Great article! I feel like you cannot have the network and environment segmentation pillar implemented well without a good amount of user and device pillar implemented. You need the role based access controls and device health posture to assist with the policy decisions on the segmentation.
Cyber Security Consultant @ Marsh McLennan Agency | Doctor of Computer Science | Keynote Speaker | Ethical Hacker | Air Force Veteran
About time…. Dr. Chase Cunningham John Kindervag
Exciting highlights on cybersecurity from the Silverado Policy Accelerator’s "World on the Brink" Summit! 🌍 Jen Easterly, Director of CISA, joined forces with Dmitri Alperovitch to delve into the pivotal realm of cybersecurity, shaping a more secure digital landscape. Easterly emphasized, "Cyber resilience is operational resilience, it’s really societal resilience at the end of the day." This insight underscores the interconnectedness of security across all sectors. Additionally, she stressed the imperative of prioritizing security in technology development: "If the technology was secure– built secure, tested, built, deployed, to be secure, so not speed to market, not features, but with security first, that is the only way that we can catalyze a sustainable approach to cybersecurity." Dive deeper into this conversation by watching the full video here: https://lnkd.in/e88x7PNB #SilveradoPolicyAccelerator #WorldontheBrink #Cybersecurity
Great fireside chat with our founder, Ron Pelletier sharing his life story and genesis and growth of Pondurance. From serving as an officer in the US Army where his career in cybersecurity started with disaster recovery, then going on to help EY's global Cybersecurity efforts, Ron founded Pondurance in 2008 - A cybersecurity firm, meaning that's all we do, not managing IT or infrastructure, we provide a few specific buckets of cybersecurity services - Managed Detection and Response (MDR) (24/7 Monitoring) with an emphasis on the Response piece, being able to take proactive action and quickly respond with a dedicated, best in breed, Incident Response Team. Then there's our cyber advisory services, meaning we can come in and do consultative work - help orgs get off the ground with their cybersecurity program, help optimize their investments, and also help established orgs evaluate their cybersecurity posture against regulatory compliance frameworks like HIPPA, NIST, and PCI Ron's early success and the growth of Pondurance can be attributed to a few key points he highlights throughout the 20 minute youtube video with FocalPoint Advisory Services - Get out of the way, listen to clients, push yourself, put ego aside and solve real cybersecurity issues. 🛡 Reply
A Cortado With Ron Pelletier: Former Army officer and a truly engaging individual! His mission is to ensure that every organization is able to detect and respond to cyber threats – regardless of size, industry or current in-house capabilities. He believes AI and automation alone aren’t enough, you need ingenious human experience because attackers aren’t machines, they are people. Pondurance combines an advanced platform with decades of human intelligence to speed detection and response and contain cybersecurity threats quickly to ultimately decrease risk to your mission. https://lnkd.in/gnWRBCwp
What role does the Summit on Security & Third-Party Risk play in broadening awareness of emerging threats? Listen to the thoughts of Jonathan Dambrot, CEO of Cranium: https://lnkd.in/eckZya97 Learn more about the summit at GRF .org #ai #thirdpartyrisk #cybersecurity
Reminder: Tomorrow (Tue, May 21) at Dixie Terminal in Cincinnati, I will present an updated talk on AI and cybersecurity. This presentation is different from the one I gave last month at CINPA. I will cover the relevance of recent attacks on MGM, Ascension, and Microsoft to Intelligent System pipelines. The briefing will include information on threat actors, TTPs, countermeasures, and considerations for enterprises adopting an "AI First" strategy. If you haven't already, sign up for your Tri-State ISC2 membership.
Covered in TechCrunch, Zenity CTO Michael Bargury attended Black Hat and demonstrated Zenity's new innovative prompt injection technique to extract sensitive information from a leading AI-powered chatbot companion. Michael shared insights on the potential risks of the vulnerability, including how it could be exploited for financial scams. Read the full article by Zack Whittaker below. #BlackHat #chatbot #AI
As another round of Black Hat and Def Con conferences wrap up, we look back at some of the highlights and the best in research from the show that you might’ve missed.
Copilots and GenAi are very exciting! Soon we will have them all over our enterprise environments and a casual part of getting work done … and before we dive into the deep end, we need some cyber security! Tools like Zenity can help keep up the pace of innovation while securing our no code copilots developments. Ping Justin VITA , Andrew Silberman or myself to learn more about Zenity
As another round of Black Hat and Def Con conferences wrap up, we look back at some of the highlights and the best in research from the show that you might’ve missed.
Road cones (including warning signs and temporary speed limits) serve a purpose- to help protect workers, pedestrians and motorists from road works. No “cones”, more harm and damage. Sometimes they’re overused but that should be sorted by the risk-based approach developed by the industry over the last few years.
WorkSafe New Zealand Chair in Health and Safety at Te Herenga Waka - Victoria University of Wellington
If you missed it, Chris Peace talking Road Cones on The Panel on RNZ yesterday evening at 19 minutes. https://lnkd.in/g_XtKsSZ
Mass Ambassador Project Supervisor for Gambling Prevention. Co-founder of AstutoTechnologies.com and FacturaSimple.com, specializing in Web, IoT cloud software, CRM, and electronic invoicing.
Stolen Domain? https://lnkd.in/dJgKq5nZ I am aware of personal cyber protection. Could you monitor your domain and email? We have to own them. I am concerned about a stolen domain. Can you monitor your domain and email for security? It's important that we have ownership. Subject: Concern About Stolen Domain Hi there, I want to make sure we're taking steps to protect our online assets. Could you please keep an eye on our domain and email to ensure their security? It's crucial that we have full ownership of them. Thanks!
Here to tell us more about what D.U.P.E.D. means and why you should put it into practice is Robert Herjavec, Shark Tank star and founder of the Herjavec Group. Cybersecurity for Government Leaders was an initiative driven by NCC, supported by Google, to train all 50 state legislatures on cybersecurity best practices. This program aimed to educate state lawmakers and staff on ways to strengthen defenses against digital attacks. https://hubs.la/Q02YqJct0
ICS Security Catalyst, Founder of S4 Events, Consultant, Speaker, Podcaster, Get my newsletter friday.dale-peterson.com/signup
Tommy Gardner has been teaching a one-semster course on cyber ethics at Catholic University. Here you get the 30-minute cram course. As the technology in the cyber field advances at a rapid pace how is the progression of our collective ethical standards keeping up? What are the questions in the field that we need to deal with? What is the framework we use to determine the answers? Tommy's session provokes self inspection and thought on where you and your company or agency stands on the issue. #s4xevents