Anurag Anuj

https://lnkd.in/gjJpsfC5 👉 Cybernews : A new unknown, unaware, sophisticated attack has been faced in 2024, called side-channel attack. ⚡ As we are moving towards a world of Automation, AI & IoT, in parallel new tactics, types of scams, and threats are coming our way.   #awareness #cybercrimes #cyberfrauds #scams #frauds #cybersecurity #infosecurity #onlinescams #onlinefrauds #protect #AI #IOT #automation

3

13 Sep 2024: Yogosha cybersecurity expert Sriram U. speaks on ‘Offensive Security Testing in the era of AI’ at ISACA Industry conference in Chenai, India. #offensivesecurity #pentesting #penetrationtesting #vapt #continuoustesting #crowdsourcedtesting #vulnerabilityassessment #vulnerabilitytesting #vulnerabilitymanagement #offensivetesting #ethicalhacking

35

It's great to see your dedication towards addressing the security challenges in OT systems, Satish Sharma. Your insights on the hurdles CISOs face in the industrial control system world are enlightening. Keep up the valuable discussions and knowledge sharing! Share this post with anyone interested in Cybersecurity! #cybersecurity #CISO #OT #systems #cfbr #Areweready #views

6

♦️Secure Talk: Singularity XDR: Your Unified XDR Solution The cybersecurity landscape is a treacherous battlefield. New cyber threats pop up all the time, attackers are getting craftier. Old security tools miss important stuff. Security teams, often understaffed and overwhelmed, struggle to keep pace. But fear not! Here comes SentinelOne Singularity XDR, your shining Armor in this digital war. Unify, Extend, Conquer: Singularity XDR Singularity XDR represents a paradigm shift in Extended Detection and Response (XDR) solutions. It transcends the limitations of point tools, offering a holistic approach that: Click to read on … https://lnkd.in/gB7vqTe7

11

1 Comment

SOC (Security Operation Center) workflow ·      Collect Logs from each and every system devices, networks etc. ·      Analyse the logs to remove false positives and detect anomaly ·      Regularly scan the organization assets to detect mis-configurations / vulnerability  ·      Act on possible ways to remediate the identified threat ·      Document the findings and prepare sustainable incident response plan for possible future cyber-attack. #SOCservice #dataprivecy #cybersecurity #dataprotection

2

Any reference to Managed #SoC partner with minimum 25+ nos. of #L1, #L2, #L3 SoC / #SecurityAnalyst and existing SoC infrastructure in Karnataka, Maharashtra, Gujarat, north India. Skill set include #SIEM tools (#Splunk certified professional, #Qradar, or similar), #EDR (#Crowdstrike, #Defender etc), #AWS Security tools, #Wiz, #Azure Security tools, #VM and Incident/alerts management with automation in Security tools, performing #VA.

228

325 Comments

Data Loss/Breaches Are Biggest Concerns of Cloud Deployment: Vipin Kumar Magazine: https://lnkd.in/gxVQyJHj Vipin Kumar, Global CIO, Uflex Ltd. Quote: “Managing malware and phishing attacks on the cloud has become a significant problem for enterprises.” Sophos Sunil Sharma Mehul Thakkar Anjali Sethi Joshi Puja Bhardwaj #CloudSecurity #CyberSecurity #CloudComputing #DataProtection  #InfoSec #CyberThreats #CloudTech #DataSecurity #SecurityTrends  #CloudSolutions #SOC #AIinSecurity #CloudNative #TechLeadership  #SecureCloud #CIOInsights #CloudInfrastructure #ThreatProtection  #DigitalSecurity #CloudManagement

