Prateek Bhajanka

Techltalk Series: Demystifying Automated Security validation (ASV), Why do organisations require ASV? Methods of ASV, Compare ASV with traditional security validation. How can ASV help CISOs? Security Validation Checklist for CISOs. Role of (ASV) in Continuous Threat Exposure Management (CTEM), ASV Use Cases & Best Practices. In today's digital age, securing sensitive data and systems from cyber threats is critical for any organization. Automated Security Validation (ASV) plays a pivotal role in ensuring the safety and security of an organization's IT infrastructure. ASV involves a process of automatically testing and verifying the effectiveness of security measures and controls used by an organization to protect its data and systems from potential cyber-attacks. ASV tools are designed to identify vulnerabilities, misconfigurations, and other security issues in an organization's IT infrastructure. These tools can use various techniques, such as vulnerability scanning, penetration testing, and compliance checks, to evaluate an organization's security posture. By automating this process, ASV saves time and resources while enabling organizations to ensure that their security controls are always up-to-date and effective. The significance of ASV lies in its ability to identify and address potential security vulnerabilities before they can be exploited by hackers. It helps organizations maintain a proactive security posture and mitigate potential risks and threats. By regularly validating and testing their security measures, organizations can improve their overall security posture and minimize the likelihood of data breaches, cyber-attacks, and other security incidents. In conclusion, ASV is an essential aspect of modern-day security systems. It helps organizations maintain an effective and proactive security posture by automatically testing and verifying their security measures and controls. With the increasing frequency and sophistication of cyber threats, ASV has become a vital tool for organizations looking to safeguard their data and systems from potential security risks and threats. An Article by Praveen Singh, An Infographics by Netpoleon India, Techtalk Seres-An initiative by Mohan Kumar T L #ciso #cybersecurity #appsec #asv

139

10 Comments

You have been hearing about Gen-AI use-cases in Cybersecurity, Now experience it first-hand. No matter whether you are a 'Security Leader' or a 'Security Practitioner', 'CISO' or 'SOC Analyst', this is for you. Experience the ease and expertise that Purple AI brings to your SOC. This is an opportunity to solve real-life cybersecurity use-cases with the most advanced "Security Expert Gen-AI platform, Purple AI". What does Purple stand for ? Purple unites the Attacker's Mindset and Defender's Power in one single platform and interface. And yes, there is a long list of takeaways for each and everyone: - CPE Credits - Certification - Prizes to be won #FINSEC2024 #DSCI #FINSECConclave2024

28

2 Comments

RBI's stance on OTP usage and their emphasis on principle-based authentication, which is certainly shaking things up in the authentication landscape. A pertinent resource for deeper insights can be found in the article authored by Nilesh Dhande, titled " RBI says no to OTPs & releasing new guidelines on principle based authentication (https://lnkd.in/duhFZjnc)

28

🚨 Beware: Cybercrooks Can Steal Your Money Without OTP 🚨 As technology advances, so do the techniques employed by cybercriminals. We often believe that OTPs (One Time Passwords) are our safety net, but recent reports show that fraudsters can bypass this crucial security measure. In Bengaluru Rural district alone, over Rs 40 lakh has been stolen using advanced phishing techniques. Victims receive messages that appear to be from their banks, prompting them to click on malicious links. Once clicked, malware installs on their devices, enabling unauthorized transactions without an OTP. Cybercriminals are using Remote Access Trojans (RATs) and malicious Android apps (APKs) to gain full control over victims' devices. This allows them to steal login credentials, bypass two-factor authentication, and conduct unauthorized transactions. A recent case involved a 35-year-old IT employee who lost Rs 20 lakh after clicking a link that appeared to be from her bank. Once the app was installed, her device was compromised, and the fraudsters emptied her account. The only way to protect yourself is by staying vigilant: - Never click on links from unsolicited messages. - Only download apps from official app stores. - Be cautious of apps asking for extensive permissions. Banks and financial institutions must implement advanced security measures, including behavioral analytics, app verification, and enhanced authentication methods. Governments and regulatory bodies should enforce strict guidelines and conduct regular security audits to ensure the safety of banking systems. Stay informed, stay secure. Let's work together to combat these evolving cyber threats. #CyberSecurity #Phishing #BankingFraud #StaySafe #OTP

