Dave McCandless

An epidemic of delayed revocations has infected the public CA community. @Tim Callan and @Jason Soroko track delayed revocations since the beginning of 2021, examine the trend line, and discuss root causes. Listen at @Sectigo here: https://lnkd.in/e6mZMV6Q

3

#AIGovernance is the hot topic of our age. #data and #AI are powerful combination but it may become liability very quickly. Join us on May 30th in person or virtually. #AIgovernance #datagovernance #privacymatters #NIST #IAPP

6

Super excited about our growing partnership between Zscaler and Cohesity in this new big announcement LAUNCH they are doing in Data Security - the future of the modern "AI Data Protection Platform". It features my good friend Jay Chaudhry, #Cohesity testimonials, and our key partners Punit Minocha, Moinul Khan et al. We are the ONLY data protection vendor featured, alongside OpenAI and others. This is the best of "data in motion" (#ZScaler) meeting the best in "data at rest" (#Cohesity), to protect against single/double/triple ransomware extortion threats. As I predicted, the big cyber security players are all seeking to play more prominently in Data Security Posture Mgmt (DSPM), as CSPM+DSPM comes together in a modern Cloud Security Platform. Register for the event here https://lnkd.in/gajMpXKp

412

4 Comments

We'll be on the ground for BSides SF and #RSAC. Look for the devici booths! (At #RSAC, we're at the Early Stage Expo.) Hit me up to talk all things #threatmodeling! Also, catch me in a workshop or a main stage talk at #RSAC: Speaking: Secure and Privacy by Design Converge with Threat Modeling (May 8, 14:25 Pacific) Learning Lab: Threat Modeling Championship: Breaker vs. Builder (May 8, 08:30 Pacific)

12

1 Comment

Are you coming to RSA Conference? If so, join us at SCW Coffee Shop! Bluestone Lane SOMA Coffee Shop 55 2nd St, San Francisco, CA 94103 On May 6th | 12:30PM PST. Join Secure Code Warrior CTO & Co-Founder, Dr. Matias Madou, Jeffrey Martin from Mendio, John B. Dickson from Lasithi Security, and Viswanath S C. from Thales Digital Identity and Security to learn about: Incredible techniques for winning over developers and helping them prioritize security The challenges in measuring security skill development, and how to overcome them Why a developer-centric ‘Trust Score’ could be the missing piece of the compliance puzzle for every top organization and can unlock the benchmarks needed to reach new levels of risk reduction in code. https://lnkd.in/gMzG2WuJ

12

It's been a minute since #RSAC2024 in San Francisco! #Cohesity was everywhere—their logo wrapped around buses and Ubers, and their booth was packed, especially with folks curious about Cohesity Gaia and the future with Veritas. Highlights from RSAC 2024 include: 🤝 Integration with Wiz to safeguard critical data during cyberattacks 🥊 Fighting data exfiltration with Zscaler 💡 Cyber resilience insights with Cisco and CrowdStrike Falcon® LogScale 🏛️ FedRAMP® Moderate Authorization for Cohesity Cloud Services for Government 🎉 https://lnkd.in/gPr8XgSr

5

Holy Smokes! I have never answered SO many questions in a webinar before!!! If you are trying to navigate the Entrust CA distrust challenges, you can watch the recording and all the very rich Q&A covered here. https://lnkd.in/gaqbup7w

101

6 Comments

Nicely done team! Looking to deploy copilot or get data governance under wraps? Let us Shoe you how with a complimentary copilot or Data Risk Assessment leveraging Varonis!

4

Will AI curb cyberattacks or will it give rise to more? While there are many speculations, there is no definitive answer to this question yet. But one thing is for sure, there is drastic change coming up as AI implementations widen. Most CISOs and IT Security teams are expecting technology vendors to reduce complexity and make cyberattack prevention more simple. That's easier said than done. Chuck Brooks and Chandrashekhar are joining me on our upcoming talk on SecPod Webcasts, where we're going to talk about: - AI and its current impact on vulnerability management - How to stop future cyber attacks with AI - Leveraging AI with SecPod's CVEM framework to secure IT Reserve your slot: https://lnkd.in/gxAetjFq See you soon!

39

5 Comments

In 2023, the manufacturing industry was the third-most represented industry in Arctic Wolf® Incident Response (IR) ransomware engagements, and fourth-most represented in IR business email compromise (BEC) engagements. (Link in comments) The median cost of a manufacturing ransomware attack responded to by Arctic Wolf Incident Response is now $500,000 USD. Can you ( Mr or Ms. Manufacturer) sustain downtime, interruptions, reputational damage, client data loss and more? We help many of the top local manufacturers in the area protect and defend their business from cyber threats by "making them a hard target" - putting in the defenses that will keep most of the "bad guys" moving on the next victim who hasn't locked their doors and windows.

