Manish Sharma

#GenerativeAI is poised to disrupt workflows across nearly every industry but it also presents challenges from a privacy and security perspective - including the protection of large language models and the underlying data used to train them. Tune in to learn how VMware is addressing these points as my firm's chief analyst Patrick Moorhead from Moor Insights & Strategy moderates the discussion!

3

I had the opportunity to present at the Global Security Summit in Mumbai and discuss how modernization can enhance your cloud security. The event was attended by CIOs and CISOs, and the interactions during the evening were truly amazing. I left feeling incredibly happy after meeting you all. Check out the video to see some of our latest achievements in helping clients enhance their security. The video link is here https://lnkd.in/gg9UYtvd #cloudsecurity #cloudmodernization #innovationfocus #axcessio #infosec #kkbhagchandani

36

3 Comments

Excited to see Anomali leading the way with their AI-powered Security Operations Platform! Automation and seamless reporting are key in today's cybersecurity landscape. I agree that having an omnipresent Anomali Copilot will revolutionize how tasks are handled and reported to management. This is a game-changer for security operations. #Cybersecurity #AI #Automation Check this out: https://lnkd.in/gbp7FJ9C

2

1 Comment

A fundamental grasp of the cybersecurity framework involves comprehending its operation within the Cloud environment, alongside the application of Generative AI in this particular realm of security. View my verified achievement from Veritas.

11

2 Comments

Interesting perspective given the turmoil in SIEM/SOC landscape the past months.

7

🔒 Securing Your Digital Fortress: The Vital Role of SOC and SIEM 🔒 In today's interconnected digital landscape, safeguarding your organization's assets is more crucial than ever. A robust cybersecurity strategy is not merely a luxury but an absolute necessity. This is where having a dedicated Security Operations Center (SOC) and a powerful Security Information and Event Management (SIEM) solution like CyberPulse becomes your digital fortress. Why are SOC and SIEM so critical, you might ask? Here's the scoop: 🛡️ Early Threat Detection: A SOC equipped with a cutting-edge SIEM acts as your early warning system, continuously monitoring your network for any suspicious activities or potential threats. This proactive approach allows you to nip potential breaches in the bud before they escalate into full-blown disasters. 🔍 Incident Response Agility: Cyberattacks can strike at any moment, and when they do, time is of the essence. A well-established SOC coupled with an efficient SIEM enables rapid incident response, minimizing the dwell time of threats within your network and mitigating their impact swiftly and decisively. 💼 Compliance and Regulatory Requirements: In today's regulatory landscape, compliance is non-negotiable. A robust SOC and SIEM solution not only helps you stay compliant with industry standards and regulations but also provides comprehensive audit trails and reporting capabilities to demonstrate due diligence to regulators and stakeholders. 🔒 Data Protection and Privacy: Your data is your most valuable asset, and protecting it is paramount. A SOC empowered by a sophisticated SIEM solution like CyberPulse ensures the confidentiality, integrity, and availability of your data, safeguarding your organization's reputation and maintaining customer trust. 🚀 Unlock the Power of CyberPulse: At Citynet, we understand the gravity of cybersecurity threats facing modern enterprises. That's why we're proud to offer CyberPulse, a state-of-the-art SIEM solution designed to empower your SOC and fortify your defenses against evolving cyber threats. With CyberPulse, you can rest assured knowing that your digital assets are in safe hands. 🤝 Ready to Take Your Cybersecurity to the Next Level?: Reach out to learn more about how CyberPulse can bolster your cybersecurity posture and help you navigate the ever-changing threat landscape with confidence. #Cybersecurity #SOC #SIEM #CyberPulse #IncidentResponse #DataProtection #Compliance #CyberDefense #InfoSec

4

Excited to share a comprehensive report on redefining cybersecurity strategies for effective risk mitigation by Andrew Wilder Paul Carpenito, MS, CISSP Srikanth R. Traditional patch management can sometimes miss the mark by not aligning with actual risk factors. Surprisingly, critically ranked vulnerabilities are not always the most exploited. 👉The key lies in a risk-centric approach. Prioritizing scenarios based on thorough risk assessments and considering compensating controls can significantly enhance cybersecurity strategies. 👉Embracing a proactive security posture is crucial. Moving from reactive measures to proactive strategies involving continuous monitoring, threat hunting, and preemptive actions is paramount in today's threat landscape. Moreover, achieving the "Biggest Bang for the Buck" is possible by deploying a single patch to address a vast number of vulnerabilities efficiently. Let's redefine cybersecurity practices to ensure effective risk mitigation and bolster our defense mechanisms. Here is the link to download the report: https://lnkd.in/guH98Q6u #cybersecuritytribe #Cybersecurity #RiskMitigation #ProactiveSecurity #PatchManagement #CyberDefense

