Josh Smith

Social engineering is a low-complexity TTP used by many, not just Scattered Spider. Permiso has been alerting about Scattered Spider's TTPs because it can be used by other threat actors and victims of Scattered Spider had all the security controls (CSPM, EDR, CASB, CNAPP, SIEM) but still were compromised. All victims missed early response/ containment opportunities at IdP and SaaS layers, could have caught 3 days earlier on average, a significant window given a 3-5 day operational period. By the time an alert fires in your SIEM, if it does, the blast radius is large and damage is done. DM me to discuss common gaps in threat visibility, detection, response, and containment across IdP, IaaS, PaaS, SaaS, and CI-CD that enable social engineering and other cloud TTPs to be successful, and strategies to close these gaps. We know Scattered Spider's cloud attacks, our P0 Labs Team put out a report last year detailing the cloud attacks they responded to.

3

#OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get at least a portion of the available information for no cost. #osintforgood #investigations All credits to-->  Twitter: @jnordine

11

At Kieri Solutions - Authorized C3PAO , we are getting questions from our clients about whether Chevron could mean that CMMC is going away. With the caveat that I'm not a lawyer... The short answer is no. The portion of CMMC that impacts defense contractors is the 𝘤𝘰𝘯𝘵𝘳𝘢𝘤𝘵 𝘤𝘭𝘢𝘶𝘴𝘦 which states essentially "𝐈𝐧 𝐫𝐞𝐭𝐮𝐫𝐧 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐃𝐨𝐃 𝐩𝐚𝐲𝐢𝐧𝐠 𝐦𝐞 𝐦𝐚𝐝 𝐦𝐨𝐧𝐞𝐲, 𝐈 𝐭𝐡𝐞 𝐝𝐞𝐟𝐞𝐧𝐬𝐞 𝐜𝐨𝐧𝐭𝐫𝐚𝐜𝐭𝐨𝐫 𝐚𝐠𝐫𝐞𝐞 𝐭𝐨 𝐩𝐚𝐬𝐬 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐬𝐞𝐥𝐟-𝐚𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭𝐬 𝐚𝐧𝐝 𝐭𝐡𝐢𝐫𝐝-𝐩𝐚𝐫𝐭𝐲 𝐚𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭𝐬 𝐚𝐭 𝐋𝐞𝐯𝐞𝐥 1 / 2 / 3, 𝐢𝐧 𝐚𝐝𝐝𝐢𝐭𝐢𝐨𝐧 𝐭𝐨 𝐩𝐫𝐨𝐯𝐢𝐝𝐢𝐧𝐠 𝐭𝐡𝐞 𝐩𝐚𝐫𝐭/𝐬𝐞𝐫𝐯𝐢𝐜𝐞/𝐜𝐚𝐩𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐭𝐡𝐚𝐭 𝐢𝐬 𝐦𝐲 𝐩𝐫𝐢𝐦𝐚𝐫𝐲 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬 𝐟𝐮𝐧𝐜𝐭𝐢𝐨𝐧." This is a 𝐯𝐨𝐥𝐮𝐧𝐭𝐚𝐫𝐲 contract clause. It isn't being imposed upon you. The clause will be added to new, renewing, and option year contracts, almost certainly starting in early 2025. If companies want to make money selling to the DoD, they will need to accept the contract clauses. This is what the DoD CIO's office has been saying for 5 years now. At 𝘸𝘰𝘳𝘴𝘵, I think Chevron could invalidate portions of the CMMC guidance that is published separately from the CMMC Rule. Such as the DFARS Cyber FAQ, or the FedRAMP Equivalency Memo. But did you notice that the CMMC rule is hundreds of pages long, even including the full text of the CMMC Assessment Guides? That means that everything that is currently in the rule is immune, as soon as the defense contractor signs that contract clause. So again, no. #CMMC isn't going away. Unless the defense contractor decides they no longer want to make money from the Department of Defense. Please see the real lawyer's perspective below. Jacob Horne, is this how you read it too?

