Michael Heller

“CNAPP tools focus on detection, and not enough on protection." The global CNAPP market is projected to grow from an estimated value of USD 7.8 billion in 2022 to USD 19.3 billion by 2027. At #RSAC2024, I spoke with Ely Kahn, VP, Product Management, Cloud at SentinelOne to find out where the CNAPP market is headed. We discussed how generative AI is helping teams reduce time spent on security alerts and why there's a critical need to focus more on automated remediation, not just vulnerability detection. Read the full article for Expert Insights: https://lnkd.in/eNAAGkMW #Cybersecurity #AI #CNAPP #Innovation #Automation #RSAC2024

50

1 Comment

#MFA "double-jeapordy"? An increasingly common response to a #databreach is to mass-enable multi-factor authentication. But this creates its own problem, as support teams get inundated with a wave of locked-out users. And how can they tell whether someone is a legit user trying to recover their account, or a bad actor trying to take it over? One solution is to equip support teams with strong, easy-to-use #identityverification tools. Another is to deflect those tickets entirely by enabling secure self-service MFA resets. And only Nametag has solutions for both. #cybersecurity

4

The latest announcement from the ICO underscores the critical need for robust cybersecurity measures across all sectors, especially in light of over 3,000 data breaches reported last year. For industries handling sensitive data, such as biopharma, enhancing protections is not just advisable—it's imperative. Dive into the ICO's insightful report to learn how to fortify your defenses. #RDPrivacy #Cybersecurity #DPO

6

The growing value of corporate credentials in the cybercrime market contributed to a sevenfold increase in data-theft attacks over the past three years, with prices for stolen information begin at $10 per log file in dark web shops. According to Kaspersky, hackers engaging in data exfiltration attacks stole close to 400 million logins and passwords in 2023, averaging 50.9 login credentials per infected device. Information Security Media Group (ISMG)

7

Learn how cyber threat intelligence (#CTI) can bolster your #SecOps with actionable info — but only if you choose wisely. Here are nine steps to getting started. #ThreatIntel #Cybersecurity

5

Join our experts Seth Williams and Steve Rosenthal on Tuesday, June 11, to learn how Critical Start and Sumo Logic’s integrated solution empowers you to stay ahead of threat actors. #SIEM #XDR #DevSecOps

7

2 Comments

Unlock the Secrets to Superior User Productivity & Satisfaction with Versa Digital Experience Monitoring 🚀 Date: April 18, 2024 Time: 8:00 AM PST In a world where connectivity defines productivity, learn how Versa Digital Experience Monitoring is the game-changer for your business. This webinar will dive into: · Enhancing connectivity for unparalleled productivity and customer satisfaction. · Gaining visibility into the performance of critical SaaS and internally hosted applications. · Identifying and troubleshooting connectivity issues to minimize resolution time. Don't let connectivity challenges slow you down. Discover proactive solutions to keep your business ahead. Register Now: https://lnkd.in/dMsYVx54 Join us for an enlightening session. Elevate your digital strategy to new heights! #VersaNetworks #Webinar #UserExperience #DigitalInnovation #Connectivity

5

Great read written by my colleague Daniel Daraban. In it he demystifies XDR solutions and puts a people-focused lens on the decision-making process – a key to making the right decision for security teams. #XDR #Cybersecurity #infosec

13

Streaming service Roku has been hit by its second #cyberattack this year, with 576,000 user accounts compromised. The firm has enabled two-factor authentication (#2FA) for all 80 million Roku accounts, including those unaffected by these incidents. "While 2FA may be inconvenient, a credential stuffing attack on a Roku account today could mean compromised utility accounts, banking accounts, or other more serious compromises in the future," commented Jamie Boote, associate principal security consultant at the Synopsys Software Integrity Group. "While the actions that an attacker could take after accessing a Roku account could be limited in terms of not being able to manage Roku devices from different networks, gaining credit card information, or even changing the channel, confirming a reused username and password combination as valid means that attackers will attempt to compromise other accounts with the same credentials." Boote also acknowledged that it’s not impossible to limit the damage or number of attacks, while noting that credential stuffing attacks can be trickier to block when authentication attempts are launched by distributed botnets.  Great article by Emma Woollacott for ITPro https://lnkd.in/eBZbpbbn

5

Huntress recently uncovered the infrastructure of a massive #phishing campaign with potentially novel tradecraft. This advanced technique combines HTML smuggling, injected iframes, and session theft via transparent proxy. Join us to delve into how attackers steal credentials and bypass #MFA by tricking victims into logging into a transparently proxied, locally rendered iframe of the #Outlook login portal. Learn from the best! Matt Kiely, Principal Security Researcher at Huntress, will share insights and details about this novel #tradecraft.

17

1 Comment

And we are live! Come into the CISO XC podcast studio to vent, rant, and share YOUR advice! #cisoxc #cybersecurity #infosec #podcast

53

3 Comments

Jobs. 💎 Many of my connections in the #cybersecurity marketing world need one. Here is a great list of cyber marketing companies that are actively looking for talent! Let me know if I can make an introduction or help in any way!

11

1 Comment

In this episode of DOS Won't Hunt, Kyle Dewar, with Tanium, and Chuck Herrin, with F5, discuss some of the threats the proposed know-your-customer rules take aim at with cloud service providers.

11

1 Comment

Concerned about email threats? Join #Kaspersky's upcoming webinar and: - Understand diverse forms of spam & email threats - Learn effective strategies to combat sophisticated email threats - Explore real-world examples & case studies

1

Women and men in the #securityindustry - Be a change agent. Make a pathway for more women into #securityjobs and #securitycareers. SIA Women in Security Forum is all about boldly driving awareness and cultivating a future for more #womeninsecurity.

33

3 Comments

The latest Bitdefender GravityZone platform updates are here, bringing state-of-the-art enhancements to further strengthen cyber defenses. This update includes advanced features that streamline threat detection and response, offering smarter, faster, and more resilient security solutions. Learn about all of the new features here.

3

Our monthly Threat Debrief is out! Learn about the latest ransomware news and trends that could impact your organization. #infosec #cybersecurity #ransomware

7

Don't miss our next Fireside Chat with my special guest, LYT CTO Dustin Harber. We'll dive into how LYT's innovative, cloud-based solutions are revolutionizing urban traffic systems and discuss the critical role of cybersecurity in smart city operations. You'll also hear why LYT chose #NodeZero as their autonomous pentesting solution. Register now to join the conversation!

1