“I had the chance to work with Mert while he was the CISO of our company. During his tenure, he created a culture of communication to increase collaboration between teams and reshaped the organization and responsibilities to have teams focus on what they excel in. We loved his challenging questions while we navigated toward our goals. His engagements with the business were enlightening, seeing how he speaks in a language that will appeal to the target audience and his persuasion skills.”
Mert SARICA
Washington, District of Columbia, United States
18K followers
500+ connections
18K followers
500+ connections
About
Mert is a well-known and respected Cyber Security Researcher, Speaker, and Blogger. He…
Activity
-
"Tehdit Aktörünün Peşinde" başlıklı yeni blog yazım yayımlandı. Keyifli okumalar. #sibergüvenlik #tehditistihbaratı
"Tehdit Aktörünün Peşinde" başlıklı yeni blog yazım yayımlandı. Keyifli okumalar. #sibergüvenlik #tehditistihbaratı
Shared by Mert SARICA
-
Life really does begin at 40. Up until then you are just doing research. The first 40 years (the first half of life) were “preparation” period for…
Life really does begin at 40. Up until then you are just doing research. The first 40 years (the first half of life) were “preparation” period for…
Liked by Mert SARICA
-
Dolandırıcılar, oltalama siteleri üzerinden ağlarına düşürdükleri banka müşterilerini anlık olarak bu şekilde izliyor ve ardından hesaplarını…
Dolandırıcılar, oltalama siteleri üzerinden ağlarına düşürdükleri banka müşterilerini anlık olarak bu şekilde izliyor ve ardından hesaplarını…
Shared by Mert SARICA
Experience
-
-
-
-
-
-
-
-
-
-
-
Education
-
-
-
-
-
-
-
Licenses & Certifications
Recommendations received
3 people have recommended Mert
Join now to viewMore activity by Mert
-
Inside the Dark Web Economy: Key Insights from SOCRadar's Annual Dark Web Report 2024 https://lnkd.in/egRQ-cYg
Inside the Dark Web Economy: Key Insights from SOCRadar's Annual Dark Web Report 2024 https://lnkd.in/egRQ-cYg
Shared by Mert SARICA
-
Feds: Accused Army soldier searched 'can hacking be treason'
Feds: Accused Army soldier searched 'can hacking be treason'
Shared by Mert SARICA
-
"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections
"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections
Shared by Mert SARICA
-
Collaboration in the Wake of Record-Breaking Bybit Theft https://buff.ly/4ke8cdl
Collaboration in the Wake of Record-Breaking Bybit Theft https://buff.ly/4ke8cdl
Shared by Mert SARICA
-
How to Secure Your Mobile Banking App Against Keyloggers.
How to Secure Your Mobile Banking App Against Keyloggers.
Shared by Mert SARICA
-
FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist https://buff.ly/4ihAthu
FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist https://buff.ly/4ihAthu
Shared by Mert SARICA
Other similar profiles
Explore more posts
-
Just Do IT
**Bitter APT Group Launches Sophisticated Cyber Attack Against Turkish Defense Sector** Cybersecurity professionals are on high alert as a cunning Advanced Persistent Threat known as Bitter has perpetrated a sophisticated cyber espionage campaign targeting a Turkish defense organization. The foreign adversary leveraged two stealthy C++ malware families, WmRAT and MiyaRAT, to infiltrate the victim's systems undetected in November 2024. The assailants' multi-staged attack progressed with cunning craftiness. Initially planting an infectious shortcut file during the exploitation of unusual data streams hidden within a compressed archive, this malicious LNK payload surreptitiously scheduled forthcoming payloads to deploy. This alarming incident underscores the growing complexity of cyber operations aimed at critical industries worldwide. All entities must stay perpetually watchful while also strengthening precautions to immediately identify and block such threats. We at Just Do IT stand prepared to help with actionable intelligence and comprehensive security offerings to shelter your operations from these technologically-savvy intruders. Stay informed and protected. Follow our page for continuous updates on cybersecurity and share this post to raise awareness among your contacts. #CyberSecurity #ThreatIntelligence #APT #MSSP #CyberEspionage #DataProtection #JustDoIT
-
Wade Baker, Ph.D.
