Caleb Barlow

Why Security Matters: A Lesson from the Golf Course https://lnkd.in/duCjZ4s5

1

Tired of managing security testing across a scattered team? AttackIQ Mission Control centralizes control testing for faster remediation and improved ROI. 📅 Join Jose Barajas at 10 AM PT/12 PM CT/1 PM ET on July 18th to learn how AttackIQ Mission Control streamlines security operations for organizations. Discover how to seamlessly orchestrate testing across departments and locations, gain insights specific to your role with role-based dashboards, and simplify testing workflows for faster results. ➡ Register today and optimize your #SecurityOperations: https://bit.ly/3RZa5hw #LinkedInLive #Cybersecurity

13

I often hear the question "Where/What are our biggest security exposures?" Cyentia Institute recently had the opportunity to explore this question using data from hundreds of thousands of attack path assessments conducted through the XM Cyber Continuous Exposure Management (CEM) platform. The attached figure gives a categorical breakdown of what we observed based on all entities (digital assets), total security exposures, and exposures affecting critical assets. . The left-most chart represents the attack surface based on broad categories of digital entities discovered during attack path assessments. Active Directory constitutes just over half of entities identified across all environments. On-premises IT and network devices account for another 31% of entities and cloud environments house the remaining 17%. Not all entities, however, are exposed via attack paths. If we change the scope of the attack surface to include only vetted exposures (entities susceptible to attack techniques), things look different. The middle chart captures this perspective and Active Directory exposures dominate the attack surface. But not all of those exposures affect critical assets. To be truly effective, Exposure Management must encompass all environments and account for where critical assets are most at risk. If we once again rescope the attack surface to focus on exposures to critical assets, a very different picture emerges, which is captured in the rightmost chart. Cloud environments now encompass over half of all critical asset exposures, followed by AD at 33% and IT/Network devices at 11%. Does this sync with exposures across your attack surface? Which perspective/view/chart is your primary guide for managing exposures? The full report contains tons of additional insights on exposure management. Download here: https://lnkd.in/dPfqXG7y #cybersecurity #exposuremanagement #cyberrisk

48

8 Comments

Does being compliant with CMMC really matter right now? A small fraction of defense contractors have already done the hard work to prepare for these critical requirements to protect our national defense infrastructure. For the remaining ~200,000 contractors, it is a risk management decision. Can you afford to lose contracts with those clauses? Would your business stay afloat without that government customer? Could waiting hurt your business and bottom line? We have seen companies lose HUGE contracts that resulted in having to layoff people who have been there for 20 years. This stuff has a huge impact. Don’t think that you have to do it all at once! You just need to start with a solid plan and a budget. When you do this, you are ahead of the majority and will be on your way to a competitive advantage before you know it. The hardest part is getting started. Feeling stuck? Valor Cybersecurity is here to help you get ready. #cybersecurity #defense #compliance #dod

6

Listening to a great talk on single point of failure supply chain by Tarah Wheeler at the IANS Boston security forum. Great talk and a great introduction to the discussion led later today on this issue. If you are here and want to continue this massively important issue join my session on supply chain at 1:05 PM. I believe this is one of the biggest problems in cybersecurity today. What can you do about it? What are you doing about it? Tarah is bringing up some great points. Have you implemented her suggestions? What have been your challenges? Have you considered the wide variety of sources of supply chain attacks? Software updates are not the only thing you need to worry about. What tools exist to help you defend against these attacks? This was a great introduction to today’s discussion and I hope it helps people consider the severity of this issue. Come to learn and share how you are dealing with supply chain attacks with your peers.

8

CMMC Level 2 Assessment Objective: Data in Transit PRACTICE: Organizations must implement cryptographic mechanisms to prevent unauthorized disclosure of controlled unclassified information (CUI) during transmission unless otherwise protected by alternative physical safeguards. ASSESSMENT: The intent of this requirement is to ensure CUI is cryptographically protected during transit, particularly on the internet. The most common way to accomplish this is to establish a transport layer security (TLS) tunnel between the source and destination using the most current version of TLS. Because the use of cryptography in this requirement is to protect the confidentiality of CUI, the cryptography used must meet the criteria specified in requirement SC.L2-3.13.11. Be prepared! Your assessor could ask to 🔍 EXAMINE system and communications protection policy. 🗣 INTERVIEW system or network administrators. 📝 TEST cryptographic mechanisms or mechanisms supporting or implementing transmission confidentiality. (CMMC Assessment Guide: Level 2 Version 2.11, page 222) #CMMC #DoD #cybersecurity #NIST #InformationSecurity https://bit.ly/45HMpUs

41

Regulatory compliance? 🙄 I know right? But ensuring that you enforce geographic specific access to certain systems doesn't need to be hard... one simple policy...

2

This breach at #GlobeLife serves as a reminder that security isn't a one-time setup — it's a continuous process. Regular audits of access permissions and user identity management are essential. Orgs have to continuously evaluate their security posture to address vulnerabilities before they are exploited.

