Bryan Li

Encryption has become the new compliance frontier. HIPAA, PCI DSS 4.0, GDPR, and NIS2 all now require encryption across clouds and hybrid environments. If your security still stops at the perimeter, it’s time to rethink your architecture. See how frameworks are converging around Zero Trust Maturity Model 2.0 and what that means for your architecture. 👉 https://loom.ly/3Wh7sLg Benson George #ZeroTrust #Encryption #Compliance #Aviatrix

7

Case Study: How a Canadian enterprise simplified security and cut costs dramatically A major enterprise replaced its fragmented 3-layer protection stack (Microsoft 365 + Mimecast + Defender) costing ~$220 per user with DefenceNet at ~$9 per user. The outcome: • Significantly lower security spend • Faster phishing decisions at the click level • High accuracy against modern, AI-generated phishing • Zero end-user training across 10,000+ employees CISO takeaway: “We removed three vendors, reduced complexity, and strengthened protection where attacks actually happen.” Why maintain overlapping, expensive security layers when one decision layer is enough? Legacy stacks are complex. Modern protection is simple. #Cybersecurity #PhishingProtection #EnterpriseSecurity #CanadianTech

16

1 Comment

Distributed denial of service (DDoS) attacks are evolving - is your organization ready? From recognizing early warning signs to responding effectively, explore the best practices for mitigating and responding to DDoS attacks: https://lnkd.in/eakRafta

23

The right MSSP partner doesn’t just check the boxes — it fits your organization. This guide outlines the critical questions Canadian IT leaders need to ask to ensure their provider aligns strategically, operationally, and culturally. If you’re exploring MSSP options or want to pressure-test your current provider, this guide is a must-read. Download now: https://hubs.la/Q03GXKFk0 #Cybersecurity #MSSP #ITLeadership #TechnologyAlly #ManagedSecurity #Compugen

11

Last week my team launched MSRC-led CVE lifecycle for Azure Linux and beyond! We brought Azure Linux under MSRC’s end to end CVE management, so there is one playbook, one accountable owner, and one channel for how Linux vulnerabilities are triaged, assessed, and communicated. This removes fragmentation and gives customers a consistent, trustworthy security experience. What changes now is clarity and coordination. Azure Linux vulnerability intake, severity decisions, and customer communications run through MSRC’s established model, aligned with industry practice and upstream communities. The result is clearer signals for engineers and fewer detours from detection to mitigation. This is also a strategic pivot. The same MSRC system is designed to include third‑party open‑source components in addition to first‑party platforms, creating a single source of truth we can scale across Microsoft and the broader OSS estate. It lays groundwork for standardized VEX and CSAF outputs and more automation over time. Huge callout to Karim Eldegwy, Nick Handaja, Claire Brown, and Chris Gordon for driving this across org boundaries and making the hard parts look simple. And grateful for the support from leadership team. Ziad Khalidi, Tom Gallagher, Deepu Thomas, Jon Slobodzian, Eric D. #MSRC #AzureLinux #VulnerabilityManagement #OpenSourceSecurity #CloudSecurity

24

As AI and LLMs reshape cloud operations, security teams face a critical question: how do you assess the trustworthiness of these engines before you deploy them? In this panel at SecTor Canada, experts from cloud architecture, cybersecurity, and AI governance present a practical framework for evaluating AI and LLMs in real-world cloud environments. From compliance to supply chain integrity and incident response, learn how to make informed, secure, and strategic decisions about where – and how – to adopt AI safely. https://bit.ly/3VDwzWT #AISecurity #CloudSecurity #SecTorCA

92

Excited to see new cybersecurity workforce data released in CyberSeek today, along with a snazzy new interface! What do the latest numbers show? 👉 514,359 cybersecurity job postings in the U.S. over the past 12 months, an increase of over 50k since the last update. 👉 1,337,400 existing skilled cybersecurity workers in the U.S., and an estimated 4.4-5.5 million skilled cybersecurity workers globally. 👉 Only 74% of cyber demand can be filled with existing workers. 👉 58% of cyber job openings request at least 4+ years of experience. My takeaways: 💡 The growth in job postings and employment shows that demand for cyber workers remains robust. Although job postings are lower than their post-pandemic highs of over 700k, they are beginning to increase again. At the same time, employment has been steadily growing, suggesting that employers never reduced demand for cyber workers - they simply had an easier time filling cyber openings than in the past. Look for that trend to change as demand ticks upward more strongly and cyber workers become scarcer once again, forcing employers to get more creative with their talent sourcing strategies. 💡 The strong demand and employment growth flies in the face of the narrative that AI is reducing demand for cyber and other tech jobs. It also suggests that the reduction in cyber job postings since 2022 was less about AI and more about economic uncertainty stemming from inflation, rising interest rates, and other factors. 💡 The high-level supply/demand gap masks a painful reality for many recent graduates of cyber programs: entry-level cyber jobs are hard to find. My prior work has found that, despite an overall talent gap in cyber, we have a surplus of entry-level cyber workers. The latest CyberSeek numbers confirm that employers continue to recruit primarily from a limited pool of experienced workers. Fixing this chicken and egg problem remains one of the most critical barriers to expanding the cyber talent pipeline. Huge shoutout to everyone at NICE, CompTIA, and Lightcast who was behind the updates to CyberSeek. The design refresh and data enhancements are looking great! #cybersecurity #cybersecurityjobs #cyberseek

