Rahul Guha

🎯𝐂𝐨𝐦𝐩𝐥𝐞𝐭𝐞 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐡𝐞𝐜𝐤𝐥𝐢𝐬𝐭 🔹 ACCOUNT SECURITY 🔹 DEVICE SECURITY 🔹 DATA SECURITY 🔹 GOVERNANCE AND TRAINING 🔹 VULNERABILITY MANAGEMENT 🔹 SUPPLY CHAIN / THIRD PARTY 🔹 RESPONSE AND RECOVERY Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

1

The LinkedIn Learning roadmap "𝐈𝐦𝐩𝐫𝐨𝐯𝐢𝐧𝐠 𝐘𝐨𝐮𝐫 𝐓𝐡𝐫𝐞𝐚𝐭 𝐌𝐨𝐝𝐞𝐥𝐢𝐧𝐠 𝐒𝐤𝐢𝐥𝐥𝐬" includes courses to enhance security professionals' threat modeling capabilities.. 𝐎𝐯𝐞𝐫𝐯𝐢𝐞𝐰 This learning path is around the STRIDE threat modeling framework. Each course in the series delves into one of these categories, providing learners with the tools and knowledge to identify, analyze, and address these threats effectively. 𝐈𝐧𝐬𝐭𝐫𝐮𝐜𝐭𝐨𝐫 Adam Shostack guides the learning path. He brings extensive experience as a consultant and author and provides valuable insights and practical approaches throughout the courses. 𝐋𝐞𝐚𝐫𝐧𝐢𝐧𝐠 𝐨𝐛𝐣𝐞𝐜𝐭𝐢𝐯𝐞𝐬 The learning path establishes a robust foundation in threat modeling principles and practices. Using the STRIDE model to identify and analyze critical security vulnerabilities, participants will acquire comprehensive skills and practical experience applying threat modeling to secure products and services effectively. 𝐂𝐨𝐧𝐭𝐞𝐧𝐭𝐬 The program includes six courses that cover threat modeling, from foundational principles to specific threats. The first course introduces the principles of threat modeling. Subsequent courses explore specific aspects, such as identity spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. Each course provides techniques, security risks, and countermeasures to address cybersecurity challenges effectively. 𝐂𝐨𝐧𝐜𝐥𝐮𝐬𝐢𝐨𝐧 This learning path is crucial for diverse professionals who want to enhance their knowledge of threat modeling. It offers a structured approach to comprehending cybersecurity threats and the best practices for handling them. It is valuable for those in security architecture, software development, and IT security management roles who aspire to build or improve their threat modeling capabilities. #threatanalysis #threatmodeling #stride #security #cybersecurity

6

As identity management becomes a more critical component of cybersecurity, there is a growing need for identity teams to align more closely with the CISO. The integration of these teams ensures a unified approach to managing access controls and mitigating identity-related threats, which are increasingly being exploited. Centralizing leadership under the CISO allows for more streamlined communication and faster decision-making when responding to serious risks. #CybersecurityLeadership #IdentityManagement #CISO

20

2 Comments

Speaking of DORA, (as I was yesterday - see appendix below), the latest EBA updates are worth checking out, even if DORA isn't your concern. https://lnkd.in/eh6dnPeH All about what they're doing, how they did the dry run and who they're going to have to run with it all. Welcome Marc - https://lnkd.in/eQ4r4mqn Fascinating. Appendix 1: https://lnkd.in/eyAjmsBK

12

🚀 New Episode Alert: API Security is Critical for Cybersecurity 🎧 In Week 3 of our "Opstober Challenge" focus on DevOps and SecOps, I had the pleasure of talking with Chuck Herrin, CISSP, CCSP, NACD.DC , Field CISO at F5, to discuss the pivotal role of API security in today’s digital landscape. With API traffic accounting for a significant portion of overall internet traffic, ensuring the security of these interfaces is more critical than ever. Join us as we dig into: 👉 The unique vulnerabilities associated with APIs 👉 The relevance of OWASP's Top 10 for API security 👉 The evolving threat landscape organizations face 👉 The importance of visibility and discovery of APIs 👉 Risks posed by third-party APIs 👉 Emerging vulnerabilities linked to AI Chuck emphasizes that understanding the architecture and attack surfaces is essential for effectively managing security risks. 💡 Don't miss this insightful conversation that will equip you with knowledge to strengthen your API security strategy! Also, be sure to check out the Opstober Challenge—a month-long journey in DevOps and DevSecOps, aimed at enhancing your skills and knowledge in these critical areas. 🎙️ Watch or listen on your favourite app here, and join the Opstober Challenge: https://lnkd.in/g5ae48_f 🎧 Many thanks to our Opstober Challenge sponsor F5 NGINX #APISecurity #Cybersecurity #DevOps #OpstoberChallenge #Podcast Lisa Goh Sharon Yap Arleene Lystia Laurent Petroque Chin Keng Lim

