Eric Trexler’s Post

Exciting news for the cybersecurity community! The Office of the National Cyber Director (ONCD) has just released the 2024 Report on the Cybersecurity Posture of the United States. This report offers valuable insights into the progress and challenges faced in our nation's cybersecurity landscape. As cybersecurity professionals, staying informed about the latest developments and trends is crucial. From evolving cyber threats to the importance of protecting critical infrastructure, this report highlights key areas that require our attention and expertise. At West Monroe, we are committed to staying ahead of the curve and providing cutting-edge cybersecurity solutions to our clients. By leveraging our expertise and resources, we can help organizations navigate the complex cybersecurity landscape and ensure they are well-equipped to defend against emerging threats. #Cybersecurity #ONCD #CyberDefense https://lnkd.in/gP9hafXh

🎙️ Did you listen to Alejandro Mayorkas' recent discussion with Kevin Mandia on Mandiant (now part of Google Cloud)’s The Defender’s Advantage podcast? In the realm of cybersecurity, Mayorkas stresses the necessity of united efforts between government and private sectors, spotlighting the impactful Joint Cyber Defense Collaborative (JCDC). As a Google Cloud team member, I find the evolving model of public-private collaboration, particularly through JCDC, both fascinating and promising. Mayorkas underscores the critical role of information sharing in cybersecurity, emphasizing its potential to enhance collective cyber hygiene. Explore the complete article for insights into the dynamic landscape of cybersecurity and the proactive integration of AI in defense against adversaries. https://ow.ly/u8o450QhRhx #Cybersecurity #PublicPrivatePartnership

Embracing the remarkable expansion within the cloud sector, we anticipate ongoing cybersecurity challenges. The escalating costs loom large on businesses' agendas, particularly amidst reports of heightened risks. Regulators, too, are reevaluating their frameworks for board responsibility. As we navigate the coming year, enlisting astute talent to forge pioneering strategies becomes imperative. Simultaneously, seasoned professionals are crucial in nurturing the burgeoning careers of the next wave of cybersecurity experts. The evolving landscape demands a harmonious blend of innovation and experience for sustainable success. Edward Segal, CAE Forbes #Cybersecurity #Innovation #ProfessionalGrowth #RiskManagement

The crucial need for #deepobservability only grows with sophistication.

As the number of cyberattacks continues to rise, so does the growing need for cybersecurity to be treated as a strategic priority on an individual, organizational, and governmental level. Read some predictions for the cybersecurity trends everybody should be on high alert for as we head into 2024. https://bit.ly/3Rkx4nr #CyberSecurityTrends #OTSecurity #IoTSecurity

In the ever-evolving landscape of cybersecurity, Microsoft stands as a beacon of resilience and innovation. With a steadfast commitment to in-depth security, Microsoft has consistently led the charge in protecting digital infrastructures. The company's defense-in-depth approach ensures that security is not just an afterthought but is intricately woven into the fabric of its products and services. From pioneering the Security Development Lifecycle (SDL) to investing over $20 billion in cybersecurity, Microsoft's actions speak volumes about its dedication to secure operations. As we navigate through the complexities of the digital age, it's reassuring to know that companies like Microsoft prioritize our safety, implementing robust security measures that are secure by design, default, and operation. Let's acknowledge and celebrate Microsoft's unwavering commitment to security, which not only protects but empowers us to achieve more in a secure and trusted digital environment. #MicrosoftSecurity #Cybersecurity #InDepthSecurity #DigitalTrust #SecureFutureInitiative

#ICYMI: IST was excited to participate in #CyberNextDC last week, a conference on trends and challenges facing the #cybersecurity landscape hosted by the Cybersecurity Coalition and the Cyber Threat Alliance! IST Chief Trust Officer Steven M. Kelly, CISSP moderated a panel on #IoT product security and security regulations: “The age of safe and secure by design has arrived - or I should say, the age of ‘just trust us’ has ended,” he said. Elsewhere at the conference, IST Senior Adjunct Advisor and The Aspen Institute Senior Director for Cybersecurity Programs Jeff Greene moderated a panel featuring IST Chief Strategy Officer Megan S. on renewal of section 702 of the Foreign Intelligence Surveillance Act. Megan raised the cybersecurity implications of #Section702: “95% of technically-derived cyber intel comes from 702…it's also not just the U.S. that benefits from intelligence collected under Section 702,” she said. Elsewhere at CyberNext DC, #RansomwareTaskForce co-chairs Jen Ellis and J. Michael Daniel participated in a panel discussing the challenges facing the network of cybersecurity non-profits that propose and support policy and technical solutions that underpin much of the Internet. “There is no sort of clear picture of what the non-profit funding landscape looks like, and it has gotten incredibly more complex over recent years,” Jen said. Read Center for Cybersecurity Policy and Law’s recap of the day:  https://lnkd.in/d_bHKQ-G #FISA #702 #cyber #ransomware #InternetofThings #

As #GenAI revolutionizes the tech landscape, many CISOs are curious about how it can supercharge #cybersecurity defenses. At Trellix, we harness GenAI to infuse junior SOC analysts with decades' worth of expertise. Discover how CISO Harold Rivas is leading this charge in his latest insightful blog post. Dive into the future of cybersecurity — read it here!

Interview with George Kurtz, CrowdStrike CEO, at a WSJ cybersecurity event in June. Enlightening interview and good article from WSJ linked at end of this comment. It sounds like the error today may have been caused by CrowdStrike's effort to "bend time" for the purpose of preventing cyber breaches. The sooner they get a patch out automatically to thousands of customers (including majority of F500 and many governments), the sooner customers are protected. Unfortunately, that speed also increases the risk of making a mistake on the part of the cybersecurity vendor, and then automation can instantly spread it worldwide -- which is precisely what occurred here, and as we see can cause more damage than limited hackers. I'm somewhat sympathetic with George after listening to this interview as I understand the goal and pressure, but we're also in a position to point out systemic risk. As a public company, CrowdStrike is under constant pressure to grow -- note the discussion on one hand of their platform and expanding services to meet customer needs, and on the other his discussion of Microsoft's failure in security culture and focus on making more money. I doubt this was pressure to make money nearly as much as it was pressure to save time on behalf of customers. Hackers have also been rapidly shortening the time frame from when a vulnerability is discovered to when they perform large-scale attacks. This is in large part due to their own automation capabilities, including use of GenAI and LLM bots, which puts more pressure on cybersecurity vendors to patch as quickly as possible. I'm currently deeply engaged in increasing security in our KOS, considering many methods in addition to the several already in our architecture. One thing is crystal clear -- cybersecurity platforms and automation are necessary but insufficient. We need much better system design focused on the high-risk areas that generate most of the insecurity, including: 1) Human behavior in extremely vulnerable software, not least email and passwords. 2) Systemic risk in Big Tech cloud providers and their services. The bigger they are and the more interconnected, the greater the risk. 3) LLMs and related GenAI that exponentially increase many risks, including catastrophic and cybersecurity. https://lnkd.in/gfupJeKf (WSJ report on today's massive disaster here https://lnkd.in/gXpztqSN )