Bryan Li

🚨 Join us for our Software Engineering & Architecture SIG presentation on Tuesday, May 7th!   Get into the attacker mindset and join Stephen Mathezer as he takes you on a tour of common security vulnerabilities in web applications, the ways that malicious actors approach and exploit them, and how we can protect improve application security. Stephen will first review the most common mistakes that developers make and how they can be exploited to gain access to sensitive data, systems, and infrastructure. Then step into the attacker’s shoes as Stephen walks you through attacker methodologies and exploits some of these vulnerabilities live against a mock application. Don’t worry, we still want you to sleep well afterwards. Stephen will finish by giving you some actionable steps you can take to make sure that you don’t fall prey to similar attacks. Register today! ➡ https://lnkd.in/gF9sUENB #SPECalgary #digitalskills #protection #security Gregory Yuzik | Elkhan Shahverdi

7

🚨 Cloud Security Crisis Alert! 🚨 According to our latest report, cloud security is under siege. Security engineers are overwhelmed, spending 80% of their time on preventable security misconfigurations. On average, cloud systems face 500 security alerts per week, with breaches costing over $4 million each! Key Findings: 🔒 55% of breaches are due to human error. 🔒 60%+ of cloud & DevOps engineers are junior and may unknowingly introduce security risks. Proactive Security Measures: 1️⃣ Secure Library of Building Blocks: Use approved components to ensure security by design. 2️⃣ Short Security Feedback Loops: Implement "security shift left" to integrate security early in the development process. 3️⃣ Isolated Infrastructures: Build small, isolated environments to limit the impact of breaches. Our CEO Chafik emphasizes the need for proactive approaches to cloud security. Don't wait to be hacked—act now! For more insights, read the full coverage: https://lnkd.in/eU-SKpvu #CloudSecurity #CyberSecurity #ProactiveSecurity #Brainboard

70

2 Comments

⏳ Over the next 60 seconds we'll introduce you to an open source malware analysis tool that a) pairs incredibly well with MISP and b) not enough people know about yet: Assemblyline from the Canadian Centre for Cyber Security. tl:dr; AssemblyLine processes an uploaded file based on a highly customisable chain of private analysis engines which could be Yara rules, script deobfuscation, or maldoc analysis. Organisations using Assemblyline often fall into one or more of these categories: 👩🏽‍🔬 They’re dealing with a large amount of unique malware and want to keep samples of this malware in a secure, segregated environment. 🔒 They don’t want to upload samples to public or shared tools like VirusTotal since the samples may be highly sensitive or may be attributable. 📨 They are dealing with many (potentially targeted) maldocs, being Word, PDF, or Excel docs designed to exploit the workstation of the person opening it as an attachment. These maldocs frequently contain employee PII and cannot be shared externally. If you resonate with these challenges and want to learn more about Assemblyline, here are a few suggested next steps: 1️⃣ Check out the Assemblyline project website: https://lnkd.in/dpDEm37 2️⃣ Read our breakdown of how we enabled file analysis via Assembline from hashes using only MISP: https://lnkd.in/gKSvAjn9 3️⃣ Embark on a quick tour of the many built-in Assemblyline services, which you can chain together to create your ideal automated analysis workflow: https://lnkd.in/gQ85MPZw 4️⃣ Learn about our hosted Assemblyline 4 solution, Malware Zoo, which includes a powerful and seamless MISP integration: https://lnkd.in/gR2GzZCG

12

If you’ve spent enough time parsing through vulnerability scanner results, you know just how much noise you need to sift through. This is why we’ve created Perceptive. Your organization can reduce risk by prioritizing vulnerability remediation using expected financial loss. This means you’ll reduce uncertainty, inform decisions, and spend more efficiently. https://perceptive.pro/

3

Forescout Technologies Inc. + Microsoft: BETTER TOGETHER See it in action. Take a test drive. Schedule a demo today. ✅ testdrive@siberdefense.com Detect true threats and secure every asset across your enterprise with continuous asset protection. The Forescout and Microsoft partnership benefits organizations looking to simplify their security operations and maximize their overall security posture. Contact us today to learn more about how the Forescout and Microsoft partnership can help you. Siber Defense #cybersecurity #automation #TestDrive #Azure #Sentinel