21

2 Comments

New Case Study: Cribl has revolutionized the security operations of a top Fortune 20 health insurance provider! By delivering structured, relevant data, they’ve optimized routing to SIEM, UEBA, data lake, and AIOps tools while ensuring PII data is masked. The results? A massive 30-40% reduction in AWS CloudTrail data and less reliance on heavy forwarders for their AWS message queue. “When we retired the heavy forwarders and routed everything to Cribl, our AWS message queue went down to zero within twenty-four hours — everything started flowing through, and that potential risk of losing data was gone by the next day.” - Senior Director, Service Intelligence Read more about how Cribl gives the team the ability to easily onboard additional data sources for more comprehensive monitoring while also controlling and reducing costs. https://gag.gl/dTQ88W

5

1 Comment

The National Security Agency's Artificial Intelligence Security Center (NSA AISC) has just released a critical Cybersecurity Information Sheet titled "Deploying AI Systems Securely." This joint effort includes insights from CISA, FBI, Australia's ASD ACSC, Canada's CCCS, New Zealand's NCSC-NZ, and the UK's NCSC-UK. Key Highlights: - The guidance outlines best practices for the deployment and operation of externally developed AI systems. - Focuses on enhancing the confidentiality, integrity, and availability of AI systems. - Provides robust strategies for mitigating vulnerabilities and defending against malicious activities targeting AI systems and associated data. CISA urges all organizations leveraging externally developed AI technologies to adopt these recommendations to fortify their systems. This is part of an ongoing initiative that also includes previous publications such as: 1. "Guidelines for Secure AI System Development" https://lnkd.in/ezVCT8pi and 2. “Engaging with Artificial Intelligence." https://lnkd.in/enwUpruv Let's stay vigilant and proactive in securing AI technologies to shape a safer digital future! #AISecurity #Cybersecurity #ArtificialIntelligence #InfoSec #NSA #CISA #FBI #AI

10

3 Comments

If you're going to #RSA, you should meet the leadership from Intuitive.Cloud for a few reasons: 1. They really insightful about how they're investing, and thinking about the security ecosystem. The reason for this is they have deep engineering knowledge and see a lot of customers who are trying to solve some of the most difficult security problems (i.e. they're seeing the gaps, and through VC ecosystem, helping to fill those gaps). 2. They are seeing across the entire "stack", whether it's a particular cloud to on-prem, securing applications while they're being built, securing applications in operations, securing data in a transactional setting, for analytics/ML, governance, lifecycle management, and so on. What I find really interesting about security is that at its core, it is a mathematical innovation, just like machine learning. Security has to do with factoring numbers; machine learning has to do with taking derivatives and minimizing things. And in both cases, the infiniteness of numbers/functions is essential to how the modern world works. Nvidia has cornered the market on taking derivatives. Who will corner the market on factoring large numbers? (Grabbing popcorn.. have fun at #RSA!)

2

It's great to see your dedication towards addressing the security challenges in OT systems, Satish Sharma. Your insights on the hurdles CISOs face in the industrial control system world are enlightening. Keep up the valuable discussions and knowledge sharing! Share this post with anyone interested in Cybersecurity! #cybersecurity #CISO #OT #systems #cfbr #Areweready #views

6

India is in the midst of a transformative era. The country’s public cloud services market grew to $3.8 billion during the first half of 2023, and it is expected to exceed $20 billion in cloud spending over the next three years [1]. With more than 84% of large organizations adopting SaaS applications and 53% of enterprises increasing their adoption of cloud-native services such as containers and Kubernetes over the last two years, the country’s cloud adoption is on pace to create 14 million new jobs by 2026 

1

We understand that timely and accurate information about Common Vulnerabilities and Exposures (CVEs) is critical to help organizations prioritize remediation, understand trends, and drive vendors to address classes of vulnerability.  Today, we want to inform organizations of an enrichment effort we are calling "Vulnrichment," which focuses on adding Common Platform Enumeration, Common Vulnerability Scoring System, Common Weakness Enumeration, and Known Exploited Vulnerabilities to CVEs. We recently enriched 1,300 CVEs and continue to diligently work to ensure all submitted CVEs are enriched. We ask all CVE Numbering Authorities (CNAs) to provide complete CVEs when making initial submission to CVE.org. Soon, we’ll also start sharing decision points from CISA’s Stakeholder-Specific Vulnerability Categorization (SSVC). We will use CVE JSON format so stakeholders can immediately start incorporating these updates into vulnerability management processes. This enrichment effort can be found at our Vulnrichment GitHub Repository: https://lnkd.in/gbgHjGZ9. Our GitHub approach includes a readme with more info and enables stakeholders to report errors and offer suggestions directly to CISA. If you have questions or constructive input on vulnerability enrichment, please contact us at VULNRICHMENT@CISA.DHS.GOV. 

906

23 Comments

Isn’t easier to make security decisions when you have accurate information, complete details, and evidence to point to the best solution. We see IT teams digesting security test results and trying to make security improvements to protect their organizations every day. And, the key to good decision making is often in the details. The same applies for vulnerability management teams. Sometimes the barrier to remediation is time. Sometimes it’s money. Sometimes it’s outside decision makers who need convincing. In every case, the more fact-based evidence available to security decision makers improves the prioritization of the vulnerability management process. Now, with CISAs help we can include #vulnrichment to #CVE results within the #penetration test report and illustrate how weaknesses are impacting the security of an organization. #purpleteam #CISA #k12 #cybersecurity

4