Joe Ryan

Is security enough for data protection ? Or do we need a little more ? ISMS, or information security management systems are designed to protect information, confidentiality, integrity, availability. Now, when using SFTP, the files are perfectly secure from a transfer standpoint, but, what about governance ? Audit capability ? Access control ? That's where the gap is. And yes, having an authentication bringing audit capability is also a factor in data governance. 👉 https://gag.gl/2ZxYDE #cybersecurity Kiteworks #governance #SSH #SFTP

17

5 Comments

📢 New Feature Release | Automated Endpoint Compliance It’s not just a launch. It’s a leap forward! Scalefusion Veltar introduces Automated Endpoint Compliance—because chasing down misconfigurations and non compliance is so last year. ✔️Enforce CIS benchmarks with precision ✔️Auto-remediate policy violations ✔️Gain real-time compliance visibility ✔️Leverage Apple-specific compliance controls Explore the feature: https://hubs.la/Q03kst3p0 #Veltar #ComplianceAutomation #EndpointSecurity #UEM #CISBenchmarks #macOSManagement #EnterpriseIT #Scalefusion

24

1 Comment

Compliance is directly impacted by inactive user accounts in your Active Directory. Ignoring them could result in fines of millions of dollars for violations of SOX, GDPR, and HIPAA. https://hubs.la/Q03JWvsn0 #ActiveDirectory #InactiveAccounts #ComplianceRisks

17

🚨 Active Directory security exposures aren’t just audit reports — they should be actionable events. In today’s video, I walk through how to take PingCastle — a free & powerful AD security assessment tool — and turn its findings into structured events your SOC can actually use in Wazuh. https://lnkd.in/gqJmnXZj

73

SIEM Without Compromise ☝ A Practical Guide for Security Leaders Done Making Tradeoffs ☝ What You’ll Learn in This Ebook: ➡️ The 3 biggest friction points legacy SIEMs create—and how to eliminate them ➡️ Why flexible ingest and real-time correlation are becoming table stakes ➡️ How to modernize detection without drowning in false positives ➡️ The role of explainable AI in accelerating investigations (without the guesswork) ➡️ What a truly scalable, hybrid-friendly SIEM platform should look like Whether you’re planning your next migration or reassessing your current toolset, this guide gives you a clear roadmap to SIEM that works with you not against you. Download our new report here: https://lnkd.in/dM-u3Mz4 #security #SIEM #logmanagement #cybersecurity #graylog

17

🔥 The Margin Crisis is Real Margins across MSSPs and MDRs are collapsing. Labor costs are rising 15–25% YoY, while client fees stay flat. Every extra hour of analyst overtime erodes profitability 📉. Every departure costs 1.5–2x salary in replacement costs. This is not sustainable. Nearshore staffing offers a way out — 40–60% savings on Tier 1/2 roles while keeping SLAs intact. Read how:

7

3 Comments

What’s the right operating model: MSP, MSSP, or a single partner delivering both? This guide by Adam Berger outlines core differences, real-world scenarios, and why many mid-market firms now prefer a unified approach with 24×7 SOC + managed IT. Dive in: https://lnkd.in/gzRzWnDT #BoardSecurity #OperationalResilience #MSSP #MSP #NetrixGlobal

14

2 Comments

Building a cybersecurity channel program? Let’s talk about the right way to start (especially if you want fewer headaches and more deals…) If you’re anything like most founders or sales leaders, you’ve probably thought: “We need BIG partners to get reach! More is better!” But after building three-channel programs from zero, Konnor Andersen can tell you: "That’s the fastest way to…spin your wheels, spread yourself too thin, and burn marketing dollars you probably don’t have." Here’s Konnor's secret (and it’s refreshingly simple): - Focus on a small group of smaller partners. Think less than 40 sellers per partner. - Prioritize fit over fame: choose partners right-sized for YOUR stage who have deep connections with YOUR ideal customer. - Resist the urge to collect logos. (Paper partnerships ≠ revenue.) At the end of the day, channel success is about depth, not breadth. Go deep, not wide. Invest where you can actually matter. Build meaningful relationships. (And yes, maybe even spring for some cool swag... just don’t put your logo on the sneakers 😉) If you’re building from scratch, ignore the noise and keep it focused. Your future self and your board will thank you. Konnor talks about all of this on the latest episode of the Cyber GTM Talk podcast. Find it in your favorite podcast player or at cybergtmtalk.com

11

4 Comments

New tools. Sharper workflows. Built for MSSPs 💪🏼 From alert enrichment to credential control, these updates help MSSPs scale faster, reduce noise, and deliver more value to every tenant. Explore the full MSSP program >> https://lnkd.in/dFsDpsMU

