Christina Angelone

I Just wrapped up an insightful discussion on business risk, and cybersecurity threats to municipalities across Texas. Here are some thoughts on key points from my remarks:   ·      China, Russia, Iran, North Korea and other Nation States pose significant and evolving cyber threats to U.S. national security, and economic prosperity. They each leverage cyber capabilities for espionage, economic espionage, influence operations, and attacks on critical infrastructure. Just to name a few.    ·      Ransomware attacks impacting state and local governments often stem from exploited vulnerabilities and compromised credentials. Unfortunately, state and local governments too often face challenges involving inadequate cybersecurity programs, insufficient funding, outdated IT infrastructure, central control of budget and incident command with increasingly advanced and complex threats.   ·      Organizations large or small can take simple steps to enhance cybersecurity and significantly reduce risk to include require multifactor authentication, patch and update software, develop and test incident response plans specific to attack types, use backup systems and segment data, and conduct regular assessments and testing to validate your security plans and controls are working. Nothing new here. Unfortunately, we keep not doing it. Meaning for years the bad guys use a lot of the same attack vectors but the victims don’t change. The landscape of cyber threats is continually evolving, and it's critical to stay informed and be proactive in our defenses. #Cybersecurity #NationalSecurity #CyberThreats #InformationSecurit #LocalGovernments

56

11 Comments

This guide addresses the importance of vulnerability management in enhancing security operations by identifying assets, mitigating threats, and ensuring compliance. It aims to assist security and risk management leaders in comprehending vulnerability assessment (VA) technologies within a broader exposure management framework. #vulnerabilities #Flashpoint #vulnerabilitymanagement #secops

4

Struggling to land your first pentesting role? Then mark your calendar for 1 pm EST on Friday, June 28th. In partnership with ISC2, one of our managing consultants, Adeeb S., will share his story and strategies used to become a pentester, even without a development background or IT experience. You'll leave with actionable insights on the following topics: ▫ Choosing Your Specialty: the importance of selecting and sticking with a focus area. ▫Building Your Resume: How to list certifications and skills, use free resources to gain knowledge, and stand out with limited experience. ▫Job Hunt & Interview Strategies: Tips on succeeding in your job search landing your first role. 👉 Register Here: https://lnkd.in/gYhVGrJG 👈 Don't miss this opportunity to learn from someone who's been among Synack Red Team's top-ranked Bug Bounty hunters and get actionable advice to kickstart your career in offensive security. #ISC2 #offensivesecurity #penetrationtesting #pentesting #redteaming #applicationsecurity #informationsecurity #infosec #cybersecurity #cyber

5

1 Comment

Each month, our Threat Intelligence team at KrakenLabs from Outpost24 shares important discoveries. 👔 Executive Intelligence Briefing: July 2024 🌋 Featured threat actor: Volcano Demon 🚨 Spotlight Threat: Disinformation in the Games (Storm-1679 + Storm-1099) ⚠️ Emerging Threats: Researchers have been able to attribute recent supply chain attackers back to a single entity. Read the briefing: https://gag.gl/JtWi5g #cybersecurity #threatintel #cyberrisk

2

Lumen Technologies' Vinod Brahmapuram sat down with Government Technology Insider to talk about the critical importance of securing digital infrastructure against #cyber threats. As we see departments of transportation build their digital footprint and plan for more connected communities and smart cities, we need to ensure that security isn't an afterthought. #digitalinclusion #connectedcommunities #digitalinfrastructure

2

Cyber ​​Security is becoming a critical central layer in the protection of the Armed Forces and therefore the defence industry (DIB) as part of the defence's supply chain protection. And with the world wide digitization of defence... MIoT, C2, and SW..."connecting every shooter to every sensor" cyber security may not be the weak link. #Defence #Defenceindustry #Cybersecurity

12

It's time to leave manual work in the rear view mirror 👋 CEO Spencer Thompson joined the CISO Series Defense in Depth podcast to discuss automating the detection and response lifecycle so orgs can dramatically increase the velocity, throughput, and confidence with which they respond to the latest threats [P] #detectionandresponse #threatintelligence #threatdetection

21

Check out our new "Customer POV" blog series. The first one includes excerpts and video clips from an extensive interview we did with John Sapp, CISO of Texas Mutual. He has an interesting perspective on Cyber Risk Governance. https://lnkd.in/gPDnWYCp #CyberRiskGovernance #CyberSecurity #RiskManagement #InfoSec #CyberThreats #SecurityStrategy

6

Houston Cybersecurity Network, with the Minute Maid Park event approaching us next week and just a few spots left. Hope to see you there for this incredible event and fablous networking experience! Please reach out if you'd like to lock in your spot. Panel discussions include: - How the AI Revolution is Transforming the Threat Landscape -Customer Insights: Your peers will share real-world use cases, leading security strategies, technology integrations, and how AI has transformed SecOps. -Technical Deep Dives: Onsite sme, explore security in email, network, cloud, endpoint and OT.

