Beau R.

Meet with us during RSA Conference and learn how AI-Powered Deception can help with early detection cyber attacks with precision. No false positives!!! 🔒 With traditional cyber defense, You, the Defender, must get it right all the time, but the threat actor needs to be right only once to compromise your critical assets. 🔑 Deception turns this asymmetry on its head to your benefit – with deception, the bad guy must be wrong only once to get caught. ✅ There are many use cases for Deception Technology. Our customers are using it for Advanced Threat Defense, Zero Days, Ransomware Protection, OT Security, Active Directory Protection and Identity Threat Detection and Response (ITDR). They are using it to accelerate their Zero Trust deployment. Suresh (Surra) Yanamadala Raj Gopalakrishna Suril Desai Chad Scrupps #CyberDeception #IdentityProtection #Honeytokens #Ransomware #InsiderThreats #APTs #ITDR

20

Personal CISO Liability is a hot topic. The question is who has the CISO’s back? Watch this webinar for specific recommendations to reduce personal liability and learn how to best protect yourself in the current climate. #cybersecurity #cyberrisk #seccompliance #safesecurity #wiz #crowdstrike

8

1 Comment

My good friend Patrick Garrity 👾🛹💙 has done phenomenal work on vulnerability research in the last couple of years. His most recent research, analyzing vulnerabilities from the past 10 years, indicated that only 1.1% of vulnerabilities are publicly known to get exploited in the wild 😮 [credit to: Patrick Garrity 👾🛹💙for this data point] Just 1.1% ... Separate research by Alex Pinto the DBIR team (Verizon Business) suggested that vulnerabilities tagged/added to CISA KEV have a very short exploitation window, while non-CISA KEV vulnerabilities usually have longer time frames for exploitation. While these studies are independent and run on different data sets, the reality is similar. Your organization could have thousands of vulnerabilities at any given time, but only a very small number of them truly matter. The best vulnerability program should be foundational in prioritization. Ideally, using data/context from the organization will help focus on what you should remediate/resolve. If any of this research interests you, we will discuss this and more in our upcoming webinar with Alex Pinto & Aravind Iyengar (Head of engg and AI at Balbix). https://lnkd.in/guk-isza

22

2 Comments

Excited to finally take the cover off our new Least Privilege Posture Management capability!  Most identity security tools help configure and manage access so things should be secure - but in the real world things drift.  People’s roles change but access doesn’t.  Permissions granted during incidents get left in place.  Access is granted directly from application admins or cloud consoles outside of the identity security workflow.  This new LPPM capability of Opal Security's platform helps security teams manage access and privileges like they manage other aspects of security - by identifying risky access, prioritizing issues according to several risk factors, and enabling remediation - changing or revoking access - with a click.  Love the innovation that our product and engineering teams are delivering to our customers! https://lnkd.in/eWDCntnG

21

1 Comment

Another great wrap-up of #RSAC. If you’re in the identity market, this podcast is a must listen. Simon Moffatt and David Mahdi continue to provide shrewd insight on identity news and the every episode. This one is no different.

7

1 Comment

The SSO market is ready for disruption. IAMs were built for productivity, not for security. The past two years proved that the way Okta and Microsoft IAM solutions were designed and the way these tools are configured and administered impose major vulnerabilities to their customers. Beyond Identity is here to change that. Today we're launching our Secure Access Platform, the only secure-by-design SSO that includes passwordless, phishing-resistant MFA, continuous authentication, device trust, robust third-party integrations, and more. Our new platform is built to replace current SSO, or to augment and harden the solution you have in place. Jasson Casey, CEO of Beyond Identity, shares his vision in this video. 🚀 Reach out if you'd like to set your own demo and learn how you can move beyond your current SSO with Beyond Identity.

