Glenn Chisholm

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

Had an incredible experience today supporting the ITDRC team at a CISA/FEMA/DoHS preparedness workshop in Denver. If you're interested in joining me and volunteering your expertise during times of crisis, check out https://lnkd.in/dYVhMReM. By leveraging your IT experience and joining a team of skilled professionals, you can make a dramatic immediate difference for hundreds or thousands of people during a crisis by getting communities reconnected and providing first responders with the critical infrastructure needed to support their missions. There are many roles available from networking to logistics, planning and coordination, so even if you can't deploy on site for a disaster, there are still ways to help. And the more volunteers there are, the more flexible we can be in our response. In terms of what you can expect to get out of it, satisfaction from helping your fellow citizens, hands-on exposure to a variety of current comms technologies, experience operating in crisis modes, and exposure to a wide range of corporate, NGO and governmental agencies are all likely outcomes. So if you're looking for a way to make a difference during a crisis, please reach out to me or sign up directly at https://lnkd.in/dYVhMReM. Let's work together to provide our biggest impact when our communities need us the most. #volunteer #IT #disasterresponse #communityimpact #ITDRC

21

3 Comments

In a world where cybercriminals are leveraging AI to breach defenses, it’s time we turn the tables. Let’s empower your cybersecurity with cutting-edge AI solutions. Together, we can outsmart the threats and safeguard your digital realm.

1

A Data Breach at LA County Health Services 🏥 , shows that Phishing continues to be a huge threat should businesses stop using email internally? 2023 Was the Worst Year for Phishing on Record, we need to think of future solutions and this breach highlights very publically the risks Hackers gained access to LA County Health Services employee emails through a phishing campaign, potentially compromising patients' personal and health information.  23 employees had their credentials stolen in a February attack. Documents and e-mails in the compromised mailboxes included patients' personal and health information, including a combination of: • first and last name, date of birth, home address, phone number(s), e-mail address, medical record number, client identification number, dates of service • medical information (e.g., diagnosis/condition, treatment, test results, medications), • and/or health plan information. After discovering the breach, L.A. County Health Services disabled the impacted e-mail accounts, reset and re-imaged the compromised employees' devices, and quarantined all suspicious incoming e-mails. It also circulated awareness notifications to all employees, reminding them to always be vigilant when reviewing e-mails, especially those with attachments or links. ✔ A sensible approach showing they had a strategy to deal with incidents like these, which is great! This incident reminds everyone of the importance of robust cybersecurity measures, especially for organizations handling sensitive data. But how do we stop phishing attacks? 🤔 The obvious thing to do is to: • Educate employees on identifying phishing attempts. • Implement multi-factor authentication. • Regularly update and patch systems. • Have a clear communication strategy for employees when they suspect a Phishing attack. But what else is working? do you think the future for businesses is not using email for internal communications? If you are concerned and want to learn more here is the data breach notice: https://lnkd.in/epBfDvSm Some great analysis on Phishing here https://lnkd.in/eiRaJBMJ #cybersecurity #security #StopPhishing

5

SEND US TO YOUR FRIENDS! Calling all interested in #ICS, #OT, and Research! The #RSTCON CFP IS OPEN! https://rstcon.org/cfp/ Are you messing with sensors and firmware at home? It could be a talk! Are you fussing with protocols? Maybe it's a talk! Are you doing something fun with processor architectures? Something interesting uses it! Have you theorized or found a cool attack against systems? It sounds like a talk! Fuzzing, analysis, exploitation, side channels, communication weaknesses, the list goes on and on; be creative! Need to avoid presenting? Join us anyways! https://lnkd.in/gHvzmjKk

6

1 Comment

Do you need to be CMMC Level 2 compliant, but are having trouble translating the cybersecurity gobbligook into real actions that your IT team can take? We are having a live webinar on June 27, 2024 at 2pm EST to demonstrate the Kieri Compliance Documentation. This is a full-featured program for CMMC Level 2 and NIST SP 800-171 compliance which includes policies, procedures, system security plan, user agreements, record-keeping databases, account request form, self-assessment form, and other vital resources needed to be compliant. Monthly Q&As and over 50 hours of video training included. Kieri Solutions uses this program to efficiently manage our CMMC Level 2 compliance. We passed a DoD assessment for CMMC Level 2 and NIST SP 800-171 compliance with a perfect 110 score using this governance program. We have over a hundred clients using the KCD to manage their compliance and prepare for CMMC Level 2 assessment themselves. 𝐃𝐨𝐞𝐬 𝐭𝐡𝐢𝐬 𝐬𝐨𝐮𝐧𝐝 𝐥𝐢𝐤𝐞 𝐲𝐨𝐮? 🔸 You are frustrated with your policies and procedures… 🔸 You don’t know how to perform some CMMC requirements, or how to answer assessment objectives like “define non-essential functions”… 🔸 Your documentation is out of date… 🔸 You bought compliance templates elsewhere and they are too complex to get through… 🔸 You are paying a huge monthly fee to a GRC website and you’re still stuck filling in blanks… 🔸 You don’t have a record keeping system that makes it easy to gather the info you need for assessment… 🔸 Your users are asking how to mark CUI and you don’t know how to help them… If so, please join us for this webinar. We will be showing the program that we use to reach and maintain a "110" score. https://lnkd.in/eRjbVFrD Kieri Solutions - Authorized C3PAO

35

6 Comments

Coalfire (a respected QSAC) has published this excellent white paper on how HUMAN's Client-side Defense solution for PCI DSS 4.0, addresses requirements 6.4.3 and 11.6.1. Lean more about the "easy button" for protecting card holder data from third-party and nth party scripts. #payment #PCI #browsersecurity #cybersecurity #riskandcompliance #riskmanagement #compliance #ecommerce #retail https://lnkd.in/ehcbP-qN

