Howard Ting

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

172

9 Comments

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

Enjoyed reading this post from CISA Director, Jen Easterly on the USDA's adoption of FIDO Protocols, referencing the CISA's publication from the 20th: "USDA’s success story should inspire all enterprises to migrate to FIDO authentication". Referencing the CISA publication: "Authentication technologies that do not involve FIDO or public key infrastructure (PKI)—a security framework based on public key cryptography—to support confidentiality and integrity will only continue to put organizations at risk by allowing malicious cyber actors initial access to their networks via credential phishing attacks."

1

🎂 And because it's our partnership birthday... Expel 🤝 modePUSH...two of the best in the biz are teaming up! This partnership helps modePUSH customers not only recover from data breaches, but also build a comprehensive security strategy to prevent future incidents. Learn more: #expel #LinkedInCommunity #partnerships #modepush

5

CxOs, it's time to rethink your network security approach. ZTNA alone won't cut it in today's threat landscape. Discover why ZTNA integrated into SASE is the key to securing your business end-to-end 👇 #SASE #ZTNA

3

Given the new reality of today’s growing #threatlandscape and #complexity of #applications, the #pointproduct tool approach is ineffective. To optimize the performance of security architectures, increase the effectiveness of #cybersecurity teams, and, ultimately, advance defenses, #platformization is essential: a recent study by #IDC shows that, with a cybersecurity #platform, teams are 55% faster to address #cyberattacks and 58% quicker to #remediate security events – while organizations are in line with their business objectives, with a three-year #ROI of 203%.   More insights on our #platformization approach by Palo Alto Networks founder and CTO Nir Z. Helmut Reisinger Florian Hartwig Sergej Epp Marc Mueller Damaris Soellner Angelika Kempf Martin Zeitler Andy Weiss Wojciech Golebiowski

21

really liked the takeaways SeeMetrics distilled from this, esp about consensus security metrics still being unsettled as the technology, threats, and understanding levels are changing very quickly. https://lnkd.in/gZrxbsWQ

19

1 Comment

🔥 Tomorrow night at 6 pm PDT, join us at the OWASP Orange County #meetup where Mike Larkin, CTO and co-founder of Deepfactor will lead the 90-minute hands-on live #workshop "Vulnerability Reachability Analysis Using OSS Tools” and will dive into: ✅ What vulnerability reachability is and why it is important ✅ Two main ways of understanding reachability (static call graphs and runtime analysis) ✅ Two short exercises for the attendees to gain hands-on experience using both types of tools against real applications with real vulnerabilities We look forward to seeing you there. Check the link in the comments for sign-ups! #AppSec #Security #Deepfactor

13

2 Comments

Getting the band back together for the next era in SecOps shifting left! It's an honor to be part of this. Let's chat about making the magic happen together!!! If you'll be at Black Hat, let's meet up. #shiftleft #prediction #prevention #SecOps #blackhat #GenAIsecurity

8

Check out these stats.

9

Are you coming to RSA Conference? If so, join us at SCW Coffee Shop! Bluestone Lane SOMA Coffee Shop 55 2nd St, San Francisco, CA 94103 On May 6th | 12:30PM PST. Join Secure Code Warrior CTO & Co-Founder, Dr. Matias Madou, Jeffrey Martin from Mendio, John B. Dickson from Lasithi Security, and Viswanath S Chirravuri from Thales Digital Identity and Security to learn about: Incredible techniques for winning over developers and helping them prioritize security The challenges in measuring security skill development, and how to overcome them Why a developer-centric ‘Trust Score’ could be the missing piece of the compliance puzzle for every top organization and can unlock the benchmarks needed to reach new levels of risk reduction in code. https://lnkd.in/gMzG2WuJ

12

Have you defined how to work with Third Parties in your Incident Response Plan? Israel Bryski, Chief Information Security Officer at MIO Partners, joins Jeff Edwards, Co-Chair of the SafeHouse Initiative and guest host Alex W., Cyber Security, DFIR, and SOC Director discuss the sixth common flaw in Incident Response Plans which is improperly utilizing external expertise. Listen to the SafeHouse Podcast and hear what these experts have to say about how to properly leverage external expertise to maximize their effectiveness in your Incident Response. Link in the comments ⤵ #cybersecurity #cyberattack #cyberprotection #businesscontinuity #operationalresilience #incidentresponse #cyberincident

