.: https://buff.ly/3Z5Ypwn Beginning Dec. 1, public agencies and affiliated entities will be required to report cybersecurity incidents that impact them to MNIT. Learn more on our website. #cybersecurity #CyberSafeMN

41

📣 #NIST just released a 35,000-word guideline update for #password protection. 😵 Here are six takeaways from this lengthy document! 💪 We can help implement each one! ➡️ https://t.ly/yALiT #CMITSolutions #ITServices #MSP #Cybersecurity

8

In the "Xtreme" edition of the Information Risk Insights Study back in 2020, we analyzed the 100 largest cyber loss events of the prior 5 years. That's getting close to 5 years ago, which means it's about time for an update! Interested in sponsoring a deep dive into the most impactful cyber incidents of the last few years? Reach out!

21

1 Comment

The newest Action1 release of Vulnerability Management today is set to partially address the NIST NVD Backlog Crisis. Action1 is now able to detect software vulnerabilities for applications listed in Software Repository even if the vulnerability data is not yet available in the National Vulnerability Database (NVD). Given the alarming slowdown of NIST NVD updates, this critical capability adds the much-needed visibility over many previously undetected vulnerabilities and allows to automate their remediation: https://lnkd.in/g6UY-iF7 As of right now 18,000+ CVEs are unanalyzed. National Institute of Standards and Technology (NIST) has still a long way to go in terms of analyzing newly published CVEs. As of September 21, 2024, 72.4% of CVEs (18,358 CVEs) in the NVD have yet to be analyzed, VulnCheck said, adding "46.7% of Known Exploited Vulnerabilities (KEVs) remain unanalyzed by the NVD (compared to 50.8% as of May 19, 2024)." It's worth noting that a total of 25,357 new vulnerabilities have been added to NVD since February 12, 2024, when NIST scaled back its processing and enrichment of new vulnerabilities.

26

The deadline for law-enforcement organizations to have a cybersecurity vulnerability-management program and wish to access the Federal Bureau of Investigation (FBI)'s Criminal Justice Information Services (CJIS) division is fast approaching! But what determines a strong cybersecurity vulnerability-management program? Read MCP’s latest blog post to learn more. https://hubs.li/Q02xp_4Q0

5

Join us TODAY for an essential Cyber Practice Session where we’ll address the everyday risky activities that compromise your online safety! This session is focused on Cyber Hygiene, offering practical steps to protect yourself, your family, and your workplace from common cyber threats. As we approach the end-of-year festivities—a prime time for cybercriminals—this topic couldn’t be more timely. Learn how to: • Spot phishing attempts • Secure your devices and accounts • Avoid risky online behaviors Let’s make safety a habit, not an afterthought. This session is open to all—don’t miss out!

6

⚡️Some domains likely used by #transparentTribe #APT36 counciling[.]com nbssedelhi[.]org ashifdigitalseva[.]xyz birthdeath[.]in gov-certificate[.]com viewss[.]click admin-mcas-df[.]ms admin-mcas[.]ms mcas-df[.]ms mcas[.]ms verifycertificate[.]info nimsme[.]org

1

1 Comment