Sharma Upadhyayula

As the Internet of Things continues to transform industries and our daily lives, it's becoming increasingly clear that traditional #Identity and #AccessManagement (#IAM) solutions aren't equipped to handle the unique challenges posed by #IoT environments. As we embrace the future of #connecteddevices, evolving our IAM practices to meet the scale and diversity introduced by IoT is not just a necessity—it’s essential for ensuring robust security, seamless operations and enabling the foundation for #ZeroTrust. Join us for an engaging discussion on "Identity Transformation: The Next Wave in IAM Solutions," scheduled for 22nd June, hosted by the Cloud Security Alliance Bangalore Chapter and sponsored by Target. Register Now: https://lnkd.in/gtTjBE-j #IoT #Cybersecurity #IAM #Blockchain #DigitalTransformation #IoTSecurity #DecentralizedIdentity #CyberResilience #DataProtection #TechInnovation #Identity #Authentication #Authorization #LifecycleManagement #LeastPrivilegeAccess #DataPrivacy

29

1 Comment

Hi Everyone! I'll be hosting a panel discussion on "The Advent of AI: Adapting to Emerging Threats and Balancing The Offensive and Defensive" at BSidesGoa this weekend! If you're attending the conference, be sure to stop by for this insightful discussion. It would be great to catch up and chat about AI in cybersecurity! Cyware Security BSides Goa #BSidesGoa #AI #Cybersecurity

50

1 Comment

🤩Exciting Coverage from CRN on Our Newly Launched Partner Program, Securonix Elevate!🤩 🎤 Dive into the interview with our Vice President of Strategic Alliances, Mark Stevens and our partner Cybalt about the launch of Securonix Elevate and the tremendous benefits it brings for our partners: https://lnkd.in/gffwrr_2 Key features include: 🔹 New pricing based on GB/day consumption model 🔹 AI-Reinforced Capabilities in Securonix EON 🔹 Enhanced partner enablement and certification 🔹 Standalone UEBA solution 🔹 Referral model for Agents and Affiliates 🔹 OEM technology licensing 🔹 Co-branded partner marketing and enhanced MDF program 📜 For more detailed information, read our press release: https://lnkd.in/gWTgBnmU #Cybersecurity #AI #CyberOps #PartnerProgram #AIReinforced #TDIR #SIEM #InsiderThreats #AIReinforced #GenAI #SOC #CyberOps

8

In conversations about cyber risk quantification people will often refer to enterprise risk, vendor management/TPRM, and cyber insurance quantification all as confused interchangeable blobs. Vendors in these related spaces are more than happy to blur the lines as well. Yes these are related but how they are related to each other matters. Three clarifications: 1: Enterprise cyber risk management (ECRM) is the core problem. This is part of the root of the overall risk management tree for organizations which includes all aspects of enterprise risk. This is the actual full problem companies are trying to solve. 2: In order to answer the ECRM question companies need to address the risk introduced by third party relationships as it contributes to overall cyber risk - this is TPRM for cyber risk 3: Cyber risk insurance represents the residual portion of ECRM (including data breach risk, third party cyber risk, privacy risk, legal risk etc.) that could not be mitigated with controls and must be transferred - this is the portion of risk an organization chooses to offset with insurance payments A comprehensive view of ECRM would be based on data that allows an organization to view internal and external views of risk posture(lets start here), including third party relationship risks. For ECRM, an organization should be able to request access to another partner organizations ECRM data/reports. An insurance carrier should be able to request access to an organizations ECRM view for underwriting. Consistency, structure, transparency, accuracy. This is the dream. This is the hope.

12

5 Comments

If you're curious about how NodeZero is setting new standards in cybersecurity, I highly recommend reading this insightful discussion from Cyber Defense Magazine!

