Andrés Guzmán Gordon

Seguridad en Cloud dos nuevos anuncios en RSA, ASPM y CDR todo parte de CrowdStrike Falcon® Cloud Security. Two #cloud security announcements to kick off #RSAC 👇 ☁️ CrowdStrike announced the general availability of CrowdStrike Falcon® Application Security Posture Management (#ASPM) as an integrated part of CrowdStrike Falcon® Cloud Security. ☁️ CrowdStrike also announced new Cloud Detection and Response (#CDR) innovations to unify industry-leading managed threat hunting with deep visibility across cloud, identity and endpoints to speed detection and response across every stage of a cloud attack. 💬 “With the integration of Falcon ASPM with Falcon Cloud Security, we’re providing one platform that provides comprehensive risk visibility and workload protection across the entire cloud estate. This revolutionizes CNAPP with integrated ASPM and provides organizations with a blueprint that bridges the gap between their security and development teams.” —Karan Gupta, Head of Engineering, CrowdStrike 💬 “The combination of CrowdStrike’s industry-leading cloud threat hunting services and comprehensive CNAPP provides a powerful force multiplier for Cloud SecOps teams to consolidate tools, close gaps in visibility and deliver the security outcome that matters most – stopping the breach.” —Michael Sentonas, President, CrowdStrike 📰 Full coverage of both announcements by Adrian Bridgwater in Forbes: https://lnkd.in/effwEuMM

11

Calling you - Calling LATAM businesses - How are you protecting your digital assets? How are you increasing your security posture? How are you addressing your industry regulations that require you to secure identities and accesses? How much were you fined or will you be fined if you don't secure those assets and pass your audit? Check this out... This is where you need to go to ... Let Onistec assist you ... From identity governance to privileged access management, time to look at the tool that will protect your digital assets effectively - time to work with the team that will guide you through this journey.

6

Excellent ebook about IA & Cybersecurity, thanks for sharing William Mauricio Bustos Carrillo

14

1 comentario

Thanks for this Luis Sosa, CISSP :) Don't forget to check out Luis and his Top Ten Tips for the CISSP Exam as well: https://lnkd.in/dTxtqSS

11

Cyber Resilience 🛡️ #Ciberseguridad #MSP #Cybersecurity #Security #CyberResilience #IT #ServiciosManejados #DataSecurity #Business #Backup #Network

1

Ojo con los usuarios de zabbix... CVE-2024-22120 - CVSS (v3.1) 9.1 - EPSS We don't have an EPSS score for this CVE yet - Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. Ref.1: https://lnkd.in/e6vnA_2c

6

We are searching for TTX experts to be interview about Cyber incident response tabletops in Cyber Frontiers: The Nearshore Cyber Podcast Who are Mexico's best TTX experts? If you do a lot of cyber IR tabletops, speak English. DM Peter Schawacker or DM me

11

Take a read, it’s time to make cyber resilience a priority! The recent alleged security breach at Snowflake is a prevalent reminder of the devastating effects a third-party data breach can have on a company and simultaneously the importance of mitigating this risk. It may feel like the idea of a third-party cyber-attack is alarming and out of your control, however, the following article by Andrea Garcia Beltran, Partner & Head of European Cyber at Nirvana helps name some proactive ways to manage third-party and supply chain cyber risks. For example: ✅The importance of conducting regular and thorough audits of suppliers and service providers. ✅Proactive mitigation of network and system threats. ✅The development of crisis management procedures to ensure operational continuity, including third parties being regularly tested. ✅Security Certifications: Look for providers with strong security credentials like ISO 27001, SOC 2, and GDPR compliance. ✅Cyber Insurance: Check if the provider has cyber insurance and sufficient third-party data breach limits. Furthermore, we highly recommend organisations immediately take the steps suggested by the vendor: ✅Enforce Multi-Factor Authentication on all accounts. ✅Set up Network Policy Rules to only allow authorized users or only allow traffic from trusted locations (VPN, Cloud workload NAT, etc.) ✅Lastly, Impacted organisations should reset and rotate credentials. What recommendations do you have? Leave them in the comments below⬇️  #TeamNirvana #CyberNirvana #Supplychainrisk #Cyberrisk #Snowflake Círculo de Mujeres Semana Dinero

