Raffael Marty

Managing #thirdparty #cyberrisk is hard. But it gets even harder when trying to manage 4th...5th...Nth tier #supplychain relationships because visibility, familiarity, and control tend to decline with each degree of removal. This chart, from a joint Cyentia Institute and RiskRecon, A Mastercard Company report, captures this challenge. Your organization (the square in the center) may be able to track breaches of your direct third parties. But what about all those others? Are you even aware that you're indirectly connected to - and thereby potentially exposed to - breaches of those Nth parties? We explore this topic in "Risk to the Nth-Party Degree." Link to download in comments.

239

34 Comments

🚨 Case Study Alert: How DigiCert Traced Incident Breadcrumbs for Swift Resolution 🚨 Explore how rapid threat detection and remediation can make the difference between a minor issue and a major breach. See the full story and how WireX Systems' advanced tools helped DigiCert react in minutes. #CyberSecurity #ThreatRemediation #IncidentResponse #WireXSystems #DigiCert"

3

Regulatory compliance? 🙄 I know right? But ensuring that you enforce geographic specific access to certain systems doesn't need to be hard... one simple policy...

2

🔑 The #PKI landscape is rapidly changing - is your organization keeping up? With #NIST releasing the first set of post-quantum cryptography encryption standards and shorter certificate validity on the way, it's time to assess your approach to Certificate Lifecycle Management (CLM) 💡 📥 Download The CISO’s Guide to CLM and get insights into streamlining #CLM, adapting to new PKI industry changes, and achieving crypto-agility: https://lnkd.in/gJegvufg

1

If you’re at the Zywave Cyber Risk Insights conference today, look for me! I’ll be joining a panel at 1:45 to discuss whether we’ve reached a critical mass yet with data to adequately model and manage #cyberrisk. https://lnkd.in/dK2d3HHe

13

1 Comment

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/gswu89pR #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

9

💡 Unlock the Potential of Your PKI with the PKI Maturity Model! Are you maximizing the benefits of your Public Key Infrastructure (PKI)? The PKI Maturity Model (PKI MM) isn't just a tool - it's your roadmap to elevating your PKI's performance and security standards. 🛠️ Tailored Guidance: PKI MM offers a comprehensive framework, integrating best practices and expert recommendations to refine your PKI's maturity. From identifying improvement areas to implementing robust security measures, it's your go-to resource. 🔍 Assess, Improve, Excel: Leverage PKI MM to conduct thorough assessments, pinpointing vulnerabilities, and enhancing efficiency. Elevate your PKI's maturity level, mitigate risks, and align seamlessly with industry benchmarks. 👥 Stand Out: As a service provider, showcase the caliber of your PKI offerings by leveraging PKI MM to demonstrate excellence to your clientele. Consultants and auditors, use it to drive tangible improvements and provide unparalleled guidance to your clients. 📊 Benchmark and Adapt: Gain invaluable insights by benchmarking your PKI against peers. Stay ahead of trends, refine practices, and ensure your PKI stays agile and resilient. 🌐 Flexible and Dynamic: Designed to cater to diverse organizational needs, PKI MM is adaptable across various PKI implementations - both internal and external. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Leigh Bailey

22

ICYMI: The inaugural study on EPSS performance and broader vulnerability exploitation trends published this week. If you've ever wanted data-driven answers to questions like these listed in the ToC shown here, download it today (free, no registration req'd): https://lnkd.in/gBbsgwQM #vulnerabilitymanagement #vulnerabilities #infosec

51

8 Comments

Address both- Proactive threat exposure management and reactive detection and response with Invinsense.

10

My colleague Denny Wan provides a great use case for Cyber Risk Quantification as an enabler for AI value development, as well as, a powerful tool for defending against legal threats that could slow down AI utilization.