5

1 Comment

In just one week, the SoCal CISO Community will assemble for their Evanta CISO Summit on May 21st! One of the many exciting sessions next week will be led by Todd Friedman, Sunil Agarwal, and Trina Ford, focused on "The CISO as a Savvy Board Communicator." Translating the organization's cybersecurity posture to the board can be a catalyst in improving organizational resilience and building strong rapport. How do you communicate security initiatives clearly when the stakes are high? Join this session to discuss: -Leveraging your expertise to build trust -Demystifying cybersecurity spending -Translating cybersecurity into actionable language Qualified InfoSec professionals, apply to join below! #socalciso #evantaciso #informationsecurity

19

2 Comments

Only a few days left until the SoCal CISO Community meets for the much anticipated SoCal CISO Summit on Tuesday, May 21st! If you haven't met this speaker yet, you've been missing out. Dan M. is an absolute legend! Come hear what he has to say on "Convergence of Digital, Physical and Beyond." There is no shortage of data available to the security function but leveraging that data to enhance physical security — is a different story. CISOs have the opportunity to derive meaningful findings from their environments (both digital and physical) and incorporate security into every aspect of the enterprise — cyber, physical and personnel security. Join Dan Meacham, Global CISO at Legendary Entertainment as he explores: -The past, present and future of expanding your strategy to include physical security -Understanding additional data points and why they are important to your program -Expanding your risk lens beyond securing information and planning for the future Seating is limited and many sessions are already full, but there is still space to join. Qualified InfoSec professionals, apply below! #socalciso #evantaciso #infosec

20

1 Comment

The SoCal CISO Summit is only 3 weeks away! Don't miss this all-star lineup with Emily O'Carroll, Jonathan Chow, and Arthur Lessard, discussing "The Imperatives of PAM" on May 21st. Organizations have suffered relentlessly from cyberattacks, each week it seems there are new headlines highlighting ransomware attacks or data breaches. With the sensitivity of privileged accounts, unpatched vulnerabilities, and an extensive remote workforce, privileged access management (PAM) is essential to securing your most critical systems and data. Join this panel session to discuss: -Why PAM plays a crucial role in mitigating cyberattacks -Gaining executive buy-in on effective solutions -Having a proactive approach to implementation and configuration Qualified InfoSec leaders, register below! #evantaciso #socalciso #informationsecurity

54

4 Comments

Two #cloud security announcements to kick off #RSAC 👇 ☁️ CrowdStrike announced the general availability of CrowdStrike Falcon® Application Security Posture Management (#ASPM) as an integrated part of CrowdStrike Falcon® Cloud Security. ☁️ CrowdStrike also announced new Cloud Detection and Response (#CDR) innovations to unify industry-leading managed threat hunting with deep visibility across cloud, identity and endpoints to speed detection and response across every stage of a cloud attack. 💬 “With the integration of Falcon ASPM with Falcon Cloud Security, we’re providing one platform that provides comprehensive risk visibility and workload protection across the entire cloud estate. This revolutionizes CNAPP with integrated ASPM and provides organizations with a blueprint that bridges the gap between their security and development teams.” —Karan Gupta, Head of Engineering, CrowdStrike 💬 “The combination of CrowdStrike’s industry-leading cloud threat hunting services and comprehensive CNAPP provides a powerful force multiplier for Cloud SecOps teams to consolidate tools, close gaps in visibility and deliver the security outcome that matters most – stopping the breach.” —Michael Sentonas, President, CrowdStrike 📰 Full coverage of both announcements by Adrian Bridgwater in Forbes: https://lnkd.in/enednuJJ

60

What should be the agenda for the upcoming CSA IL event during Cyber Week? You decide by completing the survey in the first comment

13

1 Comment

Santa Barbara Business Owners: Whether you’re looking for an IT Company or already have one, ANYONE who works on your network should have good answers to these 21 questions. If they don’t, it’s time to find someone new. 💯 Grab your FREE Copy of our 21 Critical I.T. Security Questions to see how we answer these important questions - https://lnkd.in/gRUVS8Xr

1

The Bay Area CSO Council reprised their Innovation Showcase today, providing Council members the opportunity to hear from four outstanding startups.  The showcase benefits BlackGirlsHack and the cybersecurity program at California State University, Chico. A big thank you to George Totev, Izak Mutlu, and Julie Tsai for driving this event, a real win-win for the vendors, the CISOs, and the beneficiaries. Check out these companies for your next project in data security posture management (DSPM), security posture management, virtual desktop infrastructure (VDI), or supply chain security. Normalyze (DSPM) - Discovers and classify data stores, prioritizes what’s important, identifies risky and excessive access, detects and helps remediate data exposure risks. Reach Security (Security posture management) - Automatically reprograms your security infrastructure based on who you are and how you’re being attacked. Integrates comprehensive data-driven intel and security posture data to provide specific, targeted threat modeling and remediations. Sonet.io (Cloud VDI) - Virtual desktop with a rich set of security controls for end users delivered at the speed of SaaS.  Controls access to cloud apps and desktop software while monitoring user activity and preventing data theft. D&G Analytics (Supply Chain Security) - Provides deep visibility to third party software risk, by evaluating every inbound application and software update for infiltration risk, before deploying to endpoints. #cybersecurity #innovation #ciso

51

7 Comments

Utilities, pharmacies, other core components of the life we live are under attack daily and sustained predictable #MDR essential to keeping us safe and secure. CyberMaxx helping out clients here every day

4

Do you rely entirely on your sole Cloud provider to also host your backups? Does that match the risk tolerance of your Leadership team? Are you even aware of this risk? Yes it costs extra money, but if you really understand and model the risks of doing everything with one Cloud Provider, you might do well to consider adding this to your Risk Register. Assign executive ownership, evaluate robust backup options outside your primary Cloud Provider like the good folks over at DataBank or any number of providers, and then determine if the risk outweighs the cost. Or not, like this unfortunate experience. https://lnkd.in/gcXkukpv #riskmanagement #cloudops #businesscontinuity #disasterrecovery

19

2 Comments