Mohamed Atta

In 2021, #Trustline orchestrated an educational session that brought together 40 prominent security leaders from various sectors in Saudi Arabia, including government and banking. Following this event, Trustline embarked its journey. The insight gleaned from this session revealed that CISOs and security leaders face numerous challenges, including the skills gap, technical debt, and limited resources due to a challenging economic climate. This responsibility of safeguarding organizations is far from easy, leading to burnout among 74% of CISOs in the past year. To understand how security teams can thrive in such circumstances, we engaged in discussions with industry-diverse CISOs and security leaders. Through these conversations, we identified essential strategies. A recurring theme in our discussions was the utilization of ethical hackers by security leaders to address strains and challenges in their security programs. This collaboration with the #hacker community offers cost reduction and validation of security controls as key benefits. Trustline stands as the pioneering crowdsourced security platform in the region. Leveraging a community of hackers, it enables the testing and fortification of networks and applications utilizing cutting-edge strategies and techniques.

٤

We are delighted to share the success of our recent event spent in Muscat with our valued partners. Together, we dived into how SentinelOne can empower them to enhance cybersecurity for their customers. A special thanks to our amazing partners for their support and collaboration. Your commitment to cybersecurity excellence is inspiring and essential to our mutual success. We look forward to continuing our partnership and driving digital security innovations in the region. #Sentinelone #SentinelLabs #cybersecurity #security #datasecurity #internetsecurity #networksecurity #identitysecurity #cloudsecurity #containersecurity #securityawareness #cybercrime #malware #cyberattacks #cyberdefence #ethicalhacking #EDR #NDR #XDR #AI #digitalsafe #cybersafe #Cloud #containers #kubernetes #infosec #hacking #privacy #cyberdeception #deceptiontechnology

١٩

١ تعليق واحد

I am pleased to invite you to my segment of the upcoming webinar, where I will be delving into the topic of "Enhancing Cyber Resilience | Embracing Prevention-First Practices and Strategies in the Operational Technology (OT) Realm."  During my session we'll explore how to secure your valuable assets in the age of digital transformation. Experience firsthand the power of AI and gain insights into securing your assets with a Zero Tolerance approach.   Learn how to: - Prevent attacks before they happen - Protect critical assets with cutting-edge strategies - Improve your security posture from the ground up on the shop floor   Don't miss out on this chance to step up your cyber resilience game.   📆 June 27 2024, 15.00 CEST / 3 PM 🔗 Register now: Webinar Registration (https://lnkd.in/e2zcGF6m)   Let's lead the charge in making our OT environments cyber resilient. Check Point Software Check Point Software Technologies, Ltd. - Benelux #icsssecurity #iotsf #otsecurity #criticalinfrastructures #criticalmanufacturing #iiot #industrialcontrolsecurity #zeroimpactenforcement #zerotolerance #smartmanufacturing #regulations #securecloudjourney #aisecurity #cyberresilience #reducedattacksurface #legacysystems

٤٢

١ تعليق واحد

Introduction to #Vulnerability_Disclosure_Program What Is a Vulnerability Disclosure Program? A VDP is a structured method to have Anyone report vulnerabilities easily. Vulnerability Disclosure Program Pillars : Every successful VDP consists of at least five core components. 1- Promise Statement : The promise statement lets everyone know why an organization has a #VDP. An organization's promise statement demonstrates to the public that they are proactive regarding vulnerabilities and take threats seriously. 2- Scope : Scope defines the indicated systems and products for security research. The scope’s guidelines list domains and products suitable for testing while also restricting specific hacker testing areas. social engineering attempts are a few of the commonly restricted tests. 3- Safe Harbor : Safe harbor fosters a secure and productive VDP by protecting those who disclose vulnerabilities from legal action. This section is essential to safeguard and encourage hackers to disclose bugs through an organization's official channel. Hackers who find a bug often avoid disclosing it because the risk of legal action is too significant or not understood. Without a detailed safe harbor section, hackers may avoid disclosing for fear of retribution. Trustline includes safe-harbor language by default for all new VDP launches. 4- Process Description : The process description details the report submission and remediation process. Reports should include the vulnerability’s severity, how attackers can exploit it, and how developers can reproduce the bug. This information helps security teams prioritize threats and quickly validate new disclosures. 5- Preferences : The preferences section sets expectations for how your organization will evaluate reports. Process workflow should include expected response times, whether the organization will publicly disclose bugs, and if the hacker will receive a confirmation upon repair. Communication is essential in building a solid relationship between hackers and organizations. Hackers want to know that organizations pay attention to their submissions and take them seriously. The communication process also helps internal teams prioritize and patch bugs while setting time-based goals for response and remediation. Regardless of how long a bug takes to fix, transparent communication between organizations and hackers builds trust and confidence within the VDP. How Can #Trustline Help : In the past, designing a VDP required a significant investment of both time and money. Organizations typically developed policies from scratch, built new communication channels, and marketed their platforms. Trustline provides all the tools needed to launch a successful VDP from a single platform. Our out-of-the-box setup makes it easy to establish a compliant and policy-driven vulnerability disclosure workflow for continuous security.

