BOCA Communications’ Post

Another great piece of superb insight from Ross at Venture in Security, directly or indirectly, we've ALL been subjected to the negative impacts of hero culture! https://lnkd.in/eR6yXTCx

Among the many lessons from the Change Healthcare cyberattack, one that’s come into clearer focus this week goes something like this: Companies that ignore cybersecurity as part of an M&A process, do so very much at their own peril. And everyone else’s peril, too.

Our CEO, Tara Rethore, advises boards to take note: there's much to be learned from the Crowdstrike outage. Of course, boards have an obligation to anticipate and manage such risks. They also have an opportunity to contribute perspective and expertise to guide the C-suite meaningfully and with an eye toward the future. Read the comments for more. #strategy #leadership #boardsofdirectors #riskmanagement

Incident Response expert Matt Scheurer shares his deepest concerns and insights on the evolving threat landscape in this episode of ThreatConnect's #SmarterSecurity series. He discusses the risks of mergers & acquisitions, gaining visibility into integrated systems, and the dangers of expanding security footprints. Tune in here! https://lnkd.in/ePGUes4z #incidentresponse #cybersecurity

“Some of the most dangerous words you can say are, ‘We’ve always done it this way, but I’ve been successful.’ Our adversaries have changed, and technology has changed.” Read Benjamin Corll’s CISO Spotlight, where he sheds light on his journey from an enterprise CISO to the CISO at Zscaler and how he is working in this new role to continuously combat malicious actors. Read the CISO Spotlight here: https://lnkd.in/gjnFXr43

I couldn't agree more. I also believe that more of this slack is coming from a place where there is a lack of awareness about the magnanimity of the attack surface of an organization. I want to encourage other tech & non-tech teams across organizations to make an effort to understand the depth of the attack surface of your organizations by familiarizing yourself with the common exploits and zero days being published on the internet at trustworthy mediums like an NVD (National Vulnerability Database), on at least a weekly basis. What this would help with, is that it would give you an idea about how the inherent weakness of something as minute as a third-party dependency being used to build a tiny module of your product, can be exploited to either chain attacks and if the gods of fate decide to leave your side, even lead to disruption of systems. That being said, accountability does fall under the purview of Senior Management and fixes need to be done. But the blame game is not going to keep the Security Systems going anyway.

Ray Heffer joined Jeff Reichard for a discussion around #Cybersecurity from the CISO perspective during our recent #IndustryInsights livestream, including a closer look at the regulatory landscape. Watch the replay on YouTube - it was a fun discussion!

Ray Heffer joined Jeff Reichard for a discussion around #Cybersecurity from the CISO perspective during our recent #IndustryInsights livestream, including a closer look at the regulatory landscape. Watch the replay on YouTube - it was a fun discussion!

CrowdStrike and Palo Alto Networks' recent acquisitions reveal a critical shift in data security. But there's a missing piece: playing offense. Read Matthew Howard's latest opinion on these key acquisitions of Dig Security and Flow Security here: https://lnkd.in/ejW4qHzt #PaloAlto #PaloAltoNetworks #CrowdStrike #DigSecurity #FlowSecurity #CybersecurityAcquisition

Ray Heffer joined Jeff Reichard for a discussion around #Cybersecurity from the CISO perspective during our recent #IndustryInsights livestream, including a closer look at the regulatory landscape. Watch the replay on YouTube - it was a fun discussion!