Konstantinos Karagiannis

NIST Report on the 2024 Accordion Cipher Mode Workshop

3

Grow your financial institution with the right IT-managed security services. Learn how providers can give you the talent and strategy you need to modernize your workplace environment and enhance the digital customer experience.

4

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/9yeq105M2RV

4

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/4wMB105OfpG

7

If you’re at the Zywave Cyber Risk Insights conference today, look for me! I’ll be joining a panel at 1:45 to discuss whether we’ve reached a critical mass yet with data to adequately model and manage #cyberrisk. https://lnkd.in/dK2d3HHe

13

1 Comment

🪧 SIEM ≠ MDR Welcome to part one of our three-part blog series where we share the difference between a SIEM system and MDR and how MDR can transform and augment your SIEM tool investment.

1

Special thanks to the Long Island NY ISC2 Chapter for hosting me to speak at their Chapter Event. Another great opportunity to talk about Cyber Risk Quantification. Ask me about the Open Education Resources that are now available for download from CyberRiskModels.com. #ISC2, #cybersecurity, #CRQ, #CIO, #CISO, #Training, #riskquantification

5

Learn the ins and outs of internet exposure in the context of vulnerability management: https://lnkd.in/eta2umrs.

9

Cyber Threat Intelligence (CTI) fusion requires more than just data integration—it needs contextual understanding, advanced analytics, and seamless interoperability. The combination of OWL (Web Ontology Language) and RDF (Resource Description Framework) offers an ideal approach. Here’s why OWL + RDF are the top choice for CTI fusion: 1️⃣ Semantic Interoperability: OWL + RDF provide a deeper layer of semantic understanding, allowing diverse intelligence data to be contextualized, linked, and understood across various sources. 2️⃣ Provenance & Data Integrity: RDF 1.2 enhances security with digital signatures and graph hashing, ensuring data provenance is tracked from origin to transformation, and guaranteeing data integrity, which is critical for maintaining trust in shared intelligence. 3️⃣ Advanced Analytics & Reasoning: OWL ontologies enable automated reasoning, allowing detection of hidden relationships, threat patterns, and predictive insights—crucial for identifying unknown threats. 4️⃣ Flexibility & Adaptability: OWL + RDF allow for easy integration of new threat models and intelligence sources, ensuring scalability as threats evolve and intelligence grows more complex. 5️⃣ Granular Access Control: Fine-grained access control ensures that sensitive intelligence data can be compartmentalized, only accessible to authorized users. 6️⃣ Context-Aware Intelligence: OWL’s ontologies enable systems to understand relationships between threats, assets, and vulnerabilities, improving threat correlation and enabling better-informed decision-making. 7️⃣ Enhanced Automation: By combining RDF and OWL, organizations can automate intelligence workflows and dynamically adapt as new data is integrated, reducing manual workloads and improving response times. 8️⃣ Foundation for Advanced Analytics & AI: OWL + RDF lay the groundwork for follow-on analytics, enabling systems to support machine learning and GenAI agents for deeper insights and intelligent automation. 💡 The Future of CTI Fusion lies in leveraging OWL + RDF to create a semantic layer that not only integrates data but adds context, enabling smarter, faster, and more secure threat intelligence. #CyberThreatIntelligence #SemanticWeb #OWL #RDF #Ontologies #DataFusion #CyberSecurity #AdvancedAnalytics

4

Today, Nucleus Security announced our sponsorship of the inaugural EPSS (Exploit Prediction Scoring System) report from Cyentia Institute. This report evaluates EPSS performance over the last few years and drills into questions related to understanding vulnerability exploitation in the wild. I'm adding links to the report and related resources in the comments. #cybersecurity #EPSS #NucleusSecurity #vulnerabilitymanagement

22

3 Comments

NIST Releases the C-SCRM Due Diligence Assessment Quick-Start Guide for Public Comment https://lnkd.in/dYxE3Uu6

12

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/gswu89pR #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

9

AI’s initial hype tantalized many organizations into rushing in without much forethought. Such lack of planning is risky, because the reward rarely matches the hype.  Subscribe now for more actionable, objective insight on timely topics that directly affect you and your team. #GartnerSEC #ArtificialIntelligence #Cybersecurity #GenAI #RiskManagement

2

The proposed rule would also require the disclosure of cyber incidents to CISA and physical security concerns to TSA. The Transportation Security Administration is seeking public comment on proposed requirements for surface transportation and pipeline companies to implement cyber risk management programs, the agency said Wednesday. The public comment period ends on Feb. 5, 2025. The proposed rule calls for certain pipeline, passenger and freight rail operators and rail system companies with high-risk profiles to develop comprehensive cyber risk management programs. Pipeline, rail and certain bus transportation or transit systems would be required to report cybersecurity incidents to the Cybersecurity and Infrastructure Security Agency. The sectors would report any physical security risk concerns to TSA. #criticalinfrastructurecyberrisk #confidentialcomputing #thirdpartyriskmanagement #threatinformeddefense #GRC #cyberinsurance

2

1 Comment

Compliance for cyber-physical systems (CPS) is no small feat—especially with converged OT, IoT, and IT infrastructure. To help streamline your efforts and better protect critical systems, Attend this Tenable webinar, 2 pm ET, Dec. 17. http://ow.ly/hLAV105Rjgl

3

Traditional vulnerability management often falls short, leaving critical gaps. Our guidebook introduces Exposure Management, a proactive approach to detecting and mitigating risks, giving your security team the upper hand. By automating threat discovery, prioritization, and mobilization, adopters can reduce remediation time from weeks to days. Learn how exposure management can transform your security strategy and deliver real results: https://gag.gl/ouk0L8 #Cybersecurity #CISO #ExposureManagement #RiskReduction

6

Many of you have questions about ISO42001, and many don't even know where to begin. It's a lot...a lot to take in, a lot to think through, a lot to consider. To help you build momentum, A-LIGN has published a new ISO42001 Frequently Ask Questions (FAQs) blog, so if you're not sure where to start on your journey, this is the place! https://lnkd.in/e3yV93kh #iso42001 #iso27001 #ethicalAI #resonsibleAI #AIGovernance #TheBusinessofCompliance #ComplianceAlignedtoYou

67

1 Comment

We used to talk about cybersecurity as just securing technology. The reality, though, is that it's about securing organizational and business outcomes. It’s about aligning security with your core mission and values. Traditional methods miss the mark. They focus on threat mitigation but miss the bigger picture. Purpose-driven cybersecurity changes this. It integrates security into your organization’s DNA. It’s about embedding security into your mission. Create resilience. Build trust. Stand out in the market. Embrace a holistic approach. Align security with your mission.

15

1 Comment

ECS selected #Axonius to support DHS's CDM program. Axonius will provide comprehensive #Cybersecurity asset visibility and vulnerability management, enabling efficient risk management: https://dy.si/okAJaf2

2