Justin Martin

This case, along with the case out Sacramento involving a law firm that is suing their #MSP are going to set the tone for standards across all MSPs. I think the time is near when the words, "negligence, unjust enrichment, and breach of fiduciary duty", will become very familiar to MSPs... sadly. At DataCorps Technology Solutions, Inc., we have placed safety and quality of the security around client systems in a place above profit because it is necessary and expected. There is currently a "race to the bottom" among my MSP peers to drive pricing low and sacrifice quality and security by deploying incomplete or ineffective solutions. The end result of this hurts clients and the industry by way of reputation harm. In its founding philosophy, Newport News Shipbuilding, A Division of HII, adopted this phrase to express their commitment to quality: "We shall build good ships here; at a profit if we can, at a loss if we must, but always good ships." We have that same philosophy at DataCorps and it is rooted in our desire to always do what is right by our clients and treat them as we would like to be treated. I pray and hope you never have to experience a data breach. Do you have an IT partner that is prepared for one?

12

5 Comments

This is a great piece, and sounds like well-done training that would be useful for many groups. Good job, Arizona. — To give the assembled Arizona election workers direct experience with the possibilities of AI, the Phoenix attendees listened to AI-generated voice-mail messages from staffers in the secretary of state’s office telling them to keep polling locations open due to nonexistent court orders. They heard calls from AI-generated voices of voters saying they had not received their ballots. They saw faked social media posts designed to suppress turnout, like one that appeared to come from Fontes’s X account that featured a photograph of a worried-looking Latino man along with a warning that immigration officials would be near polling places on election day and that “anyone in the vicinity may be subject to search and possible detention if you are unable to show proof of citizenship.” Constance Hargrove, the elections director of Tucson-area Pima County who has worked in elections for three decades, recalled the experience as “surreal.” By the end of the training, she said, she and her colleagues “began to question everything,” from the identities of people and offices featured in social media posts to those on the other end of emails, phone calls, voice mails and text messages. Many of the practical suggestions that came out of the exercise were relatively simple: Reinforce basic online security measures such as multifactor authentication. Use .gov web domains and secure and update your digital presence. Establish strong relationships with local media so you can alert them to fake information circulating in their county. Maintain a social media presence where correct information can be disseminated quickly. Call on law enforcement to address major issues. https://lnkd.in/d9T2qc8X

2

The SoCal CISO Summit is only 3 weeks away! Don't miss this all-star lineup with Emily O'Carroll, Jonathan Chow, and Arthur Lessard, discussing "The Imperatives of PAM" on May 21st. Organizations have suffered relentlessly from cyberattacks, each week it seems there are new headlines highlighting ransomware attacks or data breaches. With the sensitivity of privileged accounts, unpatched vulnerabilities, and an extensive remote workforce, privileged access management (PAM) is essential to securing your most critical systems and data. Join this panel session to discuss: -Why PAM plays a crucial role in mitigating cyberattacks -Gaining executive buy-in on effective solutions -Having a proactive approach to implementation and configuration Qualified InfoSec leaders, register below! #evantaciso #socalciso #informationsecurity

54

4 Comments

one of the fundamental issues facing enterprises is asset management or rather you can't protect resources if you don't have an accurate inventory of them. the folks at Sevco Security are a bunch of former endpoint guys from Cylance and Carbon Black. Siloed teams, working in siloed tools, each had a different inventory picture. Security teams, accountable for all of it, had no single source of truth they could depend on. Sound familiar?!? their solution was to aggregate the existing device inventories, accurately associate the duplicate devices reported by multiple sources, and give those responsible for endpoint agent deployment a tool to identify the gaps as well as, automate the deployment gap remediation process. Almost sounds too good to be true. Check out their new exposure Management tool here: https://lnkd.in/gUy3idPk

7

1 Comment

News out of the U.S., our Federal Trade Commission is working to put a law in place to prevent companies from placing non-compete conditions in non-executive employment agreements. This is a big deal because a lot of normal employees, such as engineers, accountants, and even sales and HR workers are forced to work for an employer they otherwise wouldn't out of fear of unemployment or being sued if they try to change employers. This also often coincides with language that stops workers from doing projects or starting businesses. Unfortunately, it looks like this is already contested by multiple government agencies, including the Labor Department (which seems ironic). However, workers could really use some representation in the fed. Economic conditions seem to be on the down trend and the damaging effects start with the lowest earners first. I hope this law sticks. I hope it sets a precedent that workers can develop their abilities based on their own merit and work where, how, and for whom they choose. If you disagree, I'd be interested to learn your perspective and understand your logic (as long as it can happen without personal criticism or insults).