4

🚨 Exciting yet concerning times for Recall users! 🚨 In response to recent public outcry, Recall is rolling out new security accouterments. While this move is commendable and evidently intended to bolster confidence, one must wonder: will these updates be enough to quell overarching concerns? 🔍 Security-enhancement steps can certainly provide a sense of relief, but consistency and transparency in their application are crucial. Trust isn't built overnight, it requires ongoing commitment and evidence of progress. In the evolving landscape of digital security, users want not just immediate solutions but long-term guarantees. Will Recall's security enhancements set a new benchmark or just be a fleeting try to pacify critics? 🛡️ Let's closely monitor how these measures play out in real-time. The key lies in implementation and regular updates, coupled with user feedback integration. Only time will tell if Recall can rise to the challenge. #CyberSecurity #DigitalSafety #TrustAndTransparency #RecallUpdates

1

Organizational Cybersecurity Hinges on End-User Satisfaction: The critical role end-user experience plays in organizational security By Amitabh Sinha, CEO and Co-Founder of Workspot In an era of sophisticated cyber-attacks, security leaders are feeling the pressure to […] The post Organizational Cybersecurity Hinges on End-User Satisfaction appeared first on Cyber Defense Magazine. https://lnkd.in/ggFT5zv4

2

CISA's Deputy Director Nitin Natarajan underscores the inevitability of cyberattacks on healthcare providers. He emphasizes the need for resilience and proactive defense measures to mitigate risks effectively. Moreover, as healthcare organizations face budget constraints, leveraging free federal resources becomes crucial in bolstering cybersecurity defenses. Natarajan advocates for a shift towards a "secure by design" approach to ensure robust protection against cyber threats in the long term. I'd add the significance of addressing the C-suite's potential inability to seize cyber opportunities, stressing the importance of leadership alignment and investment in cybersecurity measures. Cybersecurity initiatives work best backed by leadership support. #HealthcareCybersecurity #CSuiteLeadership #CyberRisks #HealthcareSecurity

5

#newphase #cybersecurity #Watchguard Exciting times ahead as we embark on a new phase in cybersecurity with ThreatSync+ NDR. This cloud-based solution is here to revolutionize threat detection and response, offering unparalleled protection for your organization. Here's what it brings to the table: Advanced Threat Detection and Response: Harnessing the power of AI and ML, ThreatSync+ NDR provides state-of-the-art detection and response capabilities, ensuring your network remains secure against evolving cyber threats. Comprehensive Network Analysis: Continuously monitor and analyze data flows, covering both north-south and east-west traffic, to detect and neutralize potential threats effectively. Vendor-Agnostic Compatibility: Designed to integrate seamlessly with multi-vendor networks, including WatchGuard Fireboxes, third-party switches, and firewalls, ensuring flexibility and ease of deployment. Executive Summaries and Ransomware Protection: Stay informed with clear executive summaries and robust protection against ransomware attacks, safeguarding your data and operations. Optional Compliance Reporting: Add-ons offer continuous compliance reporting for a range of cybersecurity standards, including Cyber Essentials Certification, FFIEC, ISO 27001 (2013 and 2022), Motion Picture Association Content Security Program, NIST 800-53, NIST 800-171, and NIST CSF. Custom Reporting Toolkit: Tailor reports to your specific requirements with a user-friendly toolkit for creating custom reports, ensuring you get the insights you need. With ThreatSync+ NDR, your organization can proactively defend against threats, maintain regulatory compliance, and achieve peace of mind in an increasingly complex cybersecurity landscape. #cybersecurity #ThreatSync+ #NDR

2

This partnership marks a pivotal moment in the automotive industry. This not only helps dealerships with encrypted digital exchange but ensures the safeguarding of sensitive information and streamlining business operations with Botdoc. KPA is the leader in compliance solutions. Our team is geared up to support the auto industry given the recent and ongoing cyber attacks. Its not just about compliance but rather BEING compliant to protect the consumers information against attacks. Our teams values align, our mission is in unison to educate dealerships on #cybersecurity and compliance. This brings us together as a cohesive team. #automotive #compliance #FTCsafeguards #innovation #technology #future #futurism #productivity #management #education Federal Trade Commission Our teams are ready to help: https://lnkd.in/g9JyWTBn

27

1 Comment

Just came across a new fraud MO Where in Fraudsters are targeting working professionals through social engineering tactics aimed at installing malware on your systems. I received a call from an unfamiliar number. The caller, a woman, initiated the conversation. Caller: Hello, may I speak with Mr. Chetan? Me: Yes, please tell me. Caller: You are working as of Director of Product Management, correct? Me: Yes, that's correct. can you please tell me what is this call about? Caller: I'm calling from Technology Solutions. Me: okay. Caller: There's a recent report released by VISA regarding QR and Mobile Wallets. It's recommended reading for leaders like yourself. Understanding your busy schedule, I can email it to you for offline reading. Me: Internally questioning the motive behind the request to review a report published by VISA Caller: May I have your official email ID, please? Me: lightbulb moment-- Opps this is a Scam Me: I'm sorry, I'm not interested. Disconnects the call. Be Alert and Be Safe. Never click or open any attachments from emails an unknown sender. Report the email as SPAM. #frauddetection #fraudprevention #payments #banking #rbi #fraud #financialcrime #financialinstitutions #bank #productmanagement #scam #upi #npci #phishing #safety #scam #fintech #legal #socialengineering #cybercrime #india #goi #telecoms #sms #whatsapp #website #sms #truecaller

