Ian Pelekis

Rachel G. and I got our manuscript published in PRISM, National Defense University’s peer-reviewed journal! The piece, titled “Cybersecurity on Retainer,” argues that the government should develop a funded retainer program to maintain the response capacity needed for potential significant cyber incidents. Opinions are our own.  https://lnkd.in/eBaqRS46

38

2 Comments

SUMMARY: The NSA's Cybersecurity Collaboration Center offers free, proactive cybersecurity support to businesses and federal partners to combat advanced cyber threats. MAIN POINTS: - The CCC provides free threat intelligence and cybersecurity services to private companies with DOD contracts. - Services include threat analysis, mitigation guidance, and direct incident response assistance from NSA experts. - Small and medium-sized businesses can access high-level cybersecurity resources typically reserved for national security. TAKEAWAYS: - CCC aims to bolster public-private cybersecurity cooperation. - Over 1,000 industry partners have enrolled in CCC services. - CCC processes 70 million DNS queries daily, blocking billions of malicious activities. Bailey Bickley #ccc #nsa #dibservices #dib

146

8 Comments

🌟 Join the us for a comprehensive training session on Behavioral Threat Assessments, hosted by Ally Physical Security team! Whether you're in Charlotte, NC, or joining remotely via Zoom, this class will equip you with essential skills to assess and manage potential threats effectively. Don't miss out on this opportunity to enhance your threat assessment capabilities. Register now! #Training #HumanResources #BehavioralThreatAssessment #PhysicalSecurity

33

1 Comment

This Kiteworks article provides a comprehensive guide to navigating the complex landscape of sensitive content communication risk within the context of NIST CSF 2.0. It's crucial for organizations to understand and mitigate these risks effectively, especially considering the ever-evolving cybersecurity threats. Well worth a read for any organization serious about safeguarding sensitive information in today's digital age. NIST CSF 2.0: The Ultimate Guide to Managing Sensitive Content Communications Risk 👉 Learn more: https://gag.gl/BSKceP #cybersecurity #compliance #NIST #NISTCSF #CybersecurityFramework

12

1 Comment

Today the Institute for Security and Technology (IST) releases "24 in '24: Doubling Down on the Ransomware Taskforce's Recommendations", its Progress Report on the comprehensive framework for combatting ransomware that was released in 2021, and calls on a collaborative effort from industry, government and civil society. As we showed in Chainalysis' recent Crypto Crime report, ransomware payments in #crypto hit record highs in 2023, reaching more than $1billion. Chainalysis works closely to support IST's important efforts in this space, and as a member of their Steering Group of the Ransomware Task Force, I'm committed to continue working with industry experts as we tackle this growing threat. If you'd like to find out more, use the link below to join the Report launch event today (Wednesday, April 24, 2024, from 10am to 5pm EST), which will have an abundance of #cyber and #national #security experts sharing their expertise on the most important recommendations for deterring #ransomwareattacks - register here: https://lnkd.in/eUHQKhYe If you'd like to know more about how ransomware touches the #crypto sector, as well as the steps being taken to tackle it using many of the unique features of the technology - check out our latest data here https://lnkd.in/g3yAfzJr

25

1 Comment

As the present cohort progresses through the G-CISO certification, we experienced a compelling session this weekend with Rich Gautier. The discussion centered on the timely subject of "Cyber Incident Response and Digital Forensics." The session involved a dynamic discussion that explored the various dimensions around IR, including #IncidentResponse improvement, #DigitalForensics Challenges, #StrategicPlanning, #RiskManagement, and #FuturePlanning. I extend my gratitude to my cohorts for their engaged participation. GlobalCISO Leadership Foundation #GCLF mission "Our foundation’s mission is to solve Cyber Security Challenges by empowering Global CISOs with world-class training." #gciso #breach #ransomware #legal #media #publicrelations #leadership Chirag Arora, Global CISO Jothi Dugar, The Chaos Guru Durga Dhanikonda Pratik Savla, MS(InfoSec), CISA, CDPSE, CEH, CCISO Linna Zheng

