Bruce Gibson

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

Are you responsible for hiring a CISO? Are you a NYS Hospital? If the answer is yes, use this checklist as part of your decision-making process: https://lnkd.in/edsFZwsj The demand for top-talent CISOs is significantly higher than the supply. With a vCISO or Deputy CISO from DeepSeas, you can eliminate the challenges involved with CISO recruitment and save on costly salaries, benefits, training, and bonuses. #nys #healthcare #nyshospital #hipaa #ciso

4

Check out the latest blog by Patrick Garrity 👾🛹💙 covering our release of the VulnCheck CLI tool. Whether you are a researcher, analyst or vulnerability manager, the VulnCheck CLI provides an efficient way to query through vast amounts of vulnerability data. You can work online with live API calls or offline by downloading full backups on demand and querying locally. Supported on Windows, Linux and MacOS. https://lnkd.in/gfWi3BB6

17

Identity Security can be much easier. No More credential management, password resets, lack of MFA adoption, login friction, dongles, and all the tool deployment and management. Let's trim the IAM software stack fat! Gradient is a plug-and-play and set-and-forget solution. #MFAisbroken #Identitysecurity

3

🪧 SIEM ≠ MDR Welcome to part one of our three-part blog series where we share the difference between a SIEM system and MDR and how MDR can transform and augment your SIEM tool investment.

1

With the latest and greatest #ransomware infection impacting CDK Global and its huge dealer network, I feel like it's a good time to re-share this piece I wrote from 5 years ago. I could have written this today...seems that nothing is changing on this front. #CISO #infosec #CEO #CIO

7

2 Comments

secrets, secrets are no fun... Secret's have become a sustainable and evolving risk for SDLC's. They find their way into all types of tools, such as Slack and traverse their way from: Code > Build > Artifacts > Cloud > Chat and back around again! That's why many customers rely on Cycode | Complete ASPM for end-to-end Secret's Detection and Remediation.

6

Want to mitigate the risk of Initial Access Brokers targeting your organization? In the final part of the Initial Access Brokers blog series, you'll learn more about how: 🔸Threat intelligence gives you the opportunity to catch Initial Access Brokers in the act. 🔸You can identify if your organization is being targeted. 🔸You can patch the vulnerability before it is exploited by the buyer. https://lnkd.in/g4f4pezD #InitialAccessBrokers #Cybercriminals #ThreatIntelligence

1

seriously badass...formally launched our new MITRE ATT&CK coverage dash this week, can now combine your threat profile w/ MITRE detection gaps & pinpoint the highest value next move for your threat detection team 🛡️ gives Depth (how thoroughly each technique is covered) & Breadth (broader coverage across varied attack methods) customers/secops folks, hmu to test it out with your SIEM/EDR 🛸

66

4 Comments

🚨 SOC Teams Drowning in False Positives: A Wake-Up Call for Cybersecurity Sellers Recent survey reveals SOC teams are struggling with tool overload and false alarms. 81% spend 2+ hours daily triaging alerts, while 62% end up ignoring them. Cybersecurity sellers, specially those with any threat intel product it's time to rethink your approach: 1. Invest time understanding how false positive affect your prospect: burnout is one angle, but maybe your prospect is simply annoyed at their current vendor, this creates an opportunity. Focus on reducing false positives, not just detecting threats. 2. Spend time preparing for a POC. Create a "here's what we know" slide at the beginning, highlight IN DETAIL what those false positives mean. Craft a conversation on how your product will reduce that noise. Maybe AI comes into the picture, but don't oversell it. Everyone is weary of hearing "AI will solve all your problems" 3. Prioritize user experience and workload reduction in your POC. Let's build trust by solving real problems, not adding to the noise. How are you addressing this challenge? #Cybersecurity #CyberSales

6

UpDate: CMMC Program, effective December 16, 2024 The Department of Defense (DoD) has finalized its Cybersecurity Maturity Model Certification (CMMC) Program, effective December 16, 2024, after publishing a rule on October 15, 2024. This program mandates defense suppliers, contractors, and subcontractors to meet specified cybersecurity standards to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) during contract performance. The final rule introduces three CMMC levels, streamlined from the previous five, to assess contractors based on the type of sensitive government information they handle. Key components of the CMMC Program include: Implementation Phases: The program will roll out in four phases over three years, allowing time for training assessors and ensuring contractors can meet the new standards. Assessment Levels: + Level 1: Requires annual self-assessments and affirmations for contractors handling FCI. + Level 2: Involves compliance with comprehensive cybersecurity standards (NIST SP 800-172A) for those dealing with CUI, with assessments done either by contractors themselves or through a Certified Third-Party Assessment Organization (C3PAO). + Level 3: Applies to contractors dealing with high value assets, requiring stringent compliance and government certification every three years. Subcontractor Compliance: Subcontractors must also meet minimum CMMC status based on their contract involvement with FCI or CUI. Ongoing Compliance: Contractors need not undergo annual reassessments but must affirm compliance annually. https://lnkd.in/gBtm_R8F #CMMC

3

🚨 **Security Professionals**—is your incident response plan battle-ready? 🚨 Dive into Red Canary’s Incident Response & Readiness Guide for essential insights on fortifying your defenses and responding effectively to cyber threats. This guide breaks down key strategies to enhance your organization's resilience. 💡 **Let’s discuss**: What's one aspect of your incident response plan you think could be stronger? Share your thoughts and questions in the comments—we’re here to help! 👉 Explore the guide below! #Cybersecurity #IncidentResponse #SecurityProfessionals #RedCanary

5

You're a cyber sales rep. Your tool isn't perfect for everyone. It doesn't necessarily mean your messaging is bad. It's often a timing thing. Not everyone needs what you have right now. If you had a great job and a recruiter reached out to you, you probably wouldn't respond, right? You don't interview for jobs when you have a good job. You don't look for tools when you are completely covered and happy. It's that easy. Keep messaging people and eventually you will find someone who needs what you are selling.

21

1 Comment