1

DATA BREACH ALERT - Allegedly leaked data from Les Miroirs St-Antoine Inc. The threat actor claims to have obtained data from Les Miroirs St-Antoine Inc., a Canadian company in the building and construction industry. - #data_breach #data_leak #infosec #dark_web #DataBreach  #DataLeak  #Services  #CyberThreat  #CyberAttack

2

Delvetek and Nutanix have joined forces to create powerful, scalable IT solutions tailored for transformative growth. Explore why Nutanix stands as a compelling alternative for your VMware infrastructure.

17

ZTNA is key to zero trust, but it overlooks unique SaaS security challenges. How does AppOmni ZTPM extend zero trust beyond the network to secure SaaS apps and data?

40

2 Comments

It's time to shift gears! Understand your risk level and discover the importance of a proactive approach with Forrester's "The Four Steps For More Proactive Security" report. ✅ Learn how to achieve better visibility, prioritize effectively, and remediate swiftly. ✅ Discover the importance of security validation. ✅ Identify and fix critical gaps with confidence. Download the report now and enhance your security posture. 🔗 https://hubs.li/Q02FrgcQ0 #CyberSecurity #ProactiveSecurity #ForresterReport #RiskManagement

27

This May the BC Library Cooperative was faced with a data breach and ransom. With cyber-attacks becoming more prevalent, protect your data with Counting Opinions - reach out to discuss your security needs! Link to News Article: https://lnkd.in/dsYMEdRz #DataBreach #DataRansom #DataHack #DataSecurity #DataSafety #CyberSecurity #DataManagement

3

If you’re preparing for a SOC 2 audit and want to ensure your success, downloading our SOC 2 Compliance Checklist will guide you along the process. This checklist can be used by IT Security and Compliance professionals to not only achieve SOC 2 Compliance, but also to evaluate Cyber Risk. Download your FREE SOC 2 Compliance Checklist. https://hubs.ly/Q02xFbD70 #ControlCase #SOC1 #SOC2

1

If you’re preparing for a SOC 2 audit and want to ensure your success, downloading our SOC 2 Compliance Checklist will guide you along the process. This checklist can be used by IT Security and Compliance professionals to not only achieve SOC 2 Compliance, but also to evaluate Cyber Risk. Download your FREE SOC 2 Compliance Checklist. https://hubs.li/Q02DGN080 #ControlCase #SOC1 #SOC2

5

How do you automate in a zero-trust world? And why do you need to? This eBook is a must-read for professionals in government IT to learn why zero trust on its own isn't enough, and how Red Hat Ansible Automation Platform enables the scalability you need to optimize your organization's security profile. #automation #zerotrust

1

Microsoft Adds Security Chiefs to Product Groups In Wake of Hacking Woes - Yahoo Canada Finance: Microsoft Adds Security Chiefs to Product Groups In Wake of Hacking Woes  Yahoo Canada Finance #CyberSecurity #InfoSec #SecurityInsights

1

🚀 Excited to announce CrowdStrike as a distinguished partner for the upcoming #inCyberForumCanada! As a leader in global #cybersecurity, #CrowdStrike has revolutionized security technology with their advanced, cloud-native CrowdStrike Falcon® platform. This cutting-edge solution offers unparalleled protection for enterprise risk areas such as endpoints, cloud workloads, identities, and #data. 🔒 Powered by the #CrowdStrikeSecurityCloud and bolstered by world-class #AI, the #Falcon platform is not just a defense mechanism; it's a proactive force using real-time indicators of #attack, comprehensive threat intelligence, and evolving adversary tradecraft. With enriched telemetry sourced from across the enterprise. Just a few months left until we meet them ! 📆 #Montreal, October 29-30 🤔 Are you looking to elevate your company’s visibility in the #cybersecurity community? Why not join us as a partner at inCyber Forum Canada? 👉 Registration form : https://lnkd.in/e6k9an6g

21