3

Unlock actionable intelligence faster with GrayKey, empowering you to solve cases quickly, reduce crime in your community, and maximize your mobile forensics investment. With GrayKey, you gain... Technical Features: • Faster brute force access to iOS and leading Android devices, unlocking critical evidence. • Ability to access and extract data from devices, regardless of their state. • Access to credential stores like Keychain and Keystore, potentially decrypting previously inaccessible content. • Category-Based Extractions to target specific data efficiently. Evidentiary Results: • Protect your community with real-time information through swift extractions. • Bring closure to victims by obtaining in-depth data to help bring criminals to justice. • Solve more cases by accessing devices quickly and securing vital evidence sooner. • When time is critical, selectively extract the specific data needed to jumpstart your investigation. Discover how GrayKey can enhance your investigations today. www.claritasinsight.com #OnlineInvestigations #CyberSecurity #MobileForensics #CLARITAS

1

The Consumer Financial Protection Bureau has proposed a new rule (https://lnkd.in/giuxe2n9) to limit the hugely grey area that Data Brokers operate within. Glad this is getting news coverage, it's long overdue. #CFPB #DataPrivacy #ConsumerProtection #DataSecurity #PrivacyLaw #Cybersecurity

6

ATTENTION: HEALTHCARE BOARD MEMBERS AND C-SUITE EXECUTIVES. ODDS ARE YOUR ORGANIZATION HAS NOT CONDUCTED AN OCR-QUALITY® RISK ANALYSIS! Shocking? NO! Since ... 90% of the organizations subjected to an OCR investigation involving electronic Protected Health Information (ePHI) are found to have failed to conduct the very first requirement (risk analysis implementation specification) in the very first standard (Security Management Process) in the very first area (Administrative Safeguards) of the ol' HIPAA Security Rule. OCR Audits produced equally dismal compliance findings. How can you address your cyber risks if you don't know what they are? EASY FIX! Attend the upcoming COMPLIMENTARY Clearwater OCR-Quality® Risk Analysis Working Lab. #HIPAA #riskanalysis #riskmanagement #cyberriskmanagement #boardcyberoversight #boardofdirectors

2

🚨 $1.19 Million HIPAA Penalty Highlights Key Compliance Risks 🚨 The recent $1.19 million penalty imposed on Gulf Coast Pain Consultants for HIPAA Security Rule violations underscores the importance of robust data security practices. A breach involving a former contractor’s unauthorized access to patient records exposed sensitive information for over 34,000 individuals. Avoid These Common Pitfalls: 🔍 Risk Analysis: Conduct regular, thorough assessments to identify vulnerabilities in ePHI systems. 🛠 Access Management: Implement and enforce procedures for terminating access to systems for former employees and contractors. 📊 Activity Monitoring: Regularly review system activity to detect unauthorized access or anomalies. 🔑 Access Control: Continuously adjust workforce access levels based on job roles and responsibilities. Why It Matters: Non-compliance with the HIPAA Security Rule can result in significant financial penalties and damage to your organization’s reputation. Proactive steps like risk analysis, staff training, and robust access controls are essential to protect sensitive health information and maintain patient trust. #HIPAACompliance #CyberSecurity #DataPrivacy #HealthcareIT https://lnkd.in/gzRDi4Br

10

Coalfire (a respected QSAC) has published this excellent white paper on how HUMAN's Client-side Defense solution for PCI DSS 4.0, addresses requirements 6.4.3 and 11.6.1. Lean more about the "easy button" for protecting card holder data from third-party and nth party scripts. #payment #PCI #browsersecurity #cybersecurity #riskandcompliance #riskmanagement #compliance #ecommerce #retail https://lnkd.in/ehcbP-qN

18

Earlier this year, Cyentia Institute published a meta-study analyzing the top ATT&CK techniques reported across 20+ industry sources. NOT ONE OF THEM reported observing T1195.003 - Compromise Hardware Supply Chain. Hold on - my aid has an urgent message for me...oh my...they what?!...pagers exploding - really?...I see...got it...will do... Sorry for the interruption. As I was saying, T1195.003 was THE MOST REPORTED sub-technique in the entire study! Download it today from the compromised device of your choice: https://lnkd.in/eafNi5u3 #supplychain #cybersecurity #fud

91

6 Comments

Payments System Disruption - Free All-Sector TTX - Dec 11, 12-4PM ET Join us and hundreds of your peers for a complementary, all-sector virtual tabletop exercise. Are you prepared to respond to the unexpected? In today’s interconnected landscape, resilience isn’t just about preparation—it’s about collaboration and adaptability across all sectors. Our All-Sector Virtual TTX is designed to help leaders and teams strengthen their response strategies, share insights, and navigate complex challenges together. 🔹 Who should attend? cyber, resilience, risk, payments system, and response professionals 🔹 What to expect? Realistic injects, expert-led discussions, and an interactive, collaborative environment that fosters learning and actionable takeaways. Tackle disruptions across business, technology, and third-party ecosystems in a challenging scenario that tests your organization’s resilience and strategy. Don’t miss this opportunity to connect with others, test your strategies, and build resilience across the board. Secure your spot now and take a proactive step toward safeguarding your organization’s future! Register here: https://lnkd.in/dhSbUPyh #Resilience #RiskManagement #TabletopExercise #AllSectorTTX #OperationalResilience #CISO

24