Joe Levy

Feeling blindsided by ever-changing cyber threats? Strobes CTEM offers a proactive approach to identify, prioritize, and neutralize risks before they strike. See the big picture with our 5 key steps: ✅ Scoping: Define your critical assets and attack surface. ✅ Discovery: Uncover hidden vulnerabilities across your systems. ✅ Prioritization: Focus on the threats that matter most. ✅ Validation: Confirm and understand the true nature of vulnerabilities. ✅ Mobilization: Take decisive action to remediate threats. Gain continuous peace of mind with CTEM. Contact Strobes https://lnkd.in/dg6wrnyM today and try it for yourself! #cybersecurity #CTEM #threatmanagement #securityfirst

16

Explore the forefront of cybersecurity with Adlumin's Threat Insights 2024 Volume II 🚀 This comprehensive report delves into detailed profiles of emerging threats like Mustang Panda, TA542, and Scattered Spider, while also highlighting critical vulnerabilities impacting global sectors. Equip your team with actionable mitigation strategies to defend against evolving cyber adversaries. Download now ➡️ https://hubs.li/Q02DJWtp0

23

Once NIST SP 800-171 and SP 800-171A are published this month, federal agencies are on the clock to start using Revision 3 (outlined in the Office of Management and Budget (OMB) Circular No. A-130, “Managing Information as a Strategic Resource.” The policy states on page I-16: “For legacy information systems, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines within one year of their respective publication dates unless otherwise directed by OMB. The one-year compliance date for revisions to NIST publications applies only to new or updated material in the publications. For information systems under development or for legacy systems undergoing significant changes, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines immediately upon deployment of the systems.” Visibility of how your sensitive data is being handled through it's lifecycle will.be essential; even when it's sitting somewhere within your supply chain. Seclore Data Centric Security is a strong part of NIST and achieving zero trust. https://lnkd.in/efiMejPG #NIST800171 #SecurityRequirements #NIST800171A #AssessmentProcedures #CUI #OMBCircularA130

7

We are shifting compliance left with #Witness and #Hadolint. Want to ensure your Dockerfiles meet compliance controls? This short guide can help you automate the reporting of AC-6, CM-2, and CM-7 for every artifact every time. This is the first in a long series of how to shift compliance left. Follow me and subscribe to never miss out. If there is a tool you would like us to look at and map please let me know in the comments. https://lnkd.in/etNRetSQ

40

5 Comments

What defines value? After three years of effort, this week marks the start of the federal government's enforcement of new secure software development requirements. Starting with GSA and then shifting to all commercial vendors selling to all agencies, the Office of Management and Budget industry-changing mandate is now in action. For years, vendors commented that they thought this would never happen, but guess what? It did. Attacks on nations' software are skyrocketing, and as a nation, we need to take steps to produce more secure software by design. Before implementing tools such as application security testing (SCA/SAST/DAST), you must ensure your organization has a proper foundation. This is why the NIST 800-218 Secure Software Development Framework (#SSDF) starts with organizations preparing themselves to ensure that their people, processes, and technology are prepared to perform secure software development at the organization level. CodeLock, Inc. received a grant from VIPC | Virginia Innovation Partnership Corporation to develop a dashboard to provide companies across the country with the resources they need to get started and comply with these new requirements. Over the last month, we have uploaded templates for policies and procedures that your organizations need to have in order to meet specific practice areas. Rather than you having to create this from scratch, we did the work for you, saving thousands of hours and the finances associated with that work. You can get a CodeLock account today and access all of these resources for only $19/month. Do no wait to take action, get started with the compliance process today. If you made it this far into my post, congratulations! Send me a message, and I will give you a discount code to get started for free. #ZeroTrust, #CyberSecurity, #SoftwareDevelopment, #DepartmentOfDefense, #InfoSec, #NationalSecurity, #DefenseTech, #CyberDefense, #SecureSoftware, #MilitaryTechnology, #DevSecOps, #InformationSecurity, #CyberAwareness, #GovernmentTech, #CyberThreats, #TechInnovation, #DigitalTransformation, #CloudSecurity, #DataProtection, #NetworkSecurity, #SecurityArchitecture, #CyberResilience, #IdentityManagement, #Encryption, #Compliance, #SecureCoding, #CyberRiskManagement, #AIInCybersecurity, #ThreatIntelligence, #CriticalInfrastructure, #CyberLaw, #CyberEthics, #TechnologyLeadership, #PublicSectorInnovation, #TechGovernance, #SecureByDesign, #PrivacyByDesign, #MilitaryInnovation, #DefenseStrategies, #CyberWarfare, #CyberDiplomacy, #GovernmentContracting, #DefenseContractors, #MilitaryTec, #TechPolicy, #SecureInfrastructure, #NationalCybersecurity, #TechForDefense, #SecureDevelopment, #GovernmentIT