46

18 Comments

Yesterday, I had the pleasure of attending #CMMCDay. There were a lot of great discussions kicked off by Matthew Travis, The Cyber AB. I took a few key points from the discussion throughout the day. 1. False Claims Act - This will continue to be the primary compliance review for the DoD. Why not 'deputize' those within the DIB to police themselves. With the payouts being received from false claims act, it appears that it will be an effective tool for the DoD. 2. Rulemaking Timeline - The DoD continues to adjudicate public comments on the #CMMC Program rule (CFR 32) and all indications are that it will be released by fall 2024. This rule will make CMMC affective and allow certifications to begin outside the Joint Surveillance Assessment (JSVA) Program. CFR 48 that will mandate CMMC be included in contracts is expected to be delayed until later in 2025. Therefore, the DoD will essentially provide a grace period from Fall 2024 to mid/late 2025 for organizations to get certified prior to mandating it in contracts. 3. Not Just Technology - CMMC is a verification and validation program. Organizations must demonstrate that they are implementing the CMMC Requirements to a third-party assessor; while some controls (e.g., encryption, malicious code scanning) can be performed using technology, other controls (e.g., background screening, training, security assessments) require people to perform. 4. 100% Ready - There was a lot of discussion on the activities within the JSVA. These assessments provide insight into what organizations can expect during a CMMC assessment. One of the key themes coming from these assessments is if you aren't 100% convinced your organization is ready for an assessment - then you’re not ready! If you couldn’t attend and want to learn more about these and other topics, send me a note. I'd be happy to share additional insights. If you were able to attend, what key points did you take away from the event?