16

7 Comments

While the number of firms breached by #ransomwareattack may have gone down, the impact on victims has grown more severe, with heightened ransom demands and higher recovery costs. Need to: Develop an #incidentresponseplan outlining the steps to be taken in the event of a security breach. Conduct drills regularly to practice the steps taken by stakeholders as per #cybercrisismanagement plan (CCMP), create and customize #playbooks to respond to different types of #cyberattacks #cybersecurity #tabletop exercise #informationsecurity #itsecurity #networksecurity #bcp #ciso #cro #cto #ceo #cofounder #enterpriserisk

6

1 Comment

⚠ ISO 42001 AIMS - Mind the Gap⚠ Conducting an Artificial Intelligence Management System (AIMS) gap assessment is a critical preparatory step for organizations considering ISO 42001 certification. This process will help you, as a compliance executive, understand where your current AI practices stand relative to the requirements of ISO 42001, and it provides a clear pathway to aligning your AI governance with international standards, like the EU AI Act. Importance of AIMS Gap Assessment: ✅ 1. Compliance Assurance: An AIMS gap assessment aids in ensuring that AI systems are compliant with international standards, helping to avoid legal and ethical blind spots. ✅2. Risk Management: It identifies areas where AI-related risks are not adequately managed, allowing your organization to implement more effective controls. ✅3. Strategic Alignment: Ensures that your AI initiatives align with your organization’s strategic objectives, enhancing overall effectiveness and value creation. Practical Steps for Conducting an AIMS Gap Assessment: ✅1. Define the Scope and Objectives: Establish what parts of the organization and which AI systems will be included in the assessment. Objectives should be clear, measurable, and aligned with the broader goals of your organization. ✅2. Identify Key Information Sources: Gather information from internal documents, AI system logs, and interviews with stakeholders involved in AI processes. ✅3. Conduct SWOT and PEST Analyses: These tools help understand internal strengths and weaknesses, as well as external opportunities and threats affecting AI initiatives. ✅4. Review Current AI Practices: Assess current AI practices against ISO 42001 requirements, focusing on areas such as data privacy, AI system security, and ethical/responsible AI usage. ✅5. Identify Gaps: Compare current practices to the standards and identify where your gaps exist. This includes looking at risk management processes, policy adherence, and compliance with legal and ethical standards. ✅6. Develop an Action Plan: Create a detailed plan to address identified gaps, assigning responsibilities and setting timelines for compliance remediation activities. Prioritization in the Gap Assessment Process: ⚠ High-Risk Areas: Prioritize areas that pose the highest risk to compliance, operational integrity, or organizational reputation.  ⚖ Legal and Regulatory Compliance: Focus on aspects of AI management that are directly tied to legal and regulatory requirements to avoid penalties or legal challenges. ⛔ Business Critical Systems: Give priority to AI systems that are critical to business operations or have significant impact on strategic outcomes. As you modify this checklist to meet the needs of your organization, please do not hesitate to reach out if you have any questions! A-LIGN #iso42001 #TheBusinessofCompliance #ComplianceAlignedtoYou

28

3 Comments

Some useful tips for security leaders to counter this. 1. Increase Threat Monitoring and Analysis : Analyze recent network activity for suspicious behavior and indicators of compromise (IOCs) associated with the attack type mentioned in the RBI warning. 2. Review and Update Security Protocols: Conduct an immediate review of your existing cybersecurity policies and procedures. 3. Simulate a Cyberattack Drill: Consider conducting a tabletop exercise or simulation drill to test your incident response plan and team's preparedness in case of a real attack. 4. Patching and Vulnerability Management: Double-check that all systems and software are fully patched with the latest security updates to address known vulnerabilities. 5. Data Backups and Disaster Recovery: Test your backups regularly to ensure they are functioning correctly. https://lnkd.in/gh3EiyVG

