Cason Ramos

NJOHSP regularly publishes Intelligence Assessments to keep the public informed about emerging security trends and awareness topics. Here are a few things to know and how they support public awareness across New Jersey. Read NJOHSP Intelligence Assessments here: https://lnkd.in/evxe4USG

16

1 Comment

Today, DFS issued a cybersecurity advisory highlighting an ongoing campaign of targeted vishing attacks – specifically, threat actors posing as IT help desk staff in calls to personnel to steal login credentials and gain unauthorized access to information systems. To defend against these techniques, DFS reminds entities to review their cyber programs, and reinforce identity verification, training, and monitoring controls. View the full advisory: https://lnkd.in/e4Map3y7

17

🚨 Attention DoD contractors and trade partners—the rollout of the Cybersecurity Maturity Model Certification (CMMC) is approaching. CMMC will transform cybersecurity from a checkbox into a strategic requirement.  If you process, store or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), your eligibility for DoD contracts hinges on this. 📆 Don’t wait for clauses to appear—get ahead now. Early compliance means less risk, less scramble, and a stronger competitive edge. 👉 Start your CMMC compliance journey today at contifederal.com/cmmc #CMMC #Cybersecurity #DefenseContracting #ContiFederal

27

1 Comment

Compliance can’t happen if your team is speaking different languages. That’s why Megin Kennett CCP created a high-level glossary of CMMC terms—so your entire organization can get on the same page, fast. 🎯 From SSPs to C3PAOs, it’s all here. Read it here: https://cstu.io/cc166a #CMMC #GovCon #CybersecurityAwareness #ComplianceSupport #NeoSystems

1

SANS Institute has launched hundreds of careers in cybersecurity. I’ve personally known more than a few graduates from this program and have nothing but great things to say about these individuals. If you are #new2cyber and looking for a way to get you knowledge certified check this program out! SANS New2Cyber, SANS ICS, SANS Offensive Operations, SANS Cloud Security, SANS Cyber Defense, SANS Digital Forensics and Incident Response, Black Hills Information Security, Binary Defense, The Cybersleuth Chronicles, The DFIR Report, TryHackMe, LetsDefend, Cyber Security Champions ®️, Mrs. OSINT, CyberDefenders

4

At HSDF's Cybersecurity Symposium, Jason Hill OSCP, GPEN dicusses utilizing technology to meet FedRamp goals and adapting to evolving cyber threats. As a former CISA member and military veteran, his insights on navigating the sea of cybersecurity tools in a resource-limited environment are invaluable. #Cybersecurity #FedRamp #TechSolutions #HSDF

5

Our Emergency Preparedness Response team is collaborating with CISA and P5CYBER to facilitate an in-person Cybersecurity & Extended Downtime Tabletop Exercise (TTX) on June 11, from 8:00 AM – 12:30 PM at the VOA in Westchester. This TTX will focus on enhancing our region’s ability to respond to cybersecurity incidents and extended operational downtimes, with the goal of ensuring continuity of critical operations during times of disruption. The event is specifically for hospitals' Emergency Management teams, as well as decision-makers who are involved in managing extended downtimes such as IT/Communications, Management, Operations, Security, Public Information, and Business Continuity. To register, please visit: bit.ly/cyber_ttx

6

Peraton Wins NETCOM Global Cyber Center Contract To Strengthen Army’s Cyber Defenses ==>> https://lnkd.in/ew57ZPWU Peraton | Steven Schorer | Ravi Dankanikote

3

Post 6: Audit-Ready Operations "Are you ready for your CMMC assessment?" Wrong question. Right question: "Are your daily IT operations generating audit-ready evidence?" VSO's managed services are built compliance-first: Security monitoring with documented analysis Infrastructure changes with evidence trails Incident response with compliance reporting Configuration management with baseline tracking We don't prep you for audits. We operate audit-ready systems. Learn more at: https://vso-inc.com/cmmc/ #CMMC #ManagedServices #Compliance

5

ATO, RMF, STIG, POA&M, CMMC, NIST, SIPRNet, NIPRNet, IL5, PKI, MFA, ICAM, COMSEC, OPSEC, TACLANE, FICAM, HSPD-12, CJIS, and SCIF aren’t just acronyms to us, they’re the language of how the Army, Navy, Air Force, Marine Corps, and Space Force plan, secure, operate, and protect their missions. Across the DoD and Federal space, acronyms aren’t shorthand, they’re a way of life. They represent compliance, cybersecurity, accountability, and mission readiness. They define how systems are built, how risk is managed, and how trust is established. At VIRSIG, we speak “acronym” because it’s the environment we operate in every day. When you say ATO, we hear timelines, evidence, and approvals. When you say RMF, we think controls, SSPs, and continuous monitoring. When you say STIG, we think baseline hardening and inspection readiness. When you say COMSEC or TACLANE, we know encryption and operational continuity are on the line. When you say FICAM or HSPD-12, we understand identity trust and access control. Different branches. Different missions. Same reality. Everything must be secure, compliant, resilient, and auditable. Acronyms might sound funny to the outside world, but inside the mission space they represent responsibility and protection of people, data, and national security. They matter. And let’s be honest… if you ever feel like only about 1% of the population truly understands your day-to-day language… We got you. Learn more about us at www.VIRSIG.com