33

I missed this years conference, but Jason Keller, MA was able to make it to a significant NATO conference on cybersecurity. What stood out in this forum was the collective consensus on the importance of robust cyber infrastructure to ensure a safe digital environment. Here’s where Vistant comes in, and I couldn’t be more excited to share how we’re making a difference. As an industry leader in cybersecurity, Vistant works diligently across the globe, collaborating with local governments and international development agencies to address cybersecurity and resilience needs. Our mission extends beyond borders - we are committed to strengthening vital cyber infrastructures, mitigating disinformation, reducing criminal activity, enhancing data storage and transfer, and accurately reporting and assessing cyber threats. Our team, a blend of highly experienced individuals from tactical, operational, and strategic operations, comprises veterans from NATO, allied militaries, and their civilian government counterparts. We bring a depth of knowledge that’s unparalleled. Vistant’s Cyber Security and Resilience Capabilities are wide-ranging. We offer expert project management and implementation, field technical assistance and response, cybersecurity capacity building and governance, cybersecurity analysis, cyber hygiene assessments, and crisis response for cybersecurity incidents. We take pride in our proven track record. Our experts actively implement cybersecurity programs for the U.S. government in more than 15 countries and for an extensive partner network of national and local businesses. In a world where the digital landscape is constantly evolving, we remain steadfast in our mission to contribute to a safer, more secure digital future. Vistant is looking forward! #Vistant #Cybersecurity #NATO #GlobalResilience #Cycon #CCDOE www.vistantco.com

4

A Good Guy Story in Cybersecurity - We Need More of These Since I started in cybersecurity over a decade ago, I hear bad guys, bad nation stations, etc. Lots of bad. Sometimes we forget about the good in cybersec. The good comes from many good people that are protecting us in governments, industry, and NGOs. I have been lucky to have met many good people. Good in their work and good as people who share their knowledge, help others, do good things. Fortunately there are way more than the people I mention in this note. One of the good guys is Matt Hartley, co-founder of BreachRx (I love the name unlike many cybersec companies with crazy names that sound like other cybersec companies with crazy names - you know what Matt's company does). I have known Matt for almost 15 years. He is always open to helping. Today Matt is announcing a seed round. Congrats to a good guy. Former Uber CISO, Joe Sullivan wrote a story about how BreachRx would have helpful when Uber was breached. https://lnkd.in/efVTEsqa Other good guys and gals include but are not limited to (I am learning lawyer talk), Karla Reffold David Barton Patricia Titus Rick Tracy, CISM Rick Howard Allan Alford Douglas Copley Neil Thacker Craig Spiezle Merritt Baer Dan Woolley

10

5 Comments

Civil societies are nonprofit, advocacy, cultural, faith-based, academic, think tanks, journalist, dissident, and diaspora organizations, communities, and individuals involved in defending human rights and advancing democracy. These are considered high-risk communities often targeted by state-sponsored threat actors who seek to undermine democratic values and interests. A relative who's who of national cybersecurity agencies combined for this guide. U.S. Department of Homeland Security Office of Intelligence and Analysis (DHS I&A) • Federal Bureau of Investigation (FBI) • Communications Security Establishment Canada | Centre de la sécurité des télécommunications Canada (Canada Cyber Centre) (CCCS) • Riigi Infosüsteemi Amet // Estonian Information System Authority (NCSC-EE) Estonian National Cyber Security Centre (NCSC-EE) • JPCERT/CC Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) • National Center of Incident Readiness and Strategy for Cybersecurity (NISC) Japan • National Cyber Security Centre – Finland (NCSC-FI) • National Police Agency (NPA) Japan • United Kingdom National Cyber Security Centre (NCSC-UK) another organization fighting the good fight is The Cyber Poverty Line Institute - find out about them at https://lnkd.in/gHugF4aw

14

1 Comment

The Health Sector Cybersecurity Coordination Center (HC3) of the U.S. Department of Health and Human Services (HHS) has released a threat profile for #Qilin #ransomware, also known as #Agendaransomware. The ransomware-as-a-service (#RaaS) has been active since 2022, targeting #healthcare organizations and other industries globally. Likely originating from Russia, the group was noted for recruiting affiliates toward the end of 2023. #Qilinransomware features variants developed in #Golang and #Rust and typically gains initial access via #spearphishing. It utilizes Remote Monitoring and Management (RMM) and other common tools in its attacks. Additionally, the group engages in double extortion, threatening to leak sensitive data unless ransom payments are made. #criticalInfrastructure #Threatlandscape #Cyberattacks #Cyberthreats https://lnkd.in/g8wnJRDa

8

ICYMI: Office of Inspector General Report in Brief from the Alabama Medicaid Management Information Systems (MMISs) and Eligibility and Enrollment (E&E) systems security audit. The scope of the audit was limited to external facing systems and a phishing exercise (GoPhish). https://lnkd.in/emGaGWQa The OIG audit reports are always good to get a glimpse of the focus of these security audits. The response to recommendations can also be helpful for orgs struggling with some of the same issues (Starting on page 14). Key Takeaways 1) Vulnerability Management: Existing tools were not effective in detecting system flaws. 2) Software Development: Issues were not remediated prior to deploying on production systems. 3) Phishing was not successful (0 opened emails......) #healthcare #hipaa #cybersecurity #hhs #riskmanagement #risktolerance #riskassessment #criticalinfrastructure #hitrust #criticalcontrols #penetrationtesting #vulnerabilityassessment #vulnerabilitymanagement

2