Joseph Cardillo

Are current remediation efforts enough? We measured the percent change in the number of open vulnerabilities each month for each firm. Taken together, these monthly measures reveal whether security exposures are piling up... Read the full report: https://lnkd.in/e4EAeQ6v

1

Power up ⚡ your vulnerability remediation cycle with the platform designed to zap 21st century headaches. We're talkin' saving time spent patching, automating your work, and getting back on CISA's good side. Here's how Vicarius helps: 🔹 See everything in one place: Forget siloed data and endless spreadsheets. Vicarius provides a single source of truth for all your vulnerability data. 🔹 Prioritise like a pro: Vicarius goes beyond just severity scoring. It uses real-time context to prioritise vulnerabilities that matter most to your organisation. 🔹 Patch smarter, not harder: Integrate patching for Windows, Linux, Mac, and third-party applications – all from the same platform. 🔹 Automate the mundane: Free yourself from repetitive tasks. Vicarius automates patching, threat mitigation, and even vulnerability scans. Try vRx today, risk-free, pain-free. (Seriously, why wait? ) #vulnerabilitymanagement #cybersecurity #CISA #automatedsecurity #patching

2

Armis is uniquely capable of managing and prioritizing risk in complex higher education environments. Learn how Lehigh is using Armis to see, protect, and manage IT, IoT, OT, all the T's!

6

In the ever-expanding #cybersecurity threat landscape organizations have to fortify their networks with next-generation technologies that are capable of identifying and repelling intrusions in real-time. That’s where IDS and IPS solutions come in. https://lnkd.in/eB-hk_4M

2

Since moving into cybersecurity, I’ve been spending some time learning to write c++ code for windows socket connections in order to create my own reverse tcp shell for windows machines. After I get this down, I’ve got some documentation to learn how to encrypt the reverse tcp shell in order to bypass AV (all whitehat of course!) AF_INET, INET_ADDR, htons, struct sockaddr_in = brain overload at the moment! My network engineering background is for sure helping to understand. Some good sites for understanding: https://lnkd.in/dEr7rDCy https://lnkd.in/d6DJfwMf

21

1 Comment

#ITAssets hard to keep track of & updated? This will help! https://lnkd.in/e4x_AFwk #itassetmanagement #assetmanagement #informationsecurity #itsecurity #infosec #informationtechnology #technology #cybersecurity #iot #iotsecurity #devicemanagement #riskmanagement #security #it

11

Heading to Data Connectors Boston Cybersecurity Conference today? Join us at our booth to discover the latest in automated threat modeling and cloud security. 🗓 Thursday, June 13, 2024 📍 The Westin Waltham-Boston Come meet our team, see live demos, and learn how we’re making one-click threat modeling a reality. Don’t miss this opportunity to enhance your cloud security strategy! See you there! #DataConnectors #Boston #CloudSecurity #ThreatModeling #CyberSecurity

15

Is your SOC drowning in data? The ever-expanding attack surface and data deluge are overwhelming traditional security operations. Legacy SOCs struggle to keep pace, hindering effective threat detection, investigation and response. Here's the truth: the status quo isn't enough. ✨ The future of AI-Reinforced CyberOps is coming April 30th... stay tuned for our BIG announcement that will transform security operations: https://lnkd.in/ezywYg3N 💫 #cybersecurity #TDIR #SIEM #GenAI #AI #SOC #CyberOps

17

Is your SOC drowning in data? The ever-expanding attack surface and data deluge are overwhelming traditional security operations. Legacy SOCs struggle to keep pace, hindering effective threat detection, investigation and response. Here's the truth: the status quo isn't enough. ✨ The future of AI-Reinforced CyberOps is coming Securonix @Securonix https://lnkd.in/ezywYg3N 💫 At CyberdomeN - we only work with the very #bestofbreed technology partners #dontwaituntilitstoolate

12

A few weeks ago, I wrote a post sharing research breaking down exposures across enterprise and cloud infrastructure. By volume, the majority of exposures affected Active Directory but the most critical exposures were found in cloud environments. (see https://lnkd.in/euvfKvGJ) I wanted to follow that up with a similar view comparing the distribution of critical exposures among different industries. Per the attached chart, about half of the industries shown follow the overall pattern of Cloud > Active Directory > IT/Network devices. But there’s quite a bit of variation and some sectors buck that trend entirely. For example, very few of the critical asset exposures affecting the Energy, Transportation, and Healthcare sectors are in the cloud. On the other hand, the share of critical exposures in cloud environments is much higher than average in the Agriculture and Manufacturing industries. I share this because the diversity and sprawl of the modern attack surface make it difficult to answer seemingly simple questions like "Where are our critical exposures?" And the fact that every industry's or organization's answers will vary makes answering it all the more difficult and important. If you'd like to see more on what we learned from analyzing exposures from tens of thousands of attack path assessments, download the full report from Cyentia Institute and XM Cyber here: https://lnkd.in/dPfqXG7y #exposuremanagement #vulnerabilitymanagement #cyberrisk

40

3 Comments

WHY???????? 96% of CISOs faced a ransomware attack last year..and 83% of those paid.- Splunk There is a better way. Flair Data Systems vCISO's can help you proactively prevent and help you remediate cyberattacks. Schedule 30 minutes with our vCISO's, free of charge, to discuss your cyber needs. #cybersecurity https://lnkd.in/gTvxtibv

3

I often describe Horizon3 as a "data company, pentesting is just a sensor"... Every time we run a pentest 3 things happen: 1. We enable the end-user (often IT Admins and Network Engineers) to quickly identify, fix, and retest to verify that exploitable issues have been remediated 2. Every time a "celebrity CVE" hits the news cycle we run analytics on historical pentest results for each of our customers to identify if they are at risk (AKA "Rapid Response") 3. Our attack research team conducts analysis on scrubbed telemetry data to identify interesting software to exploit. Often the criteria includes: - valuable placement and access within the network - valuable "enabling" data (e.g. credentials) - popularity/prevalence across our customer base For 3, once we've identified interesting software, the team will conduct exploitation research to find zero days or common misconfiguration that can be exploited. If we find a Zero Day, we go through the responsible disclosure process to notify the vendor and work with them to verify the issue has been fixed. We add the exploit into NodeZero as quickly as possible while we coordinate with the vendor on how to disclose the finding publicly to ensure end-users have ample time to fix the problem. If we find common misconfigurations, we add an exploit to NodeZero while trying to raise awareness of the misconfiguation in a responsible way (e.g. contributing to the open source project. notifying the vendor, etc) A great example of this process is what we did with the Mirth flaw, where we identified it, exploited it, and worked with the vendor to responsibly disclose it. This week CISA declared the Mirth flaw a KEV due to its mass exploitation. This is both a blessing and a curse for most IT organizations: The blessing: CISA is doing a phenomenal job raising cybersecurity awareness globally. For example, boards are asking about exposure to KEV's specifically versus vulnerabilities generally. The first curse: a KEV designation also raises awareness among the bad guys, creating a "fast follower" dynamic leading to even more exploitation. The second curse: CIO's and CISO's must treat a KEV like an IT Outage and urgently reallocate critical people to patching and verifying the remediation of the KEV. Time is the enemy, more so now than ever. https://lnkd.in/ggscG5mE #cybersecurity #cisakev #vulnerability #infosec Horizon3.ai #KEV #Mirth

89

2 Comments