I often hear the question "Where/What are our biggest security exposures?" Cyentia Institute recently had the opportunity to explore this question using data from hundreds of thousands of attack path assessments conducted through the XM Cyber Continuous Exposure Management (CEM) platform. The attached figure gives a categorical breakdown of what we observed based on all entities (digital assets), total security exposures, and exposures affecting critical assets. . The left-most chart represents the attack surface based on broad categories of digital entities discovered during attack path assessments. Active Directory constitutes just over half of entities identified across all environments. On-premises IT and network devices account for another 31% of entities and cloud environments house the remaining 17%. Not all entities, however, are exposed via attack paths. If we change the scope of the attack surface to include only vetted exposures (entities susceptible to attack techniques), things look different. The middle chart captures this perspective and Active Directory exposures dominate the attack surface. But not all of those exposures affect critical assets. To be truly effective, Exposure Management must encompass all environments and account for where critical assets are most at risk. If we once again rescope the attack surface to focus on exposures to critical assets, a very different picture emerges, which is captured in the rightmost chart. Cloud environments now encompass over half of all critical asset exposures, followed by AD at 33% and IT/Network devices at 11%. Does this sync with exposures across your attack surface? Which perspective/view/chart is your primary guide for managing exposures? The full report contains tons of additional insights on exposure management. Download here: https://lnkd.in/dPfqXG7y #cybersecurity #exposuremanagement #cyberrisk
8 Comments -
CyberXTron Technologies
🚨 Threat Campaign Alert - Polish Government Targeted by APT28-Linked Malware Campaign 🚨 Summary: Polish government institutions are being targeted in a wide-ranging malware campaign linked to APT28, a group associated with the General Staff of the Armed Forces of the Russian Federation (GRU). The campaign employs social engineering and DLL side-loading techniques to compromise devices and exfiltrate information. Threat Actor/Threat Group: APT28 Malware: None specified Targeted Countries: Poland Targeted Industries: Government Targeted Applications or CVEs: None specified Impact: Device compromise, data exfiltration. IOC: URL's hxxps[://]run[.]mocky[.]io/v3/87f277a5-a081-4976-8e12-351b6c02a903?q=2d07e34c-3dd3-45e8-865c-3888a65ab885 hxxps[://]webhook[.]site/2d07e34c-3dd3-45e8-865c-3888a65ab885 hxxps[://]webhook[.]site/4ba464d9-0675-4a7a-9966-8f84e93290ba hxxps[://]webhook[.]site/577b82c3-7249-44e9-9353-5eab106fead6 hxxps[://]run[.]mocky[.]io/v3/87f277a5-a081-4976-8e12-351b6c02a903?q=127df518-52be-46c5-bbb2-0479f4b9693b hxxps[://]webhook[.]site/127df518-52be-46c5-bbb2-0479f4b9693b hxxps[://]webhook[.]site/0ef0dcf7-f258-4d02-b274-cbf62a2000cf hxxps[://]run[.]mocky[.]io/v3/87f277a5-a081-4976-8e12-351b6c02a903?q=c1112bb3-0e6e-4ba4-abe7-fb31388b47ad hxxps[://]webhook[.]site/c1112bb3-0e6e-4ba4-abe7-fb31388b47ad hxxps[://]webhook[.]site/3f396db1-2016-4b69-9ec3-ffc417d5f3aa hxxps[://]run[.]mocky[.]io/v3/87f277a5-a081-4976-8e12-351b6c02a903?q=efb79108-a2b5-4cba-844d-6352bb8fad8c hxxps[://]webhook[.]site/efb79108-a2b5-4cba-844d-6352bb8fad8c