١٠

🚨 Are you missing critical threats in your cybersecurity strategy? Vectra AI’s Attack Signal Intelligence™ detects real attacks in real-time, automating threat detection, triage, and prioritization to keep your network safe. Equip your SOC with AI-driven insights to stop cyberattacks across hybrid and multi-cloud environments. 🔍 Discover how to enhance your security defenses now: 👇

٤

In recent cybersecurity developments, two sophisticated malware tools, Kapeka and Fuxnet, have emerged as significant threats in the industrial control systems (ICS) and operational technology (OT) sectors in Europe. Linked to the ongoing cyber implications of the conflict between Russia and Ukraine, these tools target crucial infrastructure with destructive capabilities. Kapeka, associated with the Russian group Sandworm, was utilized in attacks against Eastern European targets, including an Estonian logistics company. Meanwhile, Fuxnet, deployed by the Ukraine-backed Blackjack group, severely disrupted Moscow's sewage monitoring system by bricking sensor gateways and disabling tens of thousands of sensors. These incidents underscore the escalating cyber warfare landscape where critical infrastructure becomes a prime target, highlighting the urgent need for robust cybersecurity measures. #Cybersecurity #Blackjack #Kapeka #Fuxnet #CriticalInfrastructure https://lnkd.in/eubbGMJe

٤

See you on Monday to step into the future of IT security with our session "Safeguarding Digital Transformation in an AI Everywhere World." Against the backdrop of the event theme "The Future of IT: Rethinking Digitalization for an AI Everywhere World," we'll uncover the strategies and tools essential for navigating this evolving landscape. Explore how organizations can defend their digital assets and combat cyber threats in a world where AI shapes every aspect of our technological infrastructure. #Sentinelone #SentinelLabs #cybersecurity #security #datasecurity #internetsecurity #networksecurity #identitysecurity #cloudsecurity #containersecurity #securityawareness #cybercrime #malware #cyberattacks #cyberdefence #ethicalhacking #EDR #NDR #XDR #AI #digitalsafe #cybersafe #Cloud #containers #kubernetes #infosec #hacking #privacy #cyberdeception #deceptiontechnology #IDC

١١

١ تعليق واحد

May be something which can help you to think about SOC.

١٠

🔒 Mastering Endpoint Security - Best Practices for 2024 🔓 Join our Check Point CheckMates Webinar on Onboarding & Best Practices for Harmony Endpoint (This time in English 😉 ), where Yehonatan Cohen will share his expertise and will dive into the best practices for deploying, optimizing, and boosting your Endpoint security experience with Harmony Endpoint. 📆 When - July 31. 💥 Register here - https://lnkd.in/dEddEWwN #Harmony #EndpointSecurity #BestPractices Check Point Software

٥٥

Whatever the cybersecurity framework you are using (NIST SP800-53, CIS Controls, etc..). **Automation is mandatory**. As an example NIST SP 800-53, CA-7 “CONTINUOUS MONITORING” is mandatory also for assessment of control effectiveness. To that extend, NIST introduce OSCAL[1,2] for Open Security Controls Assessment Language. OSCAL provides with a YML description (readable by machine) a way to automate the monitoring and assessment of your system control implementation effectiveness. Forget about the XLS spreadsheet…😃 OSCAL is mapped to NIST SP 800-53, CIS, etc.. and should be used to : 1. Ensure in a single pain of glass controls are in place (detect) 2. Map control effectiveness within your GRC process and tooling IMO, That is two topics engineers should work in.. For us in AU, thanks to ACSC, ASD, OSCAL is part of the ISM [3,4].🇦🇺🔑🐧 [1] https://lnkd.in/gmza3-cA [2] https://lnkd.in/gmQyzDe3 [3] https://lnkd.in/gbs6knvs [4] https://lnkd.in/gbR3ZdfC

٩

Glad to share my #webinar #Recording ⭐️ “ #CSA #STAR Level2 #Certification”⭐️ A couple of days ago we organised a webinar to describe and explain the process of getting the Cloud Security Alliance #STAR #CloudSecurity #Certification ⭐️ One of the leading industrial standards in the #Cloud #Security domain ☁️☁️ 👇👇👇👇👇👇👇

