Paul Antony

Enhance your existing DLP and SEIM tools with proven ML/AI proactive analytics. Learn today, what is highly likely tomorrow and get “Left of Loss” Fulcrum, now available as a Saas or On PREM offering enhances many of todays leading tools including Splunk, Microsoft, DTEX, Broadcom/Symantec, Exabeam, Code42, and many others. Look into the future and prevent threats before they start. #insiderrisk #insiderthreat #redvector #fulcrum

6

Uncovering Hidden Paths to Privilege: A Deep Dive into Identity Security Insights In this blog, I sit down with Josh Fu to discuss how Identity Security Insights is transforming the way organizations approach identity security. https://lnkd.in/eHXCVqr8 #TheIdentityNavigator #IdentityAndAccessManagement #IdentitySecurity

28

Super excited to announce that I'll be #Speaking at CornCon Cybersecurity Conference on Identity Access Management (#iam). If you caught my talk at SecretCon it's going to be an expanded and more detailed talk discussing specific strategies, technologies, and stories (maybe even a handful of mistakes) that you can learn from. #identityaccessmanagement #security #cybersecurity #infosec #automation #ai #conference #worldtour

36

3 Comments

Follow the DVMS Institute for exciting announcements on "HOW" organizations of any Size, Scale, or Complexity can Operationalize a NIST Cybersecurity Framework Digital Value Management System™ capable of delivering the Trusted, Resilient, and Auditable digital outcomes government auditors expect

16

🚨 Exciting News! 🚨 Do you need help building a Cybersecurity Plan or refreshing an old one? Make sure you Bookmark the Link below. Its a One-Stop Shop for executive summaries of NIST Cybersecurity Framework 2.0. The IJIS Institute Cybersecurity Working Group drafted 2-Pagers for each NIST Domain. Easy to Read. #Cybersecurity #NIST #PublicSafety #Mark43 #JusticeGuardian #IJISInstitute #CyberResilience #CISO #SecurityFirst

12

Vigilocity is closely tracking this. https://lnkd.in/gGWcmUis

24

Very Excited to be speaking at HOU.SEC.CON. It is gonna be great to see my old friends and get to share some great skills! I will be speaking on the 25th at 10:00 AM - 10:45 AM. Topic of *Open Source Your Incident Response* #cybersecurity #hou.sec.com #incidentResponse

35

Kapil and I will be speaking at the ISC2 Security Congress 2024 in Las Vegas from October 14–16, on “Identity, Authentication and Road ahead!” on October 16th. This session is tailored for executives, C-Suite leaders, and cybersecurity professionals. We’ll cover strategies on how to Impact of AI-powered emerging threats to the #identity ecosystem – and what tools can be used to defend against them, How to protect against Non-Human Identities. What Should a Good #NHIM system include, How re-use a verified identity will also be key to reducing the number of onboarding a person has to go through, offering a differentiated experience Check out the full agenda and our session details here: https://lnkd.in/gT2X3MVG. Hope to see you there! Register now: https://lnkd.in/gVJgGTKg #ISC2Events #ISC2Congress #Cybersecurity #IAM #identity #ai #nhim #isc2 #theIdentityNavigator

141

6 Comments

Recent shifts within The NIST NVD operations have raised alarms among researchers and practitioners. ⚠️ These changes have led to delays in vulnerability analysis and a noticeable decline in enriching CVEs with critical data such as CPEs, CVSS scores, CWEs, and references. This creates significant hurdles for organizations striving to effectively identify and prioritize vulnerabilities. 💡 Meet DeviceTotal, a transformative solution reshaping this vulnerable pyramid. Our AI-powered technology propels vulnerability management into a new era, offering substantial enhancements in accuracy, speed, and automation. 🚀 DeviceTotal sources security information directly from vendors, ensuring data is updated well before it reaches the NVD. This proactive approach empowers organizations with timely insights, enabling swift and informed actions to mitigate threats. 💪 On top of that, DeviceTotal provides actionable insights for every threat, offering precise indications for available updates, mitigation options, workarounds, End-of-Life alerts, and more.  And the best part? No agents, no installations—just swift value delivered directly to your organization. Don't let your vulnerability management strategy crumble—elevate it with DeviceTotal. Experience the difference today. #VulnerabilityManagement #CyberSecurity #DeviceTotal #cybersecurity #infosecurity #riskmanagement #vulnerabilitymanagement #nationalsecurity (cartoon copyright by XKCD.com)

31

1 Comment

48CFR will be open for a 60-day public review and comment period tomorrow. Here are some of my takeaways regarding changes to the regulation. https://lnkd.in/g_nKNj7C #Cybersecurity #CMMC #DFARS #DefenseContracting #Compliance #SupplyChainSecurity #DoDContracts #CMMC2 #CyberRiskManagement #InformationSecurity #GovernmentContracting #CyberResilience #ContractCompliance

