OX Security’s Post

OX Security is donating $5 to Mind Over Cyber for every report download! Learn more about software supply chain risk and help our mission to teach #cybersecurity professional accessible #mindfulness techniques to manage stress.

Hear me out! The OSC&R report is out, and the findings may surprise you. 95% of organizations have faced at least one apocalyptic, critical, or high risk within their software supply chain. On average, they deal with nine such issues. Built on the OSC&R framework, akin to MITRE ATT&CK, this comprehensive analysis is a game-changer for improving security postures. Tech veterans from OX Security, Microsoft, Oracle, GitLab, Fortinet, and FICO collaborated to create OSC&R, a community dedicated to fortifying software supply chain security. Download the full report and a $5 donation will go to Mind Over Cyber. Report -> https://lnkd.in/d3YixGZv #CyberSecurity #AppSec #SoftwareSupplyChain #MITREATTACK #OSCAR #OXSecurity #ASPM

Ninety-one percent of organizations experienced at least one software supply chain security incident in 2023. Chances are the other 9% are riding their luck 👉 According to the OSC&R report, the average organization has nine high, critical or apocalyptic risks within their supply chain... The call is coming from inside the house 👀 #AppSec #cybersecurity

IBM FlashSystem 5200 provides advanced capabilities that help maximize data protection 🔐, security, and high availability to significantly reduce the risk of disruption and financial losses due to user errors, malicious destruction, or ransomware attacks. IBM Safeguarded Copy helps protect your valued data form cyberattacks with immutable and isolated copies that are hidden, nonaddressable and can’t be altered or deleted. In the event of an attack, these copies can be quickly restored to support recovery. Customized to your specific application mix, IBM FlashSystem Cyber Vault builds on Safeguarded Copy to help reduce cyberattack recovery times from days to hours. ⏰ IBM FlashSystem pricing 🇸🇪: https://lnkd.in/eKx-ziGz IBM FlashSystem DataSheet: https://lnkd.in/eCpYTCcE #storage #flashstorage #cybersecurity #storagepricing

What security advantages do small businesses have over larger organizations? Less technical debt! Active Directory is highly prone to accumulating overprovisioned users, unneeded security groups, outdated Group Policy objects (GPOs), and more — making it an attractive target for cybercriminals. At #RSAC 2024, our Strategic Systems Consultant, Matthew Vinton, shared insights with BizTech Magazine about the unique security challenges small businesses face. One key advantage for SMBs is their ability to more practically modernize and move away from legacy systems. Learn more about how Active Directory modernization can enhance your cyber resilience👉https://okt.to/XDhzOx #ActiveDirectory #Cybersecurity #ITManagement

⚠RANSOMWARE OF THE WEEK⚠ CYFIRMA Research and Advisory Team would like to highlight #ransomware trends and insights gathered while monitoring various forums. This includes multiple – industries, geography, and technology – which could be relevant to your organization. Type: Ransomware Target Technologies: MS Windows, Linux and MacOS Introduction CYFIRMA Research and Advisory Team has found Kuiper ransomware while monitoring various underground forums as part of our Threat Discovery Process. Kuiper ransomware #Kuiper ransomware was discovered in the wild in September 2023, coinciding with the launch of their Ransomware-as-a-Service (RaaS) platform during the same month. Ransomware is written in Golang. Read here: https://bit.ly/48EnKA5 #CyberSecurity #Cyfirma #ETLM #externalthreatlandscape #ThreatIntelligence #CyberIntelligence #CYFIRMAResearch #malware #windows Kumar Ritesh Dr. Saurabh Lal, P.D. Michael Henry Anna Koh Amit Thakur Harry Lee Glaiza Pardilla Harsha Vardhan Sam Parmar Rahul Raghav Yusuke Tateno Chiaki Izena（伊是名千晶）Greg Baylis David Plummer Rakesh R V Nicko Navarrete Ruri A. Hyungchan Mike Cho Montai Saiaroon Huy. Nguyen Tuong Vinh Dudley Swanepoel Mouli Saha Greg Baylis

Over the last few days the CyCognito team has been working closely with our customers to find, validate, and mitigate the Palo CVE-2024-3400 vulnerabilities. As soon as the news broke, all of our customers could immediately see where exactly they were exposed across their (up to) millions of internet-exposed assets and thousands of "organizations". It made our research team curious and want to Quantify how effective the cybersecurity community is at finding and eliminating critical vulnerabilities once they're known. Spoiler: it took some Fortune 500 enterprises over 1.5 years (!) to fix some of the previous similar PAN critical vulnerabilities (e.g., Authentication Bypass in SAML Authentication, CVE-2020-2021 @ PAN-OS). For context, CISA/DHS say it takes 48 hrs on average for attackers to exploit new vulnerabilities. The challenges seem to be: Visibility to unmanaged & subsidiary assets, and running continuous Active assessments at scale, which require a different approach. There's great data below, and more to come.

🚨 Breaking News: Palo Alto Networks has disclosed a severe vulnerability, CVE-2024-3400, in its PAN-OS software, impacting GlobalProtect gateway configurations. CyCognito has identified potentially affected assets that were exposed to attackers and has reached out to customers who have been affected. In addition, all customers can view an in-platform emerging security issue announcement. Learn more: https://lnkd.in/gWzbUctm? #Vulnerability #Cybersecurity #ASM #ManageYourExposure

Are you doing everything you can to keep your business secure? It’s not always easy to keep track of the latest security concerns, but what if you don't have to? Summa Tech's enhancement software allows you to safely store, retrieve and exchange your most important data without the stress, so you can focus on doing what you do best. Get in touch: https://bit.ly/3LJpTBh     #SecureClientPortal #CyberSecurity #ProfessionalServiceFirm #UKAccountants #AccountancyFirm #SummaTech #OnboardingSoftware

As we navigate the digital landscape in the beginning of 2024, emerging cybersecurity threats are becoming more sophisticated and prevalent. From encryption-based ransomware to software supply chain attacks, the threat landscape is evolving at an unprecedented rate. At Agilicus, we're committed to staying ahead of these threats. Our Zero Trust Network Access platform is designed to provide secure access to any application, from any network, for any user, on any device. We strive to simplify the sign-in experience for end-users while reducing the effort involved in launching a new application and the heavy-lifting required to make your systems secure. In the face of emerging threats, we believe that strong security should be simple and affordable. That's why we're dedicated to making the 'hard' part of adopting cloud-native security easy for our customers. Stay ahead of the curve with Agilicus.  #Cybersecurity #ZeroTrust