5 minutes with Jerry Caponera – Developing a risk-oriented view into cybersecurity
Jerry Caponera, Head of Risk Strategies at ThreatConnect, discusses the importance of developing a risk-oriented view into cybersecurity and why cyber risk needs to be quantified in the same way as operational risk or credit risk.
Law enforcement versus private security in the United States
Law enforcement officers are leaving agencies and joining private security. Hiring retired officers can benefit enterprise security in a number of ways.
ISC StormCast for Wednesday, September 29th, 2021
TLS 1.3 and SSL: The Current State of Affairs
https://isc.sans.edu/forums/diary/TLS+13+and+SSL+the+current+state+of+affairs/27882/
EFF Discontinues HTTPS Everywhere Plugin
https://www.eff.org/deeplinks/2021/09/https-actually-everywhere
Malicious CryptoCoin Wallet
https://discourse.mozilla.org/t/got-hacked-by-the-add-on-called-safepal-wallet/85797
Microsoft Automates Exchange Mitigations
https://techcommunity.microsoft.com/t5/exchange-team-blog/new-security-feature-in-september-2021-cumulative-update-for/ba-p/2783155
SIA scholarship gives opportunity to young security professionals
The Security Industry Association (SIA) RISE scholarship has opened applications to young professionals seeking to further their security education.
Cyberattacks top list of focuses for business leaders
Enterprises in the U.S. are concerning themselves with cyberattacks and zero trust architecture when it comes to cybersecurity, a new report finds.
ISC StormCast for Tuesday, September 28th, 2021
Trend Micro ServerProtect Authentication Bypass Vulnerability
https://www.zerodayinitiative.com/advisories/ZDI-21-1115/
Let’s Encrypt Root CA Expiration
https://community.letsencrypt.org/t/production-chain-changes/150739
ERMAC Android Malware
https://www.threatfabric.com/blogs/ermac-another-cerberus-reborn.html
QNAP Vulnerabilities
https://www.qnap.com/en/security-advisory/QSA-21-35
Delaware develops cybersecurity education program
The programming will provide information on multi-factor authentication, securing email and social media accounts and detecting spam risks for senior citizens.
How to stop ransomware – Seven steps to protect your enterprise
There are seven steps that will help your company fight off ransomware attacks.
Rethinking the current cybersecurity landscape
Pressing the reset button on security is only possible by disregarding the old-school ring-fencing and the rigid firewalls of the moat-castle mindset and embracing the zero trust mentality.
