Luis F. López

Something that not many knows in #infosec is "What the heck is ACP?" and how to use it correctly in enterprise! Join us at POLAR Conference on October 10 to listen to Justin Okun talk "What the heck is ACP: Understanding cybersecurity and the use of privilege" and help protect yourself and your team in your next security event! #cybersecurite #informationsecurity #acp

7

Last week was the HTCIA [High Technology Crime Investigation Association] Canada Cyber Investigation Summit 2024 in Ottawa, where I had the privilege of speaking and organizing the Cloud Forensics track. Thank you to Anthony M. [Chair - Organizing Committee] & Denis Roussel [International Executive Committee President] (pictured). Over 3 days, investigators, forensics experts, and cybersecurity professionals from both the government and private sectors participated in intensive training and networking. The Digital DNA team debuted Rocket, the cloud-native remote forensic data collection platform for Windows and iPhone devices. Rocket is pushing forward the fields of digital forensics and e-discovery by making data collection better. What Makes Rocket Unique * Cloud-native remote forensic collection for Windows and iPhone [Full & Targeted] w/o onsite personnel, hard drives, kits or installed software! * Automated documentation [Chain of Custody. Image Verification & Forensic Report] * Data is stored to Amazon Web Services (AWS), a network share or a hard drive.  #CCIS2024 #DigitalForensics #Ediscovery #remotedatacollections #cloud

53

1 Comment

"On initial investigation, the Company learned that a former executive officer of the Company deliberately de-activated and cancelled the renewal of the Company’s website, which significantly impacted the Company’s IT systems, including delivery and receipt of electronic email communications from customers, investors and other stakeholders of the Company." In light of this cybersecurity incident at Meta Materials Inc. (META®), it's crucial to reflect on the vital role of access control in protecting organizational assets. Access control is a cornerstone of cybersecurity, ensuring that only authorized individuals can access specific resources. This breach underscores the potential consequences when access controls are insufficient or improperly managed. https://lnkd.in/eP2zNPkU #Cybersecurity #AccessControl #DataProtection #InfoSec

3

Cybersecurity researchers at OVHcloud spotted record-breaking DDoS attacks of 840 Mpps and asserted that peaks of ~2.5 Tbps were also observed. Record-Breaking DDoS Attack The cyber attack’s drop corresponded to the dismantling of the 911 S5 Botnet in May 2024; however, whether it was causal remains unconfirmed. Though attack frequency is now normal, high packet rate attacks (>100 Mpps) still thrive.

13

1 Comment

CTFs are best? Indeed they are. That's why we have the same hands-on real world inspired CTF simulations in #CyberTitan for middle and high school students. It's also why we are offer Field Effect's Cyber Range as a training ground in ICTC-CTIC's Jumpstarting Digital Careers K12 cyber program. https://lnkd.in/gea7TGke #CanadianEducation Top tip: if you want to do CyberSci, many of their top competitors are CyberTitan graduates. If we build this skills based pathway from middle through high school to post-secondary and beyond, #Canada graduates experienced, world class #cybersecurity talent. Education | Éducation Jill Dunlop Ontario Institute for Studies in Education of the University of Toronto CMEC ICTC-CTIC UWaterloo Cybersecurity and Privacy Institute Canadian Institute for Cybersecurity

9

Let’s talk about #mandatory #employee #training… Do you remember the last time you completed a #cybersecurity, #DEI, or other training? Let me share one training that I loved while I was at Caisse de dépôt et placement du Québec (CDPQ). Yes, I 💕 this mandatory training! Even though it was over 7 years ago, I still remember it and it has inspired how we approach instructional design at ED4S. 🤓 It was 2018. We had to reserve a time slot and gather with colleagues in a huge conference room with a giant screen (making it almost like a movie-watching experience). They dimmed the lights, and we watched a short film that showed a fortune teller in a tent revealing every single digit of her clients’ credit card numbers. 🤯 This was a data security awareness training, and it was so well made that I still remember it like it was yesterday. It had suspense, an emotional twist, relatability, and a powerful message conveyed very indirectly. Ian Charest, Chantal Nguyen Phat, Iannick Forest, Linda Hum, CPA, est-ce que vous vous rappelez de cette formation obligatoire en 2018? Most people don’t like to do mandatory training because it is often #generic, and they have many other priorities. It’s often done just to check a box while working on other things on your second screen.💻💻 But I know it is possible to make an impact, and that’s why our team always takes great care to analyze every single detail, word, and visual to come up with compelling #sustainability stories that inspire professionals and trigger their curiosity. 👁️‍🗨️ If you’re reading this post, I would love for you to share your favorite mandatory on-demand mandatory training (or at least the one that s*cked the least). Do you remember a #corporatetraining that made a difference in your #work?