1

1 Comment

I often hear the question "Where/What are our biggest security exposures?" Cyentia Institute recently had the opportunity to explore this question using data from hundreds of thousands of attack path assessments conducted through the XM Cyber Continuous Exposure Management (CEM) platform. The attached figure gives a categorical breakdown of what we observed based on all entities (digital assets), total security exposures, and exposures affecting critical assets. . The left-most chart represents the attack surface based on broad categories of digital entities discovered during attack path assessments. Active Directory constitutes just over half of entities identified across all environments. On-premises IT and network devices account for another 31% of entities and cloud environments house the remaining 17%. Not all entities, however, are exposed via attack paths. If we change the scope of the attack surface to include only vetted exposures (entities susceptible to attack techniques), things look different. The middle chart captures this perspective and Active Directory exposures dominate the attack surface. But not all of those exposures affect critical assets. To be truly effective, Exposure Management must encompass all environments and account for where critical assets are most at risk. If we once again rescope the attack surface to focus on exposures to critical assets, a very different picture emerges, which is captured in the rightmost chart. Cloud environments now encompass over half of all critical asset exposures, followed by AD at 33% and IT/Network devices at 11%. Does this sync with exposures across your attack surface? Which perspective/view/chart is your primary guide for managing exposures? The full report contains tons of additional insights on exposure management. Download here: https://lnkd.in/dPfqXG7y #cybersecurity #exposuremanagement #cyberrisk

48

8 Comments

Thrilled to have the opportunity to analyze #vulnerability remediation timelines again, this time using data from NopSec. The chart below is based on a survival analysis of vulnerabilities across an environment. Essentially - the time it takes to remediate all affected assets after a vuln is discovered. Everytime I see analysis like this, I'm reminded of how different the real world of #vulnerabilitymanagement is from the "just patch it all yesterday" shallow advice that's so often bandied about. If it were that easy, vuln survival curves wouldn't look like this time after time. How does this square with your experience? I'll be discussing this chart and several others in a webinar next week. Register here and bring your questions, comments, and rants! https://lnkd.in/eHWDrEYN

92

26 Comments

Learn how SS8's lawful and location intelligence platform, Intellego XT, empowers law enforcement agencies to dismantle complex criminal networks. By leveraging advanced data analytics, Intellego XT provides invaluable insights to investigators. #cybersecurity #lawenforcement #technology #SS8 #IntellegoXT

3

Supplements company is coming along well. Website is almost finished, labels finalized, all of the ingredients are ordered. Should be ready to go for at least samples at BlackHat / DEF CON - and *maybe* be ready to order by then. Some cool things, we have licensed some key ingredients that are proprietary (the ingredients are full labeled for transparency - no "proprietary blends") and have a lot of backed research behind them. The pre-workout has S7 - which research has shown through multiple studies to boost nitric oxide (it's one of the best) for vasodilation (the pump and oxygen flow). SantEnergy Nu - a high-quality plant extract from Santa Herba which the research studies show metabolism & energy boosters, antioxidant, and weight regulation/loss booster. zumXR Extended and Delayed which are the only patented delivery system for caffeine release in the body so you don't get a crash and consistent energy use through the day. About a year and a half of research and trial and error to get to this perfection blend of various ingredients. Everyone that's tried it has said so far it's the best pre-workout they've ever taken. I'm really excited about the addition of GABA - we're one of the only ones out there that leverage it which increases natural IGF-1 production if used as a pre-workout 6 fold. GABA also hits the GABA receptors which has an effect of added energy and focus. Lots of other stuff. Coming soon! Citrulline Malate (fermented) – 5000 GABA - 750 (natural IGF-1 production, energy, focus) Beta-Alanine – 3000 (helps regulate acid in muscles and prevent fatigue) Taurine – 2000 (reduces muscle fatigue / increase performance) L-Tyrosine -- 2500 (focus and concentration) Caffeine Anhydrous 200 ZumXR Caffeine Extended – 65 ZumXR Caffeine Delayed – 60 S7 (Pump/Bloodflow) - 50 ZumXR Santenergy Nu – 400 Sodium Chloride – 20 (salt/hydration) Bioperine – 10 (strength, increase endurance, decrease fat mass, and protects lean muscle) Malic Acid – 115 (energy metabolism, improved cardiac function, alleviate sports fatigue, promote regeneration) Yohimbe Extract – 100 (some folks have sensitivity here, note its the extract, very small dosage, and coupled with betaine HCL for digestion, tolerated very well and a good for blood flow and energy kick) Alpha GPC - 300 (recover faster, builds muscle, and improves strength, focus, increases IGF-1) Magnesium Malate – 200 (Magnesium + Malic Acid - bioavailable magnesium for energy production) Silicon Dioxide - 100 (anti-caking) Betaine HCL – 2500 (absorption and digestion) S7(R) - https://lnkd.in/gPQyDTe3 SantEnergy Nu (TM) - https://lnkd.in/grZvzDBV zumXR Extended (R) - https://www.zumxr.com/ zumXR Delayed (R) - https://www.zumxr.com/ https://lnkd.in/gsHvRrsV

67

7 Comments

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/9yeq105M2RV

4