Richard Blackham

I have the pleasure of presenting at COSAC again this year. If you are a Security Architect and don't know about COSAC you should. It is a residential Security Architecture focused conference that draws experienced architects from around the globe. cosac.net - Take a look. Absolutely no selling allowed so the chat is all about issues of the time. I am delivering 2 sessions. Session 1 - Contextual Trust: Trust in the untrustable world of Connected and Autonomous Vehicles   The Connected and Autonomous Vehicle (CAV) sector is rapidly evolving, presenting unparalleled opportunities for integration and third-party data utilisation. This evolution, however, introduces significant challenges, particularly regarding the integrity and reliability of vehicle-generated data. The stakes are high: compromised data could lead to accidents, traffic disruptions, hinder emergency services, and more. This session delves into the technologies underpinning CAVs, upcoming enhancements, potential threats, and necessary controls. It will explore the intricate web of supply chain relationships, the data exchanged between stakeholders, and how these factors contribute to the sector's security posture. A central theme of this presentation is the concept of "contextual trust" – a framework for assessing and ensuring the integrity of data in environments which could be considered untrustable. By leveraging contextual data points and blockchain technology, we can construct a more robust, trust-based model that safeguards against data spoofing, unreliability, and unavailability. This approach not only enhances the security of CAV operations but also underpins the development of safer, more reliable autonomous transportation systems. Session 2 - Building Cloud Architectures Top-Down: Aligning with Business Motivations   While major cloud providers offer comprehensive reference architectures for implementing functional technical structures such as landing zones, these models often lack direct alignment with core business motivations. This misalignment frequently results in architectures developed from the bottom up, focusing on technical specifications rather than strategic business outcomes. Such an approach can meet technical requirements precisely yet fail to deliver on security and operational efficiency due to poorly defined service management and the absence of an effective operating model. This session proposes a different approach using a top-down, business-driven approach to cloud architecture. It will outline a method for using business motivations and objectives to drive cloud strategy and design, ensuring that the technical deployment of cloud environments inherently supports and enhances business goals. I am so looking forward to attending again after missing it last year. Reach out if either of these topics interest you.

27

Microsoft, Privacy and Security... The next keylogger (?) What do you think about it? Will you use it? This is #&-$_#! " For those who aren’t aware, Microsoft have decided to bake essentially an infostealer into base Windows OS and enable by default. From the Microsoft FAQ: “Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers." Info is stored locally - but rather than something like Redline stealing your local browser password vault, now they can just steal the last 3 months of everything you’ve typed and viewed in one database." https://lnkd.in/gEWEqWx9

45

7 Kommentare

Tuesdays' reading - The New CISO: Rethinking the Role Nowadays, a CISO's focus is not only on the technical aspects but also on the business perspective. It's about understanding the business priorities to mitigate risks to an acceptable level. What is the next stage? 🔹 Learn how to talk to the board – become a skilled negotiator. 🔹 Get comfortable with the gray areas – you can't protect everything. 🔹 Emphasize the fundamentals – focus on key security controls and practices. 🔹 Be thoughtful about technology – invest in automation to help process the increasing volume of data. 🔹 Document everything – keep detailed records as support. #CISO #Cybersecurity #RiskManagement #BusinessStrategy #SecurityLeadership #BoardCommunication #CyberRisk #SecurityAutomation #DataProtection https://lnkd.in/gx_w9BpX

26

2 Kommentare

#ProjectOverwatch 28th Edition is out! Discover the critical steps to implement AI Red Teaming in your organization, a process that not only safeguards against harmful outputs but also builds trust for your users and stakeholders. I'll also be touching based on the CrowdStrike incident, the odd story of a North Korean IT worker that tried (and failed) to penetrate KnowBe4, a great CISO report from Bugcrowd and last but not least a mention of the latest project from the Center for Threat-Informed Defense that cover Threat Modelling with the MITRE ATT&CK framework. The Project Overwatch community is growing. However there is still a majority of readers that don't subscribe. If the cybersecurity and AI content has helped you, subscribing would mean the world to me! The larger our community, the more we can share knowledge and experience to better manage cyber risks and adopt AI in a safe way. #cybersecurity #AI #AIRedTeam #newsletter #subscribe https://lnkd.in/dgTfNz9d

13

1 Kommentar

As a cybersecurity professional, I'm increasingly concerned by the number of SaaS products that do not mandate MFA as a standard security measure. Alarmingly, some even charge a premium for this essential protection. The recent Snowflake data breach serves as a stark reminder to both SaaS providers and users: MFA should not be optional but a fundamental obligation. https://lnkd.in/g9_dpn4j What are your thoughts on making MFA mandatory across all SaaS platforms? #cybersecurity #securitycontrols #mfa #snowflake #databreach

42

5 Kommentare

Sharing my thoughts why I believe daring to move is critical for driving transformation within cybersecurity.