74

1 Comment

This week's blog post is a practical guide to securing your mail gateways, written by Patryk Z.! If you want some examples of how SPF, DKIM, DMARC, etc. can be used to reduce the number of phishing emails hitting your staff inboxes then this is the one for you! https://lnkd.in/erE_mGUa #SPF #DKIM #DMARC #email #security #phishing

9

🔒 7 Ways for Critical Infrastructure to Thwart State-Sponsored Attacks State-sponsored hackers targeting critical infrastructure is an escalating concern, highlighted by recent advisories from CISA and other security-focused government bodies. In our latest blog, Shawn Taylor, Senior Director of Solutions Engineering at Xage Security, explores seven foundational protections that can significantly mitigate these threats. 👉 Read the blog to understand how to fortify our critical infrastructure against state-sponsored attacks. #Cybersecurity #CriticalInfrastructure #ZeroTrust #StateSponsoredAttacks

7

vCISOs: Strategy is just the start — tactics bring you victory 𝘚𝘱𝘰𝘯𝘴𝘰𝘳𝘦𝘥 𝘣𝘺 Zip Security 😅 I probably overuse this quote... from Sun Tzu's 'The Art of War': "𝘛𝘢𝘤𝘵𝘪𝘤𝘴 𝘸𝘪𝘵𝘩𝘰𝘶𝘵 𝘴𝘵𝘳𝘢𝘵𝘦𝘨𝘺 𝘪𝘴 𝘵𝘩𝘦 𝘯𝘰𝘪𝘴𝘦 𝘣𝘦𝘧𝘰𝘳𝘦 𝘥𝘦𝘧𝘦𝘢𝘵." But guess what? There's more to it. The preceding sentence says: "𝘚𝘵𝘳𝘢𝘵𝘦𝘨𝘺 𝘸𝘪𝘵𝘩𝘰𝘶𝘵 𝘛𝘢𝘤𝘵𝘪𝘤𝘴 𝘪𝘴 𝘵𝘩𝘦 𝘴𝘭𝘰𝘸𝘦𝘴𝘵 𝘳𝘰𝘶𝘵𝘦 𝘵𝘰 𝘷𝘪𝘤𝘵𝘰𝘳𝘺." Perfect strategies that sit on shelves help no one. Security programs often fall into the void of non-action, not for lack of planning but for 𝙡𝙖𝙘𝙠 𝙤𝙛 𝙚𝙭𝙚𝙘𝙪𝙩𝙞𝙤𝙣. But hey, there's not much you can do about it, right? Wrong. That's where Zip Security steps in. Now, you can transform inaction into action: • Overcome organizational apathy. • Implement real changes for your clients. • And open up new revenue opportunities 💵💰🎉 vCISOs, gone are the days of your roadmap being relegated to the sidelines. Revive your security strategies. Create success stories and drive real results. Ready to paint the perfect picture of security? Check out the comments for a link to a live dashboard, and get the cheat code for tactical results from your vCISO strategy.

13

6 Comments

Imagine being at the forefront 🚀 yet lagging in essentials.❌ XARF, which stands for Extended Abuse Reporting Format, is gaining popularity as the new standard for handling abuse reports.📊 It's not just a new standard, it's also becoming essential for effective digital communication📱 and security🔒. With dozens of reporters and hundreds of abuse teams already using it.👥 This is not just about adopting a format for Hosting Providers and other service providers. It's about commitment to safety, efficiency, and responsibility.🔐 If your systems balk at handling XARF or flinch at attachments in ARF or ACNS, it's more than a technical glitch.⚠️ It's a failure to meet the basic standards of your role in the digital ecosystem.⚡ Not being able to process these reports isn't a tiny oversight; it's a glaring gap in your capability to safeguard your network and, by extension, your users.👨‍💻 In a world where digital security is paramount, being unprepared is inexcusable.❗ Upgrade, adapt, and take action.📲 Your network's safety and users' trust depend on it.💼 Let's not wait for sympathy.🕓 Let's strive for excellence.🌟 Your move.🎯 What's it going to be?

10

📢 Webinar announcement 👇 Mark your calendars 🗓 for Jun 18, 2024 1:00 PM - 2:00 PM EDT The Symantec Threat Hunter Team will provide insights on the 2024 threat landscape with a focus on the "ransomware epidemic". The Threat Hunters will discuss their own ransomware threat intelligence research, third-party analyst data from the Enterprise Strategy Group as well as best practices and ways to mitigate these new ransomware threats and techniques, including Symantec Adaptive Protection. Broadcom #Symantec #threathunting #threatintelligence #bestpractices #ransomware #bestpractices #ransomwareepidemic Vikram Thakur Eric Chien Sign up today!! https://lnkd.in/eCecNJ3J

