James Wooden

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/gzD-jysX #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

5

Who's coming to #AFCEATechNet Cyber in Baltimore? Join us and be a part of the conversation led by U.S. Cyber Command, DISA, the DoD CIO, and numerous industry and academia partners to deliver solutions for this enduring, no-fail mission. Be sure to visit us at Booth #3172 to learn how Zimperium’s Deep Scan capability provides comprehensive FORENSIC ANALYSIS directly on iOS and Android devices, enabling government agencies to gain unparalleled visibility into DEVICE FORENSICS. #WeSecureMobile #mobilethreatdefense #mobilesecurity #mobileAppSecurity #cybersecurity #zerotrustsecurity #mobilethreats #zerodaysecurity #MobileFirstSecurity AFCEA International

8

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/eyXCTEe9 #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

2

Still time to register for our webinar TODAY at 2pm ET! Join Ben Hartwick and Lee Trotter for a mid-year #ransomware threat update and to learn more about pre-ransomware TTPs and best practices for containment and forensics. Register at https://bit.ly/3V671ke #cybersecurity #ir #incidentresponse #dfir

4

Turbocharge your Incident Response readiness with Natsar's Cybersecurity Program Bundle. 17 docs, NIST-based plan, policy, templates. Save 10% when bundled. #IncidentResponse #CyberSecurity https://zurl.co/F3qD

2

A security awareness program can help users understand how they are a critical line of defense against threat actors and breach attempts. Learn more in our latest blog: https://ow.ly/ylb950TJWmn #EndCyberRisk #CybersecurityAwarenessMonth

3

CISA gives the first-year results of its pilot program to scan and notify organizations in the U.S. federal government, state, local, tribal, territorial governments, and critical infrastructure entities about ransomware vulnerabilities they detect. Check out how well it worked here: https://hubs.la/Q02zTKf30 #CISA #CyberSecurity #Infrastructure #Ransomware

15

The last installment in the series on the 5 steps of CTEM. If setting up a comprehensive CTEM program is in your sights, don't miss this deep dive into how to proactively remediate threat exposures. Check it out now 👇🏻 https://lnkd.in/eUk3Wd_i

6

The last installment in the series on the 5 steps of CTEM. If setting up a comprehensive CTEM program is in your sights, don't miss this deep dive into how to proactively remediate threat exposures. Check it out now 👇🏻 https://lnkd.in/eUk3Wd_i

4

This blog reviews DarkOwl team highlights from the Intelligence and National Security Summit hosted by INSA and AFCEA > https://hubs.li/Q02PKyBs0 #IntelSummit24

17

Tune in this Thursday as SentinelOne sets the stage for AFCEA International's TechNet Cyber next week in Baltimore. Join us to explore the significance of machine learning in defense strategies and the crucial balance leaders must strike between AI's speed and accuracy advantages and the essential human touch. #NationalDefense #AI #SentinelOne #TechNetCyber

2

ICYMI: The latest report from the Secureworks Counter Threat Unit research team highlights key observations from Incidence Response engagements in Q1 2024. Check it out to understand threat actor behaviors, enhance your organization's best practices, make informed risk management decisions, and prioritize resources effectively: https://lnkd.in/g9Ufuyce #Cybersecurity #Ransomware #IncidentResponse #ThreatIntelligence

1

Senior Director, Threat Operations Tim R. (T.J. Ramsey) has some firsthand experience and fresh perspectives on how to maximize the effectiveness of tabletop exercises. Watch and listen here: https://hubs.ly/Q02tPKgX0 In this video, T.J. covers optimizing tabletop exercises to provide a simulated environment to test and refine response strategies, uncover weaknesses, and enhance team coordination without the real-world consequences of an actual breach. #CyberBreach #CyberResponse

22

1 Comment

🌟 Webinar Alert: On 6/17 at 2 PM ET, join experts Abnormal Security's Mike B. & Code42's Dennis Dayman for a valuable discussion on "Inside the Data Leak Dilemma." Learn strategies to stop breaches and foster a security-conscious culture. Register here 👉 https://ter.li/636l2n #DataSecurity #CyberSecurity #InsiderThreat #Webinar #DataProtection #Infosec

1

🚨New Blog Alert! Vulnerabilities in KnowBe4 Applications: RCE and LPE Exposures. Our own Ceri Coburn uncovered serious vulnerabilities in three KnowBe4 applications—Phish Alert Button, PasswordIQ, and Second Chance. These vulnerabilities include remote command execution (RCE) and local privilege escalation (LPE), posing significant security risks, especially in public Wi-Fi environments like coffee shops. Despite KnowBe4's initial downplay, persistent communication with their team and escalation to KnowBe4's CEO led to the acceleration of a fix. However, challenges persisted as initial patches were ineffective, leaving users exposed and highlighting the importance of proper vulnerability management and response. Read our full analysis and learn how to help protect your systems from these threats: ➡ https://lnkd.in/esnNAsKS Key Findings: RCE via DNS spoofing: CVE-2024-29209 (CVSS: 8.3) LPE via configuration file: CVE-2024-29210 (CVSS: 7.8) Potential DLL hijack vulnerability: Awaiting CVE #CyberSecurity #VulnerabilityDisclosure #KnowBe4 #RCE #LPE #SecurityAlert #CyberThreats #Infosec #TechNews #VulnerabilityManagement #DataSecurity #EthicalHacking #SecurityPatch #CVEs #PublicWiFiSecurity

39

3 Comments

Zero-day threats like CVE-2024-38213 are evolving. Discover how CimTrak's integrity monitoring can help you detect and defend against these elusive vulnerabilities. Read more to stay informed and prepared. 🔒⬇️ https://hubs.la/Q02NQ0zY0 #zerodayattack #CVE2024 #cybersecurity

7

Last Call, don’t miss out on the 3rd installment of our threat modeling series. 📞👀 This episode focuses on driving adoption and getting that all-important buy-in across your organization. Register here for tomorrow's event: https://hubs.li/Q02N9sX70 #threatmodelingseries #threatmodel

3

"When CIOs and CFOs align, that's when businesses thrive."   That's the message from Martin Greenfield in his latest piece for Cyber Defense Magazine, highlighting the need to shift perceptions away from cyber security being a cost burden for finance teams to becoming a strategic enabler for the business as a whole.    There is strength in collaboration - by working together and making decisions based on real-time data, companies can work towards their overall strategic objectives.    Read the full piece here: https://lnkd.in/eFMZbEyF   #Cybersecurity #Finance #Collaboration #RealTimeData 

3