Adam Barnett

With Recorded Future Collective Insights, it’s never been easier to unveil patterns and trends so you can identify relevant potential attacks, enhance detections and threat hunts, and prioritize your response. 

15

How did you get buy-in for building a Cyber Threat Intelligence (CTI) program? Why should other companies consider investing in threat intelligence? See how Canva built an empowered CTI program with Recorded Future.

7

Recorded Future's Jason Steer discusses how organizations can build proactive cyber resilience to effectively comply with the upcoming NIS2 and DORA regulations.

1

With today's complex cloud environments, implementing a robust DLP strategy that actually works is a challenge that Security and IT teams face every day. That's why I'm so excited to be hosting a webinar alongside Michael Ivey Staff Security Engineer at Modern Health where we'll really get into the details of how to build a modern DLP program that keeps your sensitive data secure. Join us on September 17, 16:00 BST / 11:00 EST for our webinar: "A Guide to Implementing a Modern DLP Program that Actually Works." Register here: https://lnkd.in/eVbnJcyT #DataSecurity #DLP

13

Explore the latest challenges faced by CISOs, from data breaches to evolving regulations. Learn why resilience is now a critical business imperative. 

1

A recent arrest of a Canadian hacker accused of breaching Snowflake’s cloud storage systems and extorting major companies has brought data security back into focus. Without #multi-#factor #authentication (MFA), even well-known firms like AT&T and State Farm were vulnerable. Protect your data today with robust security practices. Stay Informed & Protected: Strengthen your security by implementing MFA and reviewing cloud storage settings. For full details, click here: https://lnkd.in/gHZhc86p #Cybersecurity #DataBreach #CloudSecurity #MFA #DataProtection #Snowflake #StaySafe

4

Cyber-fraud fusion centers are on the rise, with Gartner predicting growth from 5% to 20% adoption by 2028. But the key to success lies in breaking silos and fostering collaboration. By integrating threat intel with fraud teams, organizations can proactively reduce fraud losses and improve resilience. Learn how fusion centers drive better outcomes through unified efforts from Recorded Future's Levi Gundert.

3

"Threat intelligence-driven security is vital. It’s the eyes and ears of a security team. You can’t protect yourself against what you don’t know—threat intelligence gives you that.” Learn how Novavax uses Recorded Future to respond to emerging threats and third-party risks. https://lnkd.in/efH9KHH3

6

And so does Canada. Given the time and money that the GC spends on selecting and validating security requirements that cloud services must meet, what are we doing to monitor threats and responses, and more importantly the weakness that are being exposed in daily cloud operations of a key service provider like MS? What is the tipping point of circumstances that would force Canada to cease using these services, get the data back and move to an alternative(s) in the mission-critical world of government business operations? If you are worried about this problem, what do you think the GC should do? If you are not worried about this problem, why? This is obviously not just a GC problem but that context remains my focus. Other industry contexts would be very helpful as well.

34

17 Comments

One of highest financial impact ("smart" city) by security breach /ransomware attack. I believe the extend/level of financial impact can be soften with prevention and detection, remediation and improvement security lifecycle .With people,process ,tech/tool work cohesively. Don't you think so. Feel free to comment,like,forward and subscribe for more cybersecurity info/insight Impact: The ransomware attack shut down almost all city phone lines, paralyzed city council and impacted dozens of services including the bus schedule app, library WiFi and permit applications. The city maintains that there was no indication personal information was stolen. Aftermath: The city decided not to pay the ransom and to rebuild its systems instead Hamilton spent $5.7 million recovering from February ransomware attack: report Less than half of city's online 'applications' restored, says Deloitte. City plans to spend millions more The $5.7 million was used for external experts, infrastructure, staffing and other costs, and the city is still in the midst of restoring services, staff say. The city also plans to spend another $33.6 million between 2025 to 2033 to strengthen the city's cybersecurity and modernize and digitize services, says the report. The city could draw money from pre-approved technology and security projects, reserves or delay some capital projects to minimize the impact on taxpayers. Hamilton spent $5.7 million recovering from February ransomware attack: report https://lnkd.in/gXbriBrf #CyberSecurity #DataProtection #BusinessContinuity #formintiumit #formintiumtech #QiCyberCyberSecurity #5CyberCyberSecurity

