Rishi Bhargava

We can't just do this alone. Having a platform that allows our customers to deploy thousands of users in time periods previously unheard of in the PAM industry is one thing, but it takes thought leaders like Jitin to make those projects a reality. Imagine what you could do with a PAM tool that exceeded your expectations?

4

If you're curious about how NodeZero is setting new standards in cybersecurity, I highly recommend reading this insightful discussion from Cyber Defense Magazine!

4

Look forward to this session from Nitin G. who will be presenting next week on Wed, Sept 25th at an upcoming webinar hosted by Tejas Cyber Network on "𝐏𝐫𝐢𝐯𝐚𝐜𝐲 𝐂𝐡𝐚𝐥𝐥𝐞𝐧𝐠𝐞𝐬 𝐢𝐧 𝐭𝐡𝐞 𝐀𝐠𝐞 𝐨𝐟 𝐀𝐈". In this session, he will be exploring how the Generally Accepted Privacy Principles - GAPP, intersect with AI technologies and will provide insights on avoiding dark patterns in AI systems. Key topics will include the legal basis for processing personal data in AI model training, conducting AI risk assessments, and navigating governance challenges in AI development. 𝐄𝐯𝐞𝐧𝐭 𝐋𝐢𝐧𝐤 - https://lu.ma/3zqsa4e5 Additionally, he will dive into the role of  𝐌𝐨𝐝𝐞𝐥 𝐂𝐚𝐫𝐝𝐬 in enhancing AI explainability, the limitations they present, and effective techniques for 𝐦𝐨𝐝𝐞𝐥 𝐝𝐢𝐬𝐠𝐨𝐫𝐠𝐞𝐦𝐞𝐧𝐭, 𝐬𝐮𝐜𝐡 𝐚𝐬 𝐂𝐨𝐦𝐩𝐚𝐫𝐭𝐦𝐞𝐧𝐭𝐚𝐥𝐢𝐳𝐚𝐭𝐢𝐨𝐧, 𝐃𝐚𝐭𝐚𝐬𝐞𝐭 𝐄𝐦𝐮𝐥𝐚𝐭𝐢𝐨𝐧, 𝐚𝐧𝐝 𝐃𝐢𝐟𝐟𝐞𝐫𝐞𝐧𝐭𝐢𝐚𝐥 𝐏𝐫𝐢𝐯𝐚𝐜𝐲. The webinar will also cover the evolving landscape of AI regulations in the U.S. and Europe, offering a look ahead at what to expect.

16

At APISEC|CON #Automotive, Shaked Edri highlighted critical #API vulnerability and attack methods that enable attackers to access vehicle control and data. The vSOC is now challenged with monitoring not only vehicles but also all connected applications and services, requiring deep API detection capabilities. If you missed the session, this is your opportunity to watch it! ➡️  https://lnkd.in/deJ-s2AV Thanks again, Dan Barahona, for the invaluable work you're doing with APIsec University.

10

1 Comment

In ISO42001, the interdependence of clause requirements is critical for ensuring that the AI management system (AIMS) functions cohesively (“in harmony”) across the organization. The clauses are your commitment as the management body and many within the standard rely on both inputs from other areas and provide outputs that guide subsequent processes. For instance, Clause 5.1 - Leadership and Commitment requires inputs from you as top management regarding your organization's AI policy and objectives, which are influenced by risk assessments and stakeholder expectations (Clause 6.1). This clause produces outputs like AI policy directives and resource allocation (Clause 5.2), which inform the rest of the organization. The Planning clause (Clause 6) integrates inputs from internal and external contexts (Clause 4.1) and risk assessments (Clause 6.1.2) and produces outputs in the form of action plans and AI risk treatment strategies (Clause 6.1.3) that must be implemented throughout operations and controls (Clause 8). Similarly, Clause 9.1 - Performance Evaluation, requires input from monitoring and measurement data and internal audits (Clause 9.2), producing outputs like performance metrics and audit results, which feed into the continual improvement process (Clause 10.1) and inform management reviews (Clause 9.3). The interdependencies between these clauses ensures that your AIMS is continuously informed and improved, with risk assessments, management reviews, and audit results providing critical feedback loops from across your entire system, ensuring that each part of the system is both supported by and contributes to the broader AI governance framework set forth by ISO42001. As an example, the leadership’s commitment outlined in Clause 5.1 influences risk planning (6.1) and operational controls (8.1), while the risk assessment (6.1.2) requires outputs that impact performance evaluation (9.1) and improvement processes (10.1). Understanding and managing these interdependencies is crucial for the effective implementation and continual improvement of the AI management system. To discuss more, or for help getting started, please reach out! A-LIGN #iso42001 #TheBusinessofCompliance #ComplianceAlignedtoYou