24

3 Comments

🚨 Cybersecurity Alert: The C-Edge Incident – A Wake-Up Call for Indian Companies 🚨 In a recent and significant event, the cyber attack on C-Edge Technologies has sent shockwaves across the Indian corporate landscape. As organizations rush to digitize, this incident serves as a critical reminder of the vulnerabilities that come with rapid digital transformation. Key Takeaways: 🔴 The Attack: C-Edge, a joint venture experienced a severe cyber attack that exposed sensitive data and disrupted operations. This breach highlights the growing sophistication of cybercriminals and their ability to target even the most fortified entities. 🔴 The Impact: The breach not only compromised C-Edge’s internal data but also exposed customer information, shaking the confidence of stakeholders. Such incidents underscore the importance of robust cybersecurity measures. 🔴 The Response: Immediate steps were taken to mitigate the damage, but the incident has sparked debates on the adequacy of existing cybersecurity protocols. This event should propel Indian companies to reassess and strengthen their cybersecurity frameworks. 🔴 The Lesson: If a company like C-Edge can fall victim, no organization is immune. It’s a stark reminder that cybersecurity is not just an IT issue—it’s a business-critical function that demands attention at the highest levels of management. Survey Results on Cybersecurity Awareness in Indian Companies: 🔍 73% of companies believe they are well-protected against cyber threats, but only 41% have robust incident response plans in place. 🔍 68% of surveyed firms have experienced at least one significant cyber attack in the past 12 months, yet 52% still underinvest in cybersecurity measures. 🔍 Despite the rising threat landscape, 45% of companies do not provide regular cybersecurity training to their employees, leaving a significant gap in defense. Key Recommendations: 🔐 Invest in Cybersecurity: Treat cybersecurity as a strategic investment, not a cost. Prioritize resources to protect your data and infrastructure. 👥 Employee Training: Regularly train employees on cybersecurity best practices. Human error remains a leading cause of breaches. 🚨 Incident Response Plans: Develop and regularly update incident response plans. Speed and efficiency are critical when responding to a cyber attack. 🔄 Continuous Monitoring: Implement continuous monitoring and threat detection systems to identify and respond to breaches in real time. The C-Edge attack is a powerful reminder that cybersecurity is everyone’s responsibility. #CyberSecurity #DataProtection #IndianCompanies #DigitalTransformation #CISO #CyberAwareness

3

Hackers find the attack surface in Indian enterprises as one of the juiciest targets, And Why - Cybersecurity is hardly ever a priority, And It Gets Complicated But All That is Changing One person at a time One Institute at a time One Organization at a time That what we do @fnCyber - Cybersecurity Simplified I have been following ETCISO for all the latest findings and reports, and it is helping us @fnCyber to apply the root cause to build cost-effective solutions. Big shout out to ETCISO #fncyber #cybersecurity #simplified

11

2 Comments

Why SOC is play a major role in Organisation ? SOC (Security Operations Center) is a centralized unit within an organization responsible for monitoring, detecting, responding to, and mitigating cybersecurity threats and incidents. 1. Threat Detection and Prevention 2. Incident Response 3. Compliance Requirements 4. Risk Management 5. Business Continuity #cyberrisk #SOCasaService #dataprotection #riskassesment #VAPTaudit

2

I recently delved into the new HIMSS INFRAM24 Maturity Model and found an intriguing synergy with Zscaler's offerings. The INFRAM24 model encompasses 5 crucial domains - cybersecurity, adoption, sustainability, performance, and outcomes - converging to enhance healthcare delivery and mitigate cyber and infrastructure risks. Zscaler plays a pivotal role in this ecosystem. By monitoring traffic from endpoint to application, we significantly diminish up to 85% of threats within your environment, offering a comprehensive view of your cybersecurity endeavors. Our hardware-less approach ensures streamlined policy configuration on a unified dashboard, guaranteeing a consistent user experience regardless of location. Moreover, Zscaler bolsters organizational sustainability by enhancing PUE by up to 50%. Our solution optimizes performance by eliminating the need to backhaul traffic, resulting in a notable 40% reduction in inbound/outbound transaction wait times. The real icing on the cake lies in the outcomes Zscaler can drive in the healthcare sector. Our services accelerate M&A processes by 2-3x, slash hardware costs/refreshes by up to 75%, and reduce network spending by 50%, making a significant impact. Embarking on your INRAM24 journey? Let's collaborate to transform possibilities into realities.