14

🇨🇳 RED ALERT: 𝑪𝒐𝒖𝒏𝒕𝒆𝒓𝒊𝒏𝒈 𝒕𝒉𝒆 𝑪𝒚𝒃𝒆𝒓𝒕𝒉𝒓𝒆𝒂𝒕 𝒇𝒓𝒐𝒎 𝑪𝒉𝒊𝒏𝒂 - 🏛️ United States House Committee on Oversight and Accountability Subcommittee on Cybersecurity, Information Technology, and Government Innovation. The panel discussion focused on cyber warfare threats, particularly those orchestrated by the 𝑷𝒆𝒐𝒑𝒍𝒆'𝒔 𝑹𝒆𝒑𝒖𝒃𝒍𝒊𝒄 𝒐𝒇 𝑪𝒉𝒊𝒏𝒂 (𝑷𝑹𝑪), against the United States' critical infrastructure. ✅𝗖𝗥𝗜𝗧𝗜𝗖𝗔𝗟 𝗥𝗘𝗖𝗢𝗠𝗠𝗘𝗡𝗗𝗔𝗧𝗜𝗢𝗡𝗦 📍𝗙𝗲𝗱𝗲𝗿𝗮𝗹 𝘀𝘂𝗽𝗽𝗼𝗿𝘁 𝘀𝗵𝗼𝘂𝗹𝗱 𝗯𝗲 𝗶𝗻𝗰����𝗲𝗮𝘀𝗲𝗱 to develop and replace outdated technology in critical infrastructure with secure alternatives. 📍𝗣𝗿𝗼𝗺𝗼𝘁𝗲 𝗮𝗻𝗱 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁 President Biden's national cybersecurity strategy. 📍𝗔𝘀𝘀𝗶𝘀𝘁 𝗮𝗹𝗹𝗶𝗲𝘀 in resolving cyber incidents by engaging in *proactive international diplomacy.* 📍𝗜𝗻𝘃𝗲𝘀𝘁 𝗶𝗻 𝗔𝗜 𝗮𝗻𝗱 𝗾𝘂𝗮𝗻𝘁𝘂𝗺 𝗰𝗼𝗺𝗽𝘂𝘁𝗶𝗻𝗴 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵 to improve cyber defenses, recognizing the potential of these technologies to detect and mitigate attacks. 📍𝗣𝗿𝗼𝘃𝗶𝗱𝗲 𝗴𝘂𝗶𝗱𝗮𝗻𝗰𝗲 𝘁𝗼 𝗻𝗼𝗻-𝗳𝗲𝗱𝗲𝗿𝗮𝗹 𝗲𝗻𝘁𝗶𝘁𝗶𝗲𝘀, clarify protocols, and support victims of cybercrime instead of imposing punishment. 