Ron Herardian

Prepare for the Cybersecurity Assessment Tool (CAT) Sunset coming in 2025. Learn about its impact on financial institutions, alternative frameworks like NIST 2.0, and how to crosswalk existing controls. https://okt.to/ZfnCdM #Cybersecurity #Alert #CATSunset #RiskAdvisory

2

Has anyone here used Trustcloud for compliance?? 🤔 I see a lot of ads for this platform on Linkedin lately. I don't know this company, they are direct competitors to big players like Vanta and Drata. I got curious because they offer a free plan for startups when their main competitors charge more than 10k a year. I always have the "too good to be true" mindset, but some big companies also provide free services to smaller companies as a way to win them when they grow (Cloudflare is the best exemple, free for small companies but an incredible offer). Soooo, I'm wondering where Trustcloud stands if anyone has used their platform. Please share your thoughts 😬 If they are reliable, I think that it could help a lot of startups here to begin their compliance adventure. PS: this post is not there to debate on the use of compliance tools. My point is more that if there is a way to save money here and use that to actually increase your cybersecurity posture, I think that's something to consider. Peace ✌️ https://www.trustcloud.ai/

3

3 Comments

Ready to speed up the process of obtaining certs like NIST 800-53, FedRAMP, PCI DSS, NYDFS, SEC, FFIEC, and DORA? RegScale's brief on rapid certification outlines how RegScale's automation and expert-designed processes accelerate the certification process. Check it out here: https://loom.ly/WSysQZ4

8

1 Comment

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/q424105O2IL

8

A San Jose night full of good stories, laughs, and all things data security. Go beyond visibility, get the security, governance, and privacy outcomes you need with Varonis! Bo Lambert Cody Normyle Catherine Johnson Brian Vecci Inessa Rozenberg Alex Weber #varonis #datasecurity #dspm #datasecurityplatform

89

Tired of Cyber Disneyland? Get the facts and find your way around #Cybersecurity #MDR at the N-able Roadshow in #Anaheim today. Hear from vendors, and join us for an incident response tabletop exercise. As pilots are fond of saying, "If it doesn’t feel right, go around. It’s better to explain why you did than have an investigator discover why you didn’t." TTXs are the best way to figure out what's right, before it goes wrong. @N-able roadshows are free--cyber incidents are costly. Register below: https://lnkd.in/g9A8dt8G

19

UPDATED NIST CSF COURSE: Now AI Enabled www.ncsecourse.com "How can an organization enhance its cybersecurity governance framework according to the NIST CSF 2.0's Govern function? Include recommendations for establishing roles, responsibilities, policies, and procedures to manage cybersecurity risk effectively." Rhonda Reihill #NISTCSF #ICTTF

2

CISA Alerts on Active Exploitation of Critical Vulnerabilities in GeoServer, Linux Kernel, and Roundcube The Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm over active exploitation of vulnerabilities in popular software products including GeoServer, the Linux kernel, and Roundcube Webmail, underscoring the urgency for organizations to apply recommended patches. ➡ GeoServer under Threat A severe vulnerability within GeoServer, identified as CVE-2022-24816 and boasting a CVSS score of 9.8, poses a significant risk due to a code injection flaw found in the Jai-Ext open source project. 👁 Attackers could exploit this vulnerability to execute remote code. GeoServer addressed the issue in version 1.2.22, released in April 2022, by removing the capability to inject malicious code. Despite the availability of technical details and proof-of-concept (PoC) exploit code since August 2022, the flaw remains a target for threat actors. ➡Linux Kernel Vulnerability Another critical concern highlighted by CISA is a use-after-free issue within the Linux kernel, tracked as CVE-2022-2586 with a CVSS score of 7.8. This vulnerability has implications for privilege escalation through the manipulation of nft tables in a way that can lead to a use-after-free scenario. Patched in early August 2022 following its demonstration at Pwn2Own Vancouver in May 2022, technical details and PoC code were published shortly after, marking it a significant risk. ➡Roundcube Webmail XSS Issue An older, yet actively exploited vulnerability found in versions of Roundcube Webmail prior to 1.4.5 and 1.3.12, has also been flagged by CISA. Dubbed CVE-2020-13965 and rated with a CVSS score of 6.1, this cross-site scripting (XSS) vulnerability can be triggered through malicious XML attachments. Roundcube issued patches for this flaw in early June 2020, with PoC code following soon after. Although the vulnerability has been known for four years, the recent CISA warning underscores its ongoing threat. ✍ As part of its directive (BOD 22-01), CISA has mandated federal agencies to address these vulnerabilities by implementing the available mitigations or by removing the compromised products from their environments by July 17. CISA emphasizes the high risk these vulnerabilities pose to federal operations, urging immediate action to thwart potential cyberattacks. #cybersecurity #cyberattack #vulnerability #cisa #cyberrisk #cyberthreat https://lnkd.in/dpW-Thne

