John P.’s Post

Cybersecurity and Infrastructure Security Agency's push for software manufacturers to publish a memory safe roadmap by January 1, 2026 is a big step forward for stronger cybersecurity. 🔐 So, what can you include on your roadmap? 👉 Rustls - A memory safe implementation of TLS for secure communications 👉 NTPd-rs - A memory safe NTP (Network Time Protocol) implementation for accurate and secure timekeeping 👉 Rav1d - A memory safe AV1 media decoder Let’s work together to reduce vulnerabilities and build a safer and more secure Internet for everyone, everywhere. 🌏 https://lnkd.in/efpnwjEw #SecureByDesign #Cybersecurity

You might need to read this. CISA and FBI Release Joint Guidance on Product Security Bad Practices for Public Comment. In brief, the bad practices are divided into three categories: 1/ Product properties, which describe the observable, security-related qualities of a software product. 2/ Security features, which describe the security functionalities that a product supports. 3/ Organizational processes and policies, which describe the actions taken by a software manufacturer to ensure strong transparency in its approach to security. #cyber #securebydesign https://lnkd.in/gtnFaX86

Are you developing #Products with digital elements? Check to see if you are committing #CyberSecurity #BadPractices? You can also express your opinion and improve the new guide from Cybersecurity and Infrastructure Security Agency and Federal Bureau of Investigation (FBI).

Industry standards and guidance publications are always good, BUT many organizations and people view them as an ideal to aspire to. Some of those things are necessary cybersecurity steps. Instead, an "Information Systems Worst Practices" document is a better idea, and CISA has released that. For many orgs, THIS may be where they want to start: The near-rock-bottom of secure system design. It only gets better from here. https://lnkd.in/gzkZ5Jc4

This is why Datafying Tech Services and Bitdefender work hand in hand to bring Government grade Cyber Security solutions to SMB's from Georgia to Nationwide. Stay Safe! - - #Microsoft #MicrosoftOutage #Crowdstrike #CrowdstrikeOutage #MicrosoftError #Bluescreen #ITOutage #GlobalITOutage #computerissues #TechProblems #DataBreach #CyberSecurity #DataPrivacy #IdentityTheft #ATTHack #DataProtection #CyberAttack #InformationSecurity #CyberCrime #PrivacyProtection #InfoSec #HackingNews #TechUpdates #ThreatIntelligence #DataSecurity #DataLeak #NetworkSecurity #SecurityBreach #BusinessSafety #TechInsights #CyberThreats #ChamberOfCommerce #SmallBusinessTips #Innovation #Technology #DigitalMarketing #ProfessionalDevelopment #ITSecurity #CyberDefense

This is a fascinating and informative article from Bitdefender. Based on personal experience, they did have their bad releases last time. It is crucial to understand how software release cycles are managed and to control the quality to minimise potential outages caused by bugs. 1. How software features/functions and bugs/vulnerabilities fixed are planned, quality control and its impact on long-term maintainability. Because the features/functions released are not a one-time bespoke tailored suit but require long-term maintainability for bugs/vulnerabilities. This is often overlooked by many in the IT Industries 2. Software release quality control is not only the supplier's responsibility; the user must also have an almost identical environment to test before rolling out to their field production. The reason is that no supplier can thoroughly test all various setups with other software residing in the same system. Users are required to at least do some basic testing before rolling out to their production, even if the most critical vulnerabilities need to be fixed. It is a balance between time to fix any bugs that slip through QA and caused outages. But this is again often overlooked because it is expensive to maintain a test team and environment. This outage is a good learning lesson for many. #softwarelease #sqa #crowdstrike #microsoft #cybersecurity #qualitycontrol Pure Storage Nirav Sheth Yishuen Chin Kelvin Tuan Hock Leng Chua Jenson Chong June Tay Mike Tang Alicia Sim Sylvia Tong Pratyush Khare Kekin Lim

Learn more about #Bitdefender's software release procedures and send me a message at BitCyber (authorised Bitdefender distributor) to learn how we can help Bitdefender customers implement robust and secure update policy and procedures to ensure the stability of your environment. #availability #cybersecurity

Thank you Bitdefender This article is a good start point for update management policy keeping in mind the today's lesson we learned. Onion layer system management can be a good option to keep bug and hack out of the door..... In the middle i will hang a garlic necklace out of my server room!!!

Calling all security professionals! ️ Cybersecurity and Infrastructure Security Agency is joining the MVSP Working Group to champion #SecureByDesign principles. This is a game-changer for building more resilient systems. Click to learn more about the Minimum Viable Secure Product and how it can elevate your security posture https://lnkd.in/gYgyQDCA #cybersecurity #applicationsecurity #CISA #MVSP #engineering #industrialcyber #icssecurity #ics

Here are some insights into the global outage caused by Crowdstrike, root cause analysis, lessons learned and takeaways #crowdstrike #techoutage #cybersecurity https://lnkd.in/eWwqyrSB