Mike Riemer

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

Hey everyone, here is where we will begin really digging into the details of #CMMC levels. My full post is here: https://lnkd.in/gZKXAY3C I tried to not be too wordy and dry, but there's only so much you can do with government regulations (even with 10+ years of experience with them, I can only do so much). For a quick summary, level 1 focuses on mostly basic hygiene requirements. It does bring in physical security as part of cyber, which I was happy to see. The most technical requirements are probably the segmentation and malicious code monitoring/scanning parts. Even for companies without DoD contracts, I would probably recommend that level 1 be followed just as a general minimum level of protection. All of these requirements will be a part of levels 2 and 3 as well, and we'll see a big jump in complexity for level 2 next week.

8

1 Comment

One of the topics I have discussed most since joining CyberRisk Alliance is #securitymetrics. CISOs and senior leaders face a daily challenge of putting their security programs into a context that results in action. I have always said metrics fall into 4 categories, “what should I track”, “what can I track”, “what am I tracking”, and “what doesn’t need to be tracked.” Finding what goes in which bucket is the challenge.

18

2 Comments

Poor security hygiene is putting vulnerable industrial systems in more precarious situations. Sonu Shankar of Phosphorus Cybersecurity Inc. talks with Help Net Security about Blackjack’s #Fuxnet #malware, which exploited the use of default passwords. https://okt.to/B8fcxF #Cybersecurity #IoTSecurity #OTSecurity #SecureIoT #SecureOT #InternetOfThings #OperationalTechnology #IoTProtection #OTProtection #CyberDefense #DataSecurity #NetworkSecurity #SmartSecurity #IndustrialSecurity #IoTDevices #OTDevices #SecureNetworks #IoTPrivacy #OTPrivacy #IoTSolutions

7

1 Comment

As Compliance & Auditing requirements change, Qmulos is their with enhancements to insure our customers are covered.

3

1 Comment

CxOs, it's time to rethink your network security approach. ZTNA alone won't cut it in today's threat landscape. Discover why ZTNA integrated into SASE is the key to securing your business end-to-end 👇 #SASE #ZTNA

3

Enjoyed reading this post from CISA Director, Jen Easterly on the USDA's adoption of FIDO Protocols, referencing the CISA's publication from the 20th: "USDA’s success story should inspire all enterprises to migrate to FIDO authentication". Referencing the CISA publication: "Authentication technologies that do not involve FIDO or public key infrastructure (PKI)—a security framework based on public key cryptography—to support confidentiality and integrity will only continue to put organizations at risk by allowing malicious cyber actors initial access to their networks via credential phishing attacks."

1

Behold the F5 NGINX Ugly Holiday Sweater, where corporate branding meets the fine and blurry line between festive and functionality. 🧥❄️ The 2024 edition is our entry to the annual holiday rite. No holiday party is complete for me without this conversation piece. To fly the Christmas flag and shout out or annual —it’s loaded with icons that tell the stories of F5 NGINX lore. Love the exact shade of green, too (I’m biased as the GM of NGINX). Here’s the manual for our sweater iconography (with blatant sales pitches included): Snowglobe of Resilience: Celebrating F5’s storm-proof strength, because nothing says "holiday cheer" like systems built to survive the wildest blizzard. AI Icons: Three different takes on machine learning and AI, making us the brains of the party. (Of course, we just launched the F5 AI Gateway for anyone looking to better safeguard AI workloads,) Going Green: This sweater shouts out our eco-friendly ambitions and the launch of NGINX One in the fall of 2024, which brings PlatformOps, SecOps, NetOps and DevOps together for holiday cheer in one collaboration SaaS. Jimmy Packets: Everyone’s favorite DevCentral mascot is here, ready to explain cloud native, Kubernetes, and distributed tracing to your relatives who just wanted to talk football. Snowy Bots: Because snowflakes, like bots, come in so many forms — and we can detect them to protect your applications and networks! SaaSquatch: Returning from last year’s sweater with big feet and bigger swag, reminding everyone that some legends never die. (I don’t have an exact sales pitch for this one) Ugly sweaters are not just corporate schwag. They are a true statement of holiday cheer and giving…you something to laugh with colleagues and dear friends at holiday parties. What’s your corporate ugly sweat policy? PS: (We’ll add a policy icon next year — ideas welcome). 🎅👇 #UglySweaterSeason #NGINX #F5  

218

19 Comments

A little late, but here's the next #cmmc entry for level 2: https://lnkd.in/gKpkbpBp This one was a bit more difficult to decide what to write, as I did not want it to be a long boring read. There are almost 100 additional requirements above level 1, so I just tried to give some highlights by sections. Level 2 is where you start seeing more technical requirements that will be much more likely to start requiring outside assistance, but it also will likely greatly enhance most company's security postures.

9

In case you missed it: Catch up on our #CPX2024 product announcements, including Infinity AI Copilot and Harmony SASE. Watch the full replay below.

1

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

With the latest and greatest #ransomware infection impacting CDK Global and its huge dealer network, I feel like it's a good time to re-share this piece I wrote from 5 years ago. I could have written this today...seems that nothing is changing on this front. #CISO #infosec #CEO #CIO

7

2 Comments

A colleague sent me a link to Bob Lord's Thanksgiving "I'm thankful for TLS" post, The Quiet HTTPS Revolution https://lnkd.in/gCx2uxdU Good article, and TLS is doing a ton of work for all of us. Lest we forget about the pitfalls of metadata, however, if you're trying to achieve reasonable (not over-the-top) security, other fundamentals like the DNS exhaust from browsing should be protected, as well. Otherwise, someone that would have been in position to view the unencrypted trafffic can still make accurate guesses on what you are up to. Also, let's not forget to give a heartfelt thanks to the Electronic Frontier Foundation (EFF) for creating Let's Encrypt and Certbot, without which, millions of sites would still be without trusted certificates.

13

My favorite new Action1 feature, CISA KEV integration, is a great way to prioritize #patching of vulnerabilities of utmost importance. This new blog post explains it in-depth.

17

3 Comments

Surpass evolving cyberthreats with expert insights and rigorous testing. Discover how Cortex XDR leverages machine learning to predict and neutralize threats before impact. Join our webinar to enhance your cybersecurity strategy.

26

1 Comment

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/eyXCTEe9 #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

2