60

5 Comments

Think you know mobile security? Think again! My good friend Krishna Vishnubhotla expertly debunks five common myths we often encounter in mobile security. This is a must-read for anyone looking to stay ahead in securing their mobile ecosystems. #MobileSecurity #CybersecurityMyths #TechLeadership #DataProtection #MunerisMobility #Zimperium

9

Hi Everyone! I'll be hosting a panel discussion on "The Advent of AI: Adapting to Emerging Threats and Balancing The Offensive and Defensive" at BSidesGoa this weekend! If you're attending the conference, be sure to stop by for this insightful discussion. It would be great to catch up and chat about AI in cybersecurity! Cyware Security BSides Goa #BSidesGoa #AI #Cybersecurity

50

1 Comment

Thanks Samrita Baruah Dr.Deepak Kumar Sahu and VARINDIA for amplifying our cybersecurity platform story with your readers of technology and channel.

26

1 Comment

Take 9 minutes - listen to an insightful discussion around how #ai is impacting #security. This is not a vendor pitch - this is thought leadership….Vectra AI

9

1 Comment

Recent IT meltdown hit home when my kid’s weekend plans were ruined due to flight cancellation. So we had this discussion at the household as to how come this happened. Lots of questions (as usual) than answers but here is the summary - 1. How come after all these years of development & testing a single file can cause the entire OS to come crashing? 2. How come such a severe issue escaped the validation process at the product vendor end? 3. Aren’t the organisations to undertake the patch testing before production roll out at their end? How come this patch got rolled out w/o this issue getting caught by so many organizations? I am sure there are perfectly valid answers to all these (and many more) questions but it seems that keeping pace to adopt latest technology/updates/patches may not be a good strategy after all, is it? Least of it - to have your phones/apps kept on auto-updates? Whatever the answers may be, I am just so glad that I am not the one in the middle of this meltdown. I only imagine all the shit hitting fans for the CEOs, CIOs, IT teams who are to deal with the aftermath of it. #staysafe #microsoft #crowdstrike

60

10 Comments

Kudos to Arunkumar K. Anthony M G. for the wonderful "Episode 1 of CISO Insights by Sennovate is LIVE 🚨" It is a great attempt to share an insightful breakdown of the essential cybersecurity metrics and KPIs every CISO should track through this episode. As part of our series, we welcome more security leaders to share their views and join the discussion. Again, great work, guys! We hope this provides a valuable learning experience. Please share your feedback and comments. #CISOInsights #CybersecurityMetrics #ROI #Sennovate

10

1 Comment

Most organizations are still struggling to inventory all the software applications, operating systems, and firmware running in their environments. Without this foundational step, true visibility into risks remains out of reach.   At NetRise, we’re tackling this head-on by breaking down software artifacts—applications, OS, firmware—into their core components. This approach unveils an entire new set of data points that have always existed but were previously inaccessible at scale.   The risks we uncover go beyond traditional CVEs. We’re talking about issues like hardcoded credentials, compromised certificates, and misconfigurations that could expose your enterprise to significant threats.   In our recent Supply Chain Visibility & Risk Study, we highlighted the risks hidden in routers, switches, and more—risks far greater than what’s found in most vulnerability databases.   The time for comprehensive software visibility is now. Are you ready to see what’s really lurking in your environment?   #Cybersecurity #SoftwareVisibility #SupplyChainSecurity #EnterpriseRisk #NetRise #SBOM #SCRM

161

7 Comments

How Kratikal helped CGTMSE-India achieve its cybersecurity goals with ISO 27001 implementation and VAPT Testing. Hear from Mr. Harish Gupta, CITO of CGTMSE, about their experience! #testimonial #client_review #kratikalreview #cgtmse #cybersecurity

