John Williamson

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

Do you use CWEs and CVEs alongside your threat modeling practices? Utilize these catalogs from MITRE for both immediate action and more strategic approaches. Or is one option better than the other? Read the blog to find out more. https://hubs.li/Q02X4X7x0 #CWE #CVE #ThreatModeling #Vulnerabilities #Weaknesses

15

So many of the conversations we have daily are about risk, and in particular what risks matter. This is a great representation to map that out visually. For more behind the chart, check out the blog post in Patrick’s post - it’s a great breakdown of the visualization.

5

First Bug Bytes of 2025! 🚀 This month's issue covers: ✅ Altera's new public program launch with bounties up to $30K 🤑 ✅ Jonah Burgess made all Intigriti CTF challenges now available on GitHub! ✅ Testing JavaScript files for bug bounty hunters! ✅ @ArchAngelDDay sharing how he became the most valuable hacker! And much more! Head over to our blog now to read the latest issue! 👇 buff.ly/3PBo0Zn

8

This Kiteworks article provides valuable insights on ensuring user adoption for Managed File Transfer (MFT) systems, highlighting essential strategies such as user-centric design, effective change management, and seamless integration with existing workflows. By focusing on these areas, organizations can facilitate a smoother transition, enhancing user experience and ensuring the successful implementation of MFT solutions. It's a practical guide for IT leaders looking to optimize their file transfer processes and improve overall efficiency. Three Strategies to Drive MFT Adoption 👉 Read more: https://gag.gl/Cllz0o #cybersecurity #MFT #FileTransfer #Kiteworks

7

Once NIST SP 800-171 and SP 800-171A are published this month, federal agencies are on the clock to start using Revision 3 (outlined in the Office of Management and Budget (OMB) Circular No. A-130, “Managing Information as a Strategic Resource.” The policy states on page I-16: “For legacy information systems, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines within one year of their respective publication dates unless otherwise directed by OMB. The one-year compliance date for revisions to NIST publications applies only to new or updated material in the publications. For information systems under development or for legacy systems undergoing significant changes, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines immediately upon deployment of the systems.” Visibility of how your sensitive data is being handled through it's lifecycle will.be essential; even when it's sitting somewhere within your supply chain. Seclore Data Centric Security is a strong part of NIST and achieving zero trust. https://lnkd.in/efiMejPG #NIST800171 #SecurityRequirements #NIST800171A #AssessmentProcedures #CUI #OMBCircularA130

7

Turbocharge your Incident Response readiness with Natsar's Cybersecurity Program Bundle. 17 docs, NIST-based plan, policy, templates. Save 10% when bundled. #IncidentResponse #CyberSecurity https://zurl.co/F3qD

2

Coalfire (a respected QSAC) has published this excellent white paper on how HUMAN's Client-side Defense solution for PCI DSS 4.0, addresses requirements 6.4.3 and 11.6.1. Lean more about the "easy button" for protecting card holder data from third-party and nth party scripts. #payment #PCI #browsersecurity #cybersecurity #riskandcompliance #riskmanagement #compliance #ecommerce #retail https://lnkd.in/ehcbP-qN

18

This cyber threat analysis distills recent critical insights from the DeepSeas crew, emphasizing vulnerabilities and cyber threats relevant to corporate security infrastructures and emerging cyber threats. The primary concerns include authentication bypass, command injection vulnerabilities, compromised devices, and the risks associated with inadequate XML message security. Dive Deeper: https://lnkd.in/g52cU2sH #deepseas #cti

1

We're bringing Endpoint Inspector SaaS to Amazon Web Services (AWS) Marketplace, helping businesses collect and analyze #data faster to best protect their organizations.    Cellebrite’s role in the Amazon Partner Network helps customers reduce risk, boost collaboration and lower costs. Offering this solution from our Case-to-Closure platform to millions of active AWS customers worldwide is critical to allow more people to deploy it simply and quickly.       Using AWS #cloud infrastructure, Endpoint Inspector SaaS will empower secure, real-time data access from a range of remote devices – without compromising on consent and #security. Read more from Cellebrite Enterprise Solutions: https://lnkd.in/d9Cc7Tfd

126

2 Comments

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5

Attack surface management vendor Liongard has tapped David Powell as its new CRO to focus on advancing the company’s global revenue strategy, accelerating growth and scaling partner success. Liongard CEO Michelle Accardi said Powell brings “a rare combination” of executive experience in cybersecurity, distribution and software as a service (SaaS) leadership. From his work at ConnectWise and Perch Cybersecurity to his CRO roles in observability and productivity tools, she said she believes he has consistently demonstrated his ability to scale high-growth companies. CJ Fairfield spoke to Powell about strategic goals, Liongard’s global growth and what partners can expect from the vendor in 2025 ↓

11

Regulatory compliance? 🙄 I know right? But ensuring that you enforce geographic specific access to certain systems doesn't need to be hard... one simple policy...

2

The latest update for #Indusface includes "CVE-2024-27348 – A Critical RCE Vulnerability in Apache HugeGraph Server" and "15 Best #APISecurity Tools in the Market in 2024". #cybersecurity #infosec https://lnkd.in/euZhNK3x

1