Nate Bethel

Our very own Senator Ron Wyden sent a letter to the FTC regarding the United Healthcare ransomware incident. https://lnkd.in/gwjmvbbA I'm a big fan of MFA, but do take objection to the strong assertion that the senator makes this was 'entirely preventable'. United Healthcare was already breached at this point. Only #UpSight can prevent Ransomware. ;) To me the question that should be asked in addition to why some particular server did not have MFA enabled, is how the attackers already had credentials to that server? United Healthcare was ALREADY breached at the time the server was accessed, and we still don't have the proximal root cause. But I'm pretty confident that it would lead us to a singular employee that fell victim to some form of Phishing attack and had a credential stealer run that copied authentication information from the local computer and then was used to further gain access to United Healthcare's network. That access was likely then sold to the operators of the BlackCat ransomware who are not so much 'hackers' as experts in extortion. A few key points here: 0) UpSight would have prevented the initial access attempt AND the BlackCat ransomware 1) Deployment of ransomware is a LATE STAGE of an attack, you are already breached when ransomware is deployed. 2) MFA is good, but easily bypassed if you gain access to post authentication credentials: https://lnkd.in/gSBk9SfM Or if you prefer a more visual demonstration: we recorded a demo showing how to take over a zoom: https://lnkd.in/gfyhMK97

2

⚡Cybersecurity executives are confronted with an ever-evolving environment and must be proactive using the most current best practices for risk management and incident readiness. How are you being proactive? Elevate your risk management and IR skills and save ➡️ https://lnkd.in/e-uUcnBm #SANSTraining

5

⚡Cybersecurity executives are confronted with an ever-evolving environment and must be proactive using the most current best practices for risk management and incident readiness. How are you being proactive? Elevate your risk management and IR skills and save ➡️ https://lnkd.in/e-uUcnBm #SANSTraining

1

Struggling with any of these? 1) Siloed security tools and responsibilities 2) Vulnerability prioritization, triage, and remediation 3) DevSecOps integration 4) Risk management We’ve got you covered! 😉 Take a glance at what we can do to help your ASPM initiative...ASAP! #UnifiedRemediation #ASPM #DevSecOps #VulnerabilityManagement

19

📣 Next up at GRC Connect Chicago! Best Practices for Zero-Day Vulnerability Attack Responses & Emergency Assessments, with Shane Hasert, Director-Threat Analysis and Cyber Security Standards at ProcessUnity Join us for a discussion on the best practices to responding to zero-day vulnerability attacks and conducting emergency assessments. We'll outline what's required to prepare in advance so you're ready to execute when the time comes. From establishing solid communication channels to leveraging automation, we'll cover the necessary steps and considerations for an effective response plan. Find out more about GRC Connect Chicago here: https://lnkd.in/eE2YqfxV GRC Connect Chicago | April 16th & 17th | Crowne Plaza Chicago West Loop #GRCConnectChicago #GRCConnect #Chicago #Governance #Risk #Compliance #AI #GRC #Technology

1

SC Media recently highlighted an audit by the Department of Health and Human Services Office of the Inspector General, conducted in partnership with BreakPoint Labs and made public on Monday, that uncovered significant gaps in #cloudsecurity within the HHS Office of the Secretary (HHS OS). The audit, which included #penetrationtesting and phishing simulations, revealed vulnerabilities that exposed sensitive data and allowed unauthorized control over #cloud systems. BreakPoint Labs is proud to support the HHS OIG in conducting these critical #cybersecurity audits, and commends the Department's proactive steps to implement robust cloud security measures necessary to protect sensitive information and maintain the integrity of federal health systems. Learn more about how BreakPoint Labs is Managing Cyber Risks and Mitigating the Impact of Cyber Attacks. https://lnkd.in/eUUUsjvC https://lnkd.in/dDAi66B5 Read the Full Report at: https://lnkd.in/daftkmcV #TeamBreakPointLabs | #BuildProtectLearn