9

3 Comments

I'm thrilled to announce that we're bringing Richard Seiersen, Chief Risk Officer and co-author of the book "How To Measure Anything In Cybersecurity Risk", to the Greater Toronto Area for an exclusive session on risk quantification !   If you're a Security Leader eager to dive deep into crucial metrics and learn how to leverage them for success, signup at the link below! 📩 Let’s unlock the power of risk together on December 5th. Don’t miss out on "How to Measure and Communicate What Matters in Cybersecurity Risk" —join our invite list today! Space is limited to 10-15 CISO and Security Executives. ➡ Signup Here: https://lnkd.in/eYghb9nn Why Attend? - It's Not Another Vendor Escape Room - Serious Risk Thought Leadership with Application - Peer To Peer Discussion - Lunch is Provided - Signed Copy of book "How To Measure Anything In Cybersecurity Risk" - Gratis #RiskManagement #CyberRisk #Qualys #RiskQuantification #GTA #Toronto #RichardSeiersen

50

4 Comments

Greetings Network! I would be honored if you would join Adam Lamantia and myself for a business centric discussion of the enterprise value of Cyber Risk Quantification. In this new era of cyber risk management security and risk teams that engage sales, marketing, engineering, operations, logistics, finance etc. in conversations around ensuring, assuring or driving revenue will reach new heights of success. Come learn the how and why of pro-actively driving cyber risk conversations with your business peers in their language.... CAC, LTV, EPS, Customer Churn, Net Promoter Score, ARR & TCV, Drayage, Operating Expense, and of course EPS. Finally, we will cover two oncoming intersections between Third Party Risk Management & Cyber Risk Quantification AND Enterprise Risk Management and Cyber Risk Quantification. All registrants can also choose one of the following from Our Optixxx Research Services: Change Health Analysis Clorox Health CRQ Analysis CISO Perspective on CRQ Not Petya Insurance Lessons Learned The Value of Proactive M & A Risk Analysis Join us won't you? CRFQ repor

6

🎯Canadian law enforcement authorities have arrested an individual who is suspected to have conducted a series of hacks stemming from the breach of cloud data warehousing platform Snowflake earlier this year. The individual in question, Alexander "Connor" Moucka (aka Judische and Waifu), was apprehended on October 30, 2024, on the basis of a provisional arrest warrant, following a request by the U.S. The development was first reported by Bloomberg and corroborated by 404 Media. The exact nature of the charges against Moucka is currently not known. 🔔 Stay connected for industry’s latest content – Follow Dr. Anil Lamba, CISSP #linkedin #teamamex #JPMorganChase #cybersecurity #technologycontrols #infosec #informationsecurity #GenAi #linkedintopvoices #cybersecurityawareness #innovation #techindustry #cyber #birminghamtech #cybersecurity #fintech #careerintech #handsworth #communitysupport #womenintech #technology #security #cloud #infosec #riskassessment #informationsecurity #auditmanagement #informationprotection #securityaudit #cyberrisks #cybersecurity #security #cloudsecurity #trends #grc #leadership #socialmedia #digitization #cyberrisk #education #Hacking #privacy #datasecurity #passwordmanagement #identitytheft #phishingemails #holidayseason #bankfraud #personalinformation #creditfraud

2

The Digital Governance Standards Institute has recently unveiled the revised Canadian cyber standard tailored for small and medium enterprises, known as "CAN/DGSI 104:2021 / Rev 1: 2024." This update brings crucial enhancements to cyber security controls for SMEs. For more information on the specifics of this revision, refer to the press release available at https://lnkd.in/gBECBJNG. I am appreciative of the collaborative effort with fellow cyber experts and professionals across various domains to accomplish this milestone. Should you require further insights on this significant release, feel free to connect with any inquiries you may have.

