Jesse Whyte

The Joint Cyber Security conference part one inspired with talks on security leadership and part two dove into AI security hot topics and solutions, importantly raising awareness and sharing knowledge crucial to our fast moving AI technology landscape. #aisecurity Thomas Ryan,Mike Wilkes,Brennan Lodge

6

So Maryland launched its VDP program, which is think is amazing but they're also expanding its own ISAC rules. This is great, it gets more actionable information to those who need it. "All entities outlined in Section 3, "Scope & Applicability," must initiate the enrollment process by sending an email requesting enrollment within 90 days of this BOD's effective date. This includes: All Units of State Government: All principal departments, independent agencies, local agencies, departments, boards, commissions, and offices. Local Government Entities: All Maryland counties, municipalities, K-12 school systems, boards, commissions, and other political subdivisions of the State." https://lnkd.in/edhjV-Nw

7

"APIs also provide a larger attack surface than ever before. In many cases, APIs on the internet are just waiting for something to connect to them. When the incoming connection is from a known source, all is well; but unknown connections can be dangerous. Bad actors continuously scour the internet looking for open APIs, attempting to glean any information they can about the target. They then use this information to attack the API." https://lnkd.in/gQ7M7YiB

3

Do you truly know the meaning behind the data your team is collecting? Guardians of the Data’s guest this week is Derek Fisher, Director of the Cybersecurity Defense and Information Assurance Program at Temple University. Together, Derek and Ward Balcerzak, CISSP covered: - Why the ‘why’ behind the data is important  - How every piece of data you collect increases your attack surface (and why you should only collect what you need) - The importance of always thinking like an attacker to stay ahead of the game - How showing your relevant work will help you stand out in the cybersecurity community 🔗 Catch the full episode now with the links in the comments!

24

2 Comments

Continuous validation is the missing piece in most FedRAMP journeys. NodeZero Federal™ brings clarity to what’s exploitable vs. theoretical so CSPs can focus resources and 3PAOs can verify with confidence.

1