Michael Krutikov

Big changelog for our #CERT's #ransomware cartography! 🤠New version (v27) available on our CERT GitHub: https://ow.ly/P4gM50TwWrN 💡Entities are clickable for our World Watch clients to read more about threat groups and malware strains. #cyberthreatintelligence #cti

6

Join Larry Pesce next week for a look inside of the Bob the Minion router. You will learn about hardware hacking techniques, such as disassembling the router and using SPI flash interfaces to extract the firmware, which is then analyzed for vulnerabilities. Date & Time: Thursday, September 12 at 11am EST Register here: https://hubs.ly/Q02NzZhV0 #supplychainsecurity #firmware #iotsecurity #softwaretransparency

8

Staying informed of your industry’s #ThreatLandscape is critical to building a proper defense strategy. 💪 Unlock tips from experts as they break down #Optiv’s third-annual Industry Threat Profile findings. Watch now: https://dy.si/ozFCku

1

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

In today's data-driven world, safeguarding sensitive production data is crucial. Granting permanent access to engineers and analysts can increase the risk of data breaches and compliance violations. Temporary credentials offer a safer solution: 🛡️ Limited Access: Grant access on a need-to-know basis, reducing risks. 👮 Enhanced Security: Prevent over-privileging and minimize data exposure. ⚡ Streamlined Operations: Automate provisioning for efficiency and compliance. Learn how Satori's temporary credentials can protect your data while empowering your teams. Link to blog post in first comment...

21

1 Comment

Why your legacy IDS needs to go ... * Alert Overload - Too many alerts with too many false positives. This means attacks take too long to detect or are missed entirely. * Insufficient Attack Visibility - Limited threat detection and visibility of cloud workflows, lateral movement, encrypted communications, and anomalous activity. This means critical attack signals are missed. * Lack of Context - Valuable alert context is missing, requiring additional resources to see the full story. This results in delayed impact assessment and response.

API security incidents more than doubled over the past 12 months 📈 What else has changed? Find out in Salt Security's 2024 State of API Security Report → https://gag.gl/QuvoU5 #stateofapisecurity #apisecurity #apis #techinnovation #cybersecurity #saltsecurity

8

Expel 🤝 modePUSH There's nothing more gut-wrenching for a company than experiencing a breach. Businesses of all sizes and industries face this threat every day, and despite the best defenses, falling victim is often easier than anyone wants to admit. modePUSH steps in during those critical post-breach moments, helping companies recover and rebuild. Now, with our partnership, Expel and modePUSH are working together to ensure that companies don’t have to make that call twice. Together, we help modePUSH customers not only recover but also strengthen their security posture to prevent future incidents. Discover how modePUSH + Expel can support your security strategy:

17

🔒 7 Ways for Critical Infrastructure to Thwart State-Sponsored Attacks State-sponsored hackers targeting critical infrastructure is an escalating concern, highlighted by recent advisories from CISA and other security-focused government bodies. In our latest blog, Shawn Taylor, Senior Director of Solutions Engineering at Xage Security, explores seven foundational protections that can significantly mitigate these threats. 👉 Read the blog to understand how to fortify our critical infrastructure against state-sponsored attacks. #Cybersecurity #CriticalInfrastructure #ZeroTrust #StateSponsoredAttacks

7

Check out this webinar with Dragos, Inc. and Xage Security: Nation-state threats targeting #criticalinfrastructure. #cybersecurity #cyberattacks #VoltTyphoon #SaltTyphoon #otsecurity

15

1 Comment

Didn't know cloud detection and response could get even better. Sweet Security now allows you to customize your own rules for enhanced #CDR #ADR. Anything you call it (and even when you can't) - we detect it.

20

Why chase after breaches when you can stop them before they happen? Most vulnerabilities come from pesky misconfigurations that can be nipped in the bud with the right approach and a little help from VERITI. With Veriti, we don’t just fix problems—we prevent them. Safely. Click on the ad below to prevent the past.

14

Meet with us during RSA Conference and learn how AI-Powered Deception can help with early detection cyber attacks with precision. No false positives!!! 🔒 With traditional cyber defense, You, the Defender, must get it right all the time, but the threat actor needs to be right only once to compromise your critical assets. 🔑 Deception turns this asymmetry on its head to your benefit – with deception, the bad guy must be wrong only once to get caught. ✅ There are many use cases for Deception Technology. Our customers are using it for Advanced Threat Defense, Zero Days, Ransomware Protection, OT Security, Active Directory Protection and Identity Threat Detection and Response (ITDR). They are using it to accelerate their Zero Trust deployment. Suresh (Surra) Yanamadala Raj Gopalakrishna Suril Desai Chad Scrupps #CyberDeception #IdentityProtection #Honeytokens #Ransomware #InsiderThreats #APTs #ITDR

22

Symantec’s latest report highlights a concerning trend in ransomware attacks - an increase in the use of "living off the land" (LOTL) techniques. These tactics involve threat actors leveraging operating system features and legitimate tools to carry out sophisticated attacks. Between 2021 and 2023, almost half of all ransomware attacks utilized LOTL tools, with six out of 10 of the most commonly used tools being legitimate software. Notably, Windows OS components, PsExec, PowerShell, WMI, AnyDesk, Atera, Splashtop, and ConnectWise have emerged as key targets for exploitation. Stay informed and stay vigilant against these evolving cyber threats. #CyberSecurity #Ransomware #ThreatLandscape #Symantec #CyberThreats

1

Why do so many data security programs stall at Step 1? Step 1: Discovery is complex and never-ending. Step 2: Enforcement tools often can’t scale or adapt. Step 3: Data environments evolve faster than security processes. Integrated platforms that blend visibility and enforcement break the logjam, empowering teams to secure sensitive data without losing agility. Read Yoav Cohen's blog in Satori: https://lnkd.in/drvXQfmU

12

12 Days of Emerging Threats - we’re highlighting prominent cyber threats and trends shaping the cybersecurity landscape. Day 6

1

First Bug Bytes of 2025! 🚀 This month's issue covers: ✅ Altera's new public program launch with bounties up to $30K 🤑 ✅ Jonah Burgess made all Intigriti CTF challenges now available on GitHub! ✅ Testing JavaScript files for bug bounty hunters! ✅ @ArchAngelDDay sharing how he became the most valuable hacker! And much more! Head over to our blog now to read the latest issue! 👇 buff.ly/3PBo0Zn

8

New Yorkers! Astrix Security and Cloud Security Alliance present a conference all dedicated to learning #NHI security risks and best practices. Take a half day break from the office to learn more about this important topic!

9

Just in time for October Cybersecurity Month - check out SeeMetrics newly updated boards for all people in the security org! From GRC to vuln management to product to CISO, each one can see real-time relevant metrics for what's needed. This month's webinar w/ CEO Shirley Salzman below:

2