Geek Guy

Category: Cybersecurity

Dive into deep-dive analysis on the evolving threat landscape, focusing on identity security (ITDR, NHI), data protection (DSPM), and agentic identity. Stay updated with expert insights on threat actor tactics and local AI security for researchers and market analysts.

Sean Plankey picked by Trump to be CISA director 

President Donald Trump nominated Sean Plankey to head the Cybersecurity and Infrastructure Security Committee on Tuesday, the last major piece to fall into place for cybersecurity leadership in his administration. Plankey served in the first Trump administration, holding a few posts with cyber responsibilities. He was the principal deputy assistant secretary for the Energy Department’s…

Sola emerges from stealth with $30M to build the ‘Stripe for security’

Enterprises these days can choose from hundreds of apps and services available to secure their networks, data and assets — nearly as many more to help them manage all the alerts and extra work that those security apps generate. But what if you could build your own apps, customised to your own workloads, to simplify…

How can I secure NHIs during rapid deployment cycles?

Are Your Machine Identities Adequately Protected During Rapid Deployment Cycles? Organizations across industries are leveraging the unprecedented benefits of the cloud. Financial services, healthcare, travel, and tech-driven sectors like DevOps and SOC teams are especially invested. However, this adoption isn’t without its unique set of challenges. One pertinent question is, how can organizations secure Non-Human…

What solutions support automated NHI lifecycle management?

Can Automated Non-Human Identities Lifecycle Management Lead to Better Cybersecurity? The fast-paced digital necessitates the use of automated processes in many areas, including cybersecurity. One such process, Non-Human Identities (NHIs) lifecycle management, has been gaining traction in recent years. But can comprehensive, automated NHI lifecycle management really provide the cybersecurity edge organizations seek? Data-driven insights…

BSides Exeter 2024 – Purple Track – Tales Of DOMinica

Author/Presenter:Liam Follin Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel. Permalink The post BSides Exeter 2024 – Purple Track – Tales Of DOMinica appeared first on Security Boulevard.

BSides Exeter 2024 – Purple Track – Panel: Mythbusting The Silver Bullet

Authors/Presenters: Panel Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel. Permalink The post BSides Exeter 2024 – Purple Track – Panel: Mythbusting The Silver Bullet appeared first on Security Boulevard.

Trump Administration and the Russian Cyber Threat, Firefox Privacy Changes

In this episode, we discuss whether the Trump administration ordered the U.S. Cyber Command and CISA to stand down on the Russian cyber threat. We also touch on the Canadian tariff situation with insights from Scott Wright. Additionally, we discuss the recent changes to Firefox’s privacy policy and what it means for user data. **…

What are the cost implications of advanced NHI protection?

What is the True Cost of Not Investing in Non-Human Identities Protection? Non-Human Identities (NHIs) are increasingly significant where automated operations and cloud-based infrastructures dominate. But what happens when businesses overlook the value of advanced NHI protection? What are the financial implications your organization can face if such protection is not put in place? These…

How do I measure the effectiveness of our NHI security measures?

A Perplexing Dilemma or a Solvable Query? Have you ever puzzled over how to measure the effectiveness of Non-Human Identities (NHIs) security in your organization? You understand the importance of NHIs. But quantifying their security effectiveness remains crucial yet challenging. Grasping the Depth of NHIs Let’s briefly revisit the essence of NHIs. NHIs comprise a…

BSides Exeter 2024 – Keynote: Matt Broomhall & Richard DeVere

Authors/Presenters: Matt Broomhall & Richard DeVere Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel. Permalink The post BSides Exeter 2024 – Keynote: Matt Broomhall & Richard DeVere appeared first on Security Boulevard.

How can NHI risks be reduced without compromising system performance?

