Skip Shaw

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

💡 Security hardening with CIS benchmark is crucial for compliance standards (PCI, HIPAA, NIST, etc.) and protection against threats, but legacy vulnerability management tools are insufficient. In this webinar on July 10th at 11am PT, we will cover: 🔒 The importance of CIS benchmarks in hardening your host OS. ✔️ A real-world use case demonstrating how adversaries exploit misconfigurations in non-compliant hosts. 💻 A live demo of Falcon Exposure Management Security Configuration Assessment (SCA) showcasing real-time assessment and hardening of OS configurations across your enterprise. Register today: https://lnkd.in/gST9ZHZ8

8

Full Video: https://lnkd.in/gQfWJYcc Rebuilding Your Life: Cyberstalking Survival Guide Learn how to rebuild your life after experiencing cyberstalking or physical stalking. Discover the essential steps to protect your personal data and regain your peace of mind. Join us as we answer important questions on this topic. #CyberstalkingSurvival #RebuildingYourLife #PersonalSecurity #DataProtection #StalkingSurvivor #OnlineSafety #PrivacyTips #Empowerment #DigitalSafety #SelfProtection

2

Did you hear about the latest password dump? The dump, officially called "RockYou2024" due to the name of the plaintext password file was posted on July 4th by forum user ObamaCare. This massive password dump contains roughly 10 billion passwords (more passwords than there are people) and includes everything from online casinos to student applications for colleges. Threat actors could exploit the RockYou2024 password compilation to conduct brute-force attacks and gain unauthorized access to various online accounts. Time to change your passwords now... More information can be found here: https://buff.ly/45ZH4rW

5

Has your organization incorporated AI into its cybersecurity strategy? What were the results and was the investment worth it?

1

Amplify detection capabilities with Recorded Future's Validated Sigma Rules, crafted by our research team to minimize false positives. Watch to see how to easily search, implement, and configure Sigma Rules without ever leaving Splunk.

1

A curious Chicago based CISO asked, "What's a cyber risk register....what goes into it...will it help me with my board?" My pithy response....signup for our May 15th Workshop: https://lnkd.in/g6kXZw85 My longer response on cyber risk registers: It's the main reporting tool a CISO uses to inform and collaborate with executive stake holders. This includes line of business leaders, risk committee and even your board. It focuses on enterprise loss and threat classes and their relationship to key business process (aka Crown Jewel assets) You can think of Crown Jewels as constructs composed of key "business impacting" process and related compute assets. If a crown jewel were to be disrupted...it would likely be a "Material Event." The latter distinction being lifted from the SEC. The image above is a high level "Risk Surface Map" of related risk scenarios at the enterprise level. It's part of the building blocks for a risk register. While a map is not the physical territory, it should be coupled with the underlying "Attack Surface" and related efficiency metrics. These are the topics (and more) we cover in our workshops. As always, these are gratis community events for security leaders. Thank you to team Qualys for sponsoring. #CISO #cyberriskquantification #crq #informationsecurity #cybersecurity #cybersecurityriskmanagement #chiefriskofficer #cfo

134

13 Comments

My favorite new Action1 feature, CISA KEV integration, is a great way to prioritize #patching of vulnerabilities of utmost importance. This new blog post explains it in-depth.

17

3 Comments

In an interconnected world, vigilance is paramount. Zimperium experts highlight the necessity for heightened awareness, exemplified by the recent AT&T breach. This incident underscores the urgent need for robust mobile security measures. Embracing proactive strategies can mitigate risks, ensuring that our digital lives remain secure amidst evolving threats. Stay informed, stay protected.

7

2 Comments

This guide addresses the importance of vulnerability management in enhancing security operations by identifying assets, mitigating threats, and ensuring compliance. It aims to assist security and risk management leaders in comprehending vulnerability assessment (VA) technologies within a broader exposure management framework. #vulnerabilities #Flashpoint #vulnerabilitymanagement #secops

4

This is a great post that summarizes 5 key trends in the MSP space. These insights come from Jay McBain's speaking session at the Pax 8 event earlier this month. One thing that stood out was that security has become a major MSP opportunity, with 99% of MSPs deeply engaged with cybersecurity. #MSP #ChannelPartners #CybersecurityServices

3

1 Comment