Tim Pillow

It is easy to protect PL/SQL from security vulnerabilities. - https://lnkd.in/eqdFZB9n #plsql #protect #databreach

2

This Kiteworks article outlines eleven essential requirements for a secure managed file transfer (MFT) solution. Key points include the necessity for robust security features like encryption, integrated antivirus, and hardened virtual appliances. It also emphasizes governance capabilities such as flow authoring access controls and role-based user policies. Additionally, it highlights the importance of visibility through security visualizations and consolidated logs. These measures ensure compliance, data protection, and operational efficiency in modern enterprises. Eleven Requirements for Secure Managed File Transfer 👉 Learn more: https://gag.gl/QPSQ3B #cybersecurity #FileTransfer #SecureFileTransfer #MFT

6

Beware of the pitfalls with XDR vendors—here’s what you need to watch out for: - XDR is not SIEM: Don't mistake XDR for a log management system. The more logs you shove into it, the worse it performs. XDR is designed for precision, not data hoarding. Manage it wisely, or you'll lose control. - SIEM isn’t XDR: Merely slapping “Nextgen” in front of your SIEM doesn’t transform it into XDR. SIEM is inherently limited by variety and high data volume—understand its boundaries before you push them. - Ignore the hype: Claims that cloud-based XDR offers better correlation are just marketing fluff. Data isolation is crucial, regardless of where it's stored. If your data isn't loaded into the cloud, it should not impact the quality of threat detection. Vendors can upload everything necessary for detection to your on-prem instance. Remember, the main difference between on-prem and cloud is cost and ease of implementation/use. Stay sharp and don’t let vendor slick talk cloud your judgment. #XDR #SIEM

100

9 Comments

Erich Kron - I have immense respect for @KnowBe4's honest and open approach regarding their recent hiring incident involving a North Korean cyber threat. This situation offers a crucial lesson for all businesses—whether small, medium, or large—that depend on remote talent for their workforce. As they highlighted, their endpoint protection successfully detected and contained the breach early, showing the importance of identity proofing as a key process for preventing such incidents. Together, these measures are incredibly powerful in helping businesses protect themselves from cybercriminals. 🔒👨‍💻 #CyberSecurity #RemoteWork #DataProtection #ThreatDetection #BusinessSecurity

2

1 Comment

Super excited to announce that I'll be #Speaking at CornCon Cybersecurity Conference on Identity Access Management (#iam). If you caught my talk at SecretCon it's going to be an expanded and more detailed talk discussing specific strategies, technologies, and stories (maybe even a handful of mistakes) that you can learn from. #identityaccessmanagement #security #cybersecurity #infosec #automation #ai #conference #worldtour

36

3 Comments

It is easy to protect PL/SQL from leaking your algorithms and code. - https://lnkd.in/eppqxvjw #plsql #protect #securecode

7

Whether you're an offensive or defensive cybersecurity practitioner, this workshop will level up your security skills.

1

Great PoC linking real-life identities to consumers of CSAM based on Infostealer infections. We did something similar at Hudson Rock, linking real-life identities to cybercriminals and even received a shoutout in Recorded's research. Infostealers contain troves of data from millions of infected computers, which can be used for various types of investigations. Expect even more cool Infostealer-related use cases to surface.

8

1 Comment

Join your peers at the #BayArea CyberRisk CISO Dinner on Tuesday, August 20, 2024 presented by your Bay Area CISO Leadership Board, Brent Conran, CISO of Intel Corporation , Malcolm Harkins, CSTO of HiddenLayer, Jacki Monson, CISO & CPO of Sutter Health, Vitaliy Panych, CISO of State of California, Leda Muller, CISM, CISO & CPO of Stanford University, and Krishnan Chellakarai, CISO of Gilead Sciences at El Prado. Apply now to network with the industry's top #CISOs and #CybersecurityExecutives during an intimate dinner and roundtable discussion on Mitigating and Responding to Incidents. Every cybersecurity leader must adapt their approach to what makes their organization competitive in the marketplace—especially as it relates to building the relationships and processes that streamline responding to a major incident. In this collaborative discussion, local security leaders share insights on preventing and responding to incidents. Discuss: • Building relationships and processes to ease decision making • Improving key technologies to mitigate risk • Identifying key attack vector Interested in learning more before you apply? Reach out to your community cultivators, Drew Klinsing and Parham Eftekhari. CyberRisk Alliance #CISOcommunity #collaboration #networkingevent #cybersecurity #networking #CRAEvents

10

Join your peers at the #BayArea CyberRisk CISO Dinner on Tuesday, August 20, 2024 presented by your Bay Area CISO Leadership Board, Brent Conran, CISO of Intel Corporation , Malcolm Harkins, CSTO of HiddenLayer, Jacki Monson, CISO & CPO of Sutter Health, Vitaliy Panych, CISO of State of California, Leda Muller, CISM, CISO & CPO of Stanford University, and Krishnan Chellakarai, CISO of Gilead Sciences at El Prado. Apply now to network with the industry's top #CISOs and #CybersecurityExecutives during an intimate dinner and roundtable discussion on Mitigating and Responding to Incidents. Every cybersecurity leader must adapt their approach to what makes their organization competitive in the marketplace—especially as it relates to building the relationships and processes that streamline responding to a major incident. In this collaborative discussion, local security leaders share insights on preventing and responding to incidents. Discuss: • Building relationships and processes to ease decision making • Improving key technologies to mitigate risk • Identifying key attack vector Interested in learning more before you apply? Reach out to your community cultivators, Drew Klinsing and Parham Eftekhari. CyberRisk Alliance #CISOcommunity #collaboration #networkingevent #cybersecurity #networking #CRAEvents

4

3 Infostealers related blogs we published this month ⬇ 1. Single Citrix Compromised Credential Results in $22,000,000 Ransom to Change Healthcare (https://lnkd.in/dV_GTvuk) 2. Identity Behind Massive Discord Spying Tool Revealed due to Infostealer Infection (https://lnkd.in/dyFkgSwJ) 3. Initial Access Brokers, Infostealers, and Everything Between Them (https://lnkd.in/d7Hx2znF) Submit your email to get free alerts in case you ever get infected by an Infostealer!

26

5 Comments

CMMC Level 2 Assessment Objective: Flaw Remediation for Controlled Unclassified Information (CUI) Data PRACTICE: Organizations must identify, report, and correct system flaws in a timely manner. ASSESSMENT: All software and firmware have potential flaws. Organizations must identify systems that are affected by announced software and firmware flaws, including potential vulnerabilities resulting from those flaws, and report this information to designated personnel with information security responsibilities. Security-relevant updates include patches, service packs, hot fixes, and antivirus signatures. Be prepared! Your assessor could ask to 🔍 EXAMINE system and information integrity policy. 🗣 INTERVIEW system or network administrators. 📝 TEST organizational processes for identifying, reporting, and correcting system flaws. (CMMC Assessment Guide: Level 2 Version 2.11, page 241) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

59