Bill Alderson

⚡️Some domains likely used by #transparentTribe #APT36 counciling[.]com nbssedelhi[.]org ashifdigitalseva[.]xyz birthdeath[.]in gov-certificate[.]com viewss[.]click admin-mcas-df[.]ms admin-mcas[.]ms mcas-df[.]ms mcas[.]ms verifycertificate[.]info nimsme[.]org

1

1 Comment

Does being compliant with CMMC really matter right now? A small fraction of defense contractors have already done the hard work to prepare for these critical requirements to protect our national defense infrastructure. For the remaining ~200,000 contractors, it is a risk management decision. Can you afford to lose contracts with those clauses? Would your business stay afloat without that government customer? Could waiting hurt your business and bottom line? We have seen companies lose HUGE contracts that resulted in having to layoff people who have been there for 20 years. This stuff has a huge impact. Don’t think that you have to do it all at once! You just need to start with a solid plan and a budget. When you do this, you are ahead of the majority and will be on your way to a competitive advantage before you know it. The hardest part is getting started. Feeling stuck? Valor Cybersecurity is here to help you get ready. #cybersecurity #defense #compliance #dod

6

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

30

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

"A comprehensive guide authored by Dean Parsons, SANS Certified Instructor and CEO / Principal Consultant of ICS Defense Force, emphasizes the growing need for specialized ICS security measures in the face of rising cyber threats." #criticalinfrastructure #ICS #cybersecurity

3

We are setting the standard and @Gartner agrees! "HyperSphere is the first and only solution to have a published NIST National Checklist hardening guide derived from NIST 800-53 rev5 and aligning to both FISMA and DoD IL4 baselines." 👉 https://lnkd.in/einirruU #Gartner #CyberCompliance #SecurityStandard

13

Cybersecurity for Smart Inverters webinar this session will focus on the final version of NIST IR 8498 Cybersecurity for Smart Inverters Webinar | NCCoE nccoe.nist.gov The National Cybersecurity Center of Excellence (NCCoE) is hosting a webinar on Cybersecurity for Smart Inverters. This session will focus on the final version of NIST IR 8498, which provides seven practical cybersecurity guidelines for small-scale solar inverter implementations. The webinar aims to share NIST’s recommendations with the community, emphasizing the importance of smart inverter manufacturers building products capable of implementing these guidelines. The event is scheduled for January 29, 2025, from 1:00 PM to 2:00 PM EST. #NIST #Cybersecurity #SmartInverter #InnovationNetwork

1

A new CIS/MS-ISAC report sheds light on #TribalSector #cyberthreats and concerns. What is keeping tribal cybersecurity leaders up at night? Link to the full report in our summary. https://bit.ly/4h7PGlr Center for Internet Security Cybersecurity and Infrastructure Security Agency #TribalOrganizations #TribalNet #Cybersecurity #CyberRisk #Ransomware #CybersecurityAwarenessMonth #CyberCrime #SocialEngineering #InformationSecurity #DataBreach #CyberMaturity #ThinkEXTEND

5

National Security Agency and Cybersecurity and Infrastructure Security Agency along with other international cybersecurity agencies have recently published an enhanced-visibility-and-hardening-guidance-communications-infrastructure guide. What stood out to me in this guide was two things. ✦ They have the Network Engineer and a Network Defender role separated out. However some of the tasks they have defined for Network Engineers is typically done by Network Defenders (Implementing SIEM) and others such as enforcing configuration management is typically done by Network Engineers. I didn't see the point of separating out the two roles as roles and job titles vary across orgs. ✦ They suggest closely monitoring configuration modifications or alterations and if feasible, test and override on a frequent basis. Most of the conversations in #autocon2 was about using automation for initial configuration, changes and keeping them synced across multiple devices through a common Source of Truth. I didn't think monitoring configurations and alerting on changes was a common practice. Considering many of the security breaches happen due to configuration errors, perhaps it makes sense. https://lnkd.in/gkcWsA3R

1

Thrilled to have the opportunity to analyze #vulnerability remediation timelines again, this time using data from NopSec. The chart below is based on a survival analysis of vulnerabilities across an environment. Essentially - the time it takes to remediate all affected assets after a vuln is discovered. Everytime I see analysis like this, I'm reminded of how different the real world of #vulnerabilitymanagement is from the "just patch it all yesterday" shallow advice that's so often bandied about. If it were that easy, vuln survival curves wouldn't look like this time after time. How does this square with your experience? I'll be discussing this chart and several others in a webinar next week. Register here and bring your questions, comments, and rants! https://lnkd.in/eHWDrEYN

92

26 Comments

Highly likely that these will be included in the CMEP IP (AML) going forward...

2

There is still time to sign up for April 23's EC-Council's Forensics Webinar, led by Blackswan Cybersecurity CEO and Cybersecurity Professor at The University of Texas at San Antonio, Dr. Mike Saylor. Register: https://lnkd.in/gq7KJ3-C Dr. Saylor will share his 20+ years of experience in Cyber Forensics, covering the following: - Overview of mobile device forensics - Challenges inherent in mobile forensics - Influence of emerging technologies and threats on mobile forensics - Alleviating emerging challenges in forensic practices - Essential skills and tools requisite for overcoming forensic hurdles

9

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5

Physical and Logical Convergence through Design The Cybersecurity Infrastructure Security Agency (CISA) released guidance on the topic of Convergence for federal agencies in 2019. Physical Security and IT departments are increasingly recognizing the reality of converged threats. The traditional separation between these two domains has often led to isolated management of vulnerabilities, which might seem manageable on their own. However, when malicious attacks or simple oversights bridge these gaps, the risks can escalate dramatically. As Dark Reading’s Thomas Kopecky says: “Physical security and cybersecurity are intrinsically connected, and it is no longer effective to manage these threats separately. Cyber-physical incidents can quickly lead to physical harm, destruction of property, environmental disasters, and worse.” To address today’s evolving security challenges, Physical Security and IT departments need to better align their budgets and objectives. For example, the Department of Defense (DoD) has made strides in this direction by investing in integrated security systems that combine physical access controls with cybersecurity measures. This alignment is crucial for reducing risks while maintaining convenience and ensuring compliance with company policies. Advanced converged technologies, such as biometric access controls and real-time monitoring systems, can aid in managing these risks. However, the ultimate responsibility lies with security professionals to chart the right course, integrating both physical and cyber security measures to safeguard their organizations effectively. Here is an example of a physical access breach leading to a logical access breach as completed by an ethical penetration testing company. “I went into the manager’s office and assumed the role of, “I’m here with the help desk. We’re trying to make the network faster.” He escorted me to every machine, and I did a 100% compromise of every machine in that branch, including the wire transfer computer and the network servers. He gave me full access to everything, and he walked with me to do it.” Jayson E. Street, Secure Yeti. Solution: To overcome these challenges, federal agencies can implement a converged security strategy involving the following key steps: Read the remainder of the article and recommended solutions here:

7

1 Comment

🗞️ In CyberScoop: "[T]he years of work to build up federal collaboration with industry are paying off, from the Joint Cyber Defense Collaborative to the National Risk Management Center — the 'proto' version of the JCDC, [Chris Krebs] said — to the National Security Agency’s Cybersecurity Collaboration Center. "'We’re starting to see that these things work with the resources and time into it, but it’s generating results and there’s no better evidence of the results, I think, than when Russia invaded Ukraine, and the ‘Shields Up’ campaign and the breadth to which that was able to change behavior in industry,' said Krebs, now chief intelligence and public policy officer at SentinelOne." To learn more, read the full article by Tim Starks: https://s1.ai/CS-Collab

42