31

🎙️ Excited to share that I recently appeared on Cyber Focus from the #McCrary Institute for Cyber & Critical Infrastructure Security to dive deep into the intersection of AI, cybersecurity, and state innovation! We discussed the evolving landscape of technological threats and opportunities, lessons learned from [relevant experience], and how states can lead with agility and security in mind. Key takeaways: - The future of AI-driven security measures - How states can bolster cybersecurity infrastructure - Practical leadership tips for navigating digital transformation Listen to the full conversation and gain insights into shaping resilient and forward-thinking strategies! https://lnkd.in/gDbcCJsH #AI #Cybersecurity #Leadership #Innovation #Podcast

71

3 Comments

𝐓𝐡𝐞 𝐟𝐨𝐮𝐫-𝐪𝐮𝐞𝐬𝐭𝐢𝐨𝐧 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐟𝐨𝐫 𝐭𝐡𝐫𝐞𝐚𝐭 𝐦𝐨𝐝𝐞𝐥𝐢𝐧𝐠 Threat modeling identifies, assesses, and mitigates potential threats before attackers can exploit them. It is fundamental to develop secure systems and a thorough security strategy. Adam Shostack has contributed to this practice by introducing a four-question framework to guide the threat modeling process systematically. Combined with the STRIDE model, Shostack's framework provides a solid methodology for analyzing and enhancing system security. 𝐒𝐓𝐑𝐈𝐃𝐄 The STRIDE model offers a structured approach to examining and classifying threats during the threat identification phase. Each element of STRIDE addresses a specific area of concern. Spoofing focuses on identifying threats related to identity falsification while tampering zeroes in on unauthorized modifications. Repudiation pertains to denying actions performed, and information disclosure involves unauthorized access to confidential data. Denial of service targets the availability of services and elevation of privilege deals with accessing privileges beyond what is authorized. 𝐓𝐡𝐞 𝐟𝐨𝐮𝐫-𝐪𝐮𝐞𝐬𝐭𝐢𝐨𝐧 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 Shostack's framework comprises four pivotal questions that drive the threat modeling process: 1. What are we working on? This initial question sets the stage for the threat modeling process by defining the scope and understanding the system architecture. It involves identifying the system components, data flows, and valuable assets, establishing a baseline for the current security posture, and ensuring the consideration of all relevant factors for thorough analysis. 2. What can go wrong? This question focuses on potential threats and uses the STRIDE model to categorize and identify specific vulnerabilities. STRIDE pinpoints where the system might be susceptible to attacks. 3. What are we going to do about it? This question focuses on strategies to mitigate potential threats. It involves planning and implementing controls to defend the system against the outlined threats. 4. Did we do a good job? The final question assesses the model's effectiveness and the implementation of measures to ensure it adequately addresses the threats and enhances the system's security. 𝐂𝐨𝐧𝐜𝐥𝐮𝐬𝐢𝐨𝐧 Integrating the four-question framework with STRIDE offers a comprehensive approach to threat modeling. It identifies and mitigates threats, continually improving measures to ensure security by design and enhance resilience. #threatanalysis #threatmodeling #stride #security #cybersecurity

17

3 Comments

Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents The United States Treasury Department said it suffered a "major cybersecurity incident" that allowed suspected Chinese threat actors to remotely access some computers and unclassified documents. "On December 8, 2024, Treasury was notified by a third-party software service provider, BeyondTrust, that a threat actor had gained access to a key used by the vendor to secure a cloud-based service used to remotely provide technical support for Treasury Departmental Offices (DO) end users," the department said in a letter informing the Senate Committee on Banking, Housing, and Urban Affairs. "With access to the stolen key, the threat actor was able to override the service's security, remotely access certain Treasury DO user workstations, and access certain unclassified documents maintained by those users." The federal agency said it has been working with the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI), and that available evidence points to it being the work of an unnamed state-sponsored Advanced Persistent Threat (APT) actor from China. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

