Mike Keohan

Cyber risk has a human side. What !! Looking forward to this session with my fellow panelists: Violet Sullivan, CIPP/US CIPM (Crum and Forster), Tim Zeilman (HSB - Hartford Steam Boiler), Ryan Caruso (CyEx) and John Yanchunis (Morgan & Morgan, P.A.) at the Zywave #cyberrisk event The Human Side of Cyber: November 6, 2024 [2:40 PM-3:25 PM ET] Many cyber events fly under the radar, while others make a major splash in the headlines. Every event carries consequences for the affected entities and individuals. The human impact of cyber often goes unreported, but threat actors increasingly lean into the leverage they have with extortion, social engineering, or denial of key services. This panel will offer a look behind the scenes, allowing organizations to better understand the emotional and operational impact of cyber events.

62

1 Comment

Took some time to formalize some of my thoughts on the Radiant Capital hack on my blog. Please take a read and let me know what you think: https://lnkd.in/eWG-qu2D Key takeaways: - Transaction approval + signing devices should be diversified for on chain multisigs like Safe{Wallet}. Fireblocks MPC + TAP is an enterprise grade signer that should absolutely be a core part of your stack in lieu of disconnected open source solutions with wide attack surfaces. - The device(s) responsible for transaction signing should ALWAYS decode transactions so that they are human readable, and simulate/validate them. Hardware wallets do not achieve this today. - Despite the highly sophisticated attack, the root cause in my opinion was two fold; the multisig accounts responsible for signing routine smart contract operations had admin level permissions on the smart contract (violating least privilege), and as a result the humans responsible for verifying these "routine" transactions likely fell victim to signing fatigue, and did not bother to double check the transactions prior to signing. Humans 🧑 will always be the weakest link, but we can use technology to help mitigate these threats. 🤖 Fireblocks is here to help. 🔒

37

Explore the balance between perfection and reasonableness in the world of cybersecurity strategy in this blog post from Alex Cox, Director of the LastPass Threat Intelligence, Mitigation and Escalations (TIME) team.

8

Should be an awesome session with two of the best in the cyber industry. #cyberrisk #nationstate #threatactors #ransomware #businessemailcompromise #cyberthreats #pondurance

1

Are you responsible for hiring a CISO? Are you a NYS Hospital? If the answer is yes, use this checklist as part of your decision-making process: https://lnkd.in/edsFZwsj The demand for top-talent CISOs is significantly higher than the supply. With a vCISO or Deputy CISO from DeepSeas, you can eliminate the challenges involved with CISO recruitment and save on costly salaries, benefits, training, and bonuses. #nys #healthcare #nyshospital #hipaa #ciso

4

If you are looking for a Managed Detection and Response provider in the New Jersey Market! Why not have quick conversation with Zack Hoffman and I? Your Arctic Wolf North Jersey TEAM~~ In the meantime take a look at How Arctic Wolf Delivers Comprehensive Response Capabilities!!!

16

Most SIEMs haven’t been built for your needs—we want to change that. Hear from Huntress CTO Chris Bisnett about our approach to building our Managed SIEM, and how SIEM could be the next step in leveling up your defenses. Learn more about Huntress Managed SIEM: https://bit.ly/4edyloI

2

1 Comment

CASE STUDY - BMS "Decision Focus worked closely with us in designing everything from the ground up to provide a system for credible supplier information and data, managing repeatable workflows associated with supplier relationships during the supplier relationship lifecycle." Want to read more? Download the full case study below. #riskmanagement #grc #decisionfocus

1

Fascinating conversation with David Heaney, CISO at Mass General Brigham, who explains how #genAI helps his team learn and protect. He also discusses best practices for securing data with – and against – AI. #cybersecurity

3

Discover the powerful integration between Cerby and Okta, bringing enhanced security and efficiency to Colgate-Palmolive. Watch Alexander Schuchman, CISO of Colgate-Palmolive, discuss the benefits of this collaboration. Learn more about how Okta Ventures is driving innovation!

4

Join us and GuidePoint Security at GPSec in Philadelphia to hear about upcoming trends in SaaS Security and how you can keep your SaaS stack secure 💪 Get ready to meet our team 👉 Kirra Rice Dustin Crossman Richard Snyder

15

🚨 Discover how cybercriminals piece together data to exploit vulnerabilities and what you can do to stay protected. Hear from Intellicheck’s CEO, Bryan Lewis, on the importance of data security and trust. Watch the full video now! https://okt.to/B1fGXD #CyberSecurity #DataProtection #Intellicheck

1

This blog from the LastPass Threat Intelligence, Mitigation, and Escalation (TIME) team will help you identify categories of threat actors that could target your organization with cyber attacks.

