Alex W.

Episode 3039 - Billions are spent annually on security solutions, yet ransomware sieges continue to escalate. Will AI change the game in favor of attackers or defenders? How does encryption work, and does it introduce overhead into the mass management of enterprise endpoints? Brett H. Chief Growth Officer at Cigent Technology, Inc. answers these questions and more in this Post-RVAC Briefing. Maureen McGregor and Lindsay T., Thank you! #cybersec #cybersecurity #disruptive #innovation #encryption #endpointdataprotection #cigent # Watch the briefing here: https://lnkd.in/guDbDDQr

1

Everybody at #ITNSecure24, curious which threats your clients are likely to see in the coming months? Tomorrow Taylor Green and I Explore the Threat Landscape, 3:45 in Osceola 1-3. We'll go over which threats the CW SOC has been seeing.

14

Beware of the pitfalls with XDR vendors—here’s what you need to watch out for: - XDR is not SIEM: Don't mistake XDR for a log management system. The more logs you shove into it, the worse it performs. XDR is designed for precision, not data hoarding. Manage it wisely, or you'll lose control. - SIEM isn’t XDR: Merely slapping “Nextgen” in front of your SIEM doesn’t transform it into XDR. SIEM is inherently limited by variety and high data volume—understand its boundaries before you push them. - Ignore the hype: Claims that cloud-based XDR offers better correlation are just marketing fluff. Data isolation is crucial, regardless of where it's stored. If your data isn't loaded into the cloud, it should not impact the quality of threat detection. Vendors can upload everything necessary for detection to your on-prem instance. Remember, the main difference between on-prem and cloud is cost and ease of implementation/use. Stay sharp and don’t let vendor slick talk cloud your judgment. #XDR #SIEM

99

9 Comments

VMaaS takes the headache out of determining the threats in your environment, doing the necessary research, prioritizing, and remediation. Check out Nick's demo! #VMaaS Assura, Inc. #PITAgone 😂

6

This Kiteworks article provides valuable insights into the NSA's approach to enhancing Zero Trust maturity within the data pillar, emphasizing the critical importance of safeguarding data in today's cybersecurity landscape. Understanding the value and risks associated with data is paramount, and the emphasis on implementing data-centric security controls aligns well with best practices in cybersecurity. Overall, this article serves as a comprehensive resource for organizations seeking to strengthen their cybersecurity posture in an increasingly interconnected digital environment. NSA’s Advancing Zero Trust Maturity Throughout the Data Pillar: A Comprehensive Guide 👉 Learn more: https://gag.gl/qQPSz9 #cybersecurity #zerotrust #NSA #blog

17

This Kiteworks article outlines eleven essential requirements for a secure managed file transfer (MFT) solution. Key points include the necessity for robust security features like encryption, integrated antivirus, and hardened virtual appliances. It also emphasizes governance capabilities such as flow authoring access controls and role-based user policies. Additionally, it highlights the importance of visibility through security visualizations and consolidated logs. These measures ensure compliance, data protection, and operational efficiency in modern enterprises. Eleven Requirements for Secure Managed File Transfer 👉 Learn more: https://gag.gl/QPSQ3B #cybersecurity #FileTransfer #SecureFileTransfer #MFT

6

With the latest and greatest #ransomware infection impacting CDK Global and its huge dealer network, I feel like it's a good time to re-share this piece I wrote from 5 years ago. I could have written this today...seems that nothing is changing on this front. #CISO #infosec #CEO #CIO

7

2 Comments

DoD is already in progress to update DFARS 252.204-7012 to align it with the CMMC audit program. How elegant would it be to simply put a single sentence into DFARS 7012 and the CMMC Final Rule that says : "For contracts with an award date prior to xx/xx/2026, the requirements within 800-171 rev 2 shall apply; after xx/xx/2026, the requirements within 800-171 rev 3 shall apply."

56

6 Comments

RSA can be hectic. If anyone is looking to for a break from Moscone, let me know. Permiso has lounge space that is walking distance away. Come meet and hang out with Permiso and Permiso's P0 Labs Team and talk/ learn about a new approach to cloud threat detection and response/ confidence in containment. We can talk about how the SIEMs, CSPMs, EDRs, and other existing security controls you'll see everywhere on the show floor consistently miss alerting on cloud threats in a timely manner or at all 🚀

20

1 Comment

As you explore Moscone, consider this: Despite their mature security setups—including CSPM, SIEM, CNAPP, EDR, and more—victims of Scattered Spider were compromised. In over 150 threat briefings and incident responses with partners like KPMG, we've consistently observed missed early detection opportunities at the IDP and SaaS layers, critical in an operational window of 3-5 days. AI integration won't shift these outcomes. The Permiso HQ is walking distance from Moscone. DM me to come by and meet the Permiso and P0 Labs team (former Mandiant), let's discuss a new purpose-built approach to cloud detection and response

1

I take attribution very seriously, and if I am wrong, I admit I am wrong. We listened and updated the blog as to why we think it's FIN7. But ... Does the title mention DiceLoader for a clickbait? The issue is that people are getting the wrong impression and calling this out for no particular reason. "MSIX is delivered via malvertising? No, we don't care. You said it's FIN7 based on DiceLoader that you saw in that one infection case". I think that there are more important points in that blog that deserve attention. There is just that one small paragraph at the end that includes a minimum of reverse engineering on DiceLoader.

21

4 Comments

This Kiteworks article is a good read for cybersecurity professionals who are interested in a comprehensive checklist for achieving compliance with the Cybersecurity Maturity Model Certification (CMMC) framework. It outlines the steps organizations need to take to meet the requirements of different CMMC levels, from basic cybersecurity hygiene to advanced practices.  Your Complete CMMC Compliance Checklist 👇👇 Get the checklist: https://lnkd.in/eEmiVs79 #cybersecurity #compliance #CMMC #NIST #CUI #blog

19

1 Comment

This Kiteworks article provides a comprehensive guide to navigating the complex landscape of sensitive content communication risk within the context of NIST CSF 2.0. It's crucial for organizations to understand and mitigate these risks effectively, especially considering the ever-evolving cybersecurity threats. Well worth a read for any organization serious about safeguarding sensitive information in today's digital age. NIST CSF 2.0: The Ultimate Guide to Managing Sensitive Content Communications Risk 👉 Learn more: https://gag.gl/BSKceP #cybersecurity #compliance #NIST #NISTCSF #CybersecurityFramework

12

1 Comment

Top #cybercrime investigation and #cyberlaw events of the 1st week of May: 1. REvil ransomware operator behind the Kaseya supply chain hack sentenced to 13 years in prison 2. Notorious Finnish hacker receives a 6-year prison sentence for Vastaamo breach 3. Second DraftKings hacker pleads guilty 4. Operation Pandora dismantles 12 scam call centers, Spain arrests over 100 WhatsApp fraudsters 5. Former cybersecurity consultant arrested in a $1.5M extortion scheme https://lnkd.in/gkubR-2M #technology #law #justice #lawenforcement #cybersecurity

12

The CISO of NJ on election security, ransomware and more - StateScoop: The CISO of NJ on election security, ransomware and more  StateScoop #CyberSecurity #InfoSec #SecurityInsights

2