8

4 Comments

👩🏽‍💻How will this request for accountability shape future cybersecurity leaders, cybersecurity allocated resource budgets, internal audits intervals, development lifecycle practices, managed projects, funding for tools, improvement in tools and suppliers, etc? 📰🗞️🚨In a recent four page letter from U.S. Sen. Ron Wyden (D-OR) to the U.S. FTC and U.S. SEC request to investigate UnitedHealth Group’s (UHG) cybersecurity practices and hold senior leadership accountable. TL;DR “Due to his apparent lack of prior experience in cybersecurity, it would be unfair to scapegoat Mr. Martin for UHG’s cybersecurity lapses. Instead, UHG’s CEO and the company’s board of directors should be held responsible for elevating someone without the necessary experience to such an important role in the company, as well as for the company’s failure to adopt basic cyber defenses,” the senator wrote. Wyden is chairman of the Finance Committee, which has some jurisdiction over healthcare issues. In the letter, he urged the Federal Trade Commission (FTC) and U.S. Securities and Exchange Commission (SEC) to take action against UnitedHealth. Link to the article and pdf below: ⏬ https://lnkd.in/gv-ZSmGp

1

I see TAs looping over wevtutil and deleting event logs on any.run and various reports. Why? Anyone wants to fill me in - please let me know. I get the action is defense evasion. Most orgs send logs to a SIEM. Are they catching and deleting the logs prior to the SIEM push? Let me know. #cybersecurity

1

Can't wait for MMS MOA in a couple weeks! It's an awesome community event. I have three sessions this year and you can absolutely bet there will be plenty of Copilot for Security discussion and demos. https://lnkd.in/gjyUbY9D #MMSMOA #Copilot #ResponsibleAI #CopilotforSecurity #Cybersecurity #MicrosoftSecurity #Security #GenerativeAI

4

Great supply chain attack example & its wild. I'm seeing some of these alerts that led me down the rabbit hole. policytype="policy" srcport=51642 dstport=443 attack="malicious-url" direction="outgoing" user="JohnDoe" authserver="fsso collector" msg="URL blocked by malicious-url-list" profile="IPS" crscore=30 craction=8192 crlevel="high" hostname="cdn.polyfill.io" url="/" https://lnkd.in/gxTp3JhX

1

Interested in hearing from a Security leader on their take of the State of Security for 2024? Get a breakdown of the report's findings from Splunk CISO Jason Lee right here. Splunk's new State of Security 2024 report uncovers leaders' insights, aspirations and challenges, and dives deeper into the risk and reward surrounding #GenerativeAI. #SplunkSecurity

2

You wouldn't eat food from a dirty kitchen... So why do you use poor quality software? Add another acronym to your vendor alphabet soup checklist: SBOM Ask your providers/vendors for an SBOM. This isn't just something generated using grype over a couple of containers either. You want a real bonafide SBOM that gives you a true understanding of exactly what you are being sold. The CycloneDX format has room for not only capturing the ingredients of not only software and dependencies but also the state of the kitchen its made in. Start expecting this and evaluating this as part of your purchasing decisions. #supplychain #SBOM #CyberSimpsons #Cybersecurity #cybersecurity #software

11

Nicely done team! Looking to deploy copilot or get data governance under wraps? Let us Shoe you how with a complimentary copilot or Data Risk Assessment leveraging Varonis!

4

Morning, LinkedIn network! I have a quick question for you all. Have any of you used AB testing software that supports SSO features, but without the SSO tax premium that many vendors seem to charge? I'm curious to know about any experiences or recommendations you may have. Looking forward to hearing from you all!

8

2 Comments

Automatically respond to critical Splunk alerts using Blink ⚡️ It’s as simple as typing a text prompt into Blink Copilot: On a new Splunk alert, if the alert is critical: 1. Isolate the endpoint using CrowdStrike 2. Suspend the user in Okta 3. Open a ticket in ServiceNow with the alert info The Blink automation platform then works across your security tools to take action on your SIEM alerts. See it in action below. #SOAR #SecurityAutomation #Copilot

19

Bsides Seattle seriously makes me wish I live in the Marvel universe and had a time stone. So many good talks but not enough time in the day! The two I'm hands down looking forward to the most are: Allyn Stott's "The Fault in Our Metrics: Rethinking How We Measure Detection & Response" (practical framework for developing your own metrics and micro-purple testing 😍) Ryan K. Louie, MD, PhD's "The Biopsychosocial 4P Matrix: A Psybersecurity Unboxing of the Mental Health Attack Surface" (evaluating mental health threats in the context of cybersecurity) Thanks Seattle Bsides Security Conference for putting together such an amazing lineup but next time, please rewrite the rules of the universe so we can pull a Hermione and make it to all the talks! #bsidesseattle2024 #cybersecurity #infosec

19

2 Comments

Good article in Politico today on the status of the AI regulatory discussion going on in #California. Great quote from Sen. Umberg, "if we don’t have a regulatory scheme that both encourages entrepreneurship, encourages development and also discourages risks that are not in society’s interest, that other regions and other countries will take the lead." Much of the policy world woke up to the huge impact some of these 40 bills will have on the national (international) discussion in March of this year. Now we are going to see which bills make it through Committee. Silicon Valley Leadership Group had a great framework to think about how these bills are organized: 🔎 Transparency - Informing when AI is used 🚸 Guardrails - Limiting risk when AI is used 🔬 Opportunity - Leveraging AI as a solution It will be exciting to track over the next few weeks which of these bills end up coming out of Committee and seeing more of what the shape of regulation will look like for California, and the country. https://lnkd.in/gxYBMr5m

18

1 Comment

After over 20 hours of instructional material, and several more hours of lab work I can definitely say that this was an enlightening course TCM Security. It certainly highlighted where I have strengths, versus where I have room for growth(I'm looking at you appsec). Now it's time to buckle down and work through the labs again, before tackling the other courses needed to sit for the #pnpt. #neverstoplearning

28

4 Comments