Robert Bogdon

I recently re-shared a post from Krebs on Security LLC discussing whether your VPN is as secure as you think it is. Hot on the heels of that post is this article from BleepingComputer discussing, you guessed it, that you VPN may not be as secure as you think it is. In this case the issue is fairly narrow - related to the Android OS and specifically DNS query leakage for apps that use a specific C function to resolve DNS names: "This bug occurs while using apps that make direct calls to the getaddrinfo C function, which provides protocol-independent translation from a text hostname to an IP address. They discovered that Android leaks DNS traffic when a VPN is active (but no DNS server has been configured) or when a VPN app re-configures the tunnel, crashes, or is forced to stop." While a DNS query leak is serious and this should be addressed on the Android side of things (Google is looking into it according to an updated posted on the article) it is also unlikely this issue is going to seriously impact most of us.

2

Imagine losing a multi-million-dollar DoD contract because of overlooked compliance gaps. It's not just a theoretical risk—it's the reality many contractors will face in 2025. A single weak point in your supply chain or outdated cybersecurity measures can trigger an audit failure. Non-compliance doesn't just cost money; it costs trust and a lot of headache. The businesses that fail to act now will be scrambling to recover in a market that rewards preparedness. Can your business afford to be caught off guard?

2

Exciting news for CISOs in Bay Area! Introducing BayAreaCISO, a new chapter of Inspire Leadership Network, expanding the premier peer network for top cybersecurity leaders across the region. If you know a CISO in Bay Area please share the network with them. Learn more at: bayareaciso.org #CISO #CybersecurityLeadership #InspireLeadershipNetwork

11

Currently wondering why enterprises globally update a “.sys” file without an airgapped test prior to deployment. Speed? Confidence because “it never happened before”? Automated tests do exist to do a deletion if it doesn’t reboot into a known good state.“ Modern enterprise Windows PCs have BIOS-based tools that can put a device into a known good state on an automated, mass scale. These tools can also go in and delete a specific file and reboot the machine. Wondering how many of these PCs were modern and how many had this capability. If not a human will likely have to intervene to go in and delete that offending CrowdStrike .sys file. If nothing else, the CrowdStrike debacle reinforces more careful consideration of: - single points of failure - automation in mission-critical environments - DR, or disaster recovery planning & drills - using aged PCs & related legacy or unused management tools (my speculation) #crowdstrike

41

5 Comments

Power up ⚡ your vulnerability remediation cycle with the platform designed to zap 21st century headaches. We're talkin' saving time spent patching, automating your work, and getting back on CISA's good side. Here's how Vicarius helps: 🔹 See everything in one place: Forget siloed data and endless spreadsheets. Vicarius provides a single source of truth for all your vulnerability data. 🔹 Prioritise like a pro: Vicarius goes beyond just severity scoring. It uses real-time context to prioritise vulnerabilities that matter most to your organisation. 🔹 Patch smarter, not harder: Integrate patching for Windows, Linux, Mac, and third-party applications – all from the same platform. 🔹 Automate the mundane: Free yourself from repetitive tasks. Vicarius automates patching, threat mitigation, and even vulnerability scans. Try vRx today, risk-free, pain-free. (Seriously, why wait? ) #vulnerabilitymanagement #cybersecurity #CISA #automatedsecurity #patching

2

🔒🚨 Breaking News for IT Pros and Cybersecurity Enthusiasts! 🚨🔒 🔍 Keep your eyes peeled on Apache Flink! The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a security flaw, CVE-2020-17519, as actively exploited. How secure is your stream-processing framework? 🤔💻 🔐 The issue at hand? Improper access control, a classic Achilles' heel in the cybersecurity world. Time to tighten those security belts! ⛑️🔒 🔮 Predictions? Brace yourself for a potential wave of similar vulnerabilities in other frameworks. Stay vigilant, stay secure! 🔐🔍 📈 Let's learn from history, folks. Remember, failing to address known vulnerabilities is like leaving your front door wide open for cybercriminals. Stay one step ahead! 🚪🕵️‍♂️ 🔧 How do we combat this threat? Swift action, robust security protocols, and continuous monitoring are key! Don't wait for the cyber storm to hit, fortify your defenses now. ⚔️🛡️ 💬 Let's discuss! How are you safeguarding your systems against potential exploits like CVE-2020-17519? Share your insights and strategies in the comments below! 💬💭 #ainews #automatorsolutions #Cybersecurity #ApacheFlink #CVE202017519 #StaySecure #TechTrends #ITSecurity Stay informed, stay protected, and keep those cyber threats at bay, tech warriors! 💪💻🔒🛡️ #CyberSecurityAINews ----- Original Publish Date: 2024-05-23 10:39

