Raffi Jamgotchian

🥁Drumroll, please....We’re thrilled to unveil the Zero Networks + CyberArk Integration live at this year’s CyberArk #Impact Conference, April 9–11 in #Boston! For the first time (in foreverrr🎵), #CyberArk customers can close privileged ports like 3389 (RDP) without adding friction to authentication or logon workflows. This game-changing integration enhances security by ensuring all RDP connections are routed through CyberArk's Privileged Session Manager (PSM). 📅 Don't miss Nicholas DiCola breakout session on Thursday, April 10th, 2:30 – 3:15 pm ET to get an expert’s view on how the integration: ✔️ Ensures operational continuity ✔️ Protects every asset with network #microsegmentation—stopping lateral movement and #ransomware in their tracks ✔️Applies Just-in-Time (JIT) #MFA at the network layer for airtight access control ➕More on the integration here: https://hubs.li/Q03g7xgJ0

62

8 Comments

The State of New York has released a series of proposed cybersecurity regulations for water and wastewater systems across the state. Governor Kathy announced the proposals in a public release on July 22, which contain separate OT security requirements for water management firms from the New York State Department of Health (DOH) and New York State Department of Environmental Conservation (DEC). https://lnkd.in/gPWdMq-T

18

🚨 Phishing Alert in K-12: NJDOE Impersonation Campaign 🚨 The NJCCIC recently flagged a phishing attack targeting school districts by impersonating the NJ Department of Education. At first glance, the email looks official: ✔️ Subject: NJDOESECURE: Charitable Grant Details Report ✔️ NJDOE logos and formatting ✔️ A button to View Grant Details Report Here’s the catch: ⚠️ Users are led to a fake login page ⚠️ Attackers steal credentials and MFA codes ⚠️ The “secure document” never appears Why it matters? K-12 districts are prime targets because attackers know: 🔴 Educators juggle too many priorities 🔴 IT teams are often understaffed and underfunded 🔴 Grants and funding emails are perfect social-engineering lures 📊 The FBI IC3 Report shows nearly 1 in 3 ransomware attacks last year hit education, with phishing as the leading entry point. 💡 3 key takeaways for K-12 security teams: 1️⃣ Don’t trust, verify unexpected requests 2️⃣ Harden email defenses beyond legacy tools 3️⃣ Act fast: reset credentials, revoke tokens, and check inbox rules 👉 The bigger picture: Email is still the #1 attack vector in education. Teachers shouldn’t have to spot every fake. At Abnormal AI, we help school districts stop these attacks by blocking advanced phishing, account takeovers, and social engineering that slip past traditional defenses. 💬 If you’re seeing the same threats in your school system and want to stop them, let’s connect. Reach out to schedule time to learn how Abnormal can help. 🔗 Full Article: https://lnkd.in/eaJFBWtH #Cybersecurity #K12Education #EmailSecurity #PublicSector #Phishing #AbnormalSecurity #AbnormalAI New Jersey Association of School Technology Officials (NJASTO)

19

$4.88M per breach. 258 days to contain. 62% of alerts ignored. “Which 5% of alerts carry 95% of your business risk?” If your team can’t answer that, you're not protecting your organization  You’re just hoping your luck holds. After two decades in cybersecurity from OT networks to financial systems, one truth keeps surfacing: The problem isn’t visibility. It’s clarity. Your stack can have it all: ✅ SIEM. ✅ EDR. ✅ NDR. ✅ UEBA. ✅ Threat intel. And still miss the one signal that costs you millions. 📊 The hard numbers: Average breach cost (2024): $4.88M Time to detect + contain: 258 days 62% of alerts ignored due to fatigue SOCs juggle 90+ tools, but lack true insight Turnover > 25% annually from burnout We keep investing in controls but judgment remains the missing control. 🧠 What the best teams do differently: 🔍 Risk-Based Triage – Prioritize based on revenue, safety, compliance 🔗 OT/IT Correlation – Eliminate silos; attackers don’t respect architecture 📌 Asset Criticality Mapping – What’s truly business-critical guides the queue 🧠 AI Signal Extraction – Use automation to reduce noise, not create more 🎯 Kill Chain Scoring – Understand intent, not just indicators 💼 What that unlocks: A global energy provider shifted from reactive to real-time by deploying: Contextual enrichment Asset mapping AI triage The result? ✅ 78% alert volume reduction ✅ 46% faster MTTD ✅ $3.1M saved annually in cost of response + analyst efficiency 🧭 Ask yourself again: “Which 5% of alerts carry 95% of your risk?” If you don’t know, you’re not in control. You’re reacting hoping today isn’t the day. Cybersecurity isn’t about collecting alerts. It’s about knowing what to do when they light up. That’s the kind of leadership modern SOCs demand. #CyberSecurity #CISO #SecurityLeadership #SOC #RiskBasedAlerting #AIInSecurity #OTSecurity #SignalOverNoise #MITREATTACK #IncidentResponse #CyberResilience #CyberROI

261

31 Comments

Every organization needs an effective threat detection solution to withstand today's increasing cyberattacks. But is an MDR or EDR solution the best way to go? Discover the benefits and challenges to each approach, and determine which makes sense for your business on your journey to achieve an ideal security posture.

29

🚨 Contractors are under pressure to meet CMMC 2.0 requirements—but the top performers are already ahead of the game. What do they have in common? ✅ Smart planning ✅ Strong partnerships ✅ A proactive security-first mindset The new Coalfire and Kiteworks State of CMMC 2.0 Readiness Report reveals what’s working (and what’s not) based on insights from 209 real contractors. Don’t get left behind. Read the full report now! ⤵️ https://ow.ly/EkYo50VLqU3 #CMMC2 #CyberRisk #ComplianceMatters #CyberReadiness

25

2 Comments

🔥 The Margin Crisis is Real Margins across MSSPs and MDRs are collapsing. Labor costs are rising 15–25% YoY, while client fees stay flat. Every extra hour of analyst overtime erodes profitability 📉. Every departure costs 1.5–2x salary in replacement costs. This is not sustainable. Nearshore staffing offers a way out — 40–60% savings on Tier 1/2 roles while keeping SLAs intact. Read how:

7

3 Comments

🚨 In Active Directory, many of the most common risks are also the most overlooked. Semperis’ Identity Forensics & Incident Response team shares the 10 most common—and dangerous—AD vulnerabilities they see, and Senior Identity & Security Architect Huy Kha explains how to eliminate them from your identity system. 📖 Read the full breakdown: https://lnkd.in/gc-ag77w #IFIR #ActiveDirectory #IdentitySecurity

15

1 Comment

Three major changes are coming to the world of public certificates, all of which require major changes in how organizations deploy, renew, and manage their certificates. These are 47-day SSL, PQC, and the deprecation of mTLS. On the Root Causes Podcast Jason Soroko and I describe the overlap between these efforts and how to combine them for better efficiency and project management. Audio: https://lnkd.in/g84_quAg Video: https://lnkd.in/gaGXSsij

35

2 Comments