Greg Fitzgerald

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

This recent ransomware attack on an Arkansas water treatment facility highlights a growing concern for critical infrastructure security. I shared some thoughts on what this breach means for the future of cybersecurity in the water sector and how we can better defend these essential services. Check out my full commentary and the detailed coverage below! 👇 #CyberSecurity #CriticalInfrastructure #Ransomware #WaterSecurity

31

1 Comment

CISOs and CIOs in the Denver Community came together recently for a Town Hall discussion on the metrics and communication needed to guide board members on cybersecurity investments. Check out their takeaways on communicating the value of security measures here: https://lnkd.in/gbAyqnC9 #EvantaCISO #EvantaCIO #Security

12

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5

We are shifting compliance left with #Witness and #Hadolint. Want to ensure your Dockerfiles meet compliance controls? This short guide can help you automate the reporting of AC-6, CM-2, and CM-7 for every artifact every time. This is the first in a long series of how to shift compliance left. Follow me and subscribe to never miss out. If there is a tool you would like us to look at and map please let me know in the comments. https://lnkd.in/etNRetSQ

40

5 Comments

Do you use CWEs and CVEs alongside your threat modeling practices? Utilize these catalogs from MITRE for both immediate action and more strategic approaches. Or is one option better than the other? Read the blog to find out more. https://hubs.li/Q02X4X7x0 #CWE #CVE #ThreatModeling #Vulnerabilities #Weaknesses

15

Curious about the implications of NIST CSF 2.0 for MSPs and MSSPs?  Cynomi CEO, David Primor, and William Birchett the founder of the vCISO Network break down the NIST update with 4 questions. Read the blog ↘️ https://hubs.la/Q02CnK_80 #Cybersecurity #NIST #RiskManagement #MSSP #Cynomi

17

👾 Let’s talk about threats to the ever extending Internet of Things! 📍 5pm GMT on Thursday - register now via the link #xiot #iiot #iot #xiotsecurity #iotcompliance #iotsecurity #ot

2

🗣️ Join me tonight for some chat about threats to #XIOT #webinar #iotsecurity #iotcompliance #otsecurity

5

👇 Check out the highlights of the latest cybersecurity research in Dan Lohrmann's piece for Government Technology - featuring BlackFog's State of Ransomware Report! 👇 https://ow.ly/rjFw50SiGyU

6

Once NIST SP 800-171 and SP 800-171A are published this month, federal agencies are on the clock to start using Revision 3 (outlined in the Office of Management and Budget (OMB) Circular No. A-130, “Managing Information as a Strategic Resource.” The policy states on page I-16: “For legacy information systems, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines within one year of their respective publication dates unless otherwise directed by OMB. The one-year compliance date for revisions to NIST publications applies only to new or updated material in the publications. For information systems under development or for legacy systems undergoing significant changes, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines immediately upon deployment of the systems.” Visibility of how your sensitive data is being handled through it's lifecycle will.be essential; even when it's sitting somewhere within your supply chain. Seclore Data Centric Security is a strong part of NIST and achieving zero trust. https://lnkd.in/efiMejPG #NIST800171 #SecurityRequirements #NIST800171A #AssessmentProcedures #CUI #OMBCircularA130

7

Is your organization ready to address the inherent vulnerabilities in Microsoft AVD and Windows 365? Keyloggers, screen scraping, and injection attacks pose significant threats to your sensitive data. This white paper explores these critical challenges and introduces a layered defense approach with SentryBay Armored Client. Discover how keystroke encryption, anti-screen capture tools, and injection protection can safeguard your virtual environments. Don't let your virtual desktops be an easy target. Download the white paper now to take proactive steps toward securing your AVD and Windows 365 systems.

2

Reducing access sprawl is key to a robust cybersecurity strategy. The principle of least privilege (PoLP) grants users only the access they need, reducing risks from insider threats and streamlining compliance. Discover the benefits of PoLP and how it can enhance your organization's security posture. Implementing PoLP could be the key to reducing security risks while maintaining productivity. CMIT Solutions is ready to help. #Cybersecurity #LeastPrivilege #AccessManagement https://lnkd.in/efban74y

5

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

NCUA examiners have said that the ACET is no longer a requirement. They are now recommending that organizations choose an internal framework to align with such as NIST CSF 2.0, CIS, or other! They have stated the new NCUA ISE statements are for them to use as an examination tool and not for credit unions. I would recommend aligning with both an internal framework and the ISE by taking an evidence-based approach so you are prepped for your exam, and meet their requirements!

7

1 Comment