16

We carved a niche in the Cyber Risk Quantification (CRQ) market, rising to become the category leader with a platform that is not just 10%, but 10 times superior to our nearest competitor. Now, we're ready to apply the same playbook to the Third Party Risk Management (TPRM) space. We will bring a fundamental transformation in measuring and managing third-party risks, integrating it seamlessly with first-party risk management on our Safe Platform. We call it Cyber Risk Singularity :)

56

4 Comments

The below is a collimation of 12 months of valued work between LastPass and Data Security Council of India to improve the data security of people interacting with services online. I'm a big believe in public / private partnerships, as a way to help improve cyber security online for all users. In Partnership with DSCI we produced an in-depth report into The Future of Authentication Paradigms: Evolving Role of the Password Managers. We reviewed the current state of the Identity Access Management Market in safeguarding against cyber risks. The challenges of traditional password-based systems and advocating for the inevitable shift towards passwordless authentication, with a focus on FIDO standards and passkeys. Self-Sovereign Identity (SSI) and the rise of government digital ID frameworks and the synergy of zero trust principles with passwordless authentication for enhanced security. Really proud of the work that the team at APJ spearheaded with DSCI. If you would like a copy of the report it's FREE to download in the comments below.

20

1 Comment

Register today for an insightful session & learn the art of defending against zero-day vulnerabilities from industry expert & dear friend Sunil Sharma

16

1 Comment

The recent #breach impacting BSNL LTD is an eye opener for Critical Information Infrastructure providers? The key question remains: How ready is India's #CriticalInformationInfrastructure Organizations to handle cyber attacks, particularly #Ransomware #AdvancedPersistentThreats? Is the onus only on #CISO ? Or do the board #CEO #CFO #CDO #CRO also needs to take cognizance of Cyber Security ? Here is report by The Times Of India where Athenian Tech Limited research was quoted . Lets talks about how we can help your business stay safe from #DataBreaches #Ransomware #AdvancedPersistentThreats Early Detection is the Key! If you think Cyber Security could impact your organization continuity talk to us Athenian Tech Limited Sanjeev Relia Santosh Gupta #CyberSecurity #DataProtection #AI #MachineLearning #TechInnovation #DigitalSafety #AthenianTech #Infosec #CyberThreats #AIinCyber #ProtectYourData #CyberAwareness #BSNL #TechNews

13

Just came across a new fraud MO Where in Fraudsters are targeting working professionals through social engineering tactics aimed at installing malware on your systems. I received a call from an unfamiliar number. The caller, a woman, initiated the conversation. Caller: Hello, may I speak with Mr. Chetan? Me: Yes, please tell me. Caller: You are working as of Director of Product Management, correct? Me: Yes, that's correct. can you please tell me what is this call about? Caller: I'm calling from Technology Solutions. Me: okay. Caller: There's a recent report released by VISA regarding QR and Mobile Wallets. It's recommended reading for leaders like yourself. Understanding your busy schedule, I can email it to you for offline reading. Me: Internally questioning the motive behind the request to review a report published by VISA Caller: May I have your official email ID, please? Me: lightbulb moment-- Opps this is a Scam Me: I'm sorry, I'm not interested. Disconnects the call. Be Alert and Be Safe. Never click or open any attachments from emails an unknown sender. Report the email as SPAM. #frauddetection #fraudprevention #payments #banking #rbi #fraud #financialcrime #financialinstitutions #bank #productmanagement #scam #upi #npci #phishing #safety #scam #fintech #legal #socialengineering #cybercrime #india #goi #telecoms #sms #whatsapp #website #sms #truecaller

20

1 Comment

There are few CRQ models which would give you 4 different results on 4 different people running it in the same organisation. And then there is https://lnkd.in/dMh4i-7Z #crq #innovation #cybersecurity #infosec #decision_making