hxxps[://]webhook[.]site/9c87649c-220d-425d-8331-ffc8d9b94a38 hxxps[://]webhook[.]site/66ea3bbc-29dc-4ece-b804-71c6ec7b77b6 hxxps[://]webhook[.]site/f97bcee0-0d91-4503-a30c-027f1b34820f SHA-256 Hash 7c6689f591ce2ccd6713df62d5135820f94bdbf2e035ab70e6b3c6746865a898, c968f9dd1f16a435901d2b93a028a0ae2508e943c8f480935a529826deb3dbeb, 34cabc0ff2f216830ffe217e8f8d0fa4b7d3a167576745aba48b7e62f546207b, dfd1f3229f903887f2474f361a26273dc63a6221883e86c5eea2dec9521dc081, 85f10d3df079b4db3a83ae3c4620c58a8362df2be449f8ce830d087ab41c7a52, 96766dfbf6c661ee3e9f750696803824a04e58402c66f208835a7acebfab1cfc, b3e60909036c4110eb7e3d8c0b1db5be5c164fcc32056885e4f1afe561341afd, 750948489ed5b92750dc254c47b02eb595c6ffcefded6f9d14c3482a96a6e793 MITRE TTPs: T1085:Rundll32, T1059:Command and Scripting Interpreter, T1218.011:Security Support Provider, T1071:Standard Application Layer Protocol Reference: This writing is based on Research Advisory Report published by ‘CERT-PL' Team. --------------------------------------------------------------------------------------- 🚀Join us on our mission to secure the digital world and make cyber defense affordable to everyone! 🌐 Follow "CyberXTron Technologies" for the timely, relevant and actionable cyber threat insights. #Malware #APT28 #Poland #Government #DLLSideLoading #SocialEngineering #SecurityAlert #cyberXTron #uncovertheunknown🛡️🔒
-
DeXpose
Data Breach Alert ☣ - Alleged data sale of Israeli Air Force Threat actor claims to be selling data related to the Israeli Air Force, including detailed information about active and inactive pilots and employees. The alleged data contains information such as ranks, positions, service records, and training qualifications. The leak reportedly includes information from several airbases, such as Haifa, Hatzor, Ovda, Nevatim, Ramat David, Ramón, Tel Nof, Sdot Micha, and the special forces group. - #data_breach #data_leak #infosec #dark_web #DataBreach #DataLeak #Services #CyberThreat #CyberAttack
-
Skopenow
Skopenow's #OSINTLive2024 gathered leading experts from across industries to share invaluable insights for today’s investigators. 🎥 In this clip, Micah Clark from Decision Space describes a paradigm shift in how we should think about online investigations. Want to hear more insights from the top minds in OSINT? Watch all the sessions, filled with practical advice and innovative strategies, at https://bit.ly/3NLPMS3
-
Protechbro Media
A cyber attack has resulted in illicit access to some of BtcTurk’s hot wallets, one of Turkey’s most prominent crypto exchanges The exchange has disclosed a certain degree of asset loss; however, they assert sufficient financial stability to surmount this obstacle. BtcTurk Recovers $5.3 Million; However, What Is The Size of the Loss? In a […] #Crypto #BtcTurk #CryptoExchange
-
Daniel C. Ross, B.Sc., M.B.A., M.A.H.S.
After spending 10 years in the #OSINT space, I am pivoting into the business process design and management space. Expect more posts exploring the #BPM space starting right now. OSINT-based global security news and information will be shared no more than once weekly and from a third-party platform. Every security and intelligence organization, whether public or private, can benefit from BPM. It’s take humility, however, to admit flaws in your business practices to change them. Fragile egos I cannot redesign nor improve. Consider having your security or intelligence company evaluated for re-engineered enhancement!