9

🛡️ Identity and Access Management (IAM)🌐 In today’s digital landscape, managing **who has access to what** within an organization is critical for protecting sensitive data and maintaining compliance. This is where **Identity and Access Management (IAM)** comes into play. #### What is IAM? **IAM** is a framework of policies and technologies that ensures the right individuals have appropriate access to resources, systems, and data at the right time. By managing digital identities, organizations can secure their systems from unauthorized access while allowing seamless operations for legitimate users. #### Key Components of IAM: 1. **User Authentication**: Verifying user identities through methods like passwords, biometrics, and multi-factor authentication (MFA). 2. **Authorization**: Ensuring users only have access to the resources they need based on their role (role-based access control). 3. **User Lifecycle Management**: Managing users from onboarding to offboarding, ensuring access permissions are granted, adjusted, or revoked as necessary. 4. **Access Monitoring & Reporting**: Continuous tracking of who accesses what, when, and how, enabling rapid response to suspicious activity. 5. **Single Sign-On (SSO)**: Simplifying access by allowing users to authenticate once and gain access to multiple applications without repeatedly logging in. #### Why is IAM Critical?  - **Mitigates Insider Threats**: Proper role-based access limits what each employee can do, reducing the risk of data breaches from insiders. - **Ensures Compliance**: IAM solutions help businesses comply with regulations like GDPR, HIPAA, and SOX, by ensuring strict access controls. - **Supports Remote Work**: With more employees working remotely, IAM ensures secure access to company systems and data from anywhere. - **Prevents Data Breaches**: By enforcing strong authentication measures, including MFA, IAM reduces the risk of unauthorized access. #### Benefits of Implementing IAM: - **Enhanced Security**: Protects against identity theft and data breaches by ensuring only authenticated and authorized users have access to critical systems. - **Improved User Experience**: SSO and other IAM features reduce password fatigue for users, streamlining their access to necessary tools and applications. - **Operational Efficiency**: Automates user access provisioning and de-provisioning, saving time and reducing errors. #### IAM in Action: Industries like finance, healthcare, and government rely heavily on IAM to manage thousands of user identities and safeguard highly sensitive information. Whether it’s protecting customer data or ensuring that employees only have access to the systems they need, IAM is the backbone of digital security. #Cybersecurity #IAM #IdentityAndAccessManagement #DataSecurity #AccessControl #MFA #SSO #Compliance #Infosec

4

1 Comment

As the present cohort progresses through the G-CISO certification, we experienced a compelling session this weekend with Rich Gautier. The discussion centered on the timely subject of "Cyber Incident Response and Digital Forensics." The session involved a dynamic discussion that explored the various dimensions around IR, including #IncidentResponse improvement, #DigitalForensics Challenges, #StrategicPlanning, #RiskManagement, and #FuturePlanning. I extend my gratitude to my cohorts for their engaged participation. GlobalCISO Leadership Foundation #GCLF mission "Our foundation’s mission is to solve Cyber Security Challenges by empowering Global CISOs with world-class training." #gciso #breach #ransomware #legal #media #publicrelations #leadership Chirag Arora, Global CISO Jothi Dugar, The Chaos Guru Durga Dhanikonda Pratik Savla, MS(InfoSec), CISA, CDPSE, CEH, CCISO Linna Zheng

33

Cybercrime News South Asian hackers target Pakistani entities in new espionage campaign https://lnkd.in/gjDYsSyt A threat actor known as Mysterious Elephant has been observed targeting Pakistani entities in a new espionage campaign. The group, also tracked as APT-K-47, has been active since 2022 and likely originates in South Asia, according to a new report from China-based cybersecurity firm Knownsec. The group’s goals and techniques are similar to those used by India-linked state-sponsored cyberespionage groups, including SideWinder, Confucius and Bitter, the researchers said. The hackers delivered an improved version of the Asyncshell payload to infected devices as part of its new campaign. The payload was first identified in January when researchers found a malicious sample exploiting a vulnerability in a popular file archiver tool for Windows (WinRAR). To date, Knownsec has identified four different versions of Asyncshell. “APT-K-47 has frequently used Asyncshell to launch attack activities since 2023 and has gradually upgraded the attack chain and payload code,” the researchers said. The exact initial access vector employed by the group in the latest campaign is unknown, but it likely involves phishing emails.

1

https://lnkd.in/dheNi8-Y We've put together a downloadable guide for DIB Contractors that goes over the interplay of DFARS, NIST 800-171, SPRS, and CMMC 2.0. #ControlCase #dfars #nist #nist800171 #sprs #cmmc #cmmc2

1