Tony Vargas

NJ Cops Are Suing To Protect Their Exclusive Right To Keep Their Data Out Of Data Brokers’ Databases https://lnkd.in/d3chJMxZ

2

NJ Cops Are Suing To Protect Their Exclusive Right To Keep Their Data Out Of Data Brokers’ Databases https://lnkd.in/d3chJMxZ

2

⚡ Cybersecurity threats are evolving fast! To stay ahead, organizations must embrace new security approaches involving fresh strategies, technologies, and a cloud-ready mindset. 🌐 Enter MITRE ATT&CK — the ultimate guide for security practitioners packed with invaluable insights into attacker techniques and behavior. Pretty handy, right? 💡 Sysdig's eBook show you how to identify and defend against common threats to #AWS environments using open-source Falco rules mapped to the ATT&CK framework. Boost your #AWScloud security and tackle any threat head-on by giving it a read today:

3

CMMC Level 2 Assessment Objective: Data in Transit PRACTICE: Organizations must implement cryptographic mechanisms to prevent unauthorized disclosure of controlled unclassified information (CUI) during transmission unless otherwise protected by alternative physical safeguards. ASSESSMENT: The intent of this requirement is to ensure CUI is cryptographically protected during transit, particularly on the internet. The most common way to accomplish this is to establish a transport layer security (TLS) tunnel between the source and destination using the most current version of TLS. Because the use of cryptography in this requirement is to protect the confidentiality of CUI, the cryptography used must meet the criteria specified in requirement SC.L2-3.13.11. Be prepared! Your assessor could ask to 🔍 EXAMINE system and communications protection policy. 🗣 INTERVIEW system or network administrators. 📝 TEST cryptographic mechanisms or mechanisms supporting or implementing transmission confidentiality. (CMMC Assessment Guide: Level 2 Version 2.11, page 222) #CMMC #DoD #cybersecurity #NIST #InformationSecurity https://bit.ly/45HMpUs

41

I often hear the question "Where/What are our biggest security exposures?" Cyentia Institute recently had the opportunity to explore this question using data from hundreds of thousands of attack path assessments conducted through the XM Cyber Continuous Exposure Management (CEM) platform. The attached figure gives a categorical breakdown of what we observed based on all entities (digital assets), total security exposures, and exposures affecting critical assets. . The left-most chart represents the attack surface based on broad categories of digital entities discovered during attack path assessments. Active Directory constitutes just over half of entities identified across all environments. On-premises IT and network devices account for another 31% of entities and cloud environments house the remaining 17%. Not all entities, however, are exposed via attack paths. If we change the scope of the attack surface to include only vetted exposures (entities susceptible to attack techniques), things look different. The middle chart captures this perspective and Active Directory exposures dominate the attack surface. But not all of those exposures affect critical assets. To be truly effective, Exposure Management must encompass all environments and account for where critical assets are most at risk. If we once again rescope the attack surface to focus on exposures to critical assets, a very different picture emerges, which is captured in the rightmost chart. Cloud environments now encompass over half of all critical asset exposures, followed by AD at 33% and IT/Network devices at 11%. Does this sync with exposures across your attack surface? Which perspective/view/chart is your primary guide for managing exposures? The full report contains tons of additional insights on exposure management. Download here: https://lnkd.in/dPfqXG7y #cybersecurity #exposuremanagement #cyberrisk

48

8 Comments

Announcing a Valuable New Data Security Incident Response Service! Did you know that data is the fastest growing attack surface in the world? Your organization’s data is vulnerable to numerous potential risk scenarios that require specific evaluations to get ahead of them. This makes Data Security Incident Response a vital component of your organization's cybersecurity strategy. Cyera recently announced their Data Security Incident Response service which allows organizations to leverage and retain a team of elite cybersecurity practitioners to evaluate and respond to data security incidents post breach, helping you identify data security risks, remove ambiguity related to materiality, and determine the fastest path to recovery. Essential in this age of Data Sovereignty and the era of global privacy / regulatory compliance! Viva Cyera! Learn more about our Incident Response service today:

42

12 Comments

A little late, but here's the next #cmmc entry for level 2: https://lnkd.in/gKpkbpBp This one was a bit more difficult to decide what to write, as I did not want it to be a long boring read. There are almost 100 additional requirements above level 1, so I just tried to give some highlights by sections. Level 2 is where you start seeing more technical requirements that will be much more likely to start requiring outside assistance, but it also will likely greatly enhance most company's security postures.

9

🔐 CMMC Needs Clear SSO Rules: Here’s Why- Current CMMC, NIST 800-171/172, and FedRAMP lack explicit controls for Single Sign-On (SSO), creating critical security risks. The Problem ⚠️ No defined SSO boundaries ⚠️ Unrestricted third-party SSO poses risks ⚠️ Breach amplification and reduced visibility The Solution * Define SSO boundaries * Restrict SSO to vendor ecosystems * Align with Zero Trust principles The financial sector enforces strict SSO controls—shouldn’t defense systems do the same? 💬 What’s your take? Should SSO boundaries be mandatory in cybersecurity frameworks? #Cybersecurity #CMMC #NIST #DefenseIndustry #ZeroTrust #SSO #DoD #CISA #NSA

4

Thrilled to have the opportunity to analyze #vulnerability remediation timelines again, this time using data from NopSec. The chart below is based on a survival analysis of vulnerabilities across an environment. Essentially - the time it takes to remediate all affected assets after a vuln is discovered. Everytime I see analysis like this, I'm reminded of how different the real world of #vulnerabilitymanagement is from the "just patch it all yesterday" shallow advice that's so often bandied about. If it were that easy, vuln survival curves wouldn't look like this time after time. How does this square with your experience? I'll be discussing this chart and several others in a webinar next week. Register here and bring your questions, comments, and rants! https://lnkd.in/eHWDrEYN

92

26 Comments

Articles like these are why I use Brian Krebs articles in my workshops. If you want to learn how follow investigative thread to track down miscreants, see if you can copy one of Brian’s step by step investigative paths. https://lnkd.in/gbZDiH6Z

8

1 Comment

We are shifting compliance left with #Witness and #Hadolint. Want to ensure your Dockerfiles meet compliance controls? This short guide can help you automate the reporting of AC-6, CM-2, and CM-7 for every artifact every time. This is the first in a long series of how to shift compliance left. Follow me and subscribe to never miss out. If there is a tool you would like us to look at and map please let me know in the comments. https://lnkd.in/etNRetSQ

40

5 Comments

As CMMC takes effect, many FSOs are discovering that their workload is growing rapidly. In our ever-connected, digital, and internet-of-things world, the lines between physical security, digital security, cybersecurity, and information security are blurring. Protecting sensitive information now means guarding against both physical and digital threats. FSOs might find themselves needing to understand not just how to secure a door, but also how to safeguard access controls with strong passwords. The modern FSO is becoming a key figure in overall compliance, taking charge of overseeing, developing, maintaining, and enhancing all aspects of security, not just the physical side. Ultimately, it's all about ensuring that national security information, classified data, CUI, and any other sensitive material are truly protected.

1

New study finds uptick in cybersecurity disclosers due to new SEC requirements. Still, few detail the material impact of these events. More work and clarity are needed. https://lnkd.in/gQ2paXVs #cybersecurity #infosec #SEC #disclosure

7

Cybersecurity Snapshot: After Telecom Hacks, CISA Offers Security Tips for Cell Phone Users, While Banks Seek Clearer AI Regulations http://ow.ly/hKiE105WiMo

8

'Massive Cyber Attack on AWS (Amazon) Targets 230 Million Unique Cloud Environments.' The huge campaign enabled Access to 110,000 domains and more than 230 million endpoints resulting in data exfiltration into attacker controlled S3 buckets. Sophisticated attacks highlight the criticality of NOT making assumptions. Frameworks, Certifications, Massive Budgets and Teams of experts are rendered impotent and useless when basics are overlooked, even ignored. https://lnkd.in/envbXtye Before anyone asks, yes AWS DNS servers are INSECURE... Cybersec Innovation Partners GCHQ National Cyber Security Centre Cybersecurity and Infrastructure Security Agency National Institute of Standards and Technology (NIST) Central Intelligence Agency The White House ABC News BBC News CNBC CNN Fox News Media ITV News Sky News #InternetSecurity #DNS #PKI

291

40 Comments