13

1 Comment

Watch the video to explore how to start taking proactive measures against the risks you face across your entire attack surface. With Armis Centrix™ for VIPR Pro - Prioritization and Remediation, you’ll gain complete control and visibility over your environment by: ●       Unifying and deduplicating all vulnerabilities and security findings ●       Enriching the data with threat intelligence and your business risk ●       Orchestrating remediation via seamless existing tool integration ●       Process management, tracking and reporting with automated workflows #IoTSecurity, #wirelesssecurity, #Ransomware, #OTSecurity, #MedicalDeviceSecurity

10

This recent ransomware attack on an Arkansas water treatment facility highlights a growing concern for critical infrastructure security. I shared some thoughts on what this breach means for the future of cybersecurity in the water sector and how we can better defend these essential services. Check out my full commentary and the detailed coverage below! 👇 #CyberSecurity #CriticalInfrastructure #Ransomware #WaterSecurity

31

1 Comment

NCUA examiners have said that the ACET is no longer a requirement. They are now recommending that organizations choose an internal framework to align with such as NIST CSF 2.0, CIS, or other! They have stated the new NCUA ISE statements are for them to use as an examination tool and not for credit unions. I would recommend aligning with both an internal framework and the ISE by taking an evidence-based approach so you are prepped for your exam, and meet their requirements!

7

1 Comment

It's a fucking honor to build products for the 99% of businesses that fall below the Fortune 500 poverty line 💪 While the Fortune 500 said SIEM was tired, the Fortune 5,000,000 showed us how to mic-drop! 🫳🎤 🧠 Affordable, predictive pricing *is* possible if you only store what matters 💾 Retaining / hunting thru petabytes of daily data *won't* break the model 💵 You can protect more than just your critical servers *if* the price is right Can't tell you how dope it feels to work with MSP partners / Customers to completely disrupt these perceptions—currently ingesting logs from 500,000+ data sources! Massive thanks to those Product Lab believers that demanded a new way to SIEM https://lnkd.in/eXKgmEHP and the team at ClickHouse who helped us reimagine a different approach to storage and scalability 🙏 https://lnkd.in/eVSh2Yfx

393

23 Comments

Data is increasing, and threat actors are becoming more robust. A holistic approach to security operations, integrating people, processes, and technologies, is essential. Learn how the 8 new add-on modules extend the Deepwatch Platform to tackle challenges in data visibility, control, and response for your organization: https://deepwat.ch/4dg6tjD #SOC #Cybersecurity #HolisticSecOps

7

This is a very interesting way to think and talk about security. Think of all the improvements or alignments that have been "saved for a later time." This is a compounding risk. I appreciated how this highlighted the fact that leaders aren't the only ones accumulating this technical debt, as teams across an organization can contribute to this issue the longer they put off an update, policy change, or procedure. Leaders need to be aware of the underlying risks seemingly invisible on the surface. Using strategies to combat underutilization can help combat the issues brought about by blind spots in detection, architecture, and engineering. Managed services are a great way to accelerate the reduction of technical debt. Ericka Chickowski, CSO Online #Cybersecurity #Leadership #CISO

8

1 Comment

Semperis has been featured in CBS, shedding light on critical insights from our latest Ransomware Holiday Risk Report! Nicole D. Sganga interviewed Semperis Strategic Advisor Chirs Inglis about the realities facing organizations during the upcoming holiday season. Key findings: 👉 72% of companies were attacked in the past year on holidays and weekends. 👉 63% of respondents experienced a cyberattack following a “material corporate event” like mergers, IPOs or layoffs. 👉 85% of organizations – and 90% in the U.S. – reduce security staffing by up to 50% during these times. Read the full story here for more details: https://lnkd.in/gkrNZEqC

37

Tracking your SPRS score doesn't have to be a guessing game. Victor Cich, Compliance Consultant at RADICL, explains how our platform’s live SPRS score calculator simplifies NIST 800-171 compliance. With real-time updates, you can easily monitor progress, identify roadblocks, and ensure your team stays on track. In this clip, Victor walks through how our tool makes compliance management effortless for both teams and executives. How are you tracking your compliance progress? #SPRS #NIST800171 #CyberSecurity #Compliance #RealTimeTracking #RADICL

6

[From Stamus Labs] We just posted the weekly Declaration of Compromise™ (DoC) threat detection update for Clear NDR (formally Stamus Security Platform, SSP). This week there are 4 new named threat detections and enhanced detection coverage for 15 named threats. See the full list of improvements: https://hubs.la/Q031mczd0

1

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

172

9 Comments

It is great to see the "let's make privacy self-management easy and scalable for consumers" vision of State Senator Josh Becker, his team at the time (Tom Steel, Charles Lawlor, Bryan King et al), civil society groups such as Privacy Rights Clearinghouse (Emory Roane, Meghan Land ), myself, and what others did to get SB 362 / California Delete Act passed -- coupled with the great implementation work by the California Privacy Protection Agency -- get recognition by The Washington Post as one of the top "good things" in tech in 2024. For a reminder of what the California Delete Act is and does, check out my analysis at https://lnkd.in/gVEr2ehR.

30