29

"What is your take on CyberArk and Venafi, a CyberArk Company coming together?" was one of the questions Scott Whitehouse posed to us in this studio recording interview at #Impact24 #IWT2024 event yesterday in San Jose. The recording itself is forthcoming shortly. Raj Kulkarni and Emil Gitman from Cyderes were on this panel. Automation at scale is a key theme that emerged in the discussion with the need to address machine identities that continue to proliferate. Everything that enterprises is doing for human identities around certificate management must be done even more so for machine identities . A machine need not be only the "server" in the data center -- it can be any edge device, api calls, algorithms and thus the number is just mind-boggling. Enter Venafi, a CyberArk Company - that was just acquired by CyberArk. It is a perfect complement that augments the world of certificates management across the world of human and machine identities. However, there is a call to action for the ecosphere of partners -- as Ken Koocher said earlier in the day. We need to work together on how CyberArk and Venafi components come together for targeted outcomes for our joint customers. Specifically on Venafi, I had the privilege to meet with the fine team -- Setu Kulkarni, VP of Product Management at Venafi, a CyberArk Company along with Melissa Christiansen :: Satya Jayanti and Sitaram IYER. We are well positioned to be a catalyst for this partnership because: -- there is an OpenShift managed distribution of CertManager and -- Venafi has a Control Plane operator certified by Red Hat Click here to learn more about the ecosphere of Venafi: marketplace.venafi.com

56

2 Comments

Recently, I’ve been immersed in the life and works of Srinivasa Ramanujan—a deep dive sparked by a fascinating conversation on DDoS attack behavior and its role as part of an Advanced Persistent Threat (APT) offensive strategy, particularly in relation to vector attribution. During this discussion, a friend pointed out that the complex patterns we see in these attack flows could be compared to Ramanujan’s intricate theories in number theory and infinite series. This resonated with some reading on detecting APTs as well. Consider this the next potential spork to Mitre Attack In cybersecurity, APTs and DDoS attacks each employ complex, layered strategies to infiltrate or disrupt systems over extended periods, often undetected. The mathematical principles behind Ramanujan’s work—uncovering hidden patterns and structures—offer a unique lens for understanding both APT behaviors and the nuances of DDoS strategies within them. Just as Ramanujan’s insights helped reveal the order within chaotic numeric sequences, we can apply similar approaches to trace patterns in seemingly random network traffic, shedding light on the underlying vectors and behaviors of sophisticated threats. Reflecting on this journey, I’m struck by how much I’ve consumed everything written by Alan Turing—a remarkably complex and often misunderstood hero whose work redefined computing and cryptography. Yet, I now feel a bit of regret for not having been an ‘advocate’ for Ramanujan’s insights sooner. This begs the question: What else should I be reading to uncover these overlooked giants of thought? For the moment, I encourage anyone in our security field to explore Ramanujan’s work. His perspective reveals unexpected intersections that could transform how we approach today’s most intricate security challenges. Let’s broaden our horizons—because inspiration for tackling modern threats might just come from the most surprising places. Have a great week

3

How do you feel about high impact, low effort remediation? Longbow seamlessly integrates into your workflow and tracks issues back to the root cause and owner. With Best Next Actions™, you can eliminate the most risk with the least amount of effort. Plus, remediation guidance that's ticket ready? Say goodbye to wasted time and stress and check out efficient risk management for yourself. #Longbow #ASPM

16

The Palo Alto Networks incident at BlackHat is unacceptable. Their CEO's, Nikesh Arora, subsequent apology was wholly inadequate. This was a fundamental breakdown in judgment and execution. The lapse in oversight is astonishing. A litany of senior executives, including BJ Jenkins, Amit Singh, Nir Z., Lee Klarich, Dipak Golechha, Bruce Byrd, Aimee Hoyt, and Meerah Rajavel, should have intervened. This wasn't a diversity issue; it was a blatant disregard for basic human dignity and brand integrity. Using individuals as props is not only offensive but also detrimental to the company's reputation. Unnikrishnan KP's primary responsibility is to safeguard the brand, the cornerstone of their business. As a leader at DirectDefense, I hold myself accountable for our brand image. Palo Alto Networks must do significantly better. #blackhat #marketing #brand #IYKYK

9

2 Comments

A step towards supply chain inventory and traceability.

3

Here is the shorter version (video) of 7-Key Principles.

40