20

1 Comment

You know what I really missed at the recent Accel Cybersecurity Conference in Bangalore? I truly missed Demand Side Talks. 𝗪𝗵𝗮𝘁 𝗮𝗿𝗲 𝗗𝗲𝗺𝗮𝗻𝗱 𝗦𝗶𝗱𝗲 𝗧𝗮𝗹𝗸𝘀? Demand side talks are when buyers share more about what are they trying to accomplish, what success looks like for the buyer and user and the org itself. 𝗪𝗵𝘆 𝗱𝗶𝗱 𝗜 𝗺𝗶𝘀𝘀𝗲𝗱 𝘁𝗵𝗶𝘀 𝗸𝗶𝗻𝗱 𝗼𝗳 𝘁𝗮𝗹𝗸𝘀? Unlike a 100% technical security conference, the Accel Cybersecurity Summit was geared for security product founders plus buyers. While there were selected talks there were also a few invited speakers. This is how I saw the event. Leaning more towards an industry event as opposed to being purely technical like a NULLCON The following kind of talks/tracks for next time will make this conference super valuable 𝗥𝗲𝗮𝗹 𝘄𝗼𝗿𝗹𝗱 𝗰𝗮𝘀𝗲 𝘀𝘁𝘂𝗱𝗶𝗲𝘀 𝗼𝗳 𝘀𝘂𝗰𝗰𝗲𝘀𝘀𝗳𝘂𝗹 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝘀 • What did they had to overcome internally to implement • How long did it take for success criteria being met • How did the product vendor navigate the sale 𝗖𝗮𝗻𝗱𝗶𝗱 𝗧𝗮𝗹𝗸𝘀 𝗳𝗿𝗼𝗺 𝗖𝗫𝗢𝘀 𝘄𝗵𝗲𝗿𝗲 𝗽𝗿𝗼𝗱𝘂𝗰𝘁 𝗮𝗱𝗼𝗽𝘁𝗶𝗼𝗻/𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 𝗳𝗮𝗶𝗹𝗲𝗱 • Even if Jobs To Be Done alignment was in place • Products implemented due to regulations didn't work • What other non-functional factors became reasons for failure 𝗖𝗜𝗦𝗢 𝗣𝗮𝗻𝗲𝗹𝘀 𝘀𝗵𝗮𝗿𝗶𝗻𝗴 𝗮𝗴𝗴𝗿𝗲𝗴𝗮𝘁𝗲𝘀 𝗮𝗻𝗱 𝗱𝗶𝘀𝗰𝘂𝘀𝘀𝗶𝗻𝗴 𝘁𝗵𝗲 𝗻𝘂𝗺𝗯𝗲𝗿𝘀 • Typical split in the security budget they have • Field notes on which kind of spend works • Notes on kind of spend that always fails Currently a lot of what we know and believe comes from analysts • Usually a very US 🇺🇸 centric enterprise view not useful for most orgs • Very category focussed which assumes that integration isn't tough • Incentives that don't necessarily align with operational security As more and more security teams are under pressure to reduce costs all the time, this kind of discussion will empower the next gen of cybersecurity managers. This conference is an excellent opportunity for all of us in the ecosystem to come together and learn from each other, skills, tactics and strategies not found elsewhere. Looking forward to the next one. #cybersecurity #cloudsecurity #conference --- After spending 2 decades offering specialist application and cloud security guidance I firmly believe security needs to be made effortless. Follow along as I learn how to build a company in cloud security 🔔

35

7 Comments

Read the customer story to learn how eSentire MDR delivered superior visibility, correlation, and protection from cloud-specific threats, 24/7 detection, and expert support that enabled Venerable to stay ahead of cyber threats. DM us to discuss how eSentire can help your organization achieve comprehensive threat response, visibility improvement and endpoint protection. @eSentire