1

Catch Neal Bridges LIVE as he talks Cloud Data Explosion and the new age of the SOC on Sept 24-25 in San Diego and Irvine, CA at the Orange County #CSA and #OWASP chapter meetings. Check the link below to book a one-on-one meeting and/or RSVP to the events. The innovations of Cloud technologies have evolved and multiplied over the years — along with the amount of data produced and stored. From not enough to way too much, how do security teams harness the power of data overload? https://hubs.li/Q02PZ9g80

6

Exciting to see USDA leading the charge in phishing-resistant authentication! A new Cybersecurity and Infrastructure Security Agency case study out just this week reveals how they successfully protected 40,000+ users using FIDO technology. A few key wins include : * Protected 600+ applications through single sign-on * Implemented phishing-resistant MFA before it became a federal mandate * Created solutions for unique scenarios like biocontainment facilities * Leveraged existing infrastructure through Microsoft Entra ID The case study shows their success came down to three strategies: 1. Centralizing identity management 2. Making incremental improvements through pilots 3. Understanding specific use cases before implementation This serves as a great blueprint for organizations looking to move beyond vulnerable authentication methods like SMS codes and push notifications. USDA shows that with the right approach, even complex enterprises can successfully implement phishing-resistant MFA. 🔗https://lnkd.in/etRTVZ7N #Cybersecurity #multifactorauthentication #FIDO #DigitalTransformation #ZeroTrust

4

This week on Learning Layer's The Road to #CISSP, we talk Domain 8 and the Software Development Lifecycle (#SDL). Take a listen as Sam Meisenberg and Joseph Carrigan tackle the following question: At which step of the SDLC should security considerations be first integrated? A. Functional requirements defining B. Project initiation and planning C. Testing and evaluation control D. System design specification https://lnkd.in/eGwsEE-5

5

1 Comment

Flow down of cybersecurity controls will be the norm. TPRM has never been more important.

4

Ransomware recovery costs average $1.82M — and that's without paying the ransom. 💸 In today's digital terrain, standard backups won't cut it. Enter immutable and indelible backups with Azure NetApp Files & NetApp BlueXP. These aren't your everyday backups; they're engineered to be unalterable and permanent. Read our blog and find out how we ensure your data stays intact, protected, and ransomware-resistant: https://ntap.com/3V0kcUW

85

I was looking for an open source alternative for a tool this morning and it led to a conversation with a fellow practitioner. Bottom line: the state of open source security tooling seems to be really bad now vs. when we entered the industry 10-20 years ago. It seems more and more tools are built for making a quick buck vs. building a personal brand and seeking the common good of making the internet a safer place. This is not ubiquitous, but it certainly seems to be the trend. When I first got into security, people were all about sharing, networking, and community. This led to wonderful careers where we enjoyed not only financial success, but even more so, relationships and the joy of leaving things better than we found them. I still give the vast majority of the code I write away, but it is becoming increasingly harder to find useful open source tooling. This conversation reminded me of a keynote I gave on a similar topic a few years back. It seems to apply as much today as it did then. https://lnkd.in/eTVBCka9

