Pierre Buijsman

Andrew Ginter , VP of Industrial Security at Waterfall Security, discusses operational technology (OT) cyber attacks and their 2024 Threat Report. He examines how global geopolitical tensions and evolving ransomware tactics are reshaping industrial cybersecurity. He sheds light on the significance of recent incidents and the critical role of defensive strategies against these growing threats. #cyberattacks #OTcyberattacks #ICSattaks #SecOT #Cybersecurity #ICScybersecurity

8

Explore the intricacies of Condor Carpets' journey towards enhanced #cybersecurity and operational efficiency after integrating #Kaspersky Industrial CyberSecurity into their infrastructure. Watch now: https://kas.pr/pi3k .

4

Join our cybersecurity experts as they uncover with real examples the 14 most cunning types of phishing attacks that threaten organisations in EMEA. Unlock the secrets of phishing defence! #proofpoint #phishing #cybersecurity https://bit.ly/3UUNm6U .

7

𝗪𝗵𝘆 𝗺𝘂𝘀𝘁 𝗜 𝗰𝗼𝗺𝗽𝗹𝘆 𝘄𝗶𝘁𝗵 𝗣𝗖𝗜 𝗗𝗦𝗦? This is one of the questions that I frequently get since I started at PCI Council. And my standard response is… PCI Council does not manage the compliance nor enforcement to our standards. Huh? 𝗪𝗵𝗮𝘁 𝗱𝗼𝗲𝘀 𝗣𝗖𝗜 𝗦𝗦𝗖 𝗱𝗼? PCI SSC strengthens payment security globally through the 15 security standards that we help to manage. This is done together with our PCI Exco as well as the PCI Community, which includes the Affiliate Members, security assessors, Participating Organizations (PO), etc. Any questions about your legal obligations to comply with PCI standards including PCI DSS (Data Security Standard) should be raised with your compliance-accepting entity. Depending on your role in the payment ecosystem, your compliance-accepting entity is probably your acquirer or the Payment Brands who are also the PCI Exco. This includes any questions on non-compliance penalties, enforcement actions or implications in the event of a data breach. 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗮𝘀𝗶𝗱𝗲, 𝗶𝘁 𝗶𝘀 𝘆𝗼𝘂𝗿 𝗿𝗲𝗽𝘂𝘁𝗮𝘁𝗶𝗼𝗻! PCI standards help maintain trust in the payment ecosystem and upholds your brand promise to your customers, stakeholders, shareholders and investors. In a hyper-competitive environment, a data breach may have a catastrophic impact to your business and speaking from personal experience, it can be costly to regain the trust of your customers… if at all. 𝗪𝗲𝗹𝗹 𝗱𝗼𝗻𝗲, 𝗥𝗶𝗰𝗼𝗵 𝗨𝗦𝗔! This is where best-in-class organizations differentiate themselves.  I enjoyed reading the article below from Ricoh USA, Inc., a global provider of integrated digital services.  Why we chose PCI certification over PCI compliance, Ricoh USA, undated, accessed on 4 May 2024. https://lnkd.in/gKquG6Ms While some clarifications are required on the terminologies used, the key point that I noted is “(Our PCI certification) assures you of our commitment to data security and securing your data.” Kudos as well to the Ricoh USA team for highlighting that “they also need to consider how their vendors and partners that touch cardholder data address PCI standards.”  You are responsible for your brand and your customer’s data even if you have outsourced your operations to a vendor or partner.  A major risk event impacting your service provider will likely also negatively impact you. David Levine, thank you for the article and please help to credit your ex-team at Ricoh USA. #pcissc #pcicommunity #pcidss #pcidssv4 #datasecurity #cybersecurity #payments #paymentsecurity Video credit: Thanks to Canva for your platform and the royalty-free video.