18

The countdown is on! 🕒 Heading to the Cybersecurity and Privacy Professionals Conference on May 1–3 in Minneapolis. Ready to dive into dynamic discussions with industry leaders and peers about safeguarding higher education institutions. Don't let this opportunity pass – register now!  https://lnkd.in/dT9Fq8Jq #CybersecPrivacy24

68

5 Comments

We asked some channel leaders and industry experts to weigh in on what MSPs should take away from v2 of the National Cybersecurity Strategy Implementation Plan released last week. They break out what you need to know here. Many thanks to Mike Semel Tim Golden Lawrence Cruciana and Kevin Beaver #cybersecurity #msps

8

4 Comments

API keys are essential to connect applications, services, or data lakes together. Yet, they can also be a security risk. Imagine Alice sets up an API key to give her team or a vendor access to sensitive data—many times these keys are long-lived and often shared across different workloads. If the group uses federation, actions taken by Alice or others occur using a shared credential/role in the environment. This means logs would only show the credential conducting that activity, which again, gets shared with others who have access to the role. Alice's coworker, Bob, has their legitimate cloud credentials compromised. The threat actor uses Bob's credentials to federate into a shared credential/role in the environment. The threat actor exploits native features/functions of the cloud to appear as Bob, thereby blending their activity in to avoid detection. Most security teams today won't spot Bob's impersonator fast enough or at all. Trying to make sense of cloud logs is a real challenge, especially when it's happening in real-time. It can take hours or even days to piece together what happened. And by then, detection and response are delayed and the damage might already be done. What can you do? Security teams can start by keeping a detailed record of all identities, keys, tokens, certificates, and credentials they've provisioned and used, services accounts they have access to, what roles they assume. Then, security teams can set up what's considered "normal" access and behavior. Once the team understands “normal” behavior, they can develop rules and alerts from logs to try to detect and respond to access and behavioral anomalies. At Permiso, we have developed an identity-centric approach to cloud threat detection and response. Our solution can help security teams detect and respond to access and behavioral anomalies in the environments faster and with greater confidence from having the full session access and activity. Want to learn more? DM me or visit https://lnkd.in/gC4DUJ9j to learn about our approach to solving the challenge of detecting and responding to threats in and across IaaS, SaaS, CI-CD, IDP environments.

11

We're thrilled to collaborate with Boise State University - Cyber Operations and Resilience (CORe) program which was recently named one of the top 10 Cyber Programs in the US - to be able to bring you this Cyber Risk Quantification course. BSU has agreed to open this Graduate Course to YOU as Professional Development. What an opportunity - don't miss it. Get more information here: https://lnkd.in/e8qzBrDU #cybersecurity #cyberriskquantification #cyberprofessionals #educators #ciso #cio #cybersecurityrisk #cyberrisk #riskanalysis #CRQ #vulnerabilitymanagement #cyberattacks #cybertraining #riskmanagement #riskmodeling #cyberriskmodeling #cybercrime #cyberthreat #boisestate #boisestate

3

Log analytics visibility depends on sensor resolution. The endpoint will always be one of the most critical components in the security defense stack.

1

ControlCase’s Technology Usage Template provides guidelines for the proper use of your organization’s computing resources, including the use of electronic messaging. Download your templates today to assist in meeting the requirements of several IT Security Standards, including PCI DSS, SOC 2, NIST 800-53, HITRUST, HIPAA, GDPR and ISO 27001.   https://lnkd.in/gDRBmv4H #ControlCase #Technology #Computing #emailsecurity #cloudcomputing 

29

An interesting case of ICS (Industrial control system hacking) this would likely not have happened if the routers/gateways had used strong certificat based authentication. Now is the time to secure your ICS networks. #iec62443

4

Trying to understand how AI and Analytics can help your Agency? Check this out!

2

55,000 Impacted by Cyberattack on California School Association The Association of California School Administrators (ACSA) is informing nearly 55,000 individuals that their information may have been compromised as a result of a cyberattack. ACSA describes itself as the largest umbrella association for school leaders in the United States, serving more than 17,000 California educators, including superintendents, principals, vice-principals, and classified managers. The incident occurred last year. ACSA discovered on September 24, 2023, that some files in its environment had been encrypted, which indicates that the organization was targeted in a ransomware attack. An investigation revealed that a threat actor had gained access to ACSA systems between September 23 and 24, and they accessed and possibly exfiltrated certain types of information. The exposed files contained information such as name, address, date of birth, Social Security number, driver’s license number, payment card information, medical information, health insurance information, tax ID, student report card and test score, employer-assigned identification number, and online account credentials. ACSA completed its investigation and identified the impacted individuals in early May 2024, when it started notifying them about the data breach. https://lnkd.in/gyQgYG79 #cybersecurity #cyberattack #cybercrime #cyberrisk #cyberthreats #informationsecurity #infosec #breach #databreach #malware #google #bing #networksecurity #technicalsupport #itservices #itsupport #dataprotection #datasecurity #itnews #hackingprevention #cloudsecurity #riskmanagement #fbi #vciso #securityexpert #cisa #financialrisk #manufacturing #iot #ransomware

2

Come meet Danielle M. Gagnon at Health-ISAC Spring Americas Summit at Booth 35 and learn about a new approach that unifies your cloud environments (IaaS, PaaS, SaaS, CI-CD, IdP) and cloud security controls so you can easily and confidently detect/ respond/ contain to real threats and risky behavior at run-time and identify the exact human or machine identity that did it. Not going? Send me a DM to learn about our approach to cloud threats

1