📍𝗖𝗼𝗻𝘀𝗶𝗱𝗲𝗿 𝗿𝗲𝗴𝘂𝗹𝗮𝘁𝗼𝗿𝘆 𝗮𝗻𝗱 𝗳𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗲𝘀 to incentivize the removal of obsolete technologies and encourage updated and secure systems. ✅𝗞𝗘𝗬 𝗤𝗨𝗢𝗧𝗘𝗦 𝗙𝗥𝗢𝗠 𝗧𝗛𝗘 𝗛𝗘𝗔𝗥𝗜𝗡𝗚: "𝑇ℎ𝑒𝑠𝑒 𝑎𝑡𝑡𝑎𝑐𝑘𝑠 𝑜𝑛 𝑜𝑢𝑟 𝑐𝑟𝑖𝑡𝑖𝑐𝑎𝑙 𝑖𝑛𝑓𝑟𝑎𝑠𝑡𝑟𝑢𝑐𝑡𝑢𝑟𝑒 𝑎𝑟𝑒 𝑛𝑜𝑡 𝑗𝑢𝑠𝑡 𝑖𝑛𝑐𝑖𝑑𝑒𝑛𝑡𝑠 𝑜𝑓 𝑐𝑦𝑏𝑒𝑟𝑐𝑟𝑖𝑚𝑒 𝑜𝑟 𝑒𝑠𝑝𝑖𝑜𝑛𝑎𝑔𝑒; 𝑡ℎ𝑒𝑦 𝑎𝑟𝑒 𝑑𝑒𝑙𝑖𝑏𝑒𝑟𝑎𝑡𝑒 𝑎𝑛𝑑 𝑐𝑎𝑙𝑐𝑢𝑙𝑎𝑡𝑒𝑑 𝑠𝑡𝑟𝑎𝑡𝑒𝑔𝑖𝑒𝑠 𝑒𝑚𝑝𝑙𝑜𝑦𝑒𝑑 𝑏𝑦 𝑡ℎ𝑒 𝐶ℎ𝑖𝑛𝑒𝑠𝑒 𝑔𝑜𝑣𝑒𝑟𝑛𝑚𝑒𝑛𝑡 𝑎𝑖𝑚𝑒𝑑 𝑎𝑡 𝑑𝑒𝑠𝑡𝑎𝑏𝑖𝑙𝑖𝑧𝑖𝑛𝑔 𝑜𝑢𝑟 𝑐𝑜𝑛𝑓𝑖𝑑𝑒𝑛𝑐𝑒 𝑎𝑛𝑑 𝑤𝑖𝑙𝑙𝑖𝑛𝑔𝑛𝑒𝑠𝑠 𝑡𝑜 ℎ𝑒𝑙𝑝 𝑚𝑎𝑖𝑛𝑡𝑎𝑖𝑛 𝑡ℎ𝑒 𝑝𝑒𝑎𝑐𝑒𝑓𝑢𝑙 𝑤𝑜𝑟𝑙𝑑 𝑜𝑟𝑑𝑒𝑟." ~ Rob Joyce, Former Special Assistant to the President and The White House Cybersecurity Coordinator. "𝐼𝑡 𝑖𝑠 𝑒𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑡ℎ𝑎𝑡 80% 𝑜𝑓 ���𝑚𝑒𝑟𝑖𝑐𝑎𝑛 𝑎𝑑𝑢𝑙𝑡𝑠 ℎ𝑎𝑣𝑒 ℎ𝑎𝑑 𝑎𝑙𝑙 𝑜𝑓 𝑡ℎ𝑒𝑖𝑟 𝑝𝑒𝑟𝑠𝑜𝑛𝑎𝑙 𝑑𝑎𝑡𝑎 𝑠𝑡𝑜𝑙𝑒𝑛 𝑏𝑦 𝑡ℎ𝑒 𝐶𝐶𝑃" ~ William Evanina, Former Director of the National Counterintelligence and Security Center. "𝑇ℎ𝑒𝑦 𝑜𝑓𝑡𝑒𝑛 𝑟𝑒𝑠𝑒𝑎𝑟𝑐ℎ 𝑎𝑛𝑑 𝑑𝑒𝑣𝑒𝑙𝑜𝑝 𝑒𝑥𝑝𝑙𝑜𝑖𝑡𝑠 𝑓𝑜𝑟 '𝑧𝑒𝑟𝑜 𝑑𝑎𝑦' 𝑣𝑢𝑙𝑛𝑒𝑟𝑎𝑏𝑖𝑙𝑖𝑡𝑖𝑒𝑠... 𝑂𝑣𝑒𝑟 𝑡ℎ𝑒 𝑝𝑎𝑠𝑡 𝑓𝑒𝑤 𝑦𝑒𝑎𝑟𝑠, 𝑤𝑒’𝑣𝑒 𝑜𝑏𝑠𝑒𝑟𝑣𝑒𝑑 𝑡𝑎𝑟𝑔𝑒𝑡𝑒𝑑 𝑧𝑒𝑟𝑜-𝑑𝑎𝑦 𝑒𝑥𝑝𝑙𝑜𝑖𝑡𝑎𝑡𝑖𝑜𝑛 𝑜𝑓 𝑣𝑢𝑙𝑛𝑒𝑟𝑎𝑏𝑖𝑙𝑖𝑡𝑖𝑒𝑠 𝑖𝑛 𝑉𝑃𝑁, 𝑓𝑖𝑟𝑒𝑤𝑎𝑙𝑙, 𝑒𝑚𝑎𝑖𝑙 𝑠𝑒𝑐𝑢𝑟𝑖𝑡𝑦 𝑔𝑎𝑡𝑒𝑤𝑎𝑦, ℎ𝑦𝑝𝑒𝑟𝑣𝑖𝑠𝑜𝑟𝑠, 𝑎𝑛𝑑 𝑜𝑡ℎ𝑒𝑟 𝑡𝑒𝑐ℎ𝑛𝑜𝑙𝑜𝑔𝑖𝑒𝑠 𝑡ℎ𝑎𝑡 𝑑𝑜 𝑛𝑜𝑡 𝑐𝑜𝑚𝑚𝑜𝑛𝑙𝑦 𝑠𝑢𝑝𝑝𝑜𝑟𝑡 𝑒𝑛𝑑𝑝𝑜𝑖𝑛𝑡 𝑑𝑒𝑡𝑒𝑐𝑡𝑖𝑜𝑛 𝑎𝑛𝑑 𝑟𝑒𝑠𝑝𝑜𝑛𝑠𝑒 𝑠𝑜𝑙𝑢𝑡𝑖𝑜𝑛𝑠." ~ Charles Carmakal, Chief Technology Officer Mandiant (part of Google Cloud)

