Exeter Finance’s Post

If your tech is so old it belongs in a museum, it might be time to rethink your strategy before your budget becomes a fossil. Let’s modernize your IT landscape – archaeology should be left to the professionals.     If you're an accounting firm, payroll provider, or umbrella company looking for waffle-free IT services in Hampshire, that's what we do, so we should talk.    #itsupport #hampshireitsupport #HampshireIT #managedservices #cybersecurity  

If your tech is so old it belongs in a museum, it might be time to rethink your strategy before your budget becomes a fossil. Let’s modernize your IT landscape – archaeology should be left to the professionals.     If you're an accounting firm, payroll provider, or umbrella company looking for waffle-free IT services in Hampshire, that's what we do, so we should talk.    #itsupport #hampshireitsupport #HampshireIT #managedservices #cybersecurity    

David Bianco is a Staff Security Strategist on Splunk’s SURGe research team. He is also a SANS Certified Instructor, where he teaches network forensics. David has more than 20 years of experience in the information security field, primarily in incident detection and response, threat hunting, and Cyber Threat Intelligence (CTI). He is the creator of both the Pyramid of Pain and the Threat Hunting Maturity Model, both widely cited defensive security models. Really, he just wants to make security better for everyone, and he has a special interest in helping people get started in their cybersecurity careers. You can follow David on Twitter as @DavidJBianco or on Mastodon as @DavidJBianco@infosec.exchange. "My Way is Not Very Sportsman-Like: Shaping Adversary Behavior to Strengthen Defenses" We’re taking a fresh look at how to beat cyber attackers at their own games! It’s all about using our defender advantages wisely, controlling, constraining, and shaping the adversary’s moves before the attack even begins. We're ditching the old ""Defender’s Dilemma"" mindset and showing how smart defense strategies can make a huge difference. Let’s shift our thinking, use our advantages better, and boost our defense without breaking the bank. Come see David J. Bianco at RVAsec 13! https://lnkd.in/ee2eWq4v

Let’s talk about employment scams! 🚨 If a job offer sounds too good to be true, it probably is! These scams can trick you into giving up personal information or even money. Always verify the company and trust your instincts—your dream job shouldn’t come with red flags!🚩 #GoldPhish #CyberSecurity #CyberSecurityAwareness #GetCyberSavvy #CyberAwareness #SecurityAwarenessTraining #CyberSecurityAwarenessMonth #Scams #Employment

What If Cybersecurity Started at Home? Introducing BeHardtoHack.com - Building Resilience for Families and Businesses. At Toro Digital, we’re all about building resilience for businesses. But let’s be real, while our work lives demand a lot of attention, it’s our personal lives, families, and homes that matter the most. So why do we spend hours talking, training, and educating ourselves about cybersecurity for work yet rarely apply the same focus to protecting the people and things we hold most dear? That’s where BeHardtoHack.com steps in. Cybersecurity for Your Personal Life BeHardtoHack.com is built on one simple truth: the same resilience we champion for businesses can (and should) extend to our personal lives. Our homes are full of connected devices, our kids are navigating a digital world, and our personal data is constantly at risk. Yet, we rarely take the time to learn how to secure ourselves and our families. Through easy-to-understand guides, training, and practical tips, BeHardtoHack.com helps families: • Stay safe online by teaching digital hygiene for all ages. • Secure their devices with simple, actionable steps. • Navigate cyber risks like phishing, scams, and identity theft. It’s about building resilience where it matters most, at home. The Professional Crossover Here’s a bonus: executives and team members who understand resilience in their personal lives naturally carry that knowledge into the workplace. Whether it’s better password practices, sharper awareness of phishing attempts, or even using multi-factor authentication (MFA) without complaint, these personal habits elevate an organisation’s overall cybersecurity posture. And as we navigate an increasingly interconnected world, this crossover matters more than ever. Your team isn’t just defending corporate systems, they’re part of a larger digital ecosystem that includes their homes, families, and personal devices. The ESG Angle: Security as a Shared Responsibility From an ESG (Environmental, Social, and Governance) perspective, encouraging personal cybersecurity isn’t just a nice-to-have; it’s a smart investment in your people and your company’s reputation. Promoting personal resilience shows you value the well-being of your employees beyond the workplace. It reinforces that security is a shared responsibility, one that starts at home and extends into the professional realm. Why Not Share This With Your Team? Why stop at personal use? Encourage your team to explore BeHardtoHack.com. • Share it as part of your next team meeting or training session. • Use it to complement your workplace cybersecurity efforts. • Position it as a practical resource they can use to protect their loved ones. Because the stronger we are at home, the stronger we’ll be at work. Let’s build resilience together, at home and at work.

I get asked this all the time, so what better way to learn about it than from the team itself? Keep reading to learn how Canary Trap came about and what we represent 🔗🦾 #CanaryTrap #OffensiveSecurity #PenTesting #EthicalHackers

What an amazing ride into knowing major career paths in the field of cybersecurity 😍 . we have career types like: * Penetration Testing * Security Analyst * Security Engineer * Malware Analyst * Digital Forensics Examiner * Red Teamer * Incident Responder To fuel you knowledge you could also see this movies, personally i have not seen them but would. * Terminator * Back to the future * Matrix * Jurassic park * Indiana jones #careersincybersecurity #cyberlearn #tryhackme #proudcybergirl #cybergirlsfellowship #cybersafefoundation #yourtogopentester #voraciouslearner

🔵 I'd like to spotlight one of my favourite tools - Velociraptor! 🔵 For any professional involved in threat intelligence and forensic investigations, having the right tools is not a luxury, it's a necessity. One tool that has become indispensable to me is Velociraptor, an open-source resource that excels in providing flexible and scalable solutions for forensic investigations at lightning speed. With its capability to gather and analyze data quickly, Velociraptor offers a significant advantage in our fast-paced digital world where prompt threat detection and response are paramount. It allows for proactive threat hunting and incident response, making our digital environments safer. How about you? Do you have a toolkit you can't operate without in your line of work? #ThreatIntelligence #IncidentResponse #CyberSecurity

https://lnkd.in/g7JTvrrN? I appreciated the post and enjoyed reading the article. Here are some thoughts I have on it: “Worse, FedRAMP guidance requires companies to bypass or eliminate all systematic controls during the tests to ensