Andrew Vest

Illumio's Chief Evangelist and Godfather of ZeroTrust, John Kindervag, shares his perspective on cloud security with Dark Reading. Hear what he thinks are the 5 hard truths about the state of cloud security in 2024.

2

Join GovExec and Palo Alto Networks to explore how cutting-edge leaders are seamlessly weaving AI into their cloud, data, and cybersecurity frameworks. Take the next steps with us - register today!

13

 With increased digitalization comes higher cybersecurity risks. Learn how CyberArk, Red Hat and IDC came together to help businesses safeguard assets across the software supply chain. 

7

Boost your observability with Coralogix! 🚀 Our out-of-the-box dashboards, alerts, and more for AWS EKS offer instantaneous insights and monitoring. Elevate your data strategy today! #Observability #Kubernetes

3

We're coming live from RSA with a #DetectionEngineering Dispatch episode you won't want to miss w/ Alex Hurtado sitting down w/ Ryan Fitch discussing his team's journey with Splunk, Cribl, Anvilogic, #Crowdstrike FDR & more! Thursday 5/9 1pm CST This live chat (or on-demand) is for you IF: ⚒ You are currently using #splunk ⚒ Wanting to reduce Splunk cost and/or dependency ⚒ Unable to ingest critical Security logs due to cost or resources ⛏ (Detection Gaps) EDR raw telemetry making it to your #SIEM today? ⚒ Want to increase MITRE ATT&CK coverage in a meaningful & prioritized manner ⚒ Interesting in exploring Snowflake as a #securitydatalake ❄ ⚒ Do all of this 👆 without ripping and replacing your Splunk environment or disrupting your SOC Invest ~2 weeks w/Anvilogic and prove out how you too can also decrease spend while simultaneously increase security posture and detection engineering efficiency. Register below: https://lnkd.in/g4Rq5Ahw

8

Discover how to maximize #ROI and minimize #TCO with these 3 essential steps! 💡

1

With Recorded Future Collective Insights, it’s never been easier to unveil patterns and trends so you can identify relevant potential attacks, enhance detections and threat hunts, and prioritize your response. 

6

Splunk's new "The Hidden Costs of Downtime" report analyzes the impact of downtime on organizations and highlights the role simple human error often plays in cyber incidents. Check out Forbes' reporting of our key findings here. https://dy.si/mV6fAx

3

Rate limiting is an essential #cybersecurity technique that mitigates inventory denial, DDoS attacks, and other threats. See this Imperva guide to learn more about the technique and how it works.

5

Data-centric security is crucial in digital transformation as it focuses on protecting the most valuable asset—data—separately from network infrastructure. This approach is especially vital for industries like utilities, where data breaches can lead to significant financial loss, reputation damage, and operational disruptions. By implementing data-centric solutions like DPRM, organisations can ensure operational continuity and safeguard against sophisticated cyber threats, thereby enabling seamless digital transformation without compromising data security.

10

In 2023, the manufacturing industry was the third-most represented industry in Arctic Wolf® Incident Response (IR) ransomware engagements, and fourth-most represented in IR business email compromise (BEC) engagements. (Link in comments) The median cost of a manufacturing ransomware attack responded to by Arctic Wolf Incident Response is now $500,000 USD. Can you ( Mr or Ms. Manufacturer) sustain downtime, interruptions, reputational damage, client data loss and more? We help many of the top local manufacturers in the area protect and defend their business from cyber threats by "making them a hard target" - putting in the defenses that will keep most of the "bad guys" moving on the next victim who hasn't locked their doors and windows.

5

1 Comment

Dive into the world of observability tools with BigPanda's latest blog post. Learn about the landscape and key players shaping the industry. #Observability

5

In a world where cybercriminals are leveraging AI to breach defenses, it’s time we turn the tables. Let’s empower your cybersecurity with cutting-edge AI solutions. Together, we can outsmart the threats and safeguard your digital realm.

1

The SoCal CISO Summit is only 3 weeks away! Don't miss this all-star lineup with Emily O'Carroll, Jonathan Chow, and Arthur Lessard, discussing "The Imperatives of PAM" on May 21st. Organizations have suffered relentlessly from cyberattacks, each week it seems there are new headlines highlighting ransomware attacks or data breaches. With the sensitivity of privileged accounts, unpatched vulnerabilities, and an extensive remote workforce, privileged access management (PAM) is essential to securing your most critical systems and data. Join this panel session to discuss: -Why PAM plays a crucial role in mitigating cyberattacks -Gaining executive buy-in on effective solutions -Having a proactive approach to implementation and configuration Qualified InfoSec leaders, register below! #evantaciso #socalciso #informationsecurity

54

4 Comments

API keys are essential to connect applications, services, or data lakes together. Yet, they can also be a security risk. Imagine Alice sets up an API key to give her team or a vendor access to sensitive data—many times these keys are long-lived and often shared across different workloads. If the group uses federation, actions taken by Alice or others occur using a shared credential/role in the environment. This means logs would only show the credential conducting that activity, which again, gets shared with others who have access to the role. Alice's coworker, Bob, has their legitimate cloud credentials compromised. The threat actor uses Bob's credentials to federate into a shared credential/role in the environment. The threat actor exploits native features/functions of the cloud to appear as Bob, thereby blending their activity in to avoid detection. Most security teams today won't spot Bob's impersonator fast enough or at all. Trying to make sense of cloud logs is a real challenge, especially when it's happening in real-time. It can take hours or even days to piece together what happened. And by then, detection and response are delayed and the damage might already be done. What can you do? Security teams can start by keeping a detailed record of all identities, keys, tokens, certificates, and credentials they've provisioned and used, services accounts they have access to, what roles they assume. Then, security teams can set up what's considered "normal" access and behavior. Once the team understands “normal” behavior, they can develop rules and alerts from logs to try to detect and respond to access and behavioral anomalies. At Permiso, we have developed an identity-centric approach to cloud threat detection and response. Our solution can help security teams detect and respond to access and behavioral anomalies in the environments faster and with greater confidence from having the full session access and activity. Want to learn more? DM me or visit https://lnkd.in/gC4DUJ9j to learn about our approach to solving the challenge of detecting and responding to threats in and across IaaS, SaaS, CI-CD, IDP environments.

11

Trying to understand how AI and Analytics can help your Agency? Check this out!

2