Tempy Wright

Mark Lance, VP of DFIR & Threat Intelligence at GuidePoint Security, revealed how easy it is for criminals to launch #cyberattacks in an interview with KTBC Fox 7 Austin. In response to a case where a Texan ran a website allowing anyone to buy #cyberattacks, Lance emphasized the growing threat and the importance of robust #cybersecurity measures. Find out more about this incident and how to protect your organization from #ransomware. https://okt.to/0tk65z

16

The CDK breach is a major event that also showed that threat actors are willing and able to target end users of MSPs and Vendors. If you’re not sure yet whether this is coming to your doorstep as an MSP we’ve already had several MSPs tell us they have been impersonated by bad actors. Give your clients a path to know for sure that it is your team calling for support and prevent bad actors from gaining access through your end users. #MSP #ZeroTrust #MSSP #TrustNoOne.

7

Along with a few colleagues on the AFCEA International Cyber Committee, we put together a white paper on the use of AI in security. A summary is below. The paper is free but you have to fill out a short form to download it. "Navigating the Future of Cybersecurity with Artificial Intelligence" In a rapidly evolving digital landscape, cybersecurity is no longer solely a concern for the military and private sectors; it is also critically important for civilian government agencies. As cybersecurity threats grow more sophisticated, leveraging artificial intelligence (AI) becomes essential for protecting vital civilian infrastructure and services. This white paper, developed by the AFCEA International Cyber Committee, examines the transformative role of AI in enhancing cybersecurity across all sectors in the United States, and provides a comparative analysis of AI integration in Europe, Asia-Pacific and the Americas. https://lnkd.in/d4uhGFAN

26

1 Comment

We're bringing Endpoint Inspector SaaS to Amazon Web Services (AWS) Marketplace, helping businesses collect and analyze #data faster to best protect their organizations.    Cellebrite’s role in the Amazon Partner Network helps customers reduce risk, boost collaboration and lower costs. Offering this solution from our Case-to-Closure platform to millions of active AWS customers worldwide is critical to allow more people to deploy it simply and quickly.       Using AWS #cloud infrastructure, Endpoint Inspector SaaS will empower secure, real-time data access from a range of remote devices – without compromising on consent and #security. Read more from Cellebrite Enterprise Solutions: https://lnkd.in/d9Cc7Tfd

126

3 Comments

The increasing relevance of data sanitization in classified data environments...

23

1 Comment

This is very interesting... seems to be a riff on an analysis technique that we described in an article titled "Beyond Timelines - Anchors in Relative Time" ten years ago in Digital Forensics Magazine. The technique has been applied to extremely high-profile and high-stakes cases since then.

11

2 Comments

Lets take this time to STOP our Insider Threats and let them know "We See you!" (on or off network) and "We speak your name!" (or we can pseudanomize your name if it's required 😁) #dtexsystems #datasecurity #user privacy #UEBA #uba #insiderrisk #IRM #insiderthreat #dataprotection #everymonthisIRMMonth

6

I do not normally comment on items like this, executive orders and their effect (or lack thereof) but this hit a nerve somehow. Bulleted thoughts: - This is directed at seemingly every agency and every human in those agencies who read the word "security" in a memo somewhere and have something to do with critical infrastructure. That's not how leadership happens. - To say it lack details on key principles like Risk would be a fairly massive understatement. If there were such a thing as definition police (friends of the fashion police?) I'd call them. - I've seen a few recent job advertisements for senior-level cyber security roles at key agencies. Spoiler alert: they pay far, far less than even more junior roles in the private sector. Even highly strategic roles of key importance to our national security. If we are not offering even an average salary, how in the world is our actual risk as a country or in our critical infrastructure, going to be reduced? That's not exactly a hot take, I'm surprised that's not called out more frequently publicly! I have nothing but respect for those who answer the call and serve our nation, I just want them paid fairly and for more people to answer that call - and it's hard when someone on the other line is offerering you 30% more for the same activity. Government cybersecurity pay is broken compared to any reasonable definition of the market. https://lnkd.in/gd4ctY7g

14

2 Comments

Yet another report from Forescout Research - Vedere Labs. This time we looked into exploited vulnerabilities, the catalogues available and the impacted devices! Have a read. https://lnkd.in/griGMznV

17

The riskiest project for most security teams is insider risk management. In my experience, most of these initiatives will drag on as a science project for a few years before being scrapped by new leadership. That’s reflected in industry stats like 88% of insider threats taking over a month to detect. The problem? We’ve mixed up insider threat detection, user behavior analytics, and machine learning. By now, we should recognize that catching malicious insiders is hard and that anyone counting on an AI/ML magic solution is dangerously optimistic. That’s why this week’s post channels one of the 20th century’s most famous pessimists. It presents an approach to insider risk detection that is much more likely to succeed and has applications beyond insider risk. Introducing “Mencken’s Law of Threat Detection”: Never rely on machine learning to detect a threat you haven’t modeled. Read on at the link below.

48

2 Comments

Data Breaches are a Dime a Dozen: It’s Time for a New Cybersecurity Paradigm: Data breaches have accelerated quickly in 2024. Google ‘data breach’ and you’re in for a whirlwind of high-profile names scattered across headlines of thousands, and sometimes millions, of customer and... The post Data Breaches are a Dime a Dozen: It’s Time for a New Cybersecurity Paradigm appeared first on Cyber Defense Magazine. https://lnkd.in/gtZUUjeU

1

USPS-themed smishing attacks are on the rise. Cybercriminals are exploiting trust in delivery notifications to steal personal data. It's crucial to stay vigilant and leverage threat intelligence to combat these threats. Learn more about these sophisticated scams: [link] #CyberSecurity #SmishingAlert #ThreatIntelligence https://lnkd.in/ezFXiiR9

3

As we continue to see #cyberattacks against water utilities and other critical infrastructure, we all need to do our part to help build a cyber resiliency. The Check Point Software Public Sector Team is here to help develop and execute that plan. https://lnkd.in/eyyUbBBB #CheckPointPublicSector Glen Deskin Elena Contreras David Klein David Robertson Don French Mike Chao Jeremiah Marshall Rick Spillane Christina Kim Jeff Gates Rick Weaver CISSP William A. Diaz Katherine Fernandez Edona Stanley

12