7

Former DoD CMMC Director and Chief Defense Industrial Base Cybersecurity Stacy Bostjanick delivered a clear message to government contractors at the Secureframe National Cybersecurity Summit yesterday: "CMMC is just the bare minimum." After helping launch the program in 2018 and leading it through two iterations, Bostjanick knows better than anyone what CMMC was designed to do and what it wasn't. Her message to the DIB: certification is the starting line, not the finish line. Nation-state actors aren't trying to out-innovate the U.S. They're stealing designs and systems to out-manufacture us. And the soft underbelly of the supply chain (smaller contractors without adequate cybersecurity controls) is exactly what they're targeting. On cost and accessibility, she pushed back on a persistent narrative: over 1,000 organizations have achieved Level 2 certification, and roughly half are SMBs. Full recap of her session here: https://lnkd.in/etFYWsAF Day 2 starts now — join us: https://lnkd.in/eGUdruEQ #CybersecuritySummit2026

7

Massachusetts’ government technology ecosystem supports millions of residents across public safety, health and human services, transportation, education, and municipal operations. Cybersecurity leaders in this environment must balance regulatory compliance, operational resilience, incident response readiness, and public accountability—protecting critical infrastructure while sustaining public trust. The CISOs to Watch in Massachusetts’ government administration include: Greg McCarthy, CISM, PMP - City of Boston Tina I Smith - Executive Office of Public Safety and Security Anthony Ristaino - Massachusetts Executive Office of Health and Human Services Ty Smith, MSIA, CISSP, GSLC, CEH - Massachusetts Trial Court Scott Margolis - MBTA David Wright - Everett Public Schools MA These leaders are securing municipal systems, public safety networks, transit infrastructure, court systems, health services platforms, and education environments across the Commonwealth. Their work reinforces governance maturity, incident preparedness, and resilience at scale—ensuring digital public services remain secure and reliable. #CISO #Cybersecurity #PublicSector #GovernmentSecurity #Massachusetts #CriticalInfrastructure #RiskManagement #CyberLeadership Read the article: https://lnkd.in/gqeZ7WH3

15

1 Comment

🚨 CISA-FBI ALERT: Interlock Ransomware Attacks Surge 🚨 A new wave of sophisticated attacks is underway. Interlock uses fake updates and download pop-ups to infiltrate systems—then encrypts and threatens to leak data. At RansomEye, we respond with real-time, modular defense built for this threat landscape. 🛡️ DPI Defense – Powered by RansomEye Modules: 🔹 DETECT • Linux Agent – Real-time system monitoring & AI inference • Windows Agent – File activity and user behavior tracking • KillChain Core – TTP mapping, adversarial graph scoring • Threat Intel Engine – Live IOC ingestion from MISP, OTX, Abuse.ch 🔹 PROTECT • Forensic Dump Engine – Auto-quarantines suspicious memory/process • Quarantine Manager – Service kill & hash-blocking on compromise • Policy Engine – Dynamic response rules per system criticality 🔹 INVESTIGATE • Timeline Builder – Root cause and chain-of-event reconstruction • IOC Export CLI – On-demand extraction of attack fingerprints • Dashboard UI – Full visibility across assets, alerts, and status With RansomEye, you don’t just detect threats — you contain, understand, and stay ahead of them. #RansomEye #Interlock #CISA #FBI #CyberSecurity #Ransomware #ThreatIntel #AIforSecurity #DPIDefense https://lnkd.in/eUeUSjq5

2

Boost your cybersecurity skills with the GIAC Security Leadership (GSLC) Preparation Certificate, designed for Florida state and local government employees. This self-paced course helps you learn how to manage and improve cybersecurity systems, focusing on protecting, detecting, and responding to security risks. Earn a Certificate of Completion from the University of South Florida to show your expertise and leadership in cybersecurity. Read more: https://lnkd.in/d5EaAYmB #Cybersecurity #LeadershipTraining #GSLCPrep #StateAndLocalGovernment #CybersecurityLeadership #ProfessionalDevelopment #USFEducation #OnlineLearning #CybersecuritySkills #GovTech

10

"For contractors working under DFARS, NIST SP 800-171, and CMMC 2.0, your survival—and your DoD contract eligibility—depends on your Incident Response Plan (IRP)." #CMMC #Compliance #CyberIncidents #IncidentResponsePlan

1

CMMC Level 2 requires implementation of 110 security practices aligned with NIST SP 800-171, far exceeding basic cyber hygiene requirements. Defense contractors must demonstrate documented policies, procedures, and technical controls across 14 domains including access control, incident response, and system monitoring before third-party assessors conduct certification audits. https://lnkd.in/gSnD5Pa6 #CMMCLevel2 #NIST800171 #CybersecurityAssessment

1