Céline Gajnik-Kinnoo’s Post

🌟 ICYMI: MISP Exporter Action! 🚀 Seamlessly create or update MISP Events from ThreatQ objects! Boost your threat intelligence workflow today! #ThreatQ #MISP #CyberSecurity

CTI Data Analysis: Decoding the Digital Jigsaw Puzzle in 2024 The cyber threat landscape is constantly evolving, throwing a complex digital jigsaw puzzle at security professionals. In this ever-changing environment, Cyber Threat Intelligence (CTI) data analysis is the key to piecing together the bigger picture. In this blog post, we'll delve into: https://lnkd.in/gRpeSTbA The critical role of CTI data analysis in today's threat landscape. Essential skills and techniques for effectively analyzing CTI data. Emerging trends and challenges in CTI analysis for 2024. Actionable tips to transform your CTI analysis capabilities. Join us as we explore how to decode the digital jigsaw puzzle and gain a proactive advantage against cyber threats! #CTI #Cybersecurity #ThreatIntelligence #DataAnalysis

🔍 Discover How LinkShadow Enhances Post-Breach Investigation Capabilities! 🔓 Curious about effective post-breach investigation strategies? LinkShadow's Network Detection and Response #NDR module leverages advanced #AI to analyze network traffic in real-time, detecting anomalies and providing actionable insights. Learn more about how our platform: ✔ Enhances detection with AI-driven analysis of network traffic. ✔ Integrates seamlessly with third-party security systems for comprehensive threat assessment. ✔ Empowers cybersecurity teams with Shadow360 for deep, retrospective investigation capabilities. Explore our latest blog to dive deeper into these capabilities and discover how LinkShadow can strengthen your incident response strategy. 📖 Read here: https://lnkd.in/dqRX3m23 #LinkShadow #Cybersecurity #IncidentResponse #InvestigationCapabilities #ThreatDetection Rinesh Nalinakshan Fadi Sharaf El-Dean Ahmad Fida Weldali Prashanth Ravichandran Awaad Al Marhuby Maged Alowaini John Fanning Sreejith Menon Mohammad Omoush

Enhance Your Security Strategy: Unveil the Power of UEBA Tools in Modern Cyber Defense. Learn how User and Entity Behavior Analytics (UEBA) tools are transforming threat detection and prevention, providing unparalleled insights into user behavior and safeguarding your organization's data like never before. https://lnkd.in/exJAK5MB

I had a wonderful time sitting down with Nisha, and discussing the importance and crucial role threat intelligence plays when defending against the highly sophisticated adversaries operating today. Thank you to CIO & Leader for this amazing opportunity to spread the good word. #threatintelligence #threatintel #intelligence #cybersecurity

Looking for effective post-breach investigation strategies? LinkShadow's Network Detection and Response (NDR) module uses advanced AI to analyze network traffic in real-time, detect anomalies, and deliver actionable insights. Discover how LinkShadow can strengthen your cybersecurity posture. #Cybersecurity #Paratus #NDR #LinkShadow #AI

Today is a bit of a milestone. We've got Intelligence Requirements in ThreatConnect, and they rock!! It's been a loooong time coming, but it's here! We're not just bringing sexy back for TC, we're bringing sexy back for TIPs, and #CTI teams. Everyone get's their sexy back! Threat Intel is not just about IOCs or even TTPs (as important as they are). It's about informing security decisions - at all levels. We hope this feature and our other recent enhancements help teams do that better. I am very proud of our entire team that worked on this. Shout outs especially to Marika and Dan Cole for driving this through. We're not done either...Suba and Gerald Caponera are cooking up a lot with #CRQ and MITRE ATT&CK, and some wicked Gen AI stuff in there too. Check out the details on what we launched today in the blog below from Dan McCorriston or hit me up if you want to know more.

𝐇𝐨𝐰 𝐭𝐨 𝐧𝐚𝐯𝐢𝐠𝐚𝐭𝐞 𝐭𝐡𝐞 𝐫𝐢𝐬𝐢𝐧𝐠 𝐭𝐡𝐫𝐞𝐚𝐭 𝐨𝐟 𝐬𝐮𝐩𝐩𝐥𝐲 𝐜𝐡𝐚𝐢𝐧 𝐚𝐭𝐭𝐚𝐜𝐤𝐬 In the past five years, supply chain attacks have tripled, with a notable surge since 2021, according to Cybersecurity Magazine (CSM). These attacks involve malicious actors targeting third-party vendors who offer services or software necessary to an organization's operations. While SolarWinds stands out as a prominent example, recent incidents like the #Snowflake and #Polyfill.io attacks highlight the ongoing threat. The Snowflake cloud-based data warehouse attack involved cyberattacks on customer environments due to compromised login credentials. This breach has been linked to significant data breaches at #Ticketmaster, #SantanderBank, and more. Attackers used credentials stolen through historical infostealer malware infections, affecting at least 100 Snowflake customers and exposing approximately 165 businesses, as reported by Mandiant (part of Google Cloud). The impact was worsened by poor security practices, such as not updating credentials or using multifactor authentication. Polyfill.io, a widely used #JavaScript CDN service, was compromised earlier this year after being acquired by a Chinese company called Funnull. This led to malicious JavaScript code being injected into over 100,000 websites, redirecting mobile visitors to scam sites, according to Dark Reading. The full extent of the consequences is still unclear, but major names like #Intuit and the #WorldEconomicForum were affected. Key Learnings:  👉 Regularly update login credentials and use multifactor authentication 👉 Monitor third-party services and dependencies for changes in ownership or security status 👉 Implement robust security practices and educate teams about the risks of supply chain attacks 👉 Use threat detection tools to identify and mitigate potential breaches early To delve deeper into how your organisation can leverage #detection methods to identify #supplychain attacks, check out our blog on detecting and preventing targeted attacks:  https://lnkd.in/eZVjMXcZ

Just in! My take on the evolution of cyber detection and how to build each pattern in Databricks. Let me know what you think!

🔮 The future of 2024 holds… a lot of cyber threats! It should come as no surprise that many of the cyber threats we have come to expect in 2023 will continue in 2024 with gusto. 💰 Ransomware is projected to remain elevated, with targets including small to medium sized businesses in particular. 🥸 Social engineering is expected to play a role in that rise—and more—as hackers become more detailed and clever. 🤖 AI will continue to be leveraged more than we have likely ever seen before to accelerate and facilitate such threats, and… ⌛ Zero-Day Vulnerabilities will continue to be found and exploited before—you guessed it—organizations have a chance to do anything about it. Scary? Yes. Preventable? Maybe. Strategize-able? MOST DEFINITELY. Read more about 2024 cybersecurity predictions here: https://lnkd.in/gyS2S3pS #cybersecurity #businessstrategy #cybersecurityawareness #dataprotection #keepitcool #modernit #synagex