David Johnson

We've received reports of threat actors impersonating multiple New Jersey local municipalities to steal sensitive data and funds and exploit public trust by using common phishing tactics to demand payments. Learn more; https://lnkd.in/e6Pu9WMi #cybersecurity #infosec #phishing #NJCCIC

9

Shawn Murphy and Jeff Cassidy, CISSP explain how threat hunting fits into the “Left of Bang” strategy and mindset, a driving principle of WEI’s deep cybersecurity practice. @CyberTrust Massachusetts 💡 Listen to the full #podcast episode here: https://lnkd.in/eYGXQfmz

4

The state of Rhode Island publicly released the results of a third-party analysis of the 2024 RIBridges cyberattack and data breach at a press conference with Rhode Island Governor Dan McKee and Chief Digital Officer Brian Tardiff. Cybersecurity company CrowdStrike conducted the analysis, which revealed the five-month timeline of the breach and a more accurate number of impacted individuals -- approximately 644,401 people. RIBridges is a system run by Deloitte that the state of Rhode Island uses to administer important social services benefits like health insurance, food stamps and the Child Care Assistance Program. As previously reported, Deloitte informed the state of a potential security threat to RIBridges on Dec. 5, 2024, stating that there was a high probability that a cyberthreat actor had obtained files containing sensitive information. The Brain Cipher cyberthreat group later took responsibility for the hack. The state took RIBridges temporarily offline and later sent notification letters to nearly 650,000 individuals. The newly released third-party analysis provided clarity on how the cyberthreat actor gained access to the RIBridges environment and how it performed data access, staging and exfiltration activities on 28 RIBridges systems. Reviewing post-incident analyses of healthcare data breaches can help defenders bolster security efforts. https://lnkd.in/gBJR5kBh

7

The Joint Cyber Security conference part one inspired with talks on security leadership and part two dove into AI security hot topics and solutions, importantly raising awareness and sharing knowledge crucial to our fast moving AI technology landscape. #aisecurity Thomas Ryan,Mike Wilkes,Brennan Lodge

6

Your SIEM screams at 2:14 AM. You roll over. It’s another false positive. Or is it? The weight of “What if I ignore this one?” That’s your real threat surface. As a CISO, your job isn’t just threat detection. It’s threat prioritization. It’s risk translation. It’s boardroom brevity + basement-level visibility. But lately, your stack is a Franken-stack: → EDR that’s noisy → MDR that’s templated → SOC that escalates everything to you anyway Here’s the reality: You didn’t sign up to babysit 3 dashboards at once. You signed up to secure the business. And when every alert becomes your alert You don’t have a security posture. You have a stress posture. That’s where Titan comes in. Real-time correlation across your endpoint, cloud, and network Noise-reduction models built to flag what matters Defense Center that doesn’t pass the buck , it solves the problem 24/7 SOC that knows your context, not just your logs We help CISOs like you breathe between the breaches. No more playing whack-a-mole with alerts. No more reactive firefighting. Just proactive, precision-built defense. Because your sleep should be as secure as your servers. Let’s upgrade your peace of mind: https://zurl.co/nnhFo

2

Rhode Island officials have published a summery of the investigation of the hacking of its state benefit system (RIBridges), which shows the hacklers had access to the system for five months and hundreds of alerts went unnoticed. https://zurl.co/X7PV2

7

This is a fantastic resource and a well done document. There is a new CMMC FAQ. One question in the new FAQ stuck out to me: "Q4. Can Department contractors implement NIST SP 800-171 Revision 3? A4. Yes. Companies can implement Revision 3 but must use the Department’s Organization-Defined Parameters (ODPs) defined in the April 2025 memorandum, “Department of Defense Organization-Defined Parameters for National Institute of Standards and Technology Special Publication 800-171 Revision 3” found here: https://lnkd.in/eN5pnTzB. Because CMMC Assessments will be conducted against Revision 2 until the class deviation memo (Q3 of this section) is withdrawn or otherwise superseded, DIB companies must ensure any identified gaps between Revision 2 and Revision 3 are addressed." We won't know exactly when the class deviation will removed and CMMC will be on 800-171 Rev 3, but if you want to get a headstart you are permitted to implement Rev 3 if you use the DoD's Organizationally Defined Parameters (ODPs). I will note that the ODPs are subject to change during the rulemaking process. #cmmc

8