8

1 Comment

Flat 10% OFF on Security BSides Mumbai - share YOUR story in comments. I understand that you may be a little skeptical about spending money for a conference but here’s the value proposition- Adhokshaj will talk about deception in red teaming. While he doesn’t need much introduction, I’ll still mention how amazing of a security researcher he is. I’m super excited for his talk. Some people have this misconception - “I use an Apple product so I’m safe”. But are you really? Farhad & Palak will dive deep into some injection techniques. But wait there’s more…. talks and workshops related to both red and blue teaming, including one on forensics. It’ll be about building forensics tools from scratch. I’d say, prices are fair. But fear not, they can be better. I have 2 coupons for 10% off on tickets. Please comment down below if you do need one coupon and the reason for it. If there are more than two comments, I’ll try to be as fair as possible and share the coupons with people who need them the most.

8

Your IaaS, PaaS, SaaS, CI-CD, IdPs, CSPM, CASB, EDR, SIEM that you deployed have fragmented your threat detection, response, and containment completeness. These silos compromise your cloud security posture, impeding the swift identification and mitigation of threats but also affecting the completeness of response and containment. This leaves potential threats unaddressed and opens up the risk of future incidents. You need to unify your cloud environments and security controls to have an effective cloud threat strategy that can monitor your human and machine identities, detect access and event anomalies, apply TTPs to identify real threats, streamline security operations and incident response, and ensure 100% containment completeness. DM me if you would like to learn about Permiso's approach that drives MTTD and MTTR from hours/ days/ weeks to minutes, containment completeness from partial to 100%, and alert volume reduction of 500 to 1 Check it out here -> https://lnkd.in/gC4DUJ9j

21

Investigation Scenario 🔎 You’ve received an alert that a user account on a workstation attempted to access a hidden honey drive mapped to their system. What do you look for to investigate whether an incident occurred? #InvestigationPath #DFIR #SOC A honey drive is a form of intrusion detection honeypot (IDH). It’s a drive mapping that is not visible in Windows Explorer and has no functional purpose other than as a security alarm. I describe the technique in my book, Intrusion Detection Honeypots (image source).

91

4 Comments

Catching attackers with honeypots is all about See-Think-Do 🍯 If you control what an attacker sees, you can control what they think, and then you can control what they do. For this investigation...someone has interacted with a network drive that is not visible in the GUI. You probably already have a sense of what sorts of users this would make sense for. You might expect an IT user to find a hidden drive on the command line, but probably not a customer service rep. With this detection mechanism, the greatest chance of false positives is a user stumbling across the drive. Contacting the user account owner is a great place to start so that you can rule this possibility out or close the case if they are responsible. If it was not the legit user, things get interesting. That would mean someone has access to the user’s account. Now, you’ll be concerned about their actions using the account or how they got access to it. Since you know how the attacker likely accessed the hidden drive, that limits the scope of where you start your investigation. You’ll focus less on GUI-based artifacts or those that only prove actions taken from the graphical interface. This scenario doesn’t mean the attacker didn’t also achieve desktop access. But, there’s no sign of that yet, so you can focus on what you know and expand your scope later if needed. We need to take those opportunities when they arise. When you have a compromised account, every action during the period near a questionable event becomes worth inspection. Process executions, network connections, system configuration changes, and so on. That's no different with this IDH alert spawned investigation. Some folks were intimidated by this scenario because it’s uncommon. After all, these IDH mechanisms are effective partly because of low false positive rates. The investigation process is perhaps easier in some ways because you have a better sense of the attacker’s access level. The attacker sees a mapped drive. They'll think it might have information that could help them reach their goals. So, they'll do something by interacting with it. That gets logged and alerts us. We can use everything about that interaction to shape our investigation. Speaking of limiting the scope of your investigations... what other artifacts could you discover that might help you limit the scope of data you have to wade through? That’s something to think about… 🚀 #InvestigationPath #DFIR #SOC

