Dave Brown

Federal programs shouldn't have to choose between visibility and privacy. That's why DTEX Platform v7 for Government provides both under an active FedRAMP Moderate ATO. Built for federal agencies and contractors, Platform v7 unifies Insider Risk Management, Risk-adaptive DLP, and UEBA/UAM to surface context and intent, detect threats earlier, and adapt controls in real time. Platform v7 delivers the assurance federal programs expect with U.S.-only data residency and U.S.-citizen-only administration, FIPS 140 encryption, and CNSSD 504 support. Explore the guide and see how DTEX strengthens federal security programs without slowing the mission: https://lnkd.in/g9xWeyu5

32

1 Comment

After DHS did not renew its funding contract for reasons unspecified, MITRE’s 25-year-old Common Vulnerabilities and Exposures (CVE) program was slated for an abrupt shutdown on April 16, which would have left security flaw tracking in limbo. CISA stepped in to provide a bridge. A CISA spokesperson sent CSO a statement saying, “The CVE Program is invaluable to cyber community and a priority of CISA. Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services. We appreciate our partners’ and stakeholders’ patience.” Sources say the contract extension will last 11 months. Yosry Barsoum, vice president and director of the Center for Securing the Homeland at MITRE, commented: “Thanks to actions taken by the government, a break in service for the Common Vulnerabilities and Exposures (CVE®) Program and the Common Weakness Enumeration (CWE™) Program has been avoided. As of Wednesday morning, April 16, 2025, CISA identified incremental funding to keep the Programs operational. We appreciate the overwhelming support for these programs that have been expressed by the global cyber community, industry, and government over the last 24 hours. The government continues to make considerable efforts to support MITRE’s role in the program and MITRE remains committed to CVE and CWE as global resources.” https://lnkd.in/gPhB8vVQ

170

12 Comments

A foreign threat actor infiltrated the Kansas City National Security Campus (KCNSC), a key manufacturing site within the National Nuclear Security Administration (NNSA), exploiting unpatched Microsoft SharePoint vulnerabilities, according to a source involved in an August incident response at the facility. The breach targeted a plant that produces the vast majority of critical non-nuclear components for US nuclear weapons under the NNSA, a semi-autonomous agency within the Department of Energy (DOE) that oversees the design, production, and maintenance of the nation’s nuclear weapons. Honeywell Federal Manufacturing & Technologies (FM&T) manages the Kansas City campus under contract to the NNSA. https://lnkd.in/giNSG9P5

22

1 Comment

Cybersecurity is a Whole-of-Nation Challenge — And States Can’t Go It Alone This week’s Congressional hearing made one thing crystal clear: the State and Local Cybersecurity Grant Program (SLCGP) isn’t just a budget line—it’s a frontline defense. Experts like Utah’s Alan Fuller and Connecticut’s Mark Raymond didn’t mince words: SLCGP is a cost-effective engine for cyber readiness, enabling under-resourced municipalities to protect the systems we all rely on—water, healthcare, public safety. In a threat landscape where ransomware attacks doubled between 2018 and 2024, this program isn’t optional. It’s operationally essential. But the message wasn’t just about money—it was about mission. This grant enables a “whole-of-state” model that unites state and local actors, sharing intelligence and establishing clear cyber roles before—not after—incidents happen. Let’s not lose the plot in budget debates. Preventing a breach is cheaper, safer, and smarter than recovering from one. Investing upstream in cyber hygiene, training, and detection is national security, not just local spending. Read more at: https://lnkd.in/e-95QDFV

27

1 Comment

Some of the early management story behind the NSA Security Guides and a national consensus on security guidance for Windows 2000. How "guiding principles" can guide work. https://lnkd.in/eCeKse-3 National Security Agency , Center for Internet Security , National Institute of Standards and Technology (NIST) #sagercyber

34

6 Comments

#OSINT isn’t just for experts anymore. Horizon Identity empowers any team to uncover patterns, links, and real-world identity details - without needing OSINT skills or special training. One search bar for access to more than 550 publicly available data sources and more than 1,500 endpoints to make your investigation easy. Learn more here: https://hubs.la/Q03rsWqm0 #cai #investigations #shadowdragon #horizonidentity #pai #osintforgood #realtimeintel

23

Today I’ll be presenting along with @KellyHood on “CMMC in Practice: What Assessors Look for and How to Prepare” for the @ISACA Central Maryland Chapter. The timing couldn’t be better. The #CMMC final rule has officially been published, and the countdown to implementation is on. Starting November 10, CMMC requirements will begin appearing in DoD contracts. In this virtual training we will be sharing all about: - What assessors are really looking for during certification - Common red flags that can derail the process - How to make sure your evidence is audit-ready - The latest on CMMC timelines and the phased roll-out Whether you’re just starting your CMMC journey or gearing up for an assessment, you’ll walk away with practical guidance to avoid compliance pitfalls and move forward with confidence. Register to join us! https://lnkd.in/egryVJEj #ISACA #ISACACMC #Maryland #OpticCyber

18

2 Comments

“LinkedIn Easy Apply” isn’t just a hiring shortcut. It’s an attack surface. In the latest episode of Fraud Forward, Hailey Windham, CFCS sits down with Jared G., fraud investigator and author, to unpack a growing fraud vector hiding in plain sight: fake LinkedIn companies using job posts and “pre-interview” screening emails to harvest operational intelligence from fraud, AML, and compliance teams. Fraudsters aren’t just phishing customers anymore. They’re interviewing fraud teams to steal the playbook. Listen as they get into: • How impersonated companies use Easy Apply + fast follow-ups to lure candidates • The telltale signals: new domains, fake employee rosters, zero posting history, suspicious hiring volume • Why fraud resumes and interview answers are uniquely valuable to attackers • How “legitimate” technical screening questions become playbook extraction • What criminals can do with aggregated responses (vendor mapping, control probing, tactic tuning) • Practical steps to protect fraud knowledge like you protect systems The core takeaway: Protect knowledge like infrastructure, and build safer ways to share patterns without handing attackers a blueprint. 🎙WATCH the full episode and subscribe on YouTube: @FraudForward ▶️ LISTEN on your favorite podcast provider via https://lnkd.in/eeTDSvSc Guest lineup: -Jared Gruenberg: Fraud investigator and author of “Your Fraud Team Is Leaking Your Defense Playbook Right Now” -Hailey Windham, CFCS: Host of Fraud Forward and Community Banking Lead at Sardine

44

2 Comments

Your #EDR Healthcheck doesn’t end with findings — it drives measurable outcomes. ✔️ Maximize ROI: Benchmark performance before renewals or migrations. ⚡ Accelerate response: Correlate attacks with logs for faster tuning. 🧾 Prove compliance: Map real evidence to SOC 2, NIST, and CIS frameworks. That’s how leading teams transform EDR validation into business value. 🔗 Turn validation into outcomes: https://lnkd.in/g--XVzre #EndpointSecurity #OffensiveSecurity #pentesting

14

MITRE ATT&CK v18 lands today with a groundbreaking update to ATT&CK's threat detection taxonomy. This restructuring—announced during ATT&CKcon by MITRE ATT&CK defense lead Lex Crumpton—will help cybersecurity teams better connect the dots across adversary behaviors, enabling more effective and informed defenses. Read more on Inside Cybersecurity: http://spklr.io/6047BzpN3 #ATTACKcon #Cybersecurity #ThreatInformedDefense #MITREattack

328

6 Comments