Todd Thiemann

Pssssst-NISsssssT - are you ready for the future because it is here now? #NIST is close to making one of their most #monumental announcements in decades. #Cybersecurity is at the precipice of a global game changing moment. A critically relevant #quantum computer (#CRQC) is nearly upon us and QuSecure is the leading company that can help #protect you and your #data. Reach out to QuSecure to learn more about how you can be prepared with our QuProtect #PQC #crypto agile software today. https://lnkd.in/gpdXmmBJ.

23

Looking for a way to stay cool? Grab a popsicle and catch up on the latest issue of the AuthZ newsletter. If you’re an #identity or #authorization enthusiast, this weekly digest is a must read. Subscribe and share!

2

Are you ready for PQC? 3 of the #NIST standards are out. Check out our latest blog for practical use cases we're already implementing. #pqc #encryption #futurex

2

💡 Strategic Prioritization for PKI Maturity Enhancement Having completed our assessment, a key question emerges: How should we prioritize areas for improvement in our Public Key Infrastructure (PKI)? Effective prioritization should hinge on: 👉 Criticality: Identify and address the most critical weaknesses first. 👉 Impact: Consider potential impacts on security and operations. 👉 Resources: Align with available resources to ensure feasible implementation. 👉 Organizational Goals: Ensure that improvements align with broader organizational objectives. The PKI Maturity Model (PKI MM) framework provides structured guidance, emphasizing the prioritization of areas that carry the most weight. These are the areas that, when improved, will significantly enhance the maturity and efficacy of your PKI systems. Prioritizing effectively means not just adhering to best practices but also aligning enhancements with strategic business outcomes. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

14

1 Comment

Another Permiso Security open-source tool to help secure the community from malicious activity in Snowflake. The recent Snowflake compromises shine a light on the limitations of posture focused security solutions including CSPMs and SSPMs -- although useful, these tools are unable to detect advanced use cases of account takeover or impersonation attacks. Reach out to understand why having runtime security scanning capability in your Snowflake environment is essential. See our collection of open source tools on GitHub: https://lnkd.in/gqhHPhb7 #cybersecurity #cloudsecurity #runtime #snow #snowflake #opensource #itdr

28

2 Comments

↗ The 2024 Gartner® Market Guide for CNAPP confirms what we @ Orca Security long believed: cloud security is evolving towards comprehensive protection, seamless integration, and intelligent risk prioritization. As a recognized vendor, I believe this approach is crucial for businesses navigating today's complex cloud landscapes. It's not just about security—it's about enabling innovation while maintaining a strong security posture. Read Gil Geron 's analysis and get the full Gartner report: https://lnkd.in/d-sD_qyA

3

All attacks, nation-state or not, have the potential to impact public sector services and the citizens who rely on them. Just recently on June 3, 2024, Synnovis, a provider to the UK National Health Service (NHS), suffered a cyber attack preventing the processing of blood test results and impacting thousands of patient appointments and surgeries. In 2017, the #WannaCry attack, which spread to 150 countries across the world, disrupted the UK NHS, limiting ambulance service, patient appointments, medical tests and results, and forcing the closure of various facilities. In 2021, JBS Foods, the largest US meat processor, was breached, forcing it to cease operations at 13 of its meat processing plants, impacting the US meat supply. One month prior, Colonial Pipeline Company was hit with a ransomware cyberattack, causing a run on gas in the eastern seaboard and requiring a presidential executive order to allow gas transport via semi-trucks. In this article, Rob Greer, VP and GM of the Enterprise Security Group at Broadcom, discusses the impact of #nationstate #cyberattacks on public sector services and citizens, as well as the broader implications for trust and infrastructure. Read it today! Symantec Carbon Black #broadcom #symantec #carbonblack https://lnkd.in/eAwt6n-7

9

Incident reporting is really important at all levels. End user self reporting is crucial and often overlooked. https://lnkd.in/dgVj5hZa

5

If you care about Machine IDs 🤖 and you missed this webinar I participated in June, here is the free recording! 🎥 It was an honor to chat with Mandy Andress from Elastic, Jake Bernardes from anecdotes and Itamar Apelblat from Token Security #MachineIdentity #nhi #machineIDmanagement

19

New blog post: Improving Cybersecurity Taxonomies Describing Impact and Cyber Harms Against Organizations I’ve introduced a new MISP taxonomy and shared insights into the critical role of impact description in effective information sharing. https://lnkd.in/eUJb-svP #CyberSecurity #MISP #taxonomies #taxonomy MISP Project (@[email protected] ) CIRCL (Computer Incident Response Center Luxembourg)

36

1 Comment

The increasing relevance of data sanitization in classified data environments...

23

1 Comment

VM remains a cornerstone of preventive cybersecurity, but organizations still struggle with vulnerability overload and sophisticated threats. Tenable’s new Exposure Signals gives security teams comprehensive context, so they can shift from VM to exposure management and effectively prioritize high-risk exposures across their complex attack surface. http://ow.ly/oGFk105PbnX

3

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

189

2 Comments

Great story on how to apply Cyber Risk Management to design a more effective Cybersecurity strategies and align security budget and investments with the business.

5

3 Comments

Address both- Proactive threat exposure management and reactive detection and response with Invinsense.

9

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

Tired of Cyber Disneyland? Get the facts and find your way around #Cybersecurity #MDR at the N-able Roadshow in #Anaheim today. Hear from vendors, and join us for an incident response tabletop exercise. As pilots are fond of saying, "If it doesn’t feel right, go around. It’s better to explain why you did than have an investigator discover why you didn’t." TTXs are the best way to figure out what's right, before it goes wrong. @N-able roadshows are free--cyber incidents are costly. Register below: https://lnkd.in/g9A8dt8G

19

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5