90

5 Comments

This ensures that any Ohio-class sub can destroy up to 192 targets, as each missile can carry up to eight warheads, depending on the yield.

1

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

7

Update on the #CMMC timeline!  During the April The Cyber AB Town hall, Matthew Travis pointed out that CFR 48, the procurement side of the rule, was returned to the DoD and not accepted for release for public comment. The rule was originally expected out for public comment in March 2024; however since it was returned to the DoD on Apr 8 the timeline is unclear. Matt speculated that it could be a simple clerical error that could be quickly addressed enabling the rule to be released for public comment in May 2024. Public comments for CFR 32, the CMMC Program rule, are being adjudicated by the DoD. CFR 32 is still expected to be released in fall of 2024. This rule establishes the CMMC Program and authorizes assessments to begin. Therefore, it is likely that assessments can begin prior to being mandated in contracts. This will give the DoD additional fuel for including CMMC in more contracts once CFR 48 is finalized since organization will have plenty of time to get ready. Will your organization be ready for an CMMC assessment in time to beat the rush to ensure you can bid on contracts when CFR 48 is finalized?

31

3 Comments

🔐 Effective Strategies for CUI Lifecycle Management 🔐 Managing Controlled Unclassified Information (CUI) is essential for data security and compliance. Here’s our step-by-step guide: 📋 Establish Clear Policies and Procedures     - Define CUI within your organization.    - Create policies for handling, marking, storing, and transmitting CUI.    - Train employees on these policies regularly. 🔒 Implement Robust Access Controls     - Assign access based on job roles.    - Follow the least privilege principle.    - Conduct regular audits. 🛡️ Use Encryption and Secure Communications     - Encrypt CUI at rest and in transit.    - Use secure channels like VPNs and encrypted email.    - Keep tools updated. 🕵 Monitor and Audit CUI Handling ️️    - Implement logging and monitoring systems.    - Perform regular audits.    - Maintain an incident response plan. 🔐 Implement Strong Data Loss Prevention (DLP) Measures     - Deploy DLP solutions.    - Enforce policies with DLP tools.    - Continuously monitor data loss incidents. 🔄 Regularly Review and Update CUI Practices     - Review and update policies regularly.    - Stay informed about new technologies.    - Establish a feedback loop with employees. By following these strategies, organizations can effectively manage the lifecycle of Controlled Unclassified Information (CUI), ensuring its protection and compliance with relevant regulations. InterSec, is committed to helping organizations protect their sensitive information.  📧 For any assistance with CUI lifecycle management or other cybersecurity services, contact us today inquiries@intersecinc.com to learn how we can support your efforts. 👇Click the link to check our CUI Guide for DoD Contractors.👇 #CUI #DataSecurity #Compliance #CyberSecurity #Dod #InterSec #InterSecInc #department_of_defence #cui_guide #data_protection  

1

Friendly reminder that any method of communication can be intercepted and exploited. That's why it's important to review your login methods and activate 2FA if possible. With this specific exploit, if what the actor claims is accurate, the purchaser will be able to take over an entire user's iPhone without even having to open the message or interact with an attachment. Always be mindful of information that you share and the devices that have personal, financial, and sensitive information on them. Additionally, review any information published by the Cybersecurity and Infrastructure Security Agency, your country's respective agency, and private cybersecurity firms as well. #securityawareness #privacyisnotanoption #privacy #knowledge #iphone #apple #mobile

3

Recent shifts within The NIST NVD operations have raised alarms among researchers and practitioners. ⚠️ These changes have led to delays in vulnerability analysis and a noticeable decline in enriching CVEs with critical data such as CPEs, CVSS scores, CWEs, and references. This creates significant hurdles for organizations striving to effectively identify and prioritize vulnerabilities. 💡 Meet DeviceTotal, a transformative solution reshaping this vulnerable pyramid. Our AI-powered technology propels vulnerability management into a new era, offering substantial enhancements in accuracy, speed, and automation. 🚀 DeviceTotal sources security information directly from vendors, ensuring data is updated well before it reaches the NVD. This proactive approach empowers organizations with timely insights, enabling swift and informed actions to mitigate threats. 💪 On top of that, DeviceTotal provides actionable insights for every threat, offering precise indications for available updates, mitigation options, workarounds, End-of-Life alerts, and more.  And the best part? No agents, no installations—just swift value delivered directly to your organization. Don't let your vulnerability management strategy crumble—elevate it with DeviceTotal. Experience the difference today. #VulnerabilityManagement #CyberSecurity #DeviceTotal #cybersecurity #infosecurity #riskmanagement #vulnerabilitymanagement #nationalsecurity (cartoon copyright by XKCD.com)

25

1 Comment

Jonesy was a Threat Investigator. I re-watched Hunt for Red October, and while most of the movie felt comfortably familiar, what struck me most is seeing Jonesy (the chief sonar operator) through a new lens. Jonesy is the poster child for an advanced threat investigator. Using a variety of tools and telemetry, recognizing potential threats by pattern recognition and expertise to the degree that it looks like intuition ("it would sound like whales humping"), using digital tools to augment classification and analysis ("magma displacement") and escalating potential new threats equipped with a combination of quantitative and qualitative data. Seaman Jones: The moment that sub went silent and I thought I heard singing... I heard something in the background, too, and I managed to get it on tape. I washed it through the computer and managed to isolate this sound. The computer identified it as magma displacement. The SAPS software was originally written to look for seismic events. When it gets confused, it runs home to momma. Captain Bart Mancuso: I'm not following you. - I'm sorry. Listen to it at ten times speed. That's got to be man-made. The first contact was at 09:15 and the bearing was 269. At 09:30, it was here. At 11 and 11:15, it was here and here. Russian subs have been reported running Reykjanes Ridge at high speed. - They had hyper-accurate maps. - Yeah, Red Route One. The front door to those canyons was a location called Thor's Twins. Look... Right into Red Route One. You may think I'm crazy, but I'll bet we found some new Russian sub. It's now headed for the Iceland coast. A $40 million computer tells you you're chasing an earthquake. But you don't believe it. And you come up with this on your own. - Yes, sir. - Relax you've sold me. Plot us a course for the bottom end of Red Route One. We'll never find him in those canyons. But first we'd better phone in. Aye, aye, Captain. Hang on, Jonesy. If I can get you close enough, can you track this sucker? Now that I know what to listen for... I'll bag him.

