Oren Yunger

Mthandazo Ndhlovu is cooking with 🔥🔥🔥 Take a look: EIDOLON: Provable Delegated Agency for Faithful Digital Twins - A governance layer that lets a person delegate a cryptographically bounded, revocable, fully-attributable slice of their authority to an AI agent that decides the way they would. https://lnkd.in/gGUgk7pE

14

3 Comments

Akto + Anthropic 🤝 Akto.io now integrates with the Claude Compliance API to help organizations monitor and audit how Claude is used across the organization. AI Governance and Security teams can now see who is using Claude, audit activity when needed, flag risky behavior, and use Akto Atlas 🐬 to alert on guardrail violations. This is fantastic news for all our customers! With this release, we now cover all of Claude for security and governance including: - Claude Code CLI - Claude Desktop - Claude Enterprise - Claude in Browser - Connectors - Projects - Chat Activity - Skills - MCPs - Cowork --------- 🔗 Announcement: https://lnkd.in/gr7DMsWy

62

1 Comment

Unstructured access rights increase internal risk. CMIT Solutions of Long Beach creates access control matrices that define user roles, scope permissions based on function, enforce least-privilege, and establish quarterly access reviews. Access governance is a required discipline—not a one-time task. https://lnkd.in/gNJ92DfN #AccessControlMatrix #RolePermissionMapping #LeastPrivilegeModel #ITGovernanceChecklist #SMBAccessGovernance #ManagedIdentityControl #MSPAccessStandards #QuarterlyAccessReview #SecureRoleAssignment #LongBeachIAMFramework #UserAccessCompliance #ConfigurationAlignmentControls #ITPolicyEnforcement #IdentityGovernanceStructure #DataAccessHardening

1

"In a security advisory published today, OwnCloud urged users to enable MFA following a recent report from Israeli cybersecurity company Hudson Rock, which revealed that multiple organizations had their self-hosted file sharing platforms (including some ownCloud Community Edition instances) breached in credential theft attacks. 'The ownCloud platform was not hacked or breached. The Hudson Rock report explicitly confirms that no zero-day exploits or platform vulnerabilities were involved,' ownCloud said.'" https://lnkd.in/dinzTAuN

28

Flare has been tracking this threat for a while now. It’s good to see action being taken by the FBI and people getting arrested. Check out our research article from March here: https://lnkd.in/g4vKBM6s

6

TL:DR: The DoW officially issues guidance to contracting officers to remove references to independent assessment requirements and primes lose their ability to flow down certification requirements to subs. We are not expecting to hear anything after the 60-day review of CMMC concludes, as the output is simply recommendations, which will likely remain internal until direction is solidified.

15

This proposal signals a fundamental recalibration of how the United States balances security, privacy, and openness. If implemented, it could reshape global travel norms, strain diplomatic relationships, and redefine expectations for digital privacy at borders just as the U.S. prepares to host one of the world’s largest sporting events.

1

Want to win more defense contracts? Most companies don't hear that from cybersecurity providers, because cybersecurity is typically looked at as just a contract requirement. We've proven this impact over and over again. Learn how here: https://lnkd.in/ewbHTiqK

4

cpe-guesser 2.0 released - Multi-Source CPE Imports, Better Ranking, and Greater Autonomy Beyond NVD Version 2.0 brings major improvements to CPE import, ranking, and CVE v5 data handling. This release focuses on better import performance, broader format support, improved search relevance, and more robust indexing for vendor and product matching. A notable change in this release is that cpe-guesser is no longer limited to NVD as its only practical CPE source. In addition to the NVD feeds, it can also leverage the Vulnerability-Lookup dump available at https://lnkd.in/dX_7DbK3, providing additional CPE sources and more autonomy from the previously NVD-only source model. This release lays an important foundation for improving the GCVE ecosystem, especially by strengthening vendor and product references through better CPE source diversity, indexing, and matching capabilities. If you have ideas for further improvements, additional data sources, or better ways to refine vendor and product identification, we would be very happy to hear your feedback. https://lnkd.in/d5Sku8qj #opensource #gcve #cve #vulnerabilitymanagement #cybersecurity GCVE-EU CIRCL (Computer Incident Response Center Luxembourg)

48

5 Comments