51

🛡️🔒In an era of escalating cyber threats, organizations face challenges such as skills shortages, budget constraints, and regulatory demands like the EU's NIS2 directive. Many recent cyberattacks could have been mitigated with proper measures. 🧷 🧐Read the blog by Anna Barkvall on how a holistic approach to security, integrates risk management into business operations. She advocates adopting AI tools like #Microsoft365Copilot to enhance security and meet #NIS2 requirements. 👉 https://ow.ly/qcYH50SjTrC

1

SailPoint Risk Connectors helps organizations quickly and efficiently make informed access management decisions, using third-party risk scores. Risk Connectors is now available on the SailPoint Atlas platform; learn more here:

1

Context in the #OT environment is so very important, and this is one of Nozomi Networks key differentiators . I was with a customer yesterday reviewing our #vantage platform looking at the built-in #ai to #prioritize and reduce #risk, and coupled with the #intelligence below, the #context is the #differentiator.

32

Dear Network, here our last post outlines effective strategies for timely identification and patching to defend against zero-day threats.

9

Posting to share the details of a fantastic webinar series that we have lined up with Intertek. The first one is dropping on the 18th June - 11am and will cover the changes to the ISO 27001 standard.   If you have heard the words "Changes to standard" recently and are short on time to delve deeper to find out what they are – then we’ve got you!   Together we will cover: - What clauses are changing - How to prepare - What it means for your business   Take advantage of the Q&A afterwards and you will be ready for a seamless transition ! #ISO27001

1

Don't miss the opportunity to hear more about MOBILE MALWARE May 7th at 9:40am PT while you are at #RSAC. Zimperium’s Gianluca B. Braga and Nicolás Chiaraviglio will dive into the unique realm of mobile #malware, examining its differences from desktop variants and its adaptive evasion strategies while covering which techniques malware used during the years to fight mobile OS's sophisticated defenses. Stop by Booth #1543 in the South Hall to learn more about how #WeSecureMobile. #MobileSecurity #MobileFirstSecurity #mobilethreatdefense #mobileAppSecurity #cybersecurity #zerotrustsecurity #mobilethreats #zerodaysecurity

18

Where do you start with vulnerability management in an OT environment?! -> Start with a data driven approach and learning from OT threat intelligence specialists. 🤺 Tomorrow! [2pm AEST / 12pm AWST]. Join Dragos, Inc. to understand which OT vulnerabilities need your attention and why. Last year’s OT vulnerabilities? Think of them as the ultimate puzzles waiting to be solved. The answer to this enigma wrapped in digital code and physical operations: risk-based vulnerability management.    Join Vulnerability Analysts Logan Carpenter and Nick Cano for an insightful look at what happened in the world of OT vulnerabilities in 2023.  Key takeaways include:  - An overview of the latest OT vulnerability statistics and trends - Insights into the most critical vulnerabilities disclosed last year - How to assess risk based on exploitability, asset criticality, and impact - Common articulations of vulnerabilities by weakness type - A look at the rise of authentication-required vulnerabilities Register now for a data-driven look at vulnerabilities in operational technology environments to decipher which of them deserve your attention now and why. If you ever need to talk about network security monitoring in depth, whether it be design, deployment, management, threat intel application - just reach out for a chat.

13

Tanium and Forescout integration is expected to significantly improve operational resilience, asset protection, and threat defense for organizations by providing a unified, automated, and real-time cybersecurity platform.

2

A cyber-attack means bad weather for any business. In the Netherlands, the national weather institute, KNMI, modernized its IT environment in AWS with Trend Cloud One. The organization’s forecasts can be critical for many stakeholders, including the government, port companies and Schiphol Airport. Read our case to learn how KNMI protects its data and services against both known and unknown threats. https://bit.ly/4aNgofn #cybersecurity #KNMI #trendmicro

3

Critical infrastructure sectors are constantly faced with multifaceted risks from regulatory, strategic, and operational dimensions. Explore recommendations from EMEA Field CISO, Daniele Mancini in navigating these challenges and more: https://ftnt.net/6047jgV99

2

Today's video is inspired by a webinar I did just now for Claroty about how KEVs, Reachability and Business Context can help you be super targeted around prioritising vulnerability remediation, which is a fact of life in the OT world where remediating vulnerabilities can be so difficult. https://lnkd.in/gat_dj5p

13

1 commentaar

Proofpoint's Voice of the CISO report found that 89% of CISOs in the UAE are turning to AI-powered technology to protect against human error and block advanced human-centric cyber threats. Click below to explore more regional findings and download the global report.

2