Brian C Reed

I read through Contrast Security's G2 page today and wow, the reviews are amazing! One of my favorite quotes: "Contrast makes understanding vulnerabilities easy. For every vulnerability found in custom code, there is an answer to what the vulnerability is, why it is a risk, and how to fix the vulnerability. It is also great at identifying libraries used within the application and the potential vulnerabilities for each library." *Innovation that delivers: A few reviewers say Contrast is the only tool that truly makes a difference in the way they approach application security, especially since it can stop Zero-Day attacks. *Developers love it: The real-time IDE features give developers immediate feedback and help them fix vulnerabilities early on. *Security team approved: Contrast gets praise for its ease of use, clear alerts, and positive experience for everyone involved in the development process. (link in comments) #appsec #DevSecOps #cybersecurity #softwaredevelopment

12

3 Comments

It’s time to flip the script on incident response. Traditionally, IR begins with the proverbial needle in a haystack, with teams searching for infected machines or monitoring network logs to spot anomalous traffic. Pinpointing stolen identities comes much later, giving malicious actors the time and space to move laterally and propagate through a network. And as identifying and containing breaches involving stolen credentials can take upwards of 292 days, these actors are rarely short on time. We’re helping businesses take a new approach – one that brings identity to the forefront and stops threat actors in their tracks. With identity front and center, IR teams can discover and lock down compromised accounts *first*, freezing malicious activity without killing productivity. They can reduce the blast radius of an attack, relieve significant time and labour burdens on their team, and seriously accelerate remediation time from weeks to days. So how does this work in practice? You can find out right here 👉 https://lnkd.in/eupEEMts #IncidentResponse #IR #IdentityFirst #IdentitySecurity

62

Check out this early prototype of frequently requested "omni-search" capability for Mattermost's Mission IT platform that can find and integrate data from different environments in real time. Mission IT is all about securing the systems, facilities and missions society depends on. #criticalinfrastructure #defense #missioncritical #missiondriven

6

Expel 🤝 modePUSH There's nothing more gut-wrenching for a company than experiencing a breach. Businesses of all sizes and industries face this threat every day, and despite the best defenses, falling victim is often easier than anyone wants to admit. modePUSH steps in during those critical post-breach moments, helping companies recover and rebuild. Now, with our partnership, Expel and modePUSH are working together to ensure that companies don’t have to make that call twice. Together, we help modePUSH customers not only recover but also strengthen their security posture to prevent future incidents. Discover how modePUSH + Expel can support your security strategy:

17

Meet with us during RSA Conference and learn how AI-Powered Deception can help with early detection cyber attacks with precision. No false positives!!! 🔒 With traditional cyber defense, You, the Defender, must get it right all the time, but the threat actor needs to be right only once to compromise your critical assets. 🔑 Deception turns this asymmetry on its head to your benefit – with deception, the bad guy must be wrong only once to get caught. ✅ There are many use cases for Deception Technology. Our customers are using it for Advanced Threat Defense, Zero Days, Ransomware Protection, OT Security, Active Directory Protection and Identity Threat Detection and Response (ITDR). They are using it to accelerate their Zero Trust deployment. Suresh (Surra) Yanamadala Raj Gopalakrishna Suril Desai Chad Scrupps #CyberDeception #IdentityProtection #Honeytokens #Ransomware #InsiderThreats #APTs #ITDR

22

Today, President Biden issued the first-ever National Security Memorandum (NSM) on Artificial Intelligence (AI). The NSM’s fundamental premise is that advances at the frontier of AI will have significant implications for national security and foreign policy in the near future. The NSM builds on key steps the Administration has taken to drive the safe, secure, and trustworthy development of AI, to ensure that America leads the way in seizing the promise and managing the risks of AI. The Full Memorandum, an interesting read, below: #AI #NationalSecurity

7

Big changelog for our #CERT's #ransomware cartography! 🤠New version (v27) available on our CERT GitHub: https://ow.ly/P4gM50TwWrN 💡Entities are clickable for our World Watch clients to read more about threat groups and malware strains. #cyberthreatintelligence #cti

6

Why your legacy IDS needs to go ... * Alert Overload - Too many alerts with too many false positives. This means attacks take too long to detect or are missed entirely. * Insufficient Attack Visibility - Limited threat detection and visibility of cloud workflows, lateral movement, encrypted communications, and anomalous activity. This means critical attack signals are missed. * Lack of Context - Valuable alert context is missing, requiring additional resources to see the full story. This results in delayed impact assessment and response.

Just cast my vote today, and it’s incredible to think about the evolution of voting in the U.S. Over the years, we’ve gone from paper ballots and poll books to complex digital systems. Information security in voting is essential. As we continue to evolve, voting day is a powerful reminder of how important resilient and transparent security measures are for our nation’s future. #ElectionDay #InformationSecurity #VotingSecurity #DigitalTransformation

1

This session may also include something akin to, "how to survive being super sick after RSAC." You really won't want to miss it! Join me and one of the smartest guys I know chat about the links between security complexity, vulnerability gaps, and growth in your attack surface; along with other interesting tidbits from RSAC 2024.

29

3 Comments

At BlackHat and beyond, #collaboration is king. As we head to #BlackHatUSA 2024, let’s take a minute to consider the origins of this critical annual gathering. Launched in 1997 as a training and information-sharing conference, Black Hat was founded in part as an acknowledgement that in cybersecurity, no one person or entity could possibly have all the answers–that we need to work together if we’re going to keep organizations, data and people safe from attackers. Black Hat still holds true to those roots, with sessions that are highly technical, instructional and vendor neutral. Black Hat bears witness to the power of people working together in a worthy–even existential–effort. Black Hat is all of us, we're in this together. 🙌 Stop by our booth to see the crew August 7-8, 2024 Alisha Smith Dan Mellinger Kirk Hasty, CEH, MCSE Tom Salmond #weareinthistogether #cybersecurity #security Jason Rolleston Symantec Carbon Black Broadcom #symantec #carbonblack #broadcom

14

3 Comments

Looking for a way to stay cool? Grab a popsicle and catch up on the latest issue of the AuthZ newsletter. If you’re an #identity or #authorization enthusiast, this weekly digest is a must read. Subscribe and share!

2

Check out this webinar with Dragos, Inc. and Xage Security: Nation-state threats targeting #criticalinfrastructure. #cybersecurity #cyberattacks #VoltTyphoon #SaltTyphoon #otsecurity

15

1 Comment

🔒 7 Ways for Critical Infrastructure to Thwart State-Sponsored Attacks State-sponsored hackers targeting critical infrastructure is an escalating concern, highlighted by recent advisories from CISA and other security-focused government bodies. In our latest blog, Shawn Taylor, Senior Director of Solutions Engineering at Xage Security, explores seven foundational protections that can significantly mitigate these threats. 👉 Read the blog to understand how to fortify our critical infrastructure against state-sponsored attacks. #Cybersecurity #CriticalInfrastructure #ZeroTrust #StateSponsoredAttacks

7

Personal CISO Liability is a hot topic. The question is who has the CISO’s back? Watch this webinar for specific recommendations to reduce personal liability and learn how to best protect yourself in the current climate. #cybersecurity #cyberrisk #seccompliance #safesecurity #wiz #crowdstrike

8

1 Comment

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4