13

1 Comment

Killing Friday time by completing NIST CSF 2.0 mini course by ISC2. This course covers: • Explain the importance of adopting the NIST Cybersecurity Framework for various cybersecurity roles.  • Identify the primary components of the NIST Framework, including Core, Tiers, and Profiles.  • Analyze the key components and activities of the "Govern" Function introduced in NIST 2.0.  • Examine the importance and implementation of the Core Functions: Identify, Protect, Detect, Respond, and Recover #isc2

36

2 Comments

I had the privilege of attending the ISC2 Bangalore Cybersecurity Summit 2024. This event brought together industry leaders, experts, and visionaries to discuss critical topics shaping the future of cybersecurity and risk management.   Jason Lewkowicz , Chief Services Officer | (CISO) at Optiv provided helpful insights into creating an effective AI governance committee, While AI brings efficiency gains, it also introduces security risks.   🚀 Risk Quantification was a hot topic. Thank you Rohitha Chowdary for your insightful keynote on risk quantification and the methods.   🔐 Identity and Access Management (IAM) took center stage during the panel discussion. Sandipan Basak shared insights on how IAM practices must evolve to meet the challenges head-on and organization should have visibility on their resources, accounts and entitlements including managing identities for external users.   💻 Ransomware as a Service (RaaS) discussions were eye-opening. The rise of RaaS attacks demands a proactive approach. Arpan Raval discussed strategies to prevent, detect, and respond to ransomware incidents, emphasizing collaboration across sectors.   🙏 Special thanks to the ISC2 Bangalore Chapter, who orchestrated this remarkable gathering. It’s inspiring to see professionals from diverse backgrounds come together to shape the future of cybersecurity. Kudos to all the speakers for their thought-provoking sessions!   #RiskQuantification #CyberSecurity #AI #IAM #Ransomware #BusinessStrategy #ISC2

121

1 Comment

Check out Nitin Tyagi Sir's insightful demo lecture on Zscaler, where he highlights its uses and importance in cybersecurity. His expertise sheds light on how Zscaler can revolutionize cloud security, making it a must-watch for professionals in the domain. Moreover, Nitin Sir emphasized the importance of Zscaler in protecting against advanced threats, ensuring data privacy, and enabling compliance with regulatory requirements. His real-world examples and case studies further illustrated the practical applications and benefits of implementing Zscaler. Don't miss out on this opportunity to enhance your knowledge! #Zscaler #Cybersecurity https://lnkd.in/g3Cf8WqN

38

AI has various use cases. So why not a full blown episode on applying intelligence for #DevSecOps. After all, this needs to go beyond automation, doesn't it? If you're as curious as I am, you'll enjoy this one! Do subscribe to breakpoint-security-podcast and comment what you think can be a good application of AI in Product Security :)