65

5 Comments

The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation (FBI) have issued an advisory warning of cyber attacks mounted by the China-linked Salt Typhoon actors to breach major global telecommunications providers as part of a cyber espionage campaign. The attackers exploited a critical Cisco IOS XE software (CVE-2023-20198, CVSS score: 10.0) to access configuration files from three network devices registered to a Canadian telecommunications company in mid-February 2025. The threat actors are also said to have modified at least one of the files to configure a Generic Routing Encapsulation (GRE) tunnel, enabling traffic collection from the network. The name of the targeted company was not disclosed. https://lnkd.in/dzQMvdRb

10

Managing OFSI B-13 Through an ISO/IEC 27001 Information Security Management System. Financial institutions in Canada face increasingly stringent regulatory requirements, including those set by the Office of the Superintendent of Financial Institutions (OFSI). Among these, OFSI B-13 outlines specific expectations for operational risk management, governance, and resilience in federally regulated financial institutions. While OFSI provides the regulatory framework, ISO/IEC 27001 offers a structured methodology for managing information security risks that can effectively support compliance with B-13. Link: https://lnkd.in/ewyjGpbJ #ISO27001, #ISMS, #InformationSecurity, #InfoSec, #CyberSecurity, #ISO27001Certification, #DataProtection, #AnnexA, #ITAudit, #SecurityControls, #OSFI, #OperationalRisk, #OpRisk, #OperationalResilience, #BusinessContinuity, #BCP, #TPRM, #RegulatoryCompliance, #FinancialServicesCanada, #RiskAppetite, #GRC, #RiskManagement, #EnterpriseRiskManagement, #ERM, #ITRisk, #Compliance, #CyberResilience, #DigitalTransformation, #CorporateGovernance, #CISO, #CRO, #ComplianceOfficer, #RiskManager, #ITManager, #CybersecurityProfessional, #InternalAudit, #Consulting

6

2 Comments

34.7% drop in cybersecurity jobs over the last 6 months in Canada. The Canadian Cybersecurity Network did some analysis of it's cybersecurity jobs data at https://lnkd.in/eKagUhM2, Canada's biggest and only dedicated cybersecurity job portal and here is some of the key data we found. Enjoy the read. https://lnkd.in/eBwSSyEX

47

7 Comments

🚨 92% of ransomware attacks target blind spots in unmanaged or unknown assets—how is your team staying ahead? As hybrid environments grow more complex, CISOs need to expand visibility into blind spots, understand external threats in context, and take action on uncovered risks. 👉 This 3-step guide provides actionable steps to help teams stay ahead of attackers: https://bit.ly/4kvFdRw #ReliaQuest #MakeSecurityPossible #AgenticAI #Cybersecurity

15

🔐 Cyber hygiene is the foundation of everyday security. Simple practices like using strong passwords, updating software, and staying cautious online can make a big difference. Small actions protect against big risks in today’s digital world. 🌐 #vCISO #CanadaCISO #RiskAwareCo #CyberCanada #CyberRiskManagement #BusinessContinuity #DataBreachPrevention #CyberDefense

8

Building a secure archival environment requires a strategic, layered approach. This post outlines five essential elements every archival institution should implement: access control, secure storage, surveillance systems, staff training, and vulnerability assessments.  By establishing and maintaining strong security protocols, archives can protect their collections from physical and digital threats, ensuring they remain accessible, intact, and safe for future generations. https://lnkd.in/eacJrxNP

13

Here’s the hard truth.  Modern enterprises move fast. Security visibility often doesn’t. As identities, cloud services, and networks sprawl, attackers blend into normal activity. When breaches happen, the root cause is usually fragmented visibility. Cyber resilience begins with understanding how the enterprise truly operates. Explore how unified observability works: https://lnkd.in/gbiRPrcn #AIEnterprise #CyberResilience #Observability #AIDrivenSecurity #VectraAI

20

1 Comment