23

4 Comments

Oregon Zoo 🇺🇸 🐪 recently reported that a data breach at a third-party vendor responsible for their online ticket sales led to the exposure of visitors' credit card information. While we're not PCI experts, it's worth asking: shouldn't PCI Compliance cover all technical and operational system components that interact with or are connected to cardholder data? If a merchant accepts or processes payment cards, they must adhere to PCI DSS standards. The compromised card information, including card numbers, CVVs, and expiration dates, represents highly valuable data for hackers, though its utility is limited until banks and visitors detect any fraudulent activity.....however...never forget the wellbeing impact and angst to those impacted. It's easy to overlook that even a #zoo 🦒 , with its dynamic #supplychain and broad operational reach, can be vulnerable to cyber threats. In the case of Oregon Zoo, aside from the recent incident involving a third-party ticket sales provider, the zoo's data has reportedly been compromised in 50 different third-party breaches (according to BreachAware® https://lnkd.in/eV-bpBgq). This raises a question: what additional risks does this exposed data pose to the zoo, and how might it impact their operations and supply chain further? Using the free BreachAware® scan (breachaware.com/scan) isn’t just about your company. Ensure that the companies you share sensitive data with are equally dedicated to privacy! We'd say we know a lot of zoo jokes, but we'd be lion. 🦁 #protectyourprivacy #financialservices #cyberawareness #pci. https://lnkd.in/eg7cNZzE

6

Last night I spent some time talking to a few dear friends calming them down, helping them to sanity check, and navigate evacuating the fires in SOCAL. Though they don't work in our industry, several of you have met these friends over the years. It reminded me of the principles that I keep in working incident response. I leaned on: 1. Being the most calm. 2. Being empathetic. It's ok for people to feel negative emotions, especially during events, I lean on understanding and channeling those emotions. 3. Assist in making action-oriented decisions smaller and more numerous. People, including you, make mistakes in responding to events, making decisions smaller and incremental gives people the opportunity to make smaller mistakes. In this case this meant asking questions about their driving, their speed, their gas situation, their fog lights, etc. Each of these are small decisions that can help people calm down and focus, as well as keep them safe. 4. Helping them avoid pitfalls. 5. Being honest. If I didn't know things I told them. If I knew things, I told them why (experience, news article, whatever). I also follow a mantra of: 1. Manage safety first. 2. Manage convenience second. 3. Manage emotions third. Getting folks to a safe spot is obvious, managing convenience to reduce the immediate challenges is important, but people often confuse this for the first priority. Knowing that it comes second enhances the first priority. Having emotions come last allows people to feel but also let's them know that their feelings don't influence what keeps them safe and what is most convenient. Always remember to communicate, even over communicate, your thoughts and focus on a mantra, your underlying focus is on their long-term well-being. Be flexible for people, but stringent on your principles. I remind folks that this is what I do. For 20+ years now, helping folks in situations, at it's core, is what I do. In professional terms since Blaster and MyDoom. Over that time, it became ingrained in who I am. Let them know that you're honored you could be on the other end of the phone in that situation with them. You're there for it. And lastly, maybe the most important. When everything is all said and done, whether it's a week, a month, whatever. Ask if they're ok. Over the years I've played virtually every role in industry in events (interim CISO, response commander, responder, SME, whatever), as I reflect on that, I recognize that these principles and steps have helped from all of those angles. My heart goes out to everyone affected by the fires in SOCAL. Be safe and take care of each other.

43

Reduce your cybersecurity risk by hardening the 1,000 settings in Microsoft 365 (and the 10 new settings that come out every month) Patriot recommends changing 80% of the default values. We can inform you which changes will impact users. Benefits: 1. Establish Security Configuration Governance to prevent weak configuration from allowing malicious insiders from leaking your trade secrets 2. Establish Data Governance to encrypt sensitive information and delete outdated junk so you don’t get extorted by hackers 3. Free up your staff from performing mundane but critical tasks such as staying on top of the latest changes to your Cloud which could disrupt employee productivity 4. Achieve world class compliance (NIST, CIS, HIPAA, PCI, SOC2 and ISO 27001) Why choose Patriot Consulting? ✅ Unmatched Expertise: Our experts deploy M365 security solutions to more than 300+ companies annually. ✅ Rapid Deployment: We complete in 6 weeks what others take months to do. Don’t let your Microsoft Licensing become shelf-ware! We can consolidate 60+ Security Vendors into a single integrated platform to improve response times to threats (from hours to minutes!) ✅ 100% Success Rate: 297 out of our last 300 projects received 5-star ratings. ✅ Microsoft Validated: Led by a Microsoft MVP in Security, one of only a few in the United States ✅ Proactive Approach: Our dedicated team monitors all Microsoft changes to keep you ahead of new risks. Don't let your M365 environment drift into vulnerability. Let our automated tools and expert analysis identify risks others miss. #M365Security #CybersecurityExperts #EnterpriseSecurity

25