29

Post the CrowdStrike incident that caused outages to a 3rd of the world's enterprise enduser & edge computing and the massive consequences thereof - we can only conclude that the software as an industry is still a fledgeling one. Here in this read (link in first comment below) - Kailash Nadh (CTO of Zerodha) lays down the grim reality of the known industry practices that is largely detrimental. (Excerpt) "What we are witnessing are the obvious perils of having a highly centralized, proprietary piece of software running on millions of devices across industries and sectors around the globe. That too, something that runs in the operating system’s kernel space with root access, is always connected to the internet, can be remotely controlled by a single entity, and also auto-updates silently. What could possibly go wrong? That this is the preferred and widely accepted model for “enterprise endpoint security” globally shows how nascent, naive, and immature software technology as a discipline is." Yet we are not without hope as he also lays out the seeming path forward is not to bestow the controls with any centralised entities but rather - Here is his take - (Excerpt) "Even if one is unable to surmise what is truly good, there are common sense approaches that reduce the probability of cascading failures—open source, decentralisational, interoperability, federation, open specs and standards etc. On the contrary, there is enough evidence pointing to what is not good: - Rampant, massive centralisation of systems and dependencies. - Locking humans and systems into proprietary, centralised “walled gardens”. - Forcing, coaxing, and making people’s lives dependent on networked digitial systems. - Top-down push for “digitisation” of every random thing. Who is excited about downloading yet another app, giving away private information, and scanning yet another QR code? (╯°□°）╯ - Centralised amassing of data on humans and devaluing privacy and agency for convenience, “efficiency”, and vague, non-sensical notions of “personalised experiences”. - The myopic view that technology is the silver bullet solution to all societal problems. - Regulatory and policy stances that force organisations to adopt solutions as a compliance checkbox exercise without technical nuance. - Setting the stage that enables one mistake in one place to ripple and cause catastrophes all across. - Enabling ignorance, incompetence, and intellectual dishonesty to take technical decisions that impacts lives. … and on and on. “Anything that can go wrong, will go wrong”_ (Murphy’s law). ----- Beyond software, engineering, or code, one has to zoom out and take a civilisational view of it for better perspective. " I enjoyed the read - you can read it in the first comment below.

5

1 Comment

In CyberArk, managing privileged accounts involves setting up #platforms and #policies. Here's a simple explanation of the types of platforms and policies, along with how to create and manage them. #Platforms in CyberArk define how privileged accounts are managed, including password management and system connections. Different platforms are used for different systems: 1. Windows Platforms: Manages privileged accounts on Windows servers. 2. Unix/Linux Platforms: Handles credentials for Unix and Linux systems, usually with SSH connections. 3. Database Platforms: Used for managing accounts in databases like Oracle, SQL Server, and MySQL. 4. Network Devices: Platforms for routers, firewalls, and switches (e.g., Cisco, Palo Alto). 5. Application Platforms: Handles privileged credentials for various applications and middleware. Creating a Platform 1. Log in to the Password Vault Web Access (PVWA) as an admin. 2. Access Platform Management: - Go to Administration → Platform Management. 3. Add a New Platform: - Choose Add a New Platform or copy an existing one. - Configure the platform based on the system type (Windows, Unix, Database, etc.). 4. Set Platform Rules: - Password Management: Define password complexity and rotation schedule (how often passwords change). - Connection Method: Set how CyberArk connects (e.g., SSH, RDP). - Reconciliation: Ensure passwords are changed and verified successfully. 5. Save and Apply the platform to the relevant accounts or systems. 1. Password Management Policy: - Defines rules for password complexity (length, special characters, etc.). - Specifies how often passwords must be changed (e.g., every 30 days). - Ensures that passwords are automatically rotated for security. 2. Access Control Policy: - Controls who can access certain accounts based on roles. - Adds layers of security like multi-factor authentication (MFA). - Limits access based on conditions like user role, time of day, or location. 3. Session Management and Recording: - Determines how privileged sessions (when users access critical accounts) are started and managed. - Enables session recording for auditing and security purposes. - Allows live monitoring and even terminating a session if necessary. 4. Audit and Compliance Policies: - Ensures compliance with regulations like PCI-DSS, HIPAA, or SOX. - Logs all activities and access attempts for auditing. - Requires periodic reviews of access rights and system settings. - Least Privilege: Grant only the access users need to do their jobs. - Frequent Password Changes: Regularly rotate passwords to enhance security. - Monitor and Audit: Keep a close watch on user sessions and audit activities regularly. - Separate Roles: Ensure those managing systems are not the ones auditing to avoid conflicts. #CyberArk #PrivilegedAccessManagement #PasswordVault #DataProtection #SessionSecurity #AccessManagement #ThreatDetection #AnomalyMonitoring

55

2 Comments

Great information regarding Sureroute and the proper deployment of the object on the Akamai platform #surerouteraces #bgprouting #routesteering

1