3

Don't let limited software visibility impact your IT and security posture. With Axonius, get a clear, credible, and comprehensive inventory of all your software assets in a single, unified view — on cloud, physical, or virtual devices.

14

Are you lacking the internal resources to manage and maintain complex OT environments? This on-demand webinar from Verve discusses OT managed services in-depth, and how these offerings can help bridge internal skills gaps while strengthening OT security. Watch now to learn more. #ICSCybersecurity #IndustrialCybersecurity #OTCybersecurity #OTManagedServices

3

BIG news for customers! Scary news for competitors! ❤️ “Today’s update enriches the Apono Cloud Access Platform with a unique combination of automated discovery, assessment, management, and enforcement capabilities,” said Rom Carmel 🚀 , CEO and Co-founder of Apono. “With deep visibility across the cloud, seamless permission revocation, and automated Just-in-time, Just-Enough Access, we eliminate one of the largest risks organizations face while ensuring development teams can innovate rapidly with seamless access within secure guardrails. This powerful combination is essential for modern businesses, unlocking a new level of security and productivity for our customers.” Privileged access within the cloud has long been a prime target for cybercriminals, enabling them to swiftly escalate both horizontally and vertically during a breach. However, security teams have lacked a comprehensive visibility and remediation approach to eliminate existing standing access, leaving critical resources vulnerable. As a result, security teams have been reluctant to revoke existing standing access due to the risk of impacting the day-to-day needs of their users, which could ultimately hamper business operations across the organization if access was removed without a means to regain access during critical moments. Today’s update allows users to overcome this challenge by enabling security teams to: - Gain complete visibility over user permissions, identifying 100% of standing user entitlements in the cloud, and where high-risk, standing privileges exist. - Use critical insights on high-risk permissions to inform remediation plans, guide administrators in establishing access flows, and automatically grant Just-in-Time and Just enough access to cloud resources for only the time required.   - Confidently and seamlessly remove 95% or more of standing entitlements without impacting business operations through the creation of JIT workflows. “Over-privileged access is one of the most significant risks to identity security that organizations face today, and it’s made even more challenging to manage by expanding cloud environments. At the same time, to keep pace, organizations need to grant permissions dynamically to support day-to-day work. This creates a complex obstacle: how can an organization grant the necessary access for productivity while also enhancing its identity security?” said Simon Moffatt, Founder and Analyst, The Cyber Hut. “With this in mind, delivering Just-in-Time and Just-Enough Access across cloud services should be the goal of modern identity management. An approach to solve this will help companies significantly reduce their attack surface while ensuring a seamless access experience for their workforce.” Apono will deliver in-person demonstrations of today’s update and the full Apono Cloud Access Platform during AWS re:Invent from December 2-6. DM me to learn more!

32

2 Comments

Come see and the #Uptycs team at booth 427 today. Uptycs helps your team fix the most important issues fast. Come see how today!

14

ShinyHunters Hits Ticketmaster with Breach Impacting 560 Million Users “Tom O'Malley (https://lnkd.in/eTrK7hp2), Advisor to The Identity Theft Resource Center and Founder of Frozen Pii LLC [FrozenPii.com], has advice for keeping personally identifiable information (PII) secure, or at least managing PII if an organization you do business with is hacked and your identity is now at risk. ’The Ticketmaster data breach is another reminder that criminals have easy access to your PII to commit identity fraud crimes,’ O'Malley said. ‘People can easily protect themselves and their money from criminals using your stolen PII by: 1) checking, correcting, and freezing your credit reports; 2) using unique, complex passwords with multi-factor authentication on your accounts (easily managed with a password manager); and 3) using banking and credit card apps to monitor your financial accounts and set up threshold alerts for unusual activity.’ O'Malley continued: ‘To avoid falling for scams, I've adopted a practice of letting calls from people not in my 'favorites' list roll over to voicemail (bots never leave live voice messages), not responding to any unsolicited email and texts, and not clicking on any email addresses, phone numbers, or websites in unsolicited email and texts. If any email or text allegedly relates to my banking, credit card, merchant, delivery, or other account, I only use the official website or app of that entity to check the current status of that account.’” https://lnkd.in/e8rCHs3c

9

1 Comment