٣

Discover how Microsoft 365 Government (GCC High) ensures compliance with the U.S. Federal Government and DoD's security requirements. With multiple FedRAMP High impact level audits completed, Microsoft 365 GCC High offers a secure cloud solution for federal agencies. Learn how the Office 365 and Azure components of Microsoft's cloud services achieve FedRAMP High compliance and facilitate DFARs 7012 alignment for Federal Agencies and Aerospace & Defense Industrial Base (DIB) companies #Microsoft365 #Government #Security #Msftadvocate https://aka.ms/AAq0iza

٣

𝐓𝐞𝐜𝐡𝐭𝐚𝐥𝐤 𝐒𝐞𝐫𝐢𝐞𝐬 : Importance of Network Access Control (NAC) for organizations from the perspective of CISOs. Network Access Control (NAC) is a critical component for organizations as viewed by Chief Information Security Officers (CISOs). NAC plays a crucial role in ensuring the security and integrity of the organization's network infrastructure by controlling and managing devices and user access. It allows CISOs to enforce security policies, authenticate and authorize devices, and monitor and control access to the network. NAC provides CISOs with the necessary tools to mitigate security risks, prevent unauthorized access, and maintain compliance with regulatory requirements. An Article by Praveen Singh , An Infographics by Netpoleon India , Techtalk Seres-An initiative by Mohan Kumar T L #ciso #cybersecurity #nac #networksecurity

١٤٠

١٢ تعليق

Visual Studio users might want to read this... Dracula | Darcula #SDLC #coding #softwaresecurity #microsoft #visualstudio #vscode #development #riskmanagement #separationofenvironments #codereview

١

Great insight by Balint F. I would agree that the old adage of “know what you have and you will know what you’re protecting” is paramount. I’m currently working through the NIST CSF 2.0 framework as a introductory point for security metrics and operational planning. Just like CSF 2.0 points adopters towards formulating a baseline, it is comparable to physical security. If you are trying to secure a building, when first thing you do is analyze all points of entry. How many doors, how many windows, and any possible ingress – egress points. From there you can select method of securing. I would also give another analogy of having a business mission statement or a business plan. You have to know where you are in order to understand where you wanna be. Proper planning and strategizing helps set the foundation of future growth and moving in the direction of implementing proper security.

٢

🚨New Threat Research🚨 The Securonix Threat Research Team has identified a stealthy backdoor payload primarily targeting victims associated with Pakistan via unsolicited messages. In this new campaign (tracked by Securonix Threat Research as PHANTOM#SPIKE), threat actors are using military-related phishing documents to lure their victims into executing a simple RAT binary payload. Attackers utilized ZIP files with password-protected payload archives. 📍 Key Findings: 🎯 Sophisticated Social Engineering: The attackers used military-themed documents as lures to increase credibility and urgency, thereby enticing victims to execute the payload ⚡️ Exploitation of Trusted Formats: The campaign highlights the use of Compiled HTML Help (CHM) files, a trusted file format, to evade detection and bypass security measures ⛓️ Stealthy Execution: The malicious payload is executed in a way that minimizes visibility and avoids raising suspicion, ensuring a higher success rate of the attack 👨‍💻 Persistent Backdoor: Once the backdoor is established, it maintains a connection with the C2 server, allowing attackers continuous access to the compromised systems 🛡️ Recommendations: 1️⃣ Be cautious of unsolicited messages and email attachments 2️⃣ Double-check file extensions before execution 3️⃣ Monitor common malware staging directories 4️⃣ Deploy robust endpoint logging capabilities, including Sysmon and PowerShell logging Read the full threat advisory here: https://lnkd.in/gMz5xEA4 #threatresearch #threatadvisory #cybersecurity #TDIR #SIEM #phishing

١

We are finally here! The SANS ICS Security Summit is next week and will be available live online to those who cannot attend in person. This is my favorite ICS/OT event to attend in person, so I highly recommend putting it on your calendar for next year if you can't make it this year. Nevertheless, you still have a chance to learn from some of the top ICS/OT experts as they share practical insights and strategies for protecting critical infrastructure. 🔍 Here are the Agendas. Sign up and get your spot! 📅 Monday, June 17 | ICS Summit Solutions Track: https://lnkd.in/dv5k4BGV 🗓 Tuesday, June 18 | ICS Summit: https://lnkd.in/dt78JK4V Take advantage of this opportunity to enhance your ICS/OT security knowledge and connect with industry leaders! For those who will be attending, see you soon! #ICSSummit #ICSsecurity #ICS #OT #CriticalInfrastructure #cybersecurity

٣٥

New ICS enhancements in the MITRE ATT&CK 2024 Roadmap: ICS sub-techniques, Asset Expansion, & Cross-Domain Integration. https://lnkd.in/d96eqdmn

٤٣