1

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

186

2 Comments

When the SolarWinds and Codecov breaches unfolded, Ashish Kurmi and I were driving CI/CD security initiatives at our previous employers. The glaring lack of security in CI/CD pipelines that these incidents highlighted compelled us to start StepSecurity. We looked around, spoke with peers, and realized there was no solution to prevent such CI/CD attacks. So, a couple of years back, we started building our product in the open and offered it for free to help secure CI/CD pipelines for open-source developers. Little did we know that it would be the beginning of something special. 🎉 Today, we are thrilled to announce that StepSecurity has secured $3 million in seed funding to protect CI/CD pipelines for open-source communities and enterprises. This round is led by Runtime Ventures (David Endler and Michael Sutton), with participation from Inner Loop Capital (Justin Label), SaaS Ventures (Collin Gutman and Seth Shuldiner), DeVC (Aakash Kumar and Divyanshi Chowdhary), and several notable industry leaders as angel investors, including Anmol Malhotra, Ash Devata, Ashish Popli, David B. Cross, Deepen Desai, Kamal Shah, Lucas Moody, Prabhdeep (PD) Singh, Rinki Sethi, Sekhar Sarukkai, and Travis McPeak. 🚀🚀

404

79 Comments

Solving the challenges of last-mile authentication and ensuring persistent authentication is the key to combat threats from malicious actors. Watch KC Reddy, Co-Founder and CEO of Ensurity, share his take on this topic of concern for enterprise CTOs. What are your thoughts on this issue? Amit Mathur Sreenivas Konkepudi Rajkumar Kotha #CyberSecurity #Ensurity #LifeAtEnsurity #Networksecurity #CyberAttacks #IdentitySecurity #IdentityManagement #DataPrivacy #DataSecurity #CyberRiskManagement #Authentication #EnterpriseSecurity #DataProtection #ITSecurity #CyberDefense #CyberSafety #Biometric #MultiFactorAuthentication #MFA #CyberSecurity #OnlineSecurity #2FA #DigitalSecurity #IdentityProtection

17

At REDeFiNE TOMORROW 2024, Sreeram Kannan, CEO and Co-founder of Eigen Labs, and Andrew Vranjes, VP of Sales and GM of Blockdaemon, discussed "Pioneering Permissionless Innovation and Robust Security for All Protocols." Their conversation focused on fostering permissionless innovation and robust security within the blockchain ecosystem. Here are the key takeaways: Sreeram revealed that Eigenlayer aims to foster innovation on the Ethereum network by providing a platform for developers to write and submit code to the network that manages validators, without the need to create new validator sets. . Eigenlayer's goal is to create permissionless innovation or protocols that everyone can utilize for additional services such as oracles, new chain creation, AI protocols and decentralized identity verification. . Sreeram explained Eigenlayer's concept of shared security, which allows various protocols to leverage Ethereum's decentralized security system. Those who want to stake must confirm that they will run multiple protocols correctly, not limited to Ethereum, to ensure a free market. . Regarding mainnet features, users can stake ETH or liquid staking tokens (LSTs) and delegate transaction validation to others. Node providers or operators can choose which services to validate (AVSs). There are plans to introduce a payment system and slashing mechanisms for malicious actors in the future. . Eigenlayer is developing a pricing model based on market factors and fees/rewards to ensure fair pricing for shared security. . EigenDA (Data Availability) is the first AVS designed for increased scalability, enabling Layer 2 to handle more transactions, starting at 10 MB/s and aiming for 100s of MB/s or even GB/s in the future. . EigenDA provides data availability services such as long-term storage of large amounts of transaction data for rollups, ensuring consistent access to block space without competition from new players like NFTs. . Eigenlayer's ability to store and access data massively and quickly enables new technologies that can leverage large amounts of data, such as faster EVMs, Move VM, and the ability to run Node.js applications directly on the Eigenlayer network. . Sreeram views AVSs as a way to build decentralized applications by combining existing services (e.g., oracles, bridges, data storage) with custom code, similar to building web services using existing SaaS and adding specific functionality. . Building crypto applications enabled by Eigenlayer's AVS ecosystem has the potential to significantly increase the scope and diversity of decentralized services. . Eigenlayer has ambitious goals to expand data availability solutions, support a wide range of decentralized services, and create a more open and accessible ecosystem for developers. . Eigenlayer continues to develop mainnet features and welcome new AVSs, playing a crucial role in advancing crypto infrastructure. . Watch this session on Youtube: https://lnkd.in/g7De8chF

3

1 Comment