16

1 Comment

A new "Ransomware" module is being deployed by #P2PInfect. Just recently we presented at fwd:cloudsec about our discovery of #P2PInfect and how aggressive it is becoming. We noticed an increase in aggressive behavior over the year. Recently a new "Ransomware" module is being deployed. Candid.Technology report here: https://lnkd.in/erQJqM6E #Ransomware fwd:cloudsec talk here: https://lnkd.in/erhEQuFi

19

1 Comment

There's plenty that's been written about the CrowdStrike issue, but this blog is a bit different. We offer our predictions on what happens next for CRWD, its competitors, and CISOs. Allie Mellen and Jess Burn joined me on this one with Joseph Blankenship, Stephanie Balaouras, and Liam Holloway. Give it a read!

24

4 Comments

They say that for a concept to be portable, it must be memorable. In that spirit, I wanted to offer a few suggestions for connecting to the intent of each of the ISO High-Level Structure (#HLS) elements. For those of you building your management system(s), or simply integrating a new MS (like #ISO42001) into your existing management system(s), please keep these quotes in mind. ➡️ Clause 4: Context of the Organization Understanding internal and external dynamics affecting goals and systems. 🖊️ “To know thyself is the beginning of wisdom.” – Socrates This speaks to the importance of self-awareness—an apt metaphor for understanding your organizational context. ➡️ Clause 5: Leadership Demonstrating commitment and setting direction for the management system. 🖊️“A leader is best when people barely know he exists, when his work is done, his aim fulfilled, they will say: we did it ourselves.” – Lao Tzu This captures the essence of leadership that inspires action and responsibility as a cultural norm. ➡️ Clause 6: Planning Determining risks, opportunities, and objectives for continual improvement. 🖊️“In preparing for battle I have always found that plans are useless, but planning is indispensable.” – Dwight D. Eisenhower It underscores the importance of the planning process, even (or especially) when conditions change. ➡️Clause 7: Support Providing resources, competence, awareness, and communication. 🖊️“Give me six hours to chop down a tree, and I will spend the first four sharpening the axe.” – Abraham Lincoln Your focus on preparation and equipping your resources aligns perfectly with this clause. ➡️Clause 8: Operation Executing and controlling processes to meet objectives. 🖊️“Well done is better than well said.” – Benjamin Franklin It emphasizes the importance of action and implementation over mere promises. People believe the behavior, not the words. ➡️Clause 9: Performance Evaluation Monitoring, measurement, analysis, and evaluation of performance. 🖊️“What gets measured gets managed.” – Peter Drucker This highlights the significance of consistent evaluation and feedback, both balancing and reinforcing. ➡️Clause 10: Improvement Continual improvement of the system and corrective action for nonconformance. 🖊️“The greatest glory in living lies not in never falling, but in rising every time we fall.” – Nelson Mandela This resonates with the spirit of continuous improvement and learning from mistakes. Failure isn't fatal unless we choose for it to be. I would genuinely love your feedback…what quote or quotes resonate most with you as you think about architecting your governance and management systems? A-LIGN #TheBusinessofCompliance #ComplianceAlignedtoYou

10

2 Comments

If you care about Machine IDs 🤖 and you missed this webinar I participated in June, here is the free recording! 🎥 It was an honor to chat with Mandy Andress from Elastic, Jake Bernardes from anecdotes and Itamar Apelblat from Token Security #MachineIdentity #nhi #machineIDmanagement

19

⚠️ 𝟐𝟒-𝐡𝐨𝐮𝐫 𝐰𝐚𝐫𝐧𝐢𝐧𝐠 ⚠️ There’s still room to register for tomorrow’s special session✨ Tune in as Tamir Frenkel & George Tubin tackle the most prolific cyberattack vectors and advise #cybersecurity capabilities for small teams to detect inbound threats → https://lnkd.in/d2aTG9kk #informationsecurity #MSP #SMB #MSSP #riskmanagement #threatintelligence

24

ZTNA is great for remote access. But what happens when users switch between home, office, and beyond? Inconsistent policies and complex configurations create security gaps and poor user experience. Cato UZTNA is the next evolution in zero trust. Download the eBook to learn more 👇 #ZeroTrust #SASE #cybersecurity

5