Marc Johnson

As the threat landscape in modern computing continues to evolve, the Cybersecurity and Infrastructure Security Agency (CISA), in conjunction with several other federal agencies, recently published "Modern Approaches To Network Access Security" to provide updated guidance on best practices regarding network access, including remote access to critical resources. The guidance is directed at all organizations, no matter their size, and focuses on three recommended security solutions, Zero Trust (ZT), Secure Service Edge (SSE), and Secure Access Service Edge (SASE), to enable better visibility to activity and more granular and dependable access controls. As noted in the summary, "this guidance helps organizations to better understand the vulnerabilities, threats, and practices associated with traditional remote access and VPN deployment, as well as the inherent business risk posed to an organization’s network by remote access misconfiguration." We highly recommend reviewing that guidance for anyone who supports networks and remote access platforms, and contact us today if you are ready to learn more about how Gemini Tech Partners can work with you to evaluate your current security posture and provide guidance on next steps to help ensure you put processes in place that are strategically aligned with your overall business goals. Get more detail from Dark Reading (which includes a link to the CISA published guidance) at: https://lnkd.in/eDWva3gy #ITsecurity #networksecurity #cybersecurity #vpn #zerotrust #accesscontrol #ztna #sase

1

#Cybersecurity is critical for healthcare organizations. CISA recommends creating a complete inventory of all devices on the network to improve visibility. In this multi-part series, Ordr Inc. also provides actionable insights to further prevent attackers from gaining access to sensitive #Data. #AssetVisibility https://hubs.la/Q02wgjp60

2

1 Comment

NIST recently released the first major change to it's Cyber Security Framework since 2014. Join this free webinar to explore the importance of NIST CSF, the impact of these changes and a brand-new service offering from SBS: the NIST CSF Assessment. Register: https://loom.ly/ygzygpc

4

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a security flaw impacting NextGen Healthcare Mirth Connect to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The flaw, tracked as CVE-2023-43208 (CVSS score: N/A), concerns a case of unauthenticated remote code execution arising from an incomplete patch for another critical flaw CVE-2023-37679 (CVSS score: 9.8). Details of the vulnerability were first revealed by Horizon3.ai in late October 2023, with additional technical specifics and a proof-of-concept (PoC) exploit released earlier this January. Mirth Connect is an open-source data integration platform widely used by healthcare companies, allowing for data exchange between different systems in a standardized manner. https://lnkd.in/g7CfMEqJ

1

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a security flaw impacting NextGen Healthcare Mirth Connect to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The flaw, tracked as CVE-2023-43208 (CVSS score: N/A), concerns a case of unauthenticated remote code execution arising from an incomplete

1

Celebrating 30 Years of #CISSP - Learn how the CISSP certification has continued to evolve to remain the most sought-after credential in the field for cyber leaders. https://ow.ly/lzmA50RsyEC #infosec #cybersecurity #informationsecurity #infosecurity #cyberattacks #CybersecurityCertification

1

CISA and Partners Release Fact Sheet on Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity May 01, 2024, CISA https://lnkd.in/dqEaCbnv Today, CISA, in collaboration with U.S. and international partners, published a joint fact sheet, Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity. This fact sheet provides information and mitigations associated with cyber operations conducted by pro-Russia hacktivists who seek to compromise industrial control systems (ICS) and small-scale operational technology (OT) systems in North American and European critical infrastructure sectors, including Water and Wastewater Systems, Dams, Energy, and Food and Agriculture Sectors. The pro-Russia hacktivist activity appears mostly limited to unsophisticated techniques that manipulate ICS equipment to create nuisance effects. However, investigations have identified that these actors are capable of techniques that pose physical threats against insecure and misconfigured OT environments. Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity (CISA):https://lnkd.in/dzf4urdz

10

2 Comments

National Cyber Strategy Implementation: Regulatory Harmonization and Reciprocity https://buff.ly/3x1TzWX via Alex Sharpe on Thinkers360 #BusinessStrategy #Cybersecurity #RiskManagement

1

1 Comment

CISA Adds One Known Exploited Vulnerability to Catalog ALERT https://wp.me/p9gxja-32G Oipol & Oijust operating in the world | CISA communication and photo, May 13, 2024 | Cooperation an edition Oipol & Oijust, May 13, 2024 - CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-4671 Chromium in Visuals Use-After-Free Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

1

👀Advising Awareness👀 Just this week, CISA issued an advisory concerning a high-severity vulnerability in RAD Data Communications' SecFlow-2 switch/router, a device designed for tough industrial settings. 🚨 This path traversal vulnerability, identified as CVE-2019-6268, was highlighted due to a publicly available proof-of-concept (PoC) exploit that surfaced on the Packet Storm website in March 2024. The exploit allows unauthorized attackers to traverse directories to access sensitive files, like password hashes, on affected devices. ⬆️ CISA alerted RAD to the vulnerability following the discovery of the PoC. However, since the SecFlow-2 model is now end-of-life, RAD recommends that customers upgrade to their newer SecFlow-1p industrial IoT gateway. While specific updates for the discontinued product are unlikely, CISA has issued general security recommendations to mitigate the risk of exploitation, which remains a significant concern given the device's global deployment in the communications sector. 📣 Advisories like these can be crucial to the organizations and sectors that need them, and it's important they receive this information as soon as possible. ❓ What's your procedure and some best practices you follow for staying up to date on any announcements, patches, security advisories, or updates concerning your own networks and systems? Let us know in the comment below! #CISA #advisory #securityalert #vulnerability #RAD #SecFlow-2 #CVE-2019-6268 #industrial #criticalinfrastructure #riskmitigation #riskmanagement #technolgy https://buff.ly/3VMbs5v

1

CISA worried? This CISA statement suggests - YES!   "CISA is taking an active role in collaborating with private industry partners to respond to this [Sisense] incident, especially as it relates to impacted critical infrastructure sector organizations," the agency said. https://lnkd.in/gi9tFBvN   "CISA is investigating, which means this is as serious a breach as any company can ever imagine dealing with." https://lnkd.in/g3Vg93ap   Article on MSN, CloudCover describes a cyber-predictive platform powered by generative AI (GenAI) that has never fallen victim to data breach. In this day and age, that is something to be revered. When it comes to sports, undefeated teams are put on a pedestal and rightly so. Finding a cybersecurity solution with a perfect record is unheard of, an enigma, a unicorn, well almost. https://lnkd.in/ghYjbqN2   #cybersecurity #networksecurity #xdrsecurity #computersecurity #RansomwareAttacks #cyber #technology #infrastructure #ai #security #artificialintelligence #datasecurity #dataprivacy #data #network #safety #XDR #SASE #NaaS #sdwan #genai

4

Five Essentials to #Cybersecurity Training 1. Continual Training 2. Incorporating Fire Drills for Preparedness 3. Customizing Training for Maximum Effectiveness 4. Utilizing Useful Reporting Tools 5. Keeping Training Interesting and Engaging Learn more: https://bit.ly/4c7Smwg

2