Sarbjeet Singh

🤔 It is that time of the year. While we chase for the perfect gifts for our loved ones. The cybersecurity experts start putting together their wish list of 2025 predictions. This is another one, and it is becoming harder and harder to differentiate between a prediction or just an obvious reality. No need of a crystal ball or super-mind skills. This one at least had one that caught my attention ( if it becomes reality, it will make the bad actors richer): “2025 Will Bring a Wave of Triple Extortion Attacks Targeting Partners and Subsidiaries” #cybersecurity #predictions #cyber #riskmanagement #cloud #ai #genai #ciso #cio

5

🔒 Cybersecurity Awareness: Protecting Our Digital World 🔒 In today’s digital age, cybersecurity isn’t just an IT issue - it’s a business imperative. 🌐 Did you know that 43% of cyber-attacks target small businesses? 🚨 Yet , many of these businesses are unprepared for such threats. It’s crucial for everyone, from employees to executives, to stay informed and vigilant. Here are some simple yet effective tips to enhance your cybersecurity posture: 1) Use Strong, Unique Passwords: Avoid using the same password across multiple sites. Consider using a password manager to keep track of them. 2) Enable Two-Factor Authentication (2FA): This adds an extra layer of security by requiring a second form of verification. 3) Be Wary of Phishing Scams: Always double-check the sender’s email address and avoid clicking on suspicious links. 4) Regularly Update Software: Ensure your operating systems and applications are up-to-date to protect against vulnerabilities. 5) Backup Your Data: Regular backups can save you from data loss in case of a cyber-attack. Let’s make cybersecurity a priority and protect our digital assets. Share your own tips and experiences in the comments below! 👇 #CyberSecurity #DataProtection #TechTips #StaySafeOnline #ErasmusProjectsCC

6

⚠️ Beware of QR Code Phishing Scams ⚠️ As QR codes become increasingly ubiquitous in our daily lives, it's important to stay vigilant against potential phishing scams that exploit this technology. Here's what you need to know: 🔍 **How it Works**: Cybercriminals embed malicious links within QR codes, often disguised as legitimate offers or promotions. When scanned, these codes can lead to fake websites designed to steal sensitive information or install malware on your device. 💻🔒 #QRCodeSecurity #PhishingAwareness #Cybersecurity #NewBridge NewBridge Pharmaceuticals

5

⏰ sharing this blog by SpyCloud about the continued threat of Infostealers Malware. In 2023, the number of global malware attacks reached 6.06 billion, a year-over-year increase of 10 percent. 🤔 how rethinking your security strategy could improve your odds of being more secure: ✅ You must assume a portion of your employees or contractors will fall victims of Infostealers, no matter how proud you are of the sec tools, training and monitoring in place. One of your investments should be to hire a vendor that proactively checks for any identity data sold by IABs in the dark web. ✅ If you detect infostealers or malware in a company device, you should follow the Post Infection Remediation process described in this blog. ✳️ Avoid headaches by being proactive and take actions to address infostealer risks. #cybersecurity #cyberawareness #malware #infostealers #phishing #iab #ransomware

1

Attending Gartner Security and Risk Summit in National Harbor Maryland. Looking forward to hear about the trends in Cloud and Data security, especially regarding AI. Reach out. Lets connect, discuss, and have fun. #gartnersec #cloudsecurity #datasecurity #riskmanagement

39

3 Comments

CISA has released an analysis and infographic detailing the findings from the 143 Risk and Vulnerability Assessments (RVAs) conducted across multiple critical infrastructure sectors in fiscal year 2023 (FY23). The analysis details a sample attack path including tactics and steps a cyber threat actor could follow to compromise an organization with weaknesses representative of those CISA observed in FY23 RVAs. The infographic highlights the most successful techniques for each tactic that RVAs documented. Both the analysis and infographic map threat actor behavior to the MITRE ATT&CK® framework.

3

Protect against phishing attacks with best practices from CMIT Boston, Newton, Waltham. Learn more: https://buff.ly/3QzPYWl #PhishingProtection #CyberSecurity #TechSupport #CMITBoston #NewtonWaltham #BostonBusiness #DataProtection #TechSolutions #ManagedIT #BusinessSecurity #ITSupport #CyberAwareness #ITCompliance #ITSecurity #NetworkSecurity #BusinessContinuity #ITManagement #BostonTech #BusinessEfficiency #TechUpgrades

4

Excellent panel discussion. Some highlights: 1. Build human error into your programs - people are going to make mistakes. We must plan with that expectation in mind. 2. Threats come from all over! Elena was on an indian restaurant site which had been compromised and it attempted to install malware on her device but it was blocked 3. AI will shrink the time from vulnerability discovery to a working POC. AI generated code can greatly increase speed. 4. Data stored by third parties should be encrypted so that a compromise of the third party (increasingly common) does not expose your data. #cybersecurity

1

Next month is Cyber Security Awareness Month! It’s the perfect time to brush up on your cybersecurity knowledge and practices. Make sure to follow NJTEKS and stay tuned for tips, resources, and strategies to keep your data safe and secure! 🛡️ #NJTEKS #CybersecurityAwarenessMonth #LittleFallsNJ #StaySafeOnline #Cybersecurity #DataProtection #SecurityTips #ProtectYourData

4

👏 Sharing this important blog from Cybersecurity and Infrastructure Security Agency about free services offered to the enterprise to combat #ransomware using tools or services like cyber hygiene. Sandy Radesky emphasizes on how these services showed up to a 40% reduction in exposed devices. This is a significant and valuable effort for the enterprises. Have you used these services? What is your opinion? I am curious to hear examples or concerns #cybersecurity #cyberawarenness #cyberdefence #security #campaign

2

⏰ Sharing this blog by Patrick Garrity 👾🛹💙 VulnCheck highlighting a substantial increase in new vulnerability exploitation disclosures in May. ✳️ Patrick highlights a 90%+ in KEV compared to April. Patrick provides his perspectives and why this is important to pay attention to. 🤔 The evolution and improvements in identifying and reporting exploitable vulnerabilities is key for the fight against threats as cybersecurity teams are burned out by the amount of vulnerabilities reported and struggle to prioritize them. The VulnCheck KEV is a valuable resource for teams to tackle this challenge. #cybersecurity #cisakev #kev #cve #cisa #vulnerabilitymanagement #exploits #security

1

Healthcare organizations face an increasing number of devastating cyber attacks, disrupting patient care and exposing sensitive data. Congress is taking bipartisan action to strengthen cybersecurity standards and reporting requirements, recognizing healthcare as a critical infrastructure vulnerable to nefarious threats. #HealthcareCybersecurity #CriticalInfrastructure #PatientPrivacy

2

1 Comment

⏰ Sharing news for AI security enthusiasts. The first AI tabletop exercise sponsored by the Cybersecurity and Infrastructure Security Agency took place on June 13. ✳️ The tabletop aims to promote collaboration among AI partners and the government to prepare an AI incident response plan/framework focused on critical infrastructure. 🤔 Have your company developed an AI incident response plan? Or at least, update your overall incident plan to include AI risks. If not, you must. #ai #cisa #genai #criticalinfrastructure #incidentplan #security #cybersecurity

1

2 Comments

🎙️”I try and take on projects that maybe no one else wants to take on” After earning her reputation as a successful security leader, Sanju Misra, #CISO at Alnylam Pharmaceuticals, didn’t have to find new roles — new roles came to her. Sanju is back again on The New CISO Podcast with Stephen Moore to cover how she became “the person who gets the call”, and outline her strategy for switching roles as a CISO. Listen now! 🔗 https://ow.ly/eaEY50UvtIr Exabeam

39

1 Comment

⏰ Sharing for awareness and evaluation if the resource could be useful for further investigation. #cybersecurity #security #ransomware #cyberawareness

1

Last week, I met technology leaders from the tri-state area at the Evanta, a Gartner Company CIO Summit in Morristown, NJ. Ravi Mani, SVP & CISO at Quest Diagnostics, which provides comprehensive healthcare testing for one third of all American adults, joined me on stage to talk about the company's secure transformation. Quest has deployed zero trust for its 50,000 users in a phased approach that began with delivering secure access to Internet and SaaS, followed by private applications. But the journey doesn't stop there; I'm excited to support Ravi's plan to make Quest a firewall-free enterprise, something every enterprise should move towards. Zscaler's Zero Trust Exchange helps businesses realize that goal. It allows for microsegmentation with business policies, continuous authentication, a reduced attack surface, and the potential for considerable savings by eliminating the cost of firewalls and their ongoing maintenance. Legacy firewall companies simply cannot deliver a Zero Trust experience. Learn more about how Zscaler can help your business transform at https://lnkd.in/gHNikgPS  #zerotrust #CIO #CISO

554

9 Comments

🎤 Here comes again: another #Cyberawareness month parade 🎉🎉 🤔 I get it! The US marketing strategy has programmed us to expect a month of something over the years, but should we accept the status quo for Cybersecurity Awareness Month? 🤯 I would say NO. We should get rid of it in this case. We see the reports and the stats of Phishing and other types of scams growing month by month. We need a different and more effective approach to making cyber awareness a daily discipline, not a parade.of the month. The scammers laugh during this month and probably love it when companies waste money and resources during September to make no dent in this pervasive issue.

2

1 Comment

Ensure your NYC business is protected against cyber threats. Learn about our comprehensive IT security services tailored for businesses in New York City. Learn more: https://buff.ly/490YRif #ITSecurity #CyberSecurity #NYCBusiness #TechSafety #PowerConsulting

2