24

The MSSP opportunity has never been bigger — and MSPs are in the perfect position to capture it. By 2030, the MSSP market is projected to reach $66.83B–$77B, driven by: - The $4.88M average cost of a data breach - 89% of organizations increasing security budgets - A global shortage of 4.8M cybersecurity professionals For MSPs, the challenge has always been the high barriers to entry: 🚫 $500K–$2M SOC investment 🚫 18–24 months to break even 🚫 $300K–$500K in annual staffing costs 🚫 Complex multi-vendor technology stacks Seceon Inc. changes that equation. With our single unified platform, MSPs can launch as an MSSP for $50K–$150K, break even in 6–12 months, reduce staffing costs, and scale security services without the complexity. It’s time to turn rising cybersecurity demand into recurring revenue — without the traditional roadblocks. 📩 See how you can start your MSSP journey today: https://lnkd.in/eGe66iDd #MSSP #MSP #Cybersecurity #SOC #XDR #CybersecuritySolutions #BusinessGrowth #MSPBusiness #ManagedSecurity #CybersecurityBusiness Tom Ertel Bill F. Maggie MacAlpine Shikha Pandey Alexis Lebron Sarah Sheriff Ed Mohr Manish Karanji Yashesh Vaishnav Bhabani Prasad Mahapatra Khaled Al-Najjar-MBA-CISM Vinay Ojha Sana Anjali Devi Peter Christou

45

🚨 Updated Microsoft 365 Mappings to MITRE ATT&CK🚨  Microsoft 365 (M365) to ATT&CK mapping S serve as a foundation for implementing a threat-informed defense strategy in your M365 Software as a Service (SaaS) environment. The mappings connect ATT&CK techniques with four core M365 product areas: ✅ Microsoft 365 Defender ✅ Microsoft Entra ID ✅ Exchange Online Protection ✅ Microsoft Purview The resources illustrate how M365 security capabilities can protect against, detect, and respond to real-world threats. Understanding how the implementation of M365 security capabilities can mitigate adversary techniques is a valuable tool for organizations to improve their threat-informed defense strategies and enhance their overall security posture. Get the mappings here: https://lnkd.in/ecFMd6d2 Read blog to learn what’s next on our mappings roadmap: https://lnkd.in/ecxcSjuV #Microsoft365 #M365 #ThreatInformedDefense

20

Why Every Vendor is Making Moves in TPRM Acquisitions, rebranding, new positioning, everyone's suddenly TPRM-focused. Here's the real reason why. TPRM isn't just another GRC module. It's where the entire industry's future gets decided. If you think about it, most GRC problems actually originate from TPRM processes. When enterprises accept your SOC 2 report or security questionnaire, they're making TPRM decisions that cascade through the entire compliance ecosystem. The TPRM ripple effect has spawned entire industries: - GRC automation vendors (to expedite time to compliance for startups) - Customer Trust platforms and teams (to display compliance better) - Security scoring vendors (to quantify vendor risk) - Questionnaire automation tools (to handle the volume) - GRC AI offerings (most of them have TPRM as a core) The backbone of TPRM, questionnaires plus third-party assurance, has been gamed for years now. Everyone knows it. SOC 2 reports that barely scratch the surface. Security questionnaires answered by sales teams. Compliance theatre that satisfies checkboxes but doesn't actually assess risk. What's weird is that the law of demand states that the lower the barrier to SOC 2 and to complete questionnaires, the more likely we'll get more SOC 2s and more questionnaires (not less). It's like saying the fact that seatbelts are ubiquitous means they have less intrinsic value. If it ticks all the boxes to be a seatbelt, it will be a seatbelt, no more, no less. Some people thought a seatbelt could also act as an airbag for years. Now it's back to being just a seatbelt, which is all it was supposed to be. Just like seatbelts, SOC 2 has found its proper place as tablestakes, which is precisely why every GRC vendor is boarding the TPRM train. TPRM will define the future of compliance because we are compliant to provide assurance to external parties. When you see all those discussions about commoditisation, you can't help but recognise that automation vendors winning in TPRM is the perfect way to ensure the attestations stemming from their platforms remain relevant. The vendors who recognise this aren't just expanding, they're protecting their entire business model.

40

14 Comments

Critical SAP vulnerability alert - act now 🔴 On April 24, 2025, SAP released a HotNews alert for a severe vulnerability affecting SAP Java systems, recorded as CVE-2025-31324 in the NIST database. The issue relates to a known component that allows unrestricted file uploads, potentially leading to a full compromise of SAP systems⚠️ Your system could be at risk! Find full details and mitigation steps here: 🔗https://lnkd.in/dztepjsa #CVE202531324 #SAPHotNews #SAPVulnerability

36

2 Comments

There are a lot of MSSPs with $10M in revenue. And far, far less with $20M. 📈 For MSSPs, surpassing $10M in revenue marks a critical inflection point. So how do you cross the $10M chasm? Find out in our latest MSSP Alert article: https://lnkd.in/gu3-J7Yh

14