Tanner J.

Just in - CISA publishes Encrypted DNS Implementation Guidance for Federal Agencies to enhance cybersecurity and protect sensitive data. Stay ahead of the curve with this important resource: https://lnkd.in/eMeN-uxt #cybersecurity #CISA #encryptedDNS

2

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

Known Exploited Vulnerabilities Remain Unmitigated Past Deadlines: - Critical severity KEVS took nearly 4.5 months (137 median days) - High severity vulnerabilities take more than 9 months (238 median days) - Medium severity vulnerabilities take nearly 1.5 years (517 median days) https://lnkd.in/g_RExD96

1

Ready to learn more about high stakes in #incidentresponse? Mark your calendar for this Thursday 6/20 for Simply Cyber Fireside with special guest, Jibran Ilyas! If you are interested in a career in incident response, digital forensics, or want to learn more about Jibran's extensive experience in #infosec, you do not want to miss this live stream! Bring your questions to ask in live chat and set your notifications up now: https://lnkd.in/eFRd2drE #dfir #livestream

5

Stop by and see us for the last day of #SOFWeek in Tampa, FL! Your mission objectives are our priority, let's talk about hyper-enabling your analysts with OSINT. #osintforgood #osint #defenseintelligence

26

Who has a solution for this?! A talent management friend was laughed at 3+ years ago when predicting this scenario to an "agency" OSINT trainer. Now the IC threat hunters needing access are handcuffed due to #cost per seat. #osint #ai #intelligence #data #targeting #vulnerability #solution #threat #hunting #contracting #ic #license #defense

6

1 Comment

What are the top issues folks are looking to solve this year at RSAC 2024? We are hearing the usual, MDR, Pentesting/Auditing, and a surprise entrant. Any guesses? Tied for the top spot is 3rd Party and Software Supply Chain Risk! Now that everything is running software, even ceiling fan manufactures will need to ensure they are not passing along risks in their software. As they connect to IoT devices, the risk or being recorded or being used as a hackers infrastructure increase over-time. Challenge is that the tools, infrastructure and talent you would need to start your own internal organization is too much to meet a good ROI for outcome. That is where our partnership with ReversingLabs comes in, we have extensive experience analizing software using their platform and we are working a potential solution. We believe together we can help you quickly prioritize your decision making leveraging our experience and their technology allowing for both of us to save time, energy and resources all the while creating opportunities for a triple win opportunity for us, ReversingLabs and you. For those also concerned with 3rd party partner risk, we have created a package to help you meet your obligations for doing business with larger entities that can be implemented in a phased approach. Our objective is to reduce your barries to entry to win opportunities for your organization.

3

Last year, there were 97 zero days exploited. In 2024, we’re already up to 31 zero days in May. It’s time to recognize official security vulnerability catalog systems aren’t enough. Our new Vedere Labs #vulnerabilityreport analyzes the landscape of exploited vulnerabilities and shows that there is a world of issues not captured by CISA’s Known Exploited Vulnerabilities. With the ever-growing number of vulnerabilities found and exploited by malicious actors, organizations need help to understand what to prioritize. Read now to learn more: https://lnkd.in/gP2VbFbR

73

🚀New DFIR Labs Case🚀 We’re releasing a new medium difficulty case based on a private threat brief! This is another intrusion that ended in a domain-wide compromise and has a wealth of data available for you to investigate. Check it out here: https://lnkd.in/gMjV7TV8

176

Breaking news about NIST 800-171 Rev 3 📣 📣📣 This week, the DoD released a memo ordering an indefinite “class deviation” for DFARs 252.204.7012. Translation: DoD contractors can continue to comply with NIST 800-171 revision 2 until told otherwise, instead of adopting revision 3. #Cyber #Cybersecurity #DTScybersecurity

3

🗞️ In CyberScoop: "[T]he years of work to build up federal collaboration with industry are paying off, from the Joint Cyber Defense Collaborative to the National Risk Management Center — the 'proto' version of the JCDC, [Chris Krebs] said — to the National Security Agency’s Cybersecurity Collaboration Center. "'We’re starting to see that these things work with the resources and time into it, but it’s generating results and there’s no better evidence of the results, I think, than when Russia invaded Ukraine, and the ‘Shields Up’ campaign and the breadth to which that was able to change behavior in industry,' said Krebs, now chief intelligence and public policy officer at SentinelOne." To learn more, read the full article by Tim Starks: https://s1.ai/CS-Collab

42

How can threat modeling help security practitioners balance control with adaptability? In a recent episode of Future of Threat Intelligence, Cody Florek, Director of Information Security Operations at @Sentry, discusses understanding the layers of risk and the potential avenues for attacks. Threat modeling offers valuable insights into hacker strategies and vulnerabilities, encouraging a proactive stance against security threats often overlooked in more rigid control measures. Full episode here: https://ow.ly/Lajw50SbhKt #futureofthreatintelligence #cybersecurity #threatintelligence

11

Cybercom looking to combine and standardize defensive cyber kits; solicitation issued April 29, 2024, DefenseScoop https://lnkd.in/eg3H2tea U.S. Cyber Command, through the Defense Innovation Unit, has begun the process to standardize the gear that defensive cyber teams use to perform their missions. That effort will now also combine the equipment cyber protection teams use with the kit for hunt-forward operations performed by the Cyber National Mission Force, Cybercom’s elite unit tasked with defending the nation against significant digital threats. Hunt-forward operations, conceptualized over five years ago, involve physically sending defensively oriented cyber protection teams to foreign countries to hunt for threats on their networks at the invitation of host nations.

75

3 Comments

The Office of the National Cyber Director (ONCD) recently released the first-of-its-kind Cybersecurity Posture Report at #RSAC: https://bit.ly/3UybTyD The report evaluates the strategic environment and cyber risk landscape, taking into account trends in threat actor capabilities, as well as the opportunities and challenges within U.S. cybersecurity policy. From highlighting the rise of nation-state actors disrupting U.S. critical infrastructure to the prevalence of new attack vectors such as supply chain attacks in emerging technologies like #AI, the report underscores the urgent need for enhanced collaboration between government agencies, private sector entities, and international partners. As an industry leader in threat intelligence, we're committed to providing insights and solutions to empower organizations to defend against emerging threats effectively. We commend ONCD for their efforts and look forward to our continued partnership in shaping the future of cybersecurity policy.

38