HanaByte’s Post

Far too many breaches have occurred because of too much focus on avoiding user inconvenience. It helps that consumer services, such as banking, investment accounts, and so on, now require MFA. The user who argues inconvenience no longer has a valid argument. Layered Security protections, including required security awareness training, must apply to all and not just to 'thee, but not for me'. #layeredsecurity #mfa #securityawareness

Multifactor authentication is often overlooked or not mandated and it’s really powerful as part of any identify security strategy. Whether it’s your Gmail account or social media, through to privileged access accounts to corporate systems, enable and enforce 2FA and insist on complex unique passwords to protect your digital identity. The inconvenience is a necessity in a prolific cyber security threat landscape. Hackers don’t hack in. They log in.

Absolutely true. I've observed that numerous individuals at the management level often show hesitation in adopting fundamental steps, yet they are eager to jump ahead to more advanced stages like steps 3, 4, and 5. It's crucial to recognize the importance of a strong foundation in ensuring long-term success. #ManagementBasics #LeadershipDevelopment #BusinessStrategy #OrganizationalGrowth #InnovationInManagement #EffectiveLeadership #BusinessFundamentals #StrategicPlanning #LeadershipChallenges #CorporateSuccess

Same old same old... How about SSO or adaptive MFA? C'mon...there has to be a way to make peace with end users, right? Lest forget all the times we called them the weakest link in the chain and offer them a straightforward passwordless solution, shall we? 🤣

Keep your IT environment and controls simple and concise, the more tools, the more risk

With the #CiscoXDR platform and WWT you'll be better prepared to take on the most sophisticated cyberattacks and win. #Cybersecurity https://lnkd.in/gwyNV39S

#blackcat (ALPHV) , coded in Rust, isn't new in the realm of cybersecurity; its activities have been observed for some time, but not to this extent. Recently, our attention has been drawn to aiding a client under siege by this very threat actor, who infiltrated through the supply chain, targeting both on-premise and cloud environments. #cyberreadiness Presented here is a thorough methodology outlined by our Sygnia Incident Response (IR) team, peeling back the theatrical curtain on how to effectively navigate such incidents. The exhaustive response from Sygnia Incident Response provides unparalleled insights into the Tactics, Techniques, and Procedures (TTPs) employed by BlackCat, shedding light on its ability to stealthily maneuver within an environment, particularly focusing on lateral movement with precision. Consequently, a #proactive and #intelligence led approach in incident response becomes imperative, ensuring effective mitigation strategies are promptly implemented to stay one step ahead of the adversary. #incidentresponse #threatintel #blackcat Oren BidermanAmir Sadon Shoham SimonAmir Becker You can read the full report here https://lnkd.in/dwCw38gn

Do you already know the EMC mark and what it stands for? Here you can get a brief insight into the topic. #emv #emc #sign #security #60seconds #vde

Super proud of the work the team did on #M3TID! Huge shout-out to AttackIQ, CrowdStrike, HCA Healthcare, IBM Security, JPMorgan Chase & Co., NAB, Safe Security, & Verizon Business for sponsoring the work! I had the privilege of leading the very first two projects for the Center for Threat-Informed Defense a few years ago focused on #adversaryemulation. It was awesome getting to lead the M3TID project as my “last hurrah” at MITRE. If your org is looking for an understandable, measurable, implementable way to incorporate real #threat knowledge to mature and improve your #security program — take a look at the M3TID framework. This is just v1, and it will be improved over time. Please check it out, give it a spin, and send in feedback so we can all continue to up the game on the #adversary as a community 💪 https://lnkd.in/etK-DR6R https://lnkd.in/ecSqF8Gg

With the #CiscoXDR platform and WWT you'll be better prepared to take on the most sophisticated cyberattacks and win. #Cybersecurity https://lnkd.in/g584qxMp