34

13 Comments

It will be interesting to see how this impacts #CMMC, especially internationally. Haven't had a chance to read it yet, but I'm looking forward to it! #cyber #cybersecurity #reciprocity #informationsecurity #infosec #DoD #NIST #NIST800171 #CMMC2

24

1 Comment

My thoughts this Monday are on Penetrating Testing and a frequently asked question; Is it worth it? Penetration testing, or ethical hacking as it is sometime referred to, has been around since the 1960’s. In 1971 The US Air Force adopted penetration testing to evaluate the security of their time-shared computer systems. Then, in the 1980’s the US Navy began ethical hacking tests to determine how easily terrorists could access their naval bases. Soon after, the government started investigating illegal hacking incidents and the rest is history. Fast-forward to today, and ethical hacking has become a main tactic of companies wanting to ensure their networks and infrastructure are resilient. For most, performing a penetration test validates what their IT team is doing right and what they could be doing better. Done properly and with the right team, a penetration test can pinpoint the obvious and not-so-obvious weaknesses within your network and computing infrastructure, saving you the embarrassment of a hacker pointing things out. A proper penetration test will hit from all angles the same way a determined group of bad acters will. It may include the testing of internal and external, web application, source code, wireless, cloud, mobile, and an element of social engineering, such as phishing, or physical security tests. A penetration test report should be comprehensive and include all elements of the attack, from reconnaissance to remediation. If proper remediation is followed, your network infrastructure will be hardened and out of the sight of a bad actor. In simple terms, penetration testing is likened to hiring a professional thief to break into your home to learn how he did it, and what he would recommend that would prevent him from getting in. Seems like valuable intel, but why are companies not having penetration testing performed on their network infrastructure? Here are some of the reasons companies do not consider penetration testing. Read the rest here! https://lnkd.in/g5sbufSQ

23

3 Comments

I was encouraged to see the new National Security Memorandum on Critical Infrastructure and Resilience (NSM-22) calling for a "risk-based approach" to security. As we react to those calls, however, it's important to think about how compromises to the IT networks of critical infrastructure providers -- such as the one in Colonial Pipeline in 2021 -- can have economically and societally devastating impacts nearly on par with those from a direct OT compromise. I've previously written for our friends at Dark Reading that critical infrastructure companies could learn some lessons from the way that the defense and national security sectors protect their systems -- including business-critical functions like finance, HR, and logistics -- and apply them in their own processes when selecting security solutions and designing their network architecture, and thought this might be a good time to reshare that article: https://lnkd.in/eCBVth67 #cybersecurity #criticalinfrastructure #nsm22 #risk #cyberrisk #nationalsecurity #it #ot

14

Don’t miss out on our upcoming webinar! "Security Maturity: Strategies for Growing Security Requirements in DoD" in partnership with Carahsoft and Splunk.   Registration Link in the comments!   📅 Date: May 22 ⏰ Time: 11:00 AM EST   Join us to enhance your strategies for DoD security compliance and network with industry leaders. Spots are filling up fast!   👍 Like | 💬 Comment | 🔁 Share #CyberSecurity #DoDCompliance #Webinar #4xBolt #Carahsoft #Splunk #DefenseIndustry #ITSecurity

17

1 Comment

I was looking for an open source alternative for a tool this morning and it led to a conversation with a fellow practitioner. Bottom line: the state of open source security tooling seems to be really bad now vs. when we entered the industry 10-20 years ago. It seems more and more tools are built for making a quick buck vs. building a personal brand and seeking the common good of making the internet a safer place. This is not ubiquitous, but it certainly seems to be the trend. When I first got into security, people were all about sharing, networking, and community. This led to wonderful careers where we enjoyed not only financial success, but even more so, relationships and the joy of leaving things better than we found them. I still give the vast majority of the code I write away, but it is becoming increasingly harder to find useful open source tooling. This conversation reminded me of a keynote I gave on a similar topic a few years back. It seems to apply as much today as it did then. https://lnkd.in/eTVBCka9

24

4 Comments