8

1 Comment

As a teenager, I frequently tried to get my hands on copies of Forbes or Fortune magazines to try to figure out how to become wealthy :) As such, seeing Entro in Forbes definitely has some sentimental value for me. Quick quote from this article on the security of Non-Human Identities and Developer Secrets: "Managing machine identities and secrets balances on a fine line between essential complexity and the necessity of security. Teams must navigate this terrain carefully, as a single oversight can result in security breaches that make the morning news." https://lnkd.in/ehde7-97

23

2 Comments

Read my latest SecurityWeek article on protecting our critical infrastructure. As Chris Wray, the Director of FBI testified in January, our foreign adversary has the “ability to physically wreak havoc on our critical infrastructure at a time of its choosing”. (Yep they’re already in your network) Four months later, are we doing our part to secure every infrastructure, system and asset that power our way of life - energy, water, food, transport, telecommunications, healthcare, banking and finance? #cybersecurity

37

3 Comments

New Release: Anomali's 2024 Cybersecurity Priorities Study! 🚨 We've surveyed 150 security experts from $1B+ revenue companies across North America and Western Europe to uncover the top ten security priorities in 2024 ↓ Read more about the insights from the industry’s top-tier professionals: https://ow.ly/y6v530sC1NA #CybersecurityTrends2024 #SecurityInsights #InfoSec #TopCyberPriorities #SecuritySurvey

7

Cyware recognised in the JMP Securities’ Cyber 66 as a top 66 privately-held cybersecurity companies poised for significant growth and impact in the industry. “One of the key strengths of Cyware’s platform is its ability to facilitate threat intelligence sharing and collaboration among organizations. At the heart of Cyware's success lies its Cyber Fusion platform that combines threat intelligence and next-generation security orchestration, automation, and response (SOAR) to deliver a unique level of visibility and automated threat response. Cyware’s solutions enable enterprises to move beyond their traditional security operations and collaborate through bi-directional threat intelligence sharing via trusted networks such as information-sharing communities (ISACs/ISAOs).” #cyber #secops #innovation https://lnkd.in/egU6a9si

21

🌐 Advancing Cybersecurity: Insights from Steve Benton, VP of Threat Research at Anomali Steve Benton provides a fresh perspective on the professional development of cybersecurity experts. Our VP of Threat Research advocates for the establishment of defined career pathways and standardized practices to enhance our defenses. His insights suggest that by embracing formal growth and uniformity, we can significantly improve security measures across the board. Steve emphasizes the value of cultivating a proactive cybersecurity community focused on continual learning and collaborative strategies. Elevating professional standards within cybersecurity not only empowers individuals but also strengthens our collective digital infrastructures. 👉 Learn more about the importance of professional standards in cybersecurity for our shared future: https://ow.ly/Qk6P30sCskZ #Anomali #Cybersecurity #Professionalization #SteveBenton #DigitalSecurity #FutureReady

4

🌐 Advancing Cybersecurity: Insights from Steve Benton, VP of Threat Research at Anomali Steve Benton provides a fresh perspective on the professional development of cybersecurity experts. Our VP of Threat Research advocates for the establishment of defined career pathways and standardized practices to enhance our defenses. His insights suggest that by embracing formal growth and uniformity, we can significantly improve security measures across the board. Steve emphasizes the value of cultivating a proactive cybersecurity community focused on continual learning and collaborative strategies. Elevating professional standards within cybersecurity not only empowers individuals but also strengthens our collective digital infrastructures. 👉 Learn more about the importance of professional standards in cybersecurity for our shared future: https://ow.ly/EgFL30sCxjo #Anomali #Cybersecurity #Professionalization #SteveBenton #DigitalSecurity #FutureReady

10

Last night's 60 MINUTES featured a disturbing story on the collaboration of hacker groups to accelerate #ransomware attacks. The primary way hackers got in? #SocialEngineering! Roger Grimes often cites the 70-90% of hacks come from social engineering, being proactive is key. This can be managed through a combination of #securityawareness training and technology. The stakes are high, note the $100m impact one company experienced. KnowBe4 can help. https://lnkd.in/efJVJyKp #cybersecurity #humanrisk #infosec #CISO #CIO

94

10 Comments