2

Based on the PowerSource CISO's comments today, hackers accessed PowerSchool using compromised credentials. It was noted that "two clear actions were taken:"   1. Hackers logged in with compromised credentials allegedly found on the Dark Web. 2. They proceeded to download all the sensitive information available.   In 2025, there’s no real justification for storing millions of student records behind single-factor authentication. While the situation is likely more complex—potentially involving stolen MFA tokens—it underscores today's need to expand your attack surface.   Threat actors are increasingly using AI to scan and connect the dots between compromised credentials from seemingly minor breaches, like a local event site, and corporate systems.

15

I need YOU! Are you in charge of your MSPs Incident Response? Do you Interface with your MDR or SOCaaS providers or external IR Teams? Do you live in the great white north of Le Canada? Are you attending the AMAZING Pax8 #Beyond2024? Come join a panel of global humans discussing our collective Threats and Impacts from the lens of those actually living it!

45

11 Comments

BlackBasta ransomware group has released data from "one of Canada’s leading full-service boutique investment platforms, delivering both wealth management and capital markets services." The company claims that it "enjoys a strong partnership with National Bank of Canada, which acts as custodian of our clients' assets, assuring them safekeeping and peace of mind. Through National Bank Correspondence Network (NBCN), we have access to third-party research, independent money management, and new issue syndications, while our clients benefit from secure, online access to their account information." The ransomware group has released 500 GB of what it describes as "***1.** Employees, customers personal documents* ***2.** Financial data* ***3.** NDA's, Confidential data* *& etc…*" I highly recommend that my Canadian colleagues monitor this dump for sensitive data. Let me know if you need help.

3

🎯Canadian law enforcement authorities have arrested an individual who is suspected to have conducted a series of hacks stemming from the breach of cloud data warehousing platform Snowflake earlier this year. The individual in question, Alexander "Connor" Moucka (aka Judische and Waifu), was apprehended on October 30, 2024, on the basis of a provisional arrest warrant, following a request by the U.S. The development was first reported by Bloomberg and corroborated by 404 Media. The exact nature of the charges against Moucka is currently not known. 🔔 Stay connected for industry’s latest content – Follow Dr. Anil Lamba, CISSP #linkedin #teamamex #JPMorganChase #cybersecurity #technologycontrols #infosec #informationsecurity #GenAi #linkedintopvoices #cybersecurityawareness #innovation #techindustry #cyber #birminghamtech #cybersecurity #fintech #careerintech #handsworth #communitysupport #womenintech #technology #security #cloud #infosec #riskassessment #informationsecurity #auditmanagement #informationprotection #securityaudit #cyberrisks #cybersecurity #security #cloudsecurity #trends #grc #leadership #socialmedia #digitization #cyberrisk #education #Hacking #privacy #datasecurity #passwordmanagement #identitytheft #phishingemails #holidayseason #bankfraud #personalinformation #creditfraud

2

CVE Delay at NIST is causing a crisis with a major slowdown in populating the NVD. Updates to the CVE scoring process and resource constraints are creating a backlog, impacting open source tools and VPM programs relying on CVE metrics. While NIST struggles, vendors like Qualys are stepping up, offering valuable risk analysis tools that go beyond Severity/CVE scores. Even though Qualys doesn't cover company-specific threats extensively, they excel in including industry-oriented ones. This approach proves more comprehensive than just relying on CVE Scores. Understanding the exposure a company faces from the "known exploited vulnerabilities catalog" is crucial. Exploits leveraging these vulnerabilities can make significant headlines for larger companies. For more insights on the NIST vulnerability backlog and Qualys's response, check out these links: https://lnkd.in/eSgVHcrg https://lnkd.in/eFtN2PEM https://lnkd.in/enindptC https://lnkd.in/e_3rCSUY

2

Recorded Future unveils the transformative potential of AI-driven Threat Intelligence. Our platform goes beyond mere data, focusing on actionable intelligence to shape decisions and outcomes. Designed from the ground up with AI, it tackles the toughest security challenges, enhancing defenses, and empowering analysts.

10