Are your Non-Human Identities (NHIs) and Secrets effectively managed? NHIs and Secrets have emerged as crucial elements. However, the question looms: are these entities being effectively managed to reduce risks without compromising system performance? Understanding the Critical Role of NHIs and Secrets NHIs are machine identities used in cybersecurity, akin to digital passports that provide…

BSides Exeter 2024 – Keynote: Flushing Away Preconceptions Of Risk

Author/Presenter: Thom Langford Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel. Permalink The post BSides Exeter 2024 – Keynote: Flushing Away Preconceptions Of Risk appeared first on Security Boulevard.

What are the best governance practices for managing NHIs?

What Drives the Need for Effective Non-Human Identities (NHIs) Governance Practices? Are we really addressing the potential dangers that lurk behind poorly managed non-human identities (NHIs)? With a sharp increase in the interconnectedness of modern systems, the importance of proper NHIs management cannot be overstated. Organizations need to incorporate NHIs and secrets management into their…

How can NHIs affect our overall threat landscape?

Are We Overlooking Non-Human Identities in Our Cybersecurity Strategy? How often do we give due consideration to the Non-Human Identities (NHIs)? The role of NHIs and their ‘secrets’ management in creating a robust and secure IT infrastructure is often underestimated. NHIs, primarily machine identities, form the backbone of secure transactions. They are, in a way,…

How do I prioritize NHI risks in boardroom discussions?

Why is Risk Prioritization of Non-Human Identities Essential in Boardroom Discussions? Cybersecurity continues to command greater attention in organizational hierarchies, understanding the significance of Non-Human Identities (NHIs) risk prioritization becomes crucial. NHIs, defined as machine identities used in cybersecurity, provide a unique identifier similar to a passport. They play a monumental role in ensuring a…

BSides Exeter 2024 – Keynote: Become A Better Security Engineer (By Not Doing Security)

Author/Presenter: Kane Narraway Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel. Permalink The post BSides Exeter 2024 – Keynote: Become A Better Security Engineer (By Not Doing Security) appeared first on Security Boulevard.

CISA completed its election security review. It won’t make the results public

When the Trump administration began sidelining and laying off personnel at the Cybersecurity and Infrastructure Security Agency, it started by targeting employees who worked on election security and disinformation. At the same time, the Department Homeland Security announced it would conduct a comprehensive review of CISA’s election security mission. This week, the agency confirmed that…

Ransomware poseurs are trying to extort businesses through physical letters

The FBI and threat researchers are warning executives to be on the lookout for physical letters in the mail threatening to leak sensitive corporate data.  The letters, which are stamped “time sensitive read immediately” and shipped directly to executives through the Postal Service, are part of a nationwide scam designed to extort victims into paying…

Russian crypto exchange Garantex seized in international law enforcement operation

U.S. and European law enforcement agencies have seized the infrastructure of Garantex, a cryptocurrency exchange accused of laundering billions in criminal proceeds, in a sweeping international operation that signals heightened focus on illicit financial flows in cryptocurrency markets. According to Justice Department documents unsealed Friday, the Moscow-based exchange processed approximately $96 billion in cryptocurrency transactions…

How can NHIs be incorporated into our overall security strategy?

Do Non-Human Identities Play a Significant Role in Our Security Strategy? Indeed, they do. Non-Human Identities (NHIs) are becoming increasingly crucial in the security scenario and their importance in corporate IT ecosystems can’t be overstressed. Incorporating them into your overall cybersecurity strategy has proven to help organizations fortify their infrastructure against potential threats and vulnerabilities,…

What are the key security controls for NHIs at the executive level?

Why Should CISOs Consider Non-Human Identities Security Controls? Did you know NHIs represent a significant portion of all entities in a typical network environment? A lack of robust Non-Human Identities (NHIs) security controls can pose significant threats to data integrity and system security in any organization. You must be wondering – What are the key…

What role do NHIs play in our organization’s security posture?