15

1 Comment

How HHS-OIG conducts cybersecurity audits Healthcare organizations and HHS entities can use the recommendations provided in HHS-OIG cybersecurity audit reports to strengthen the security of their systems. https://lnkd.in/gqNcZNsX

1

With third-party cyber risk mounting, 80% of security risk decision-makers are turning to risk ratings platforms. What's their playbook on building and managing a third-party risk management (TPRM) program that will easily scale and help achieve better risk outcomes? Join Forrester Analyst, Cody Scott, and RiskRecon VP of Strategy, Jonathan Ehret, CISSP, CISA, for an engaging discussion on the top strategies to drive value from risk ratings and benchmark your TPRM maturity. Register now: https://bit.ly/4bMeZGn #RiskManagement #VendorRiskManagement #ThirdPartyRisk

20

The only way to tackle shadow IT is with a solid plan. Swipe right 👉 for a masterclass in uncovering and managing hidden risks. We're breaking down the essentials: 🛠️ Craft a detailed inventory of approved tech—stay updated. 🔍 Use continuous monitoring for real-time insights. ⚖️ Assess application risks—prioritize security. 📜 Enforce smart policies for cloud usage. 🎓 Empower your team with knowledge and tools. 📈 Benchmark and report—showcase your progress. Ready to lead with strategy and precision? Dive into our comprehensive guide for reducing Shadow IT and elevating your security posture. Your journey to a robust cybersecurity strategy begins here. Download the free ebook to learn more ➡️ https://ow.ly/ZueZ50Rru1U

16

On-demand now! Check out this SANS Institute video featuring Avalor's own Lee Isenman to learn how contextual risk management can uplevel your #VulnerabilityManagement & improve your risk posture. Watch ⤵ https://lnkd.in/eWbdZD49 #cybersecurity #CISO #CSO #infosec

23

In today’s fast-paced digital world, cyber threats are constantly evolving. Don't wait for an attack to happen—be proactive! PSM Partners offers top-notch cybersecurity services designed to keep your business safe and secure. Our proactive approach includes advanced threat detection, comprehensive risk assessments, real-time monitoring and regular security updates. Learn more about our proactive cybersecurity services at https://bit.ly/3povEwv #Cybersecurity #StayAhead #PSMPartners #DigitalSafety #BusinessProtection

3

⚠️75% of the vulnerabilities submitted to the National Vulnerability Database (NVD) in 2024 have yet to be processed. Not only does this prove how quickly threats develop, it highlights how an overreliance on collaboration can leave organizations in the dark. Traditional security measures miss never before seen malware threats, but these threats can't hide from CodeHunter's automated threat detection & analysis. Read more about the NVD backlog here👇https://hubs.ly/Q02BYXmg0

4

In this second installment of the 3-part series, Compliance Services Practice Lead Christopher Camejo digs into the second half of PCI DSS version 4.0 requirement 6.3.1 related to risk ranking. Read it now! #security #blog #PCIDSS #RiskRanking https://hubs.la/Q02s_Swd0

24

2 Comments

UnitedHealth’s $1.6 Billion Tally Grossly Understates Cyberattack Cost Full article here: https://lnkd.in/evszf6N8 "Noteworthy longer-term damage estimates tabulated by Safe Security, a leading cyber risk quantification solutions firm, predict a far significantly higher financial impact — with multiples of double Rex’s sum reasonably possible. The Safe Security prediction employs the FAIR Materiality Assessment Model (MAM™) standard developed at the FAIR™ Institute, the industry standards body for risk quantification. The FAIR-MAM™ approach reveals and consider hidden costs due over time to best assess material cyber risk from and more fully and accurately estimate loss contingencies."

23

As your identity security program evolves, it’s essential to gain greater context on critical content to help lock down sensitive information as a foundational piece of your security program. At the end of the day, data is ultimately what you are trying to govern and protect. Where do you start and how can you leverage the benefits of integrated data access governance as an aspect of your security program? Read our 5 tips on governing and protecting your data: https://slpnt.co/49J7ePM

70