Scott Roberts

Following multiple credential stuffing attacks, Roku has activated two-factor authentication (2FA) on all user accounts to avoid account compromise. Credential stuffing attacks are successful when users reuse their passwords on different platforms and one suffers a breach. #cybersecurity #credentialstuffing #phishing https://loom.ly/fbSUxwg

4

Cato Networks: Take the Global Backbone Interactive Tour Try the global backbone for yourself. In just 5 minutes you will experience how simple it is to: (1) Configure custom traffic routing policies (2) Egress from dedicated private IP addresses (3) Avoid the erratic nature of the public Internet (4) Route traffic over the global backbone (5) And more hidden gems.

2

What should be the agenda for the upcoming CSA IL event during Cyber Week? You decide by completing the survey in the first comment

13

1 Comment

Faster, more accurate with more cost-effective mitigation techniques…the answer to today’s short-lived, damaging ddos attacks - https://lnkd.in/eWr5A-Ub #ddos #networksecurity

11

Lots of interesting data points in this report, but the bit on "false election contributions" caught my eye as the political cycle hits hyperdrive here in the US (and other places). But it wasn't what I thought. I'd imagined from the write-up that this was tricking people into actually donating somewhere else or somehow exceeding donation limits, etc. It's much simpler: attackers are pretending to ask for campaign donations and are just stealing the money instead. For attackers, simpler remains better. Full report at https://lnkd.in/gzFUQkBV

2

At Lacework, we believe context is key to effective code security. 🔍 Our platform provides end-to-end visibility into third-party dependencies, open source components, infrastructure as code (IaC) misconfigurations, and first-party code weaknesses. This context empowers joint prioritization and faster remediation. 🤝 With Software Composition Analysis, we help identify all third-party code vulnerabilities and manage open source licenses. Static Application Security Testing also uncovers hidden risks like SQLi and enables differential analysis. Developer and security teams are stronger together. Learn more: https://okt.to/SuI3m2 #DevSecOps #CodeSecurity #IaC #AppSec

36

All roads seem to lead me back to the critical infrastructure space. It's good to be back. Without any hint of hyperbole, I believe that service availability protection in the ICS and critical infrastructure space is absolutely vital for our health and security, but to do so effectively is very, let's say... nuanced. By bringing together SEMPRE.ai's and our unique areas of expertise, I believe we can develop solutions to defend our shared critical infrastructure.

20

Everyone knows Panasonic TOUGHBOOKs. They are used by many public safety organizations, public utilities and federal civilian agencies. This is why I’m so excited to partner with Panasonic Connect North America and Dominick Passanante and contribute to the cybersecurity of public safety infrastructure and public utilities! #supplychainsecurity #toughbook #infrastructuresecurity #nationalsecurity #smartcompliance https://lnkd.in/gbXDTdtX

30

1 Comment

Say goodbye to email alert fatigue. Unit 42 MDR sent just 37 email alerts during the MITRE Engenuity ATT&CK Evaluation: Managed Services, while other vendors sent hundreds. With Unit 42 MDR, built on Cortex by Palo Alto Networks, we deliver only the most actionable information right when you need it. Stay secure without the noise. https://bit.ly/46iAzRf

256

SideCopy has garnered infamy for its targeting of Indian defense personnel and its proactive creation of malicious artifacts, including email lures and domains. The initial infection typically begins with phishing emails centered around defense-related news and affairs. These emails contain a zip file housing a Windows shortcut (.lnk) file disguised as PDF or DOC files. Upon opening these files, a first-stage HTA file is executed. This first-stage HTA file then proceeds to download and execute a second-stage HTA file while also downloading and opening a decoy document. The second-stage HTA file initiates the deployment and execution of a legitimate executable, which further sideloads a malicious DLL file dropped by the second-stage HTA. This malicious DLL file serves as a remote access trojan (RAT).  (24TTPs with 'Procedure' level details on the TruKno blog) #trukno #mitreattack #threathunting #threatdetection #cyberattack #ciso #threatintel #threatintelligence #cybersecurity #infosec #malwarehunting #malwareanalysis #malware #ThreatAnalysis

1

See how Upwind empowers DevOps teams with comprehensive capabilities to build and run securely in the cloud 👀 🚀 Upwind Cloud Security Platform not only helps security teams protect cloud infrastructure, we also give DevOps teams the ability to remain agile and build efficiently, while ensuring the security of their deployments. This is part one of a two-part series on ways DevOps teams can use Upwind to: ➡️ Get complete visibility of multi-cloud infrastructure, applications and services ➡️ View end-to-end network traffic on a graph-based topology map ➡️ Establish network baselines & view traffic by source process, port, protocol & type ➡️ Control third-party communication and data flows ➡️ Analyze network costs & optimize network traffic …and much more. Want to learn more? Just click on the link below to read the full article! #upwind #devsecops #devops #cnapp #cloudsecurity #network https://lnkd.in/gsG6uxCj

36

1 Comment

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

184

Nearly half of all data breaches now originate in the cloud. Organizations need a way to quickly see, detect, and contain cloud attacks. In this RSA Conference booth session on 5/8 at 3 pm PDT, Wiz and Illumio will cover the intersection of the Wiz Cloud Security Platform with the Illumio Zero Trust Segmentation (ZTS) Platform to ensure a proactive approach to contain attacks as fast as possible. #RSAC

52

Why an 'Asset Visibility' approach is vital for private 5G/LTE networks? 🎯 Proactive Defense: Threats are detected early with real-time asset discovery. 🔐 Secure & Optimize: Ensures every asset is performing securely at its best. 🚀 Streamlined Efficiency: Saves valuable time and resources with streamlined operations. This approach is fundamental not just for enhancing network security but also for driving operational efficiency. Read more here: https://buff.ly/3UboPvp #5g #lte #private5g #privateLTE #visibility

20

1 Comment

More opportunities

1

1 Comment

Why should effective governance be at the heart of your cybersecurity strategy? Check out this new Barracuda report: The #CIO report: Leading your business through cyber risk - it not only answers this question but also provides actionable strategies and best practices designed to steer your organization towards better cyber resilience. See more on how to balance the scales between risk management and operational efficiency - get your copy of the report now: https://lnkd.in/epfsW5Nm #BridgingGovernanceGaps #Cybersecurity

80

3 Comments

Free #GoogleCloud security lesson! 👀 Don't miss this exclusive webinar on April 24th by Google Cloud and Sysdig for the chance to enhance your #CloudSecurity skills with essential strategies for proactive threat management. Through a live demo, attendees will learn risk prioritization strategies and explore the power of event correlation in identifying and neutralizing real-time threats in their Google Cloud environment. Register below! 👇

6

What’s Next: Shlomo Kramer, Cato Networks founder and CEO, on security, SASE platforms and digital transformation SDxCentral CEO Matt Palmer speaks with Shlomo Kramer, Cato Network CEO, about the importance of security for true digital transformation, and other topics.

5

Holy Smokes! I have never answered SO many questions in a webinar before!!! If you are trying to navigate the Entrust CA distrust challenges, you can watch the recording and all the very rich Q&A covered here. https://lnkd.in/gaqbup7w

101

6 Comments