What Essential Role Do Non-Human Identities (NHIs) Play in Our Organization’s Security Posture? When our world increasingly moves towards digitalization, one quite critical question that could be floating around your mind is, “What is the significance of NHIs in enhancing our security posture?” The answer to this question lies deeply rooted in understanding NHIs and…

How can I align NHI management with our digital transformation initiatives?

Why is Non-Human Identities Management Critical for Digital Transformation? Have you ever considered the sheer quantity of non-human identities (NHIs) that exist within your corporate network? These NHIs, also known as machine identities, play an integral role but are often overlooked. When organizations increasingly leverage cloud-based solutions in their digital transformation journey, the successful management…

Armis buys Otorio for $120M to beef up cybersecurity in physical spaces

More consolidation is playing out in the security industry as platform players scoop up technology to give them deeper expertise in growing business areas. On Thursday, Armis, a $4.2 billion specialist in cyber exposure management, said it would be acquiring Otorio, a specialist in securing industrial and physical environments.  Terms of the deal are not…

Silk Typhoon shifted to specifically targeting IT management companies

The Chinese state-backed threat group Silk Typhoon shifted tactics in late 2024 to broaden access and enable follow-on attacks against downstream customers of its initial targets, Microsoft Threat Intelligence said in a blog released Wednesday.  The Chinese espionage group, which is also known as APT27, has abused stolen API keys and credentials for privileged access…

How can executive teams ensure NHI compliance with industry standards?

Why is Compliance Crucial for Non-Human Identities? Executive teams often face an array of complex challenges. One such challenge concerns Non-Human Identities (NHIs) compliance. So, why is it essential to get this right? Non-Human Identities are machine identities used in cybersecurity, which are created by combining a “Secret” (an encrypted password, token, or key) and…

What are the latest trends in NHI protection for CIOs?

Are CIOs Prepared for the Rising NHI Trends? When the cloud environment evolves to deliver seamless business solutions, it brings along unique challenges in terms of data security. Needless to say, managing Non-Human Identities (NHIs) has become a primary concern for CIOs, with the rising trends signalling the urgent need for advanced protection strategies. Are…

What are the risks of unmanaged NHIs in enterprise environments?

Are Unmanaged Non-Human Identities (NHIs) Jeopardizing Your Enterprise Environment? With cloud-native applications, AI technologies, and IoT devices permeating modern enterprises, Non-Human Identities (NHIs) have become critical components. But what happens when these NHIs are left unmanaged? Do you comprehend the risks associated with unmanaged NHIs in your enterprise environment? The Unseen Threat of Unmanaged Non-Human…

US indicts 12 Chinese nationals for vast espionage attack spree

The Justice Department on Wednesday indicted 12 Chinese nationals for their alleged involvement in an extensive nation-state-backed espionage campaign that included a spree of attacks on U.S. federal and state agencies, including the late 2024 attack targeting the Treasury Department.  Officials accused the Chinese individuals, including two officers of China’s Ministry of Public Security, eight…

Former NSA official says federal worker cuts will have ‘devastating impact’ on cyber and national security

Former top U.S. cybersecurity official Rob Joyce told lawmakers on Wednesday that cuts to federal probationary employees will have a “devastating impact” on U.S. national security. Joyce, who was the director of cybersecurity for the National Security Agency until retiring in 2024, was providing testimony to the U.S. House Committee on the Chinese Communist Party,…

Cybercriminals picked up the pace on attacks last year

Threat actors became increasingly efficient last year, rapidly achieving lateral movement and swiftly stealing data at a faster clip than ever before, according to multiple threat intelligence firms.  The reduced time frame is a clear indicator that cybercriminals are constantly improving their ability to be successful. With the abuse of legitimate system tools to help…

Chainguard’s FIPS-compliant Cassandra addresses security demand of federal and regulated markets

Open-source software security firm Chainguard announced Wednesday that it is now building FIPS-validated images for Apache Cassandra, achieving what it describes as a first-of-its-kind accomplishment in the open-source community.  The project enables organizations in regulated industries — including government, health care, and finance — to deploy Cassandra with cryptographic libraries compliant with the National Institute…

Top 7 Cyber Security Challenges Faced by SaaS Organizations

Today’s technology-driven world needs Software-as-a-Service (SaaS) organizations. Their software solutions help organizations perform effectively and efficiently. SaaS applications are easily available over the internet. It allows users to access them via a web browser without requiring complex installations or infrastructure. With 42,000 SaaS companies worldwide, it makes up 36.6% of the cloud service market. The…

What is the Process of ISO 27001 Certification?