1

1 Comment

"The Backstage Scaffolder was built originally around the idea of templating repositories in Source Control Management systems to create “golden path” standardization in organizations. However, as with many orchestration tools with broad integrations and API scripting opportunities, the Scaffolder can be effectively used for a broad set of orchestration workflows within cloud native and even more traditional companies with HTTP API access to internal systems and orchestration layers." https://lnkd.in/gBTXbJ25

3

1 Comment

I seen a post that I can not find saying the CISO is a dying a breed that I disagree with. The CISO role is not a dying breed, but rather it is evolving and becoming increasingly critical in today's cybersecurity landscape. While the role faces significant challenges, it is adapting to meet the growing demands of modern organizations. Evolution of the CISO Role The CISO role has transformed from a primarily technical position to a strategic leadership role. Today's CISOs are expected to: - Align cybersecurity with business objectives - Manage cyber risks - Navigate complex regulatory environments - Engage with stakeholders across the organization This evolution reflects the growing importance of cybersecurity in overall business strategy. Challenges and Pressures CISOs face numerous challenges that are reshaping the role: - Increased scrutiny and personal liability - Expanding responsibilities - Regulatory compliance demands - Evolving threat landscape - Resource constraints These pressures have led to concerns about burnout and turnover in the role. In fact, 91% of CISOs agree that expanding responsibilities will lead to higher turnover, and 49% do not see a future as a CISO. Adaptation and Opportunities Despite these challenges, the CISO role is adapting: - Strategic importance: CISOs are increasingly involved in executive-level decision-making, with 47% now reporting directly to the CEO. - Specialization: Some organizations are considering splitting the CISO role into technical (CISO) and business-focused (BISO) positions to better manage growing responsibilities. - Technological advancements: CISOs are leveraging AI and automation to enhance threat detection and response capabilities. - Business acumen: Many CISOs are pursuing MBAs to bridge the gap between cybersecurity and business strategy. Future Outlook The CISO role is expected to continue evolving: - Increased integration with business operations - Greater influence on company strategy - Focus on proactive risk management - Emphasis on regulatory compliance and privacy - Adoption of AI and automation in cybersecurity operations While the CISO role faces significant challenges, it is far from dying. Instead, it is transforming to meet the demands of an increasingly complex cybersecurity landscape. CISOs who can adapt to these changes and balance technical expertise with strategic business acumen will be well-positioned to lead their organizations in the future as a CEO.

138

21 Comments

🚨 The 22nd edition of Project Overwatch is out 🚨 Let's leverage specifically crafted prompt to create visualization and timelines to help understand the details of an incident report. The ability to generate output in a specific format is often overlooked! I'm leveraging the awesome Fabric tool from Daniel Miessler. I'll be using the various reports on the Snowflake situation to generate some useful artefact. I also touch based on a couple of other topics this week: 💡 In our continued discussion on Microsoft Recall, Kevin Beaumont provides a fresh perspective on the risks and I got hit by the BYOD scenario that can be devastating for a company. 🕵️ OpenAI's latest move against covert operations using ChatGPT offers a glimpse into the future of disinformation and detection strategies. 📈 Bessemer Venture Partners shares insightful trends on the cybersecurity market, including consolidation and platforming. 🤖 My little development project to download and analyse ArXiv research paper has new features thanks to some awesome pair programming with ChatGPT. 🔎 Google latest AI overview challenges show that adopting AI isn't easy - it's a serious endeavor that companies need to approach carefully to maintain their reputation. For detailed insights and in-depth analysis, subscribe to our newsletter now! 📧✨ https://lnkd.in/dfuKWs8n #cybersecurity #AI #AIvisualisation #newsletter #subscribe

3

Mamba Toolkit Abuses 2FA In Sophisticated Phishing Attack Phishing attacks are stealthy cyber threats where threat actors impersonate reputable entities to trick individuals into revealing sensitive information (“passwords” or “financial details”). These types of attacks are executed via “emails” or “messages” that create a sense of urgency. Not only that, all these scams often lead victims to “malicious websites” or “prompt them to download harmful attachments.” Cybersecurity researchers at Sekoia recently found that the “Mamba” toolkit has been actively abusing multi-factor authentication in sophisticated phishing attacks. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

2