44

3 Comments

Responsibility carries significant weight, especially in the realm of cybersecurity, where our mission is to safeguard, defend, and thwart malicious activities. Amidst the myriad of solutions, tools, and analytics available, it is easy to lose sight of this fundamental objective: Protect, Defend, Defeat. At BforeAI, our unwavering focus is on achieving zero casualties by proactively preventing attacks before they materialize. If you oversee areas such as phishing/malware attacks, customer protection, fraud prevention, or loss mitigation, engaging with BforeAI is crucial to avoid incurring losses from the outset. Opting not to collaborate with us is akin to endorsing financial losses to cybercriminals, perpetuating the status quo that has persisted for years. Consider this a friendly warning: there's a cliff ahead; please proceed with caution. If you are tired of following the same losing trajectory and are ready to break free from this cycle of defeat, it's time to connect with BforeAI. Let's shift the narrative to one of victory, cease the cycle of losses, and ensure comprehensive protection for your users. Interested in initiating this transformative conversation? Meet us at Gartner & InfoSec events all week (June 3rd-5th) and let's put an end to this cycle today! #BforeAI #Predictive #Preemtive #Luigisright

13

𝐌𝐅𝐀: 𝐘𝐨𝐮𝐫 𝐬𝐡𝐢𝐞𝐥𝐝 𝐚𝐠𝐚𝐢𝐧𝐬𝐭 𝐮𝐧𝐚𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐞𝐝 𝐚𝐜𝐜𝐞𝐬𝐬. Enhance your security with 2-step verification. Multi-Factor Authentication (MFA) is a critical layer of security that can prevent unauthorized access even if passwords are compromised. Passwords alone are no longer sufficient to protect sensitive data. 𝐈𝐦𝐩𝐥𝐞𝐦𝐞𝐧𝐭𝐢𝐧𝐠 𝐌𝐅𝐀 𝐢𝐧𝐯𝐨𝐥𝐯𝐞𝐬: ➡ 𝐒𝐞𝐭𝐭𝐢𝐧𝐠 𝐔𝐩 𝐌𝐅𝐀: Enable MFA on all accounts, especially those accessing sensitive or critical systems. ➡ 𝐂𝐡𝐨𝐨𝐬𝐢𝐧𝐠 𝐌𝐞𝐭𝐡𝐨𝐝𝐬: Use phishing resistant options such as number matching or consider hardware tokens for an additional layer of verification. 𝐀𝐝𝐝𝐢𝐧𝐠 𝐌𝐅𝐀 𝐢𝐬 𝐚 𝐬𝐭𝐫𝐚𝐢𝐠𝐡𝐭𝐟𝐨𝐫𝐰𝐚𝐫𝐝 𝐲𝐞𝐭 𝐩𝐨𝐰𝐞𝐫𝐟𝐮𝐥 𝐬𝐭𝐞𝐩 𝐭𝐨 𝗯𝗼𝗼𝘀𝘁 𝐲𝐨𝐮𝐫 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐝𝐞𝐟𝐞𝐧𝐬𝐞𝐬. 𝗟𝗲𝗮𝗿𝗻 𝗺𝗼𝗿𝗲 𝗮𝗻𝗱 𝘁𝗮𝗸𝗲 𝗮𝗰𝘁𝗶𝗼𝗻: ✔️Check out our podcast to learn more about securing credentials - https://lnkd.in/expzNevx ✔️Download our "𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗜𝗻𝗶𝘁𝗶𝗮𝘁𝗶𝘃𝗲𝘀: 𝗬𝗼𝘂𝗿 𝗕𝗹𝘂𝗲𝗽𝗿𝗶𝗻𝘁 𝘁𝗼 𝗗𝗲𝗳𝗲𝗻𝘀𝗲-𝗜𝗻-𝗗𝗲𝗽𝘁𝗵" guide and enhance your security posture today - https://lnkd.in/ePpG6mXA --- 🛡 I'm a blue team leader and proudly work for SecurIT360, an MSSP focused on cyber protection at every level. Follow, connect and make it tough for the bad guys to succeed.

8