In 2025, the cost of cyberattacks will reach $10.5 trillion globally. The projected growth rate is 15% every year. While the cost of attack keeps increasing, a breach is now identified in 194 days on average. It takes 64 days to contain a breach and 88 days on average to resolve an attack facilitated through…

Getting the Most Value Out of the OSCP: The PEN-200 Course

In this second post of a five-part series, I provide advice on how to best utilize the PEN-200 course material for a successful career in ethical hacking. Disclaimer: All opinions expressed in this article are solely my own. I have reviewed the content to ensure compliance with OffSec’s copyright policies and agreements. I have not been…

Polish space agency says it’s investigating a cyberattack

Poland’s space agency (POLSA) says it is working to restore services following a cybersecurity incident. POLSA, the Polish government agency responsible for the country’s space activities, said in a post on X that it had “immediately disconnected” its network from the internet after detecting the cyberattack on Sunday. POLSA’s website remains offline at the time…

Android security update contains 2 actively exploited vulnerabilities

Google addressed 43 vulnerabilities affecting Android devices in its March security update, including a pair of software defects reportedly under active exploitation. Google said the two vulnerabilities — CVE-2024-43093 and CVE-2024-50302 — “may be under limited, targeted exploitation.” The most severe of the flaws under active exploitation, CVE-2024-43093, carries a CVSS score of 7.8 and…

DHS says CISA won’t stop looking at Russian cyber threats

The Department of Homeland Security said that its Cybersecurity and Infrastructure Security Agency will continue to pay attention to Russian cyber threats, contrary to media reports suggesting the opposite. The Guardian reported last week that a recent CISA memo setting out priorities for the agency didn’t list Russia among them, while including Chinese threats and…

Cybersecurity Impact of DOGE, Apple’s Stand Against Encryption Backdoors

In this episode, Kevin and Tom discuss current events including the latest developments with DOGE and the significant changes happening at the Cybersecurity and Infrastructure Security Agency (CISA). They also touch on Apple’s decision to refuse creating backdoors for encryption, setting a new precedent in digital security. Tune in for an insightful discussion on the…

Cybersecurity Impact of DOGE, Apple’s Stand Against Encryption Backdoors

In this episode, Kevin and Tom discuss current events including the latest developments with DOGE and the significant changes happening at the Cybersecurity and Infrastructure Security Agency (CISA). They also touch on Apple’s decision to refuse creating backdoors for encryption, setting a new precedent in digital security. Tune in for an insightful discussion on the…

Staying Ahead with Advanced PAM Techniques?

Can Advanced Privileged Access Management (PAM) Techniques Keep you Ahead in the Cybersecurity Game? The question is often asked, can advanced PAM techniques truly make a difference in cybersecurity? The answer is a resounding yes! But to grasp the full potential of these techniques, it is vital to delve a little deeper into Non-Human Identities…

Smart Secret Scanning Techniques: Are You Updated?

Smart Secret Scanning: Decoding the Intelligence Behind Cybersecurity Have you ever wondered how some organizations manage to preserve their digital data integrity amidst in technology? It may seem like a mountainous task, but the secrets lie in smart secret scanning and cybersecurity innovations. Let’s unpack the Non-Human Identities (NHIs) and the management of their secrets.…

Is Your Secrets Rotation Getting Better?

