Rick Vadgama, CISSP

If you’re at the Zywave Cyber Risk Insights conference today, look for me! I’ll be joining a panel at 1:45 to discuss whether we’ve reached a critical mass yet with data to adequately model and manage #cyberrisk. https://lnkd.in/dK2d3HHe

13

1 Comment

Lehigh University (LU), a private research university in Pennsylvania, turned to Armis to strengthen its cybersecurity posture: https://lnkd.in/evDuz2_C By implementing Armis Centrix™ for VIPR Pro – Prioritization and Remediation, LU achieved an 80% reduction in assessment time and a 40% decrease in tool costs. The implementation also streamlined workflows, reducing fix times by up to 80%, and enabled more effective prioritization of security findings, thereby minimizing risk exposure. Discover how Armis helped Lehigh University achieve a proactive security posture: https://lnkd.in/evDuz2_C #VulnerabilityPrioritization #ArmisCentrix #Cybersecurity #RiskManagement #SecurityFindings #Remediation

30

Today, Nucleus Security announced our sponsorship of the inaugural EPSS (Exploit Prediction Scoring System) report from Cyentia Institute. This report evaluates EPSS performance over the last few years and drills into questions related to understanding vulnerability exploitation in the wild. I'm adding links to the report and related resources in the comments. #cybersecurity #EPSS #NucleusSecurity #vulnerabilitymanagement

22

3 Comments

This is very interesting... seems to be a riff on an analysis technique that we described in an article titled "Beyond Timelines - Anchors in Relative Time" ten years ago in Digital Forensics Magazine. The technique has been applied to extremely high-profile and high-stakes cases since then.

11

2 Comments

NIST Report on the 2024 Accordion Cipher Mode Workshop

2

Lets take this time to STOP our Insider Threats and let them know "We See you!" (on or off network) and "We speak your name!" (or we can pseudanomize your name if it's required 😁) #dtexsystems #datasecurity #user privacy #UEBA #uba #insiderrisk #IRM #insiderthreat #dataprotection #everymonthisIRMMonth

6

Looking forward to the event and the discussion next week with Jim Toes about the Cyber & Financial Crimes threat and impacts on the securities industry.

49

1 Comment

Cloud service providers of all sizes have become central to the operations of so many business and organizations, but they are often overlooked during business continuity planning. Check out this month's #SLCR blog post discussing how to get started with #BCP by conducting business impact analysis.

1

Varonis Shined brightly this year in the Gartner Peer Reviews. Reach out for a complimentary Copilot Risk Assessment as well as for complimentary Data Risk Assessment!

12

1 Comment

Vulnerabilities are rising every year, making it impossible for security teams to remediate them all. Flashpoint’s new Guide to Proactive Vulnerability Management offers actionable insights on how to prioritize vulnerabilities that have increased 44% in the past five years—based on real risk factors like exploitability and threat actor activity. This guide shows how organizations can leverage intelligence to reduce attack surfaces and protect critical assets more effectively. If you’re looking to break the cycle of reactive patching, this guide is for you. 📊 Don’t miss out—download it today and get ahead of the next threat. 🔗 Get your copy now: https://lnkd.in/eTqafDkK Flashpoint #VulnerabilityIntelligence #VulnerabilityManagement #Flashpoint

7

Enjoyed discussing the current state of cyber risk management, industry frameworks, and how the Ostendio platform is helping Layer 8 Security better serve clients with Paul Redding and team. Looking forward to continuing to build our partnership! #layer8secure #ostendio #cybersecurity

17

🚀 Ready to optimize your #FedRAMP strategy? Join Coalfire and Omdia in unveiling the latest insights from a global #ATO survey. Hear advice from #cybersecurity and #compliance experts, Karen Laughton and Maxine Holt, on navigating FedRAMP complexities. https://ow.ly/RybL50TgWeH

6

Don't be caught flatfooted during your next Cyber Insurance renewal. Come hear from Rick Hanson and Art Gilliland how Delinea can help you be prepared and even drive down your premium. #cyberinsurance #delinea #grc

10

1 Comment

So, it's that time of year again and I will be speaking and traveling a lot. I will be at the following events, and please come to say hi or listen if you want. September 4: CISO Roundtable with Cybertech NY September 5: Incident Response Keynote panel at Cybertech NY with Cytactic September 7: Human Security Engineering at Luminarium Bogata September 10: Human Security Engineering at Luminarium Medellin September 12: Your Budget is a horse's ass at GoSec Conference 2024 in Montreal September 17: Quantitative Techniques for managiing risk exposure webinar, CYE webinar with Reuven (Rubi) Aronashvili, Katherine Kuehn, and Cody Scott September 23: Psychological Indicators of Human Vulnerability, InfoSec World Orlando October 3: Audience Choice at CornCon Cybersecurity Conference, Davenport October 16: Psychological Indicators of Human Vulnerability, ISC2 Security Congress, Las Vegas October 30: TBD Keynote at Layer 8 Masters CISO Forum, San Diego October 31: Applying AI to Cyber Risk Quantification at Cyberdefense Magazine CISO Conference, Orlando November 8: The Worst Cybersecurity Advice I Ever Heard, @Bsides South Florida November 27: Keynote stage, Black Hat MEA, Riyadh December 10: Leave Me the F*ck Alone, Cybersecurity Marketing Society Conference, Philadelphia Februay 8-13: Human Security Engineering, CruiseCon, The Caribbean, where I will be the least esteemed speaker in attendance. ;) I might have left something out, so please remind me if I left out your event. Either way, I will hopefully catch up with friends along the way. I will admit that I am most excited about CruiseCon, but that is my passion project. Either way, I look forward to seeing you all there.

52

16 Comments

It’s time to define a new cyber risk equation. One that rethinks what’s possible and defies old obstacles. Here’s a look at how we’re reframing our best-in-class portfolio. See more on our product page.

3