7

2 comentarios

Join Alberto H., Cytek Security Offensive Manager, tomorrow at 7am (UTC-6) from Guatemala for a free webinar on: "Strategies to analyze and mitigate vulnerabilities in cybersecurity" in collaboration with Cámara de Industria de Guatemala and  EX Squared. Enroll using the link below and learn to identify #cyberthreats, what's a #cybersecurity breach and their importance, and explore the different techniques and tools used to identify #vulnerabilities in systems and networks. Thanks to Kim Taylor and Alexander Gomez, PMP, CSM for taking part in this initiative to tackle the cyber threats companies face.  Mauricio Monge Quesada Jeannie Bonilla Oliva #cybersecurity #Guatemala #tech  👇

13

🔥CHRISTOPHER HADNAGY🔥 🚀😮5 #políticas para protegerse contra ataques de #ingenieríasocial, inspiradas en el autor de "The Science of Human Hacking". #ciberseguridad #concientización #Concienciación #securityawareness #digitalusersas #christopherhadnagy

1

Logramos el Cyber Threat Intelligence 101 de #ARCX Excelente Curso y pruebas en cada Modulo y Examen Final Complejo. Un Resumen de los Modulos ✅ Objectives of Threat Intelligence ✅ Introduction to Threat Actors ✅ Threat Vectors ✅ The Intelligence Cycle ✅ Introduction to Law and Ethics 🌐 Idioma: Ingles arcX

17

What do knowmad mood and HYCU, Inc. have in common? - Deep expertise and focus in Atlassian, Amazon Web Services (AWS), GitLab, and more. - Focus on helping customers on any digital transformation journey, from on- prem and hybrid to fully cloud-native. - Support for organizations in highly compliant and security-aware industries - from the public sector to financial institutions. We’re launching a webinar next week where we tackle NIS2 and DORA specifically, those who attend will walk away with: - Free access to R-Graph: A full visualization of their data estate that exposes unprotected apps - especially in the context of DORA. - The ability to automate all backup operations, not just in Atlassian, but across all ICTSs. This is one of the critical reasons they’re such an amazing partner. Join us for this session in Spanish, but don’t worry, we’ll launch an English one too.

14

Critical PuTTY Client Vulnerability Lets Attackers Recover Private Keys: A severe vulnerability has been discovered in the PuTTY client and related components, allowing attackers to fully recover NIST P-521 private keys. The PuTTY client generates heavily biased ECDSA nonces when using the NIST P-521 elliptic curve, causing the vulnerability tracked as CVE-2024-31497. PuTTY Client Vulnerability The PuTTY client and all related components, including FileZilla, […] The post Critical PuTTY Client Vulnerability Lets Attackers Recover Private Keys appeared first on Cyber Security News. #CyberSecurity #InfoSec

1

IG Technologies is presenting #APIsecurity with Cequence Security and #emailsecurity with Trustifi in Quito today. Valuable discussions among cybersecurity professionals are enhancing our knowledge through insights and expertise exchange. #cybersecurity #expertise #knowledgeexchange

22

1 comentario

Despite the abundance of technology designed to combat cyber risks, cyber threats continue to bypass antivirus software. Why are cyberattacks still successful? What can we do about it? Read my post to find out: https://lnkd.in/gsWPKdP6

1

Veritas Data Risk Solution #digital #empresas #pequeñasempresas #negocios #finanzas #seguros #seguridadinformática #sistemas #tecnología #ti #tic #tecnologiadelainformacion #timexico #ciso #cio #cto #ceo #comprador #compras #marketingdigital #cybersecurity #cloudsecurity #cloud #azure #aws #security #datasecurity #hybridcloud #cloudcomputing #devops #microsoft #future #scienceandenvironment #research #science #ai #artificialintelligence #artificialintelligence #machinelearning #bigdata #infosec #datacenter #economía #ventas #data #ibm #cyber #privacy #databreach #informationsecurity #dataprotection #infrastructure #manufacturing #experience #videovigilancia #videoconferencia

2