Can Your Secrets Rotation Stand the Test of Time? Ask yourself: is your organization’s secrets rotation process as secure and efficient as it can be? Where the average cost of a data breach is $3.86 million according to a study by IBM, having an airtight secrets rotation is essential for business survival and prosperity. Understanding…

Justified Spending on Cybersecurity Technology?

Is Your Cybersecurity Spending Justified? With digital becoming more complex, organizations are continually urged to increase their cybersecurity spending. But the crucial question that arises is – “Is your investment in cybersecurity technology delivering an appropriate return on investment (ROI)?” Understanding the Value of Cybersecurity Investment Cybersecurity is a complex yet crucial aspect of the…

SolarWinds CISO says security execs are ‘nervous’ about individual liability for data breaches 

SolarWinds’ top cybersecurity executive said chief information security officers are increasingly grappling with how to do their jobs while avoiding individual legal liability for breaches that happen on their watch. Tim Brown, now CISO at SolarWinds, was a vice president and the highest-ranking security official at the company when hackers working on behalf of the…

Independent Audit for Your Secrets Management?

Why Should Organizations Focus on Independent Audit for Secrets Management? Are you overlooking an essential aspect of your organization’s cybersecurity strategy? This aspect is the management of Non-Human Identities (NHIs) and their secrets, which are often overlooked but vital components of securing your organization’s cloud-based systems. By adopting a comprehensive approach to NHI and secrets…

Certain About Your Data Privacy Measures?

Are You Confident in Your Data Privacy Measures? Professionals in financial services in healthcare, travel, DevOps, and SOC teams that managing securitization processes in the cloud; do you feel confident about your data privacy measures? Where marked by increasing cybersecurity threats, the assurance of robust data privacy is no longer a luxury but a necessity.…

How Stable is Your Cloud Infrastructure Security?

Are Your Machine Identities Protected Within Your Cloud Infrastructure? Let’s delve into a thought-provoking question: Within your seemingly secure systems, how comprehensively are your Non-Human Identities (NHIs) and their secrets protected? NHIs, as machine identities, play a crucial role in maintaining robust cybersecurity. However, their management often gets overlooked despite holding the key to cloud…

Army soldier linked to Snowflake attack spree allegedly tried to sell data to foreign spies

U.S. authorities say a 21-year-old U.S. Army soldier attempted to sell stolen sensitive information to a foreign intelligence service as part of a broader effort to extort victims and leak call records of high-ranking public officials. In November while on active duty, Cameron Wagenius made multiple attempts to extort $500,000 from a major telecommunications company…

Optimistic About Future Cybersecurity Trends?

Can We Be Optimistic About Future Cybersecurity Trends? Driven by the incessant need for safer digital environments where data and machine identities form the core of many organizational operations. A seasoned data management expert and cybersecurity specialist, must ponder, how promising are the future cybersecurity trends? Can we remain optimistic about the future of security?…

Do Powerful Tools Enhance Your Data Security?

How Can Powerful Security Tools Impact Your Data Protection Strategy? Has it ever occurred to you how critical it is to have a robust data protection framework in massive digitalization? The need for advanced cybersecurity measures becomes more critical. One aspect of data security that demands attention from organizations operating in the cloud is the…

Is Your NHI Lifecycle Management Capable?

Is Your Approach to NHI Lifecycle Management Robust Enough? Have you ever wondered about the invisibility of your organizational cyber risk? When did you last evaluate the strength of your Non-Human Identity (NHI) lifecycle management? The management of NHIs and their secrets has become paramount. NHIs are machine identities that play a pivotal role in…

Here’s what Google is (and isn’t) planning with SMS account verification

Google is gradually phasing out SMS-based verification as part of its two-step verification (2SV) process across its suite of services, signaling a significant shift in how the tech giant approaches user authentication and security. The change, which will affect Gmail and all other Google services where users sign in with their Google accounts, marks a…