Richard E. Mendoza

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

Encrypted DNS Implementation Guidance - Published by CISA in May 2024. This document provides Federal Civilian Executive Branch (FCEB) agencies with actionable guidance for the implementation of encrypted DNS protocols and for enhancing the cybersecurity posture of their IT networks. It is intended to provide implementation guidance for federal agencies to meet federal requirements related to encryption of Domain Name System (DNS) traffic and enhance the cybersecurity posture of their IT networks, as set forth in Office of Management and Budget’s (OMB) Memorandum M-22-09.1

2

“Don’t Mess with Texas” is a slogan for a campaign aimed at reducing littering on Texas roadways. The TDPSA is a comprehensive data privacy law just enacted by the state that essentially says, “Don’t mess with our data either!” It aims to protect the personal information of Texas residents and ensure businesses adopt robust data protection measures to safeguard sensitive data. BigID helps organizations achieve compliance by: ✅ privacy impact assessments (PIA) ✅ discovering & classifying your data at unmatched speed, scale & coverage ✅ data breach detection & response automating: ✅ DSARs ✅ data minimization & retention policies ✅ data protection — access, encryption, etc. ✅ more… Holler!

8

The National Security Agency (NSA) has recently released guidance aimed at enhancing logging and threat detection capabilities in response to living-off-the-land (LotL) incidents targeting critical infrastructure. LotL techniques involve threat actors leveraging legitimate tools and protocols to carry out malicious activities, making them harder to detect. The NSA's recommendations emphasize the importance of robust logging practices and proactive threat detection measures to counter these sophisticated attacks. #NSA #Databreaches #incidentResponse #LotL #cyberattacks

2

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

2

If you can make please take sometime to learn more about OT Cybersecurity.

1

I Just wrapped up an insightful discussion on business risk, and cybersecurity threats to municipalities across Texas. Here are some thoughts on key points from my remarks:   ·      China, Russia, Iran, North Korea and other Nation States pose significant and evolving cyber threats to U.S. national security, and economic prosperity. They each leverage cyber capabilities for espionage, economic espionage, influence operations, and attacks on critical infrastructure. Just to name a few.    ·      Ransomware attacks impacting state and local governments often stem from exploited vulnerabilities and compromised credentials. Unfortunately, state and local governments too often face challenges involving inadequate cybersecurity programs, insufficient funding, outdated IT infrastructure, central control of budget and incident command with increasingly advanced and complex threats.   ·      Organizations large or small can take simple steps to enhance cybersecurity and significantly reduce risk to include require multifactor authentication, patch and update software, develop and test incident response plans specific to attack types, use backup systems and segment data, and conduct regular assessments and testing to validate your security plans and controls are working. Nothing new here. Unfortunately, we keep not doing it. Meaning for years the bad guys use a lot of the same attack vectors but the victims don’t change. The landscape of cyber threats is continually evolving, and it's critical to stay informed and be proactive in our defenses. #Cybersecurity #NationalSecurity #CyberThreats #InformationSecurit #LocalGovernments

56

11 Comments

🪧 SIEM ≠ MDR Welcome to part one of our three-part blog series where we share the difference between a SIEM system and MDR and how MDR can transform and augment your SIEM tool investment.

1

Take advantage of this folks! I have always used "Investigation Theory" as a foundational course when building teams and creating talent pipelines from the help desk and IT engineering teams over to cybersecurity. Link in comments (and I'm not getting paid for this - I just think it's good 😉)

6

1 Comment

Learn the ins and outs of internet exposure in the context of vulnerability management: https://lnkd.in/eta2umrs.

9

VM remains a cornerstone of preventive cybersecurity, but organizations still struggle with vulnerability overload and sophisticated threats. Tenable’s new Exposure Signals gives security teams comprehensive context, so they can shift from VM to exposure management and effectively prioritize high-risk exposures across their complex attack surface. http://ow.ly/oGFk105PbnX

3

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

Why Security Matters: A Lesson from the Golf Course https://lnkd.in/duCjZ4s5

1

Are you a contractor that uses an external cloud service provider (CSP) to store, process, or transmit sensitive defense information? DFARS clause 252.204-7012 details several requirements you must “require and ensure” meet security requirements (Are they on FedRamp.gov Marketplace?) or provide evidence that they are 100% equivalent to the FedRAMP moderate baseline. They must comply with all DFARS 252.204-7012 requirements for: Cyber incident reporting Malicious software Media preservation and protection Access to additional information and equipment necessary for forensic analysis Cyber incident damage assessment You can read the requirements yourself here: https://lnkd.in/gb7qEeaq. Or give us a call at MNS Group. We’re an Authorized C3PAO that can help provide guidance. #DoD #compliance #contractors #cybersecurity #assessment

43

1 Comment