5

US regulators and legislatures are on top of it this year: The SEC is pushing new rules requiring financial institutions to have plans in case of a data breach. Essentially the rules state that if you have a breach, you must notify. The rules also apply to broker-dealers and funding portals.

2

This essay by National Institute of Standards and Technology (NIST) Lily Chen and Matthew Scholl aligns perfectly with, and goes well beyond, my own understanding of the history of NIST cybersecurity standards, and shows the present NIST postquantum cryptography effort to be steady and consistent with good past practices. https://lnkd.in/eEbYgsXx

3

Utilities, pharmacies, other core components of the life we live are under attack daily and sustained predictable #MDR essential to keeping us safe and secure. CyberMaxx helping out clients here every day

4

Read our latest blog "Understanding Common Vulnerabilities in Public-Facing Applications" by Elizabeth Gildea https://lnkd.in/gn4uvPPq #cybervulnerabilities #threatintelligence

16

Apple's Private Cloud Compute (PCC) marks a big change from their usual focus on keeping user data safe through on-device processing. Now, with AI becoming more powerful, Apple is moving into more complex areas. When will AI run locally on our devices, and when will it shift to the "remote" PCC? This brings up a tricky issue: AI needs to access data to work, but Apple promises end-to-end encryption and says it deletes data after it's used. Can we really trust that no personal data is kept, especially when AI is involved? And then there’s the big question: Apple’s partnership with ChatGPT! Is OpenAI becoming too big to ignore, pushing Apple toward cloud-based AI, even if it raises concerns about privacy? Or is this just part of staying competitive in a fast-moving AI world? Apple has always put privacy first, but is this move away from full user control over data a necessary step in today’s AI-driven tech landscape? Can we still balance convenience with privacy, or are we trading away too much security for smarter AI? What about Europe? Apple recently announced that Apple Intelligence won’t be available in Europe, likely due to strict regulations like GDPR, and possibly the new AI act. These laws put heavy restrictions on how companies handle and process user data, which might make it challenging for Apple to launch cloud-based AI services while ensuring compliance. Will strict privacy regulations prevent AI innovations from reaching certain markets? Or is this just a temporary issue as companies like Apple work to balance privacy with AI advancements? For security leaders, this asks an important question: Can we trust even the most privacy-conscious companies to manage the fine line between progress and protecting our data? For more details, check out Apple’s blog on Private Cloud Compute here: https://lnkd.in/dR2RqmQr

46

6 Comments

Every CISO knows the pressure, cybersecurity is a red-hot topic for executives and board members alike, especially after major breaches like the recent AT&T customer data leak and the attacks targeting cloud platforms like Snowflake. They need someone who can connect the dots and explain the evolving threat landscape. and the proactive steps you're taking to secure the organization's crown jewels.

7

Come take a look at my third and last post about the Global Standards Leadership Conference. This one is about the panel on "New Frontiers of SEP Licensing."

17

2 Comments

This diagram illustrates the connections between Advanced Persistent Threats (APTs) and exploited CVEs, highlighting critical vulnerabilities targeted by sophisticated cyber actors for strategic attacks.

2

We're bringing Endpoint Inspector SaaS to Amazon Web Services (AWS) Marketplace, helping businesses collect and analyze #data faster to best protect their organizations.    Cellebrite’s role in the Amazon Partner Network helps customers reduce risk, boost collaboration and lower costs. Offering this solution from our Case-to-Closure platform to millions of active AWS customers worldwide is critical to allow more people to deploy it simply and quickly.       Using AWS #cloud infrastructure, Endpoint Inspector SaaS will empower secure, real-time data access from a range of remote devices – without compromising on consent and #security. Read more from Cellebrite Enterprise Solutions: https://lnkd.in/d9Cc7Tfd

126

3 Comments