DayBlink Consulting

Michael Morgenstern, a DayBlink Consulting Partner and Practice Lead for DayBlink Consulting’s Cybersecurity Group, was featured in GeekWire's "Cyberattack at Port of Seattle is the latest example of increasing threats to critical infrastructure," by Taylor Soper. Following a recent cyberattack at the Port of Seattle, Morgenstern outlined the types of threats that ports face and how to prevent future attacks: “The actual tactics are the same as for any other corporate or government entity,” he said. “Build insider threat and supply chain security programs. Implement zero trust wherever possible, build layered and partitioned security everywhere else. Train, train and train employees.” Read the article here: https://lnkd.in/gBtDUWsX Learn more about DayBlink Consulting's Cyber Security practices here: https://lnkd.in/gpmqsh4A

In anticipation for the upcoming school year, the DayBlink Consulting team participated in the 2024 Back2School Drive with Northern Virginia Family Service, a non-profit dedicated to combating poverty in the local area and helping people find stability and self-sufficiency. Our team donated an assortment of school supplies such as backpacks, binders, and pencils, for local children in need. We are proud to have made this positive impact on our community and we look forward to partnering with NVFS again in the future! Learn more about Northern Virginia Family Services here: https://www.nvfs.org/ Learn how you can support this organization here: https://lnkd.in/e_ig3CEm

The Cloud Security Alliance Top Threats Report aims to raise awareness of current cloud security risks, threats, and vulnerabilities. This 2024 installment surveyed over 500 industry experts on the cloud security issues they are facing. Respondents identified 11 top threats. The CSA Top Threats Working Group has analyzed the results and provided a description of each cloud security threat, including the business impact, key takeaways, examples, and relevant security controls. DayBlink Consulting Partner Michael Morgenstern contributed to this report. Read more here: https://lnkd.in/gdEuYYrF

Justin Whitaker and I had a great time with the Season III cyber games athletes! Good luck in the games this year. #dayblinkconsulting #cybersecurity

As the story goes, and more recently popularized in the movie The Founder, Ray Kroc was speaking to a class at Harvard when asked “What business is McDonalds in?” “Restaurants!” “Hospitality!” “Supply Chain!” “Franchising!” “Entertainment!” “No!” Ray laughed and replied to each student. “Ladies and gentlemen, I’m not in the hamburger business. My business is real estate.” This analogy leaves us wondering about the business of cybersecurity. The mission is to reduce cyber-related risk to the business. This mission, and cybersecurity writ large, to many remains cloaked as a deeply complex technical function. However, when you pull back the curtain on what security teams do day to day, demystifying it to some extent, is it not just an operations function like many other parts of a business? Reducing cyber risk results from the admittedly trite, effective use of People, Process, and Technology. Further, like many operations functions (e.g., information technology, supply chain, customer service, etc.) success results from an endless pursuit of driving operational effectiveness and scaling capabilities often with automation center-stage. The case for automation is even stronger for cybersecurity teams that have to keep pace with an ever expanding digital footprint, protecting against advanced cyber criminals, on impossibly tight budgets. Given this sobering state, where then, should automation sit within an information security organization to ensure it is treated as a strategic imperative? Read more here: https://lnkd.in/eqKwCvbx #Cybersecurity #DayBlinkConsulting #Insight

"Unlike most prognosticators in the cyber industry, I will try not to inflame the hype of yet another doomsday, the sky is falling discussion on the newest threat vector. Over the past quarter in particular, that has been Generative AI (GenAI). This technology has even captured the minds (and fears) of the C-Suite and Boardrooms, quite a bit differently than when security practitioners started talking about machine learning many years ago. Most (though not all) of the GenAI conversation has seemed to revolve around its ability to amplify productivity and its potential to continue the trend of automating away tasks that shouldn’t require humans. Lots of technology companies have been touting their new "AIs," which predominantly have meant chatbots and interactive prompts." - Michael Morgenstern Continue reading this article here: https://lnkd.in/e6zxvxG9

In 2023, DayBlink Consulting made substantial contributions to our local communities, with our team dedicating over 300 hours of volunteer service. This commitment led to $25K+ in donations and $40K+ in pro bono services delivered to organizations, enriching the communities we hold dear. Follow the attachment below to explore the breadth of our involvement and its effects.

Vulnerability Management as a function has been around as long as we’ve had sophisticated IT and security organizations. Yet the overall scope and responsibilities of that function have morphed considerably over the past decade. Many organizations used to use a very narrow definition of vulnerability and simply compare configurations and software versions against a database of issues using one of the many commercially available tools. Though this has changed considerably over the last decade as Software Composition Analysis has become more prevalent, companies have shifted to the cloud and to containers, etc. We expect several major trends affecting the Vulnerability Management market to begin coming to fruition in the next year. Each of these will set the stage for continued acceleration of automation capabilities. Continue reading this insight by Michael Morgenstern here: https://lnkd.in/eCgJTpwR #Cybersecurity #DayBlinkConsulting #Insight

AI-assisted code development (AICD) is a powerful tool that can be leveraged in the DevSecOps cycle to increase code efficiency. However, the increased speed and capacity for development also bring new risks to organizations. While organizations that are fast adopters of this technology will have a significant advantage over their competitors, their new development capabilities will only be as strong as how well they manage the risks involved. Learn more about four implications that AICD has on organizations’ risk management here: https://lnkd.in/exkgBDXg #AppliedAutomation #DayBlinkConsulting #Insight

Identifying a company’s most important assets to protect should arguably be any cybersecurity organization’s first priority. Traditionally, the Crown Jewels Analysis method is thorough and comprehensive, but arguably heavy and slow to scale. While this approach is considered to be the gold standard and a worthwhile investment, we argue that the approach may not be practical for all organizations. Click here to learn more about an alternative approach that is lighter weight, easier to adopt, with accuracy that is good enough to guide cybersecurity investment decisions: https://lnkd.in/ebstnW9u #Cybersecurity #DayBlinkConsulting #PositionPaper