-
Tobias Musser
CMMC Level 2 Assessment Objective: Flaw Remediation for Controlled Unclassified Information (CUI) Data PRACTICE: Organizations must identify, report, and correct system flaws in a timely manner. ASSESSMENT: All software and firmware have potential flaws. Organizations must identify systems that are affected by announced software and firmware flaws, including potential vulnerabilities resulting from those flaws, and report this information to designated personnel with information security responsibilities. Security-relevant updates include patches, service packs, hot fixes, and antivirus signatures. Be prepared! Your assessor could ask to 🔍 EXAMINE system and information integrity policy. 🗣 INTERVIEW system or network administrators. 📝 TEST organizational processes for identifying, reporting, and correcting system flaws. (CMMC Assessment Guide: Level 2 Version 2.11, page 241) #CMMC #DoD #cybersecurity #NIST #InformationSecurity
-
Meg Fronckowiak
EPSS support is now available in Tenable #Nessus, along with CVSS v4. These scoring systems complement Tenable Vulnerability Priority Rating (VPR) to help you identify and take action on the vulnerabilities that pose the greatest risk specific to your environment. 🔗 Learn more: https://lnkd.in/g2kgY9Tx
-
Meg Fronckowiak
EPSS support is now available in Tenable #Nessus, along with CVSS v4. These scoring systems complement Tenable Vulnerability Priority Rating (VPR) to help you identify and take action on the vulnerabilities that pose the greatest risk specific to your environment. 🔗 Learn more: https://lnkd.in/g2kgY9Tx
-
Brett Osborne
Ask the CCP: CMMC REFERENCE DOCUMENTATION So, I am counting the days until October 28th: • 65 is the approximate number of work days (with weekends and holidays non-working) . . . . . . that sometime in late October CMMC version 2 will become effective. (And note that Congress is supposed to have 60 days review; goal to complete that before election has been repeated.) DoD DoD CIO LIBRARY https://lnkd.in/epBtJkKn Everything DoD DoD CMMC https://lnkd.in/ep5hHPTy HOVER on the CMMC link in blue banner menu – multiple topics Click the CMMC for the “about” page: CMMC 2.0 PROGRAM 5 STEPS TO CYBERSECURITY DoD CIO CMMC Documentation HOVER) Assessments Implementation Documentation More later . . . Resources More in the following post #CMMCv2 #ASSESSMENT #CUI #FCI
-
Wade Baker, Ph.D.
New Cyentia research, continuing our movie title/cover theme with SecurityScorecard. This one plays off Godzilla 2000 and focuses on digital supply chain risk among the world's largest organizations listed on the Global 2000. It joins "Close Encounters of the Third Party Kind" and "The Fast and the Frivolous," which you can find on our site at www.cyentia.com/research #cybersecurity #supplychainsecurity #thirdpartyrisk #supplychainrisk #cyberrisk
-
Andrew von Ramin Mapp
-Disclosure of the 'The Mask' espionage group resurfacing after a decade sheds light on their latest campaign in Latin America and Central Africa, setting off alarms within the cyber security community due to their Spanish-speaking origin and nearly 400 past victims. -The technical sophistication displayed by 'The Mask' group, coupled with their target regions and previous success, signals an elevated threat level to organizations in these areas. -This development underscores the importance of proactive defenses, continuous monitoring, and advanced threat intelligence to mitigate the risk posed by such persistent threat actors in the ever-evolving cyber landscape.
-
Wade Baker, Ph.D.
ICYMI: The inaugural study on EPSS performance and broader vulnerability exploitation trends published this week. If you've ever wanted data-driven answers to questions like these listed in the ToC shown here, download it today (free, no registration req'd): https://lnkd.in/gBbsgwQM #vulnerabilitymanagement #vulnerabilities #infosec
8 Comments -
Point Break Security
- CodeRed Briefing - Analysis May 4, 2024 -<p>CodeRed Briefing: Geopolitical tensions rise as cybersecurity risks escalate. Discover the threats from Russian aggression, cyber-espionage, and more in today's episode. Brought to you by Point Break Security, your AI-driven solution for future-ready security.</p>
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore MoreOthers named Mert SARICA
-
Mert Sarıca
Mew Automation LTD ŞTİ / Owner
-
Mert Sarica
Stellvertretender Geschäftsführer
-
Mert Sarıca
Baycar ambalaj
-
Mert Sarıca
--
25 others named Mert SARICA are on LinkedIn
See others named Mert SARICA