17

We are thrilled to announce that on behalf of our over 60 Member nonprofits, NetHope has joined 159 technology company signatories and 11 other groups, endorsing the Cybersecurity and Infrastructure Security Agency’s (CISA) Secure By Design (SbD) Pledge! NetHope’s endorsement is in line with its 2024–2030 strategy, which focuses on bridging “The New Digital Divides”—challenges that represent critical gaps in infrastructure, systems, capabilities, and knowledge across five prominent areas. Digital protection is one of these areas and NetHope is driving multi-sector, collaborative and strategic approaches to address increasing digital security threats—like cyber security and mis-/dis-/mal- information—with an emphasis on insights and skills sharing, global co-creation, and long-term commitment to protect digital rights. “I am pleased to endorse these goals and applaud CISA leadership for convening and catalyzing commitments to meet them. I am proud of many of NetHope’s current global technology partners who have already signed the Secure By Design Pledge. Collective action across sectors is essential to immediately respond to current threats so NGOs can sustainably build their cyber defenses and resilience, lower the number of successful attacks, limit loss of money, and ultimately better protect the digital rights and digitally-enabled rights of the people served. The nonprofit sector relies on commercially available technologies to move all aspects of their operations and missions forward. When technology companies pledge to raise the bar themselves, the whole ecosystem benefits – especially the most vulnerable and exposed on the front lines.” - Lance Pierce, NetHope CEO Kudos to CISA Director Jen Easterly’s entire #SbD team, especially Bob Lord, Jack Cable, Lauren Z., and Lauren Boas Hayes. Thank you for being such great partners to the global humanitarian sector!   Read the full announcement here: https://lnkd.in/eb6DPBZm   #NetHope #Cybersecurity #DigitalProtection

49

2 Comments

Easterly appeals to Congress on CISA funding More money from Congress would boost the Cybersecurity and Infrastructure Security Agency’s ability to defend against threats to the nation’s most vital infrastructure, Director Jen Easterly said Tuesday in a House hearing where she emphasized the dangers posed by Chinese hackers in particular. Especially important in the fiscal 2024 budget that President Joe Biden proposed for CISA, she said, was a $150 million chunk of funding that would improve three CISA programs oriented at least in part toward critical infrastructure protection. Biden has proposed $3 billion for CISA overall, which is $136 million more than Congress appropriated last fiscal year, according to lawmakers. Securing Industrial Networks in the Age of Digitalization Now more than ever, increasingly connected operational technology (OT) networks face real cyber threats -- and a generation of new industrial control system (ICS)/OT security products and services from activeSENTINEL™ Digital Twin Security that fills those security gaps. #activeSENTINEL™ , #nebulositycloud , #ransomware , #GlobalCyberTHREAT, #digitaltwinsnetwork, #counteroffense , #unGUARDED™ , #LOTL, #MITRE ATT&CK,#IoT, #OT, #IIoT, #ICS, #BESS, #Smarter City

4

[1 hour left] Join the live webinar with Matthew Fisch, CISSP at Fort Messa, and Jagsir Singh, Marketing Director at SecPod, to get deeper insights into how to crack the exposures and vulnerability problem. Register here: https://lnkd.in/gcmi7jJN #vulnerabilitymanagement #webinar #cybersecurity #secpod #exposure

11

Stay Ahead of Emerging Threats: Navigating the Complexities of Security Staffing    In our February edition of the Safeguards Consulting Chronicle, our team at Safeguards Consulting, Inc. shared an article from Security Management Magazine entitled, “Navigating the complexities of security staffing”.    In this in-depth article by Jeremy Bilsky, he covers the various challenges facing security staffing in today's fast-paced and ever-changing threat landscape. With the increasing demand for security professionals, organizations are facing difficulties in attracting, retaining, and developing top talent. The article identifies several key complexities, including:  1. Skills gap: The shortage of skilled security professionals, particularly in areas like cloud security and artificial intelligence.    2. Retention: The high turnover rate of security staff, with many leaving for better opportunities or due to burnout.    3. Training and development: The need for continuous training and upskilling to stay ahead of emerging threats.    4. Diversity and inclusion: The importance of building diverse security teams to bring different perspectives and approaches to security challenges.    5. Budget constraints: The struggle to allocate sufficient resources to security staffing, leading to overworked and understaffed teams.    To learn how to navigate these complexities within your organization and to build effective security teams that are equipped to tackle the evolving threat landscape, visit:   https://lnkd.in/g-4R8AuT   If you have not subscribed yet, please consider signing up for our free July newsletter to stay up to date on more industry insights, expert articles, and exclusive content from Safeguards Consulting!   To subscribe, click the link below:   https://lnkd.in/eCpwc2cv   #safeguardsconsulting #newsletter #criticalinfrastructure #CyberSecurity #energysecurity #SubscribeNow #cyberattack #infrastructure #energy #management #globalnews #globalthreats #Security #cyberattack #manufacturing 

4

CISA gives the first-year results of its pilot program to scan and notify organizations in the U.S. federal government, state, local, tribal, territorial governments, and critical infrastructure entities about ransomware vulnerabilities they detect. Check out how well it worked here: https://hubs.la/Q02zTKf30 #CISA #CyberSecurity #Infrastructure #Ransomware

15

Turbocharge your Incident Response readiness with Natsar's Cybersecurity Program Bundle. 17 docs, NIST-based plan, policy, templates. Save 10% when bundled. #IncidentResponse #CyberSecurity https://zurl.co/F3qD

2

🔒 HYAS threat intelligence - security engineer David Brunsdon shares the five best techniques to optimize your threat intelligence. Get the details below! 👇 https://hubs.li/Q02By4p30 #Cybersecurity #ThreatIntelligence #HYASInsight

6