2

1 Comment

With all of the corporate domain usernames and passwords from large Canadian companies that I have seen in #darkweb #infostealer logs recently, it is clear that browser governance is still lacking in many organizations. You've put protection in place for when they are connected through your firewall, but what about when they are at home or travelling and accessing websites out in the wild? Advanced Browser Security allows you to protect your users, their browser and your intellectual property. If you are still struggling with protecting your users at the edge, I encourage you to watch this demo. #socialengineering #phishing #malware #ransomware

9

1 Comment

BlackBasta ransomware group has released data from "one of Canada’s leading full-service boutique investment platforms, delivering both wealth management and capital markets services." The company claims that it "enjoys a strong partnership with National Bank of Canada, which acts as custodian of our clients' assets, assuring them safekeeping and peace of mind. Through National Bank Correspondence Network (NBCN), we have access to third-party research, independent money management, and new issue syndications, while our clients benefit from secure, online access to their account information." The ransomware group has released 500 GB of what it describes as "***1.** Employees, customers personal documents* ***2.** Financial data* ***3.** NDA's, Confidential data* *& etc…*" I highly recommend that my Canadian colleagues monitor this dump for sensitive data. Let me know if you need help.

3

This is an interesting read to publicly get insight into the speed of adoption within a monster as large as a national government and all its departments. Sometimes the centralization becomes more effective than the nimbleness of decentralized strategy creation.

1

Threat intelligence is no longer a defensive tool but a powerful business enabler with far-reaching benefits and use cases across the organization. One of the top reasons organizations use threat intelligence is to prioritize vulnerabilities most likely to be targeted by adversaries. This shows security teams moving into the offense, proactively assessing risk and understanding gaps. Read more in our 2024 State of Threat Intelligence Report: https://lnkd.in/earHd4UC

6

I often hear the question "Where/What are our biggest security exposures?" Cyentia Institute recently had the opportunity to explore this question using data from hundreds of thousands of attack path assessments conducted through the XM Cyber Continuous Exposure Management (CEM) platform. The attached figure gives a categorical breakdown of what we observed based on all entities (digital assets), total security exposures, and exposures affecting critical assets. . The left-most chart represents the attack surface based on broad categories of digital entities discovered during attack path assessments. Active Directory constitutes just over half of entities identified across all environments. On-premises IT and network devices account for another 31% of entities and cloud environments house the remaining 17%. Not all entities, however, are exposed via attack paths. If we change the scope of the attack surface to include only vetted exposures (entities susceptible to attack techniques), things look different. The middle chart captures this perspective and Active Directory exposures dominate the attack surface. But not all of those exposures affect critical assets. To be truly effective, Exposure Management must encompass all environments and account for where critical assets are most at risk. If we once again rescope the attack surface to focus on exposures to critical assets, a very different picture emerges, which is captured in the rightmost chart. Cloud environments now encompass over half of all critical asset exposures, followed by AD at 33% and IT/Network devices at 11%. Does this sync with exposures across your attack surface? Which perspective/view/chart is your primary guide for managing exposures? The full report contains tons of additional insights on exposure management. Download here: https://lnkd.in/dPfqXG7y #cybersecurity #exposuremanagement #cyberrisk

48

8 Comments

Watching JF (Jay) Gignac of Foxguard command the stage with his talk entitled: "Building a Secure Foundation in OT: Essential Patching and Vulnerability Management Practices," at the FIC North America in Montreal right now! “If you don’t understand the context, you generate a lot of noise and that is not what any organization needs!” #InCyberForumCanada

46

6 Comments