Austin Stubbs

Permiso Security released ANOTHER open-source security tool for AWS environments called RansomWhen! RansomWhen helps security teams identify which identities can potentially lock S3 buckets using KMS - a technique commonly used in ransomware attacks. It also detects when these types of attacks might be happening in your environment. If you're managing AWS infrastructure security, this will help you spot potential ransomware risks and catch suspicious KMS activity before it becomes a problem. Try it out here: https://lnkd.in/grAKjaeT

52

2 Comments

Things Texas Takes Seriously: 1. Cowboy Hats 🤠 2. Not messing with it 🗑 3. Cybersecurity 🔒 Texas’s very own TX-RAMP Certification is becoming increasingly in-demand. Why? Well, Texas has done a few things right to make the cert stick: 1️⃣ It created an achievable standard based on the NIST SP 800-53 framework and provided clear use-cases. 2️⃣ It significantly reduced the audit burden on private companies. The Texas Department of Information Resources performs the certifying assessment – NOT an auditor. 3️⃣ It passed legislation requiring all vendors providing cloud-based services to Texas state agencies and higher education institutions to become TX-RAMP certified. It turns out that, when required by law to get certified or risk losing a big customer, vendors tend to get certified! We have helped a number of customers with TX-RAMP. But, we regularly get smaller companies asking us for help. We can't economically service them. Well, we couldn't... until now! We are announcing TX-RAMP Champ. TX-RAMP Champ allows small companies to get TX-RAMP certified with half the effort. We provide the templates needed, video to explain how to use the templates and access to our experts to help. Rob, that sounds amazing but I want to try it out without having to pay. Imaginary person, that's why we have a 45-day trial option to try out the tool. You can sign up from this link: https://lnkd.in/eFgAQfkx Don't want to sign up? We have a bunch of free resources for learning about TX-RAMP on our TX-RAMP Champ page. Of course, you could sign up for our TX-RAMP Complete and get all of the TX-RAMP resources including: - TX-RAMP Security Plan Workbook with Sample Answers for all Controls - Complete TX-RAMP Documentation Template Library - Complete Training Video Library - Access to one-on-one chats with U.S.-based TX-RAMP efforts - 2 live session reviews of TX-RAMP deliverables What do you think about a solution for helping with TX-RAMP? Do you know someone who is struggling with TX-RAMP and would like a speed boost? Tag them, please!!!

31

19 Comments

Lock down your Tiger Data services, without the overhead of a VPC. Here’s a quick walkthrough of using IP Allow Lists to control access to just trusted networks.

14

The BlackHat conference is one of the most hostile networks in the world. How do you determine what is a malicious actor when everybody in a classroom is throwing exploits across the wire? In our industry, claims are easy. Validation is hard. That is why our ongoing role at Black Hat is so critical. For the past 8 years, Palo Alto Networks has been selected — purely on merit, not sponsorship — to secure the Black Hat NOC. This isn’t a trade show demo. It is a live-fire stress test. We are running the core network and security operations for thousands of the world’s most advanced security researchers in a highly hostile environment. Our NGFWs and Cloud-Delivered Security Services (CDSS) are inspecting traffic and enforcing security for thousands of the world’s most advanced researchers. We are also deploying Cortex XSIAM as the Official Security Operations Platform. Seeing our platform deliver integration, automation, and resilience under this level of pressure is the ultimate “battle test” for our engineering. We talk a lot about “setting the standard” in Network Security. Standing tall in the Black Hat NOC is what that looks like in practice. Want to see behind the scenes? Watch the NOC-umentary: Inside the Black Hat NOC at the link in the comments. James Holland Jason Reverri @Jess Castino Aliya Ware Rabin Bhattarai #BlackHat #BHEU #LifeAtPaloAltoNetworks

232

2 Comments

I just added support for AWS IAM Outbound Identity Federation to the Nymeria cross-cloud identity repository. Previously, AWS workloads required the target service to accept pre-signed Signature Version 4 headers for identity verification. This approach was not supported by Azure identity federation, so accessing Azure resources required an additional OIDC identity provider (for example, AWS EKS or Amazon Cognito) to issue tokens to AWS workloads. Now, with IAM Outbound Identity Federation, AWS workloads can request signed OIDC identity tokens (JWTs) using the sts:GetWebIdentityToken API. These identity tokens enable OIDC federation into external cloud services. This blog post demonstrates how to use AWS IAM Outbound Identity Federation to access data hosted in Azure Storage: https://lnkd.in/gcatS7FU GitHub repository: https://lnkd.in/gZHJg8cj

50

Jason Soroko and I explain the major news items from the most recent CA/Browser Forum face-to-face meeting in Tokyo on the Root Causes Podcast. Topics include MPIC, 47-day certificate term, and Temporary Restraining Orders. Audio: https://lnkd.in/g-RaJifc Video: https://lnkd.in/gDJuyRAg

34

1 Comment

🔔 Cyber Market Monday Update - Headlines from last week 👇 ▪️LevelBlue, a large MSSP formerly a part of AT&T Cyber, has announced plans to acquire Cybereason. Their 2021 valuation was $3.1B but in 2023 they raised at a $300-400M valuation so a significant decrease from their peak! Acquisition valuation was not public. ▪️Two different acquisitions in the identity space with Imprivata acquiring Verosint and Nomios UK&I acquiring Intragen! Consolidation continues. It's interesting to look at the average annual return from newest cyber IPO’s to the oldest! Who is the most surprising to you? #publicmarkets #cybersecurity #investing #stocks  —————————————————————— ♻️ Repost to share with other cybersecurity industry professionals 🔔 Follow Konnor Andersen for more tips on cybersecurity GTM ——————————————————————

26

3 Comments

North Texas Cybersecurity Group (NTXCSG) November Speaker Announcement! I’m excited to share that Andy Thompson, CISSP, GPEN , Senior Offensive Security Research Evangelist at CyberArk Labs, will be joining us this month to deliver a powerful session on one of the most critical topics in our field: Securing Artificial Intelligence Systems: Abuse, Attacks, Agents, and Mitigations Artificial Intelligence is reshaping both offensive and defensive cybersecurity and with that innovation comes new attack surfaces, emergent threats, and opportunities for misuse. Andy will break down real-world risks, demonstrate practical exploit paths, and share strategies for securing AI-enabled systems in modern enterprises. This is a talk you do not want to miss whether you’re in offensive security, detection engineering, cloud, governance, or AI risk. North Texas Cybersecurity Group (NTXCSG) Thursday, November 20 at 7:00 PM RSVP on Meetup: Link coming shortly https://lnkd.in/gvxKQzJU Join us, learn from one of the best voices in the industry, and connect with fellow North Texas security professionals. North Texas Cyber Security Group": https://lnkd.in/gi_D5Z8R

35

1 Comment

I often see "allow traffic to *.s3.amazonaws.com" in vendor's documentation. This is poor and insecure practice because by allowing traffic from you server to all of S3 storage you allow: - access to 350 trillion buckets and exobytes of data (~20-30% of the Internet); - access to known C&C infrastructure; - ability to exfiltrate unlimited amount of data from your network; - download of any files including binaries. Hyperscalers introduce serious challenges to firewall rules management.

274

42 Comments

As cyber threats become more advanced - and demand faster responses - it’s more important than ever to know who’s accessing your data and from what device. That’s why Okta and Palo Alto Networks are teaming up, combining their AI-powered solutions to help organizations unify identity threat detection and automate response while securing access on any device. Learn more here - https://lnkd.in/epzgp6YU #AI #Identity #Security

39