56

2 Kommentare

Delighted to discuss with my colleagues & Evanta about the budget allocated to Cyber security. A governance exercise that is becoming more complex in a tense economic context while the cyber threat continues to grow. How to arbitrate between subjects for the best possible impact? Come take part in this exchange with us! #cyber #Finance #gouvernance

27

The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today demonstrated its commitment to improving its best-in-class, vendor-neutral cloud security training with the release of the Certificate of Cloud Security Knowledge (CCSK) v5, furnishing cloud stakeholders with the skills they need to optimize the protection of critical assets in the cloud and increase their value to their employers and the market. Offering substantial updates to CCSK v4, the latest iteration provides a detailed understanding of modern cloud components and state-of-the-art security best practices. The release of CCSK v5 coincides with the publication of Security Guidance for Critical Areas of Focus in Cloud Computing v5, which serves as the primary source for the body of knowledge of the CCSK v5, and is the most comprehensive body of knowledge for modern cybersecurity professionals looking to demonstrate a mastery of essential and up-to-date cloud security knowledge. “Evolving cloud environments are mission-critical to organizations, making up-to-date knowledge of the principles and practices needed to secure a company’s cloud applications and data essential. In addition to covering the skills needed to protect critical assets in the cloud, CCSK v5 offers substantial coverage of GenAI safety and a Zero Trust approach to security, cementing it as the new mark of the modern cybersecurity professional,” said Jim Reavis, CEO and co-founder, Cloud Security Alliance. The updated CCSK includes the latest in cloud architecture, cloud native security, workloads, virtual networking, data protection, DevSecOps, Zero Trust, Generative AI, and additional rapidly emerging technologies, along with vital information about managing risks, achieving compliance, optimizing organizational cloud security strategies, and understanding the shared responsibility between the cloud provider and cloud user. The CCSK v5 program also includes the groundbreaking CCSK Orb, a unique generative AI tool to help users master the body of knowledge and provide ongoing assistance in daily challenges.  #cloud #security #certificate #knowledge #training

No risk model is immune to GIGO (Garbage In Garbage Out). As I read, Gartner predicts by 2025, 50% of cyber risk quantification projects will fail to influence business decisions. Security analyses should focus on what decision makers ask for. Mrinal K Pal Vishal Agrawal #ERM #cyberrisk #riskquantification

8

Just so that you know: 1. This is how risk acceptance looks like if the shit hits the fan! 2. This has nothing to do with “security”! 3. It HAS to do -A LOT- with extremely bad IT, respectively software quality! 4. Proper testing obviously didn’t take place! 5. Business Resilience Engineering still has a lot of catch-up to do. 6. It is HIGH time that software companies finally will get held responsible for their screw ups. At least those incredibly, monstrously stupid ones!

12

4 Kommentare

Once the initial phase is over, 2nd round will begin…call it intuition…This 2nd round will involve #phishing attacks & #socialengineering attacks involving phone calls impersonating your company’s tech support. Everyone should be aware of this and educate end users. —EDITED— It took few hours but it has started… it’s too much of a great opportunity for bad actors to miss. https://lnkd.in/eFEDANPE #crowdstrike #phishingattacks #socialengineeringattacks #incidentresponse

5

1 Kommentar

Semperis Launches Delegation Manager to Reduce Risky Identity System Account Permissions Frequently Exploited by Cyberattackers... https://lnkd.in/etmsarSJ Semperis Delegation Manager helps IT teams easily enforce a security-first identity system delegation model to reduce over-privileged accounts and excessive access rights, accelerate remediation of risky access rights, and improve agility in responding to user access needs #cyber #cybersecurity

17

The Future of #Cybersecurity: #AI and #HumanFactor Technology becomes more affordable, and also more vulnerable. Cybersecurity expertise plays a key role to support trust, business growth and protect the Human-Machine Teaming. 👉 https://lnkd.in/eRq8RmiW #ArtificialIntelligence #Innovation #CISO #CSuite #IA #Technology #Digital #Industry

78

4 Kommentare

In today's world of constant increase of cyber threats, building capability of your SOC and SecOps teams is crucial. Please join me on June 3rd, at the Swiss Microsoft Office at The Circle in Zürich, to gain insights into state-of-the-art CyberSecurity Operations with Microsoft Sentinel and Copilot for Security through this exclusive partner event: https://lnkd.in/daA56cua #SecOps #MicrosoftSentinel #CopilotForSecurity #SOC Daniel von Büren Ibraimo Djalo Ralf G. Manuel Michaud Jochen Nickel

33

Every organization needs to have security measures and policies in place to safeguard its data. One of the best and most important measures you can take to protect your data (and that of your customers) is simply to have a robust information security policy. #information #security #policy

4

1 Kommentar

✅ This indeed is huge and wonderful news to help disentangle or improve the headache of #CPE accuracy. We will see how quickly it can be adopted within the most common cybersecurity services. #cybersecurity #cve #cpe #cna #vulnerability #threats

5

In the age of speed... This is a really good article addressing the issues that arise when speed is supreme. https://lnkd.in/ei9nWVae

7

1 Kommentar