Julian Totzek-Hallhuber

💡 Do I need to report PKI maturity level? Reporting your PKI maturity level isn’t just a checkbox! 🛠️ While not mandated by the PKI Consortium, documenting your PKI maturity level can: 📈 Highlight your current PKI status to stakeholders 🚀 Pinpoint key areas for improvement 📊 Track progress over time effectively Depending on your organization's needs, regulatory requirements, or improvement goals, reporting might be essential. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

9

1 Kommentar

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

#ISO27001 & #SOC2 are hard if you just starting this journey. We released a new feature to navigate the compliance road easily with UnderDefense MAXI. Discover the roadmap with key milestones and artifacts you need outlined to understand your journey & timeline - better. and yeah - #Compliance - could be #easy. It should be #AUTOMATED. That's what we are best at https://hubs.ly/Q02w5TCf0

4

#ISO27001 & #SOC2 are hard if you just starting this journey. We released a new feature to navigate the compliance road easily with UnderDefense MAXI. Discover the roadmap with key milestones and artifacts you need outlined to understand your journey & timeline - better. and yeah - #Compliance - could be #easy. It should be #AUTOMATED. That's what we are best at https://hubs.ly/Q02w5TgP0

2

⚡ Cybersecurity threats are evolving fast! To stay ahead, organizations must embrace new security approaches involving fresh strategies, technologies, and a cloud-ready mindset. 🌐 Enter MITRE ATT&CK — the ultimate guide for security practitioners packed with invaluable insights into attacker techniques and behavior. Pretty handy, right? 💡 Sysdig's eBook show you how to identify and defend against common threats to #AWS environments using open-source Falco rules mapped to the ATT&CK framework. Boost your #AWScloud security and tackle any threat head-on by giving it a read today:

3

CxOs, it's time to rethink your network security approach. ZTNA alone won't cut it in today's threat landscape. Discover why ZTNA integrated into SASE is the key to securing your business end-to-end 👇 #SASE #ZTNA

3

Traditional vulnerability management often falls short, leaving critical gaps. Our guidebook introduces Exposure Management, a proactive approach to detecting and mitigating risks, giving your security team the upper hand. By automating threat discovery, prioritization, and mobilization, adopters can reduce remediation time from weeks to days. Learn how exposure management can transform your security strategy and deliver real results: https://gag.gl/ouk0L8 #Cybersecurity #CISO #ExposureManagement #RiskReduction

6

#100DaysofYara day 1 (LFG!) and the Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) drops an updated version on the same day.

25

🚨 Case Study Alert: How DigiCert Traced Incident Breadcrumbs for Swift Resolution 🚨 Explore how rapid threat detection and remediation can make the difference between a minor issue and a major breach. See the full story and how WireX Systems' advanced tools helped DigiCert react in minutes. #CyberSecurity #ThreatRemediation #IncidentResponse #WireXSystems #DigiCert"

3

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/9yeq105M2RV

4

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/4wMB105OfpG

7

New Ivanti 0-Day vulnerabilities disclosed. Immediate action required to secure your systems. Ivanti has disclosed two critical vulnerabilities affecting Connect Secure, Policy Secure, and Neurons for ZTA products: 🔍 CVE-2025-0282 Critical Remote Code Execution (RCE) Exploited in the wild by Chinese state-sponsored group UNC5337. Targets Connect Secure versions 22.7R2 to 22.7R2.4. 🔍 CVE-2025-0283 Privilege Escalation Vulnerability There is no evidence of exploitation so far. 💡 What You Need to Know: CVE-2025-0282 has a CVSS score of 9/10 and has been actively used for cyber espionage. Attackers are leveraging advanced malware like PHASEJAM and SPAWNANT to achieve persistence. Patches are now available in version 22.7R2.5. Ivanti also recommends running its updated External ICT checking tool to identify potential compromises. 🛡 Our Recommendations: 1️⃣ Run the latest ICT checker to identify suspicious files. 2️⃣ Upgrade to the patched version after thorough investigations. 3️⃣ Use Indicators of Compromise (IoCs) from tools like our Datalake and engage in proactive threat hunting through Orange Cyberdefense Managed Detection services. 👉Check out our blog post for a detailed look at our initial findings🕵️: https://ow.ly/xTmy50UEenV 👨‍⚕️🩹For assistance or remediation expertise, contact Orange Cyberdefense CERT or your representative. Stay vigilant! #CyberSecurity #Ivanti

3

A few recent improvements by the team (🤘) to centrally collect and export forensic data from cloud resources like VMs and Containers, as well as on-premise systems: - Centrally store the evidence as .dd, .e01 or .zip - Download and export to your existing forensic tools - Download files from acquired systems, using “encrypted zip” for suspect files. -- Similar to VirusTotal Intelligence's Download File functionality for those who know it, but for your own data. All part of helping you build a central “Repeatable Investigation Process”

25

3 Kommentare

💡 Unlock the Potential of Your PKI with the PKI Maturity Model! Are you maximizing the benefits of your Public Key Infrastructure (PKI)? The PKI Maturity Model (PKI MM) isn't just a tool - it's your roadmap to elevating your PKI's performance and security standards. 🛠️ Tailored Guidance: PKI MM offers a comprehensive framework, integrating best practices and expert recommendations to refine your PKI's maturity. From identifying improvement areas to implementing robust security measures, it's your go-to resource. 🔍 Assess, Improve, Excel: Leverage PKI MM to conduct thorough assessments, pinpointing vulnerabilities, and enhancing efficiency. Elevate your PKI's maturity level, mitigate risks, and align seamlessly with industry benchmarks. 👥 Stand Out: As a service provider, showcase the caliber of your PKI offerings by leveraging PKI MM to demonstrate excellence to your clientele. Consultants and auditors, use it to drive tangible improvements and provide unparalleled guidance to your clients. 📊 Benchmark and Adapt: Gain invaluable insights by benchmarking your PKI against peers. Stay ahead of trends, refine practices, and ensure your PKI stays agile and resilient. 🌐 Flexible and Dynamic: Designed to cater to diverse organizational needs, PKI MM is adaptable across various PKI implementations - both internal and external. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Leigh Bailey

22

Zero-day threats like CVE-2024-38213 are evolving. Discover how CimTrak's integrity monitoring can help you detect and defend against these elusive vulnerabilities. Read more to stay informed and prepared. 🔒⬇️ https://hubs.la/Q02NQ00m0 #zerodayattack #CVE2024 #cybersecurity

3

Zero-day threats like CVE-2024-38213 are evolving. Discover how CimTrak's integrity monitoring can help you detect and defend against these elusive vulnerabilities. Read more to stay informed and prepared. 🔒⬇️ https://hubs.la/Q02NQ9X60 #zerodayattack #CVE2024 #cybersecurity

5

Remediation Simplified ✅ Security Amplified 📣 AppSec tools often fall short with overwhelming alerts and unclear solutions. Kodem's runtime intelligence changes the game with contextualized prioritization and actionable fixes: – Fix What Matters Most – Runtime intelligence narrows the focus to high-risk areas. – Guided Remediation See How We Do It >> https://hubs.la/Q031BnzH0 Kodem makes securing apps effortless, efficient, and effective by covering the entire application stack, combines code and runtime analysis. #riskmanagement #terraform

7

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/gswu89pR #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

9