Trellix’s Post

Last chance to sign up! It’s no secret that account compromise threats are on the rise, so it’s more important than ever to defend your organization. We want to make that easier for you. Join us for a webinar where we’re debuting Huntress MDR for Microsoft 365’s newest capability that’s purpose-built to shut down session hijacking and credential theft: Unwanted Access.

It’s no secret that account compromise threats are on the rise, so it’s more important than ever to defend your organization. We want to make that easier for you. Join us for a webinar where we’re debuting Huntress MDR for Microsoft 365’s newest capability that’s purpose-built to shut down session hijacking and credential theft: Unwanted Access.

It’s no secret that account compromise threats are on the rise, so it’s more important than ever to defend your organization. We want to make that easier for you. Join us for a webinar where we’re debuting Huntress MDR for Microsoft 365’s newest capability that’s purpose-built to shut down session hijacking and credential theft: Unwanted Access.

It’s no secret that account compromise threats are on the rise, so it’s more important than ever to defend your organization. We want to make that easier for you. Join us for a webinar where we’re debuting Huntress MDR for Microsoft 365’s newest capability that’s purpose-built to shut down session hijacking and credential theft: Unwanted Access.

The discussion at the Ransomware Task Force meeting put on by Institute for Security and Technology (IST) was fantastic if you didn't get to see it. Calling out two highlights: Craig Newmark (Craigslist and Craig Newmark Philanthropies) spoke inspiringly of the spirit of collective civil defense that we saw in the second world war as it applies to cyber defense, a spirit that is still present in our society today. Tony Sager spoke very eloquently on building security into products by default and collective action to tackle problems in security. I agree completely, I also believe that security implementation needs to be automatically applied and if its not built in we should build "secure by design" wrappers on older tech. I definitely believe this work can be done. Paraphrasing Tony Sager (3:42:18): Somehow we have created a security model that is one that most of our economy cannot execute. Most of our economy is not going to buy technology off the shelf then read thousands of pages of well-intended information from nonprofits and government agencies and so forth and figure out how to build security for themselves. This is heartbreaking because of the effort put into this work. But it's a fact. And so most of this needs to be built into the systems. The bad news is we are all connected so we are all vulnerable together. The good news is that provides an opportunity for collective action. Numerous other speakers raised insights that were very valuable to me, too many to mention in a linked-in post. You can watch the video here: https://lnkd.in/g8fbsqtP

Yesterday the House Committee on Homeland Security held a hearing on the CrowdStrike outage from this summer. All in all, lawmakers appeared grateful for how transparent CrowdStrike was and how they took immediate accountability and action to rectify the outage which spanned industries including healthcare. Some key takeaways from CrowdStrike testimony: 1.     The faulty update was not generated by AI. 2.     Updates had been pushed out globally all at once; that has since changed. 3.     A stepped rollout approach for updates using a process of “concentric rings” is now used by CrowdStrike. 4.     Customers can now choose when they take updates. 5.     Options for receiving updates include: a) “early adopter” to get updates as soon as possible; b) “general availability;” or c) waiting a period of time to receive (or not receive them at all). 6.     Their access to Microsoft Kernel to support a vast array of hardware and systems is needed to ensure visibility into what is happening such as antitampering (needed for cybersecurity reasons). Securing an operating system without kernel access would be very difficult. 7.     CrowdStrike has been working with Microsoft to plan for future improvements and improved resiliency. 8.     Reason for the July outage stems from CrowdStrike categorized as a “perfect storm.” 9.     The process for testing the content update was based upon validators. 10. Root cause behind the faulty update traced back issue with their validator tool. 11. Content validator was looking for a rule not present. Sensor failed when it tried to use this rule resulting in blue screen. Was likened to trying to move a chess piece to a place on the board that didn’t exist. 12. With changes made following the incident, content updates will be tested internally prior to release. Cybersecurity and Infrastructure Security Agency Cyber Safety Review Board (CSRB) has proven helpful to this Committee; some are calling for them to investigate this incident. Hearing replay here: https://bit.ly/4dokBH5

Have you been wondering what "shift-left security" really is, but were afraid to ask? Fret no longer! Watch this great explanation video from #IBM where my #RedHat teammate Carolyn May explains it all in six minutes! https://lnkd.in/eqcvg6t3

Oh man - we would have loved to Shadow the CrowdStrike team after last week's debacle. Since we couldn't, we did the next best thing. Check out this explainer video on all things that caused and resulted from this outage on July 19th, 2024. We'll dive into: 💻 The technical details of what went wrong, including how a simple null value in the updated driver caused a catastrophic failure ⁉ Why this issue arose and the inherent risks of third-party security software that needs to bypass operating system safeguards 🛡 How to protect your systems and why it's often safer to rely on built-in security tools from your operating system provider

Use the 3-2-1 backup strategy to ensure that you always have 3 copies of your data. 2 copies on different types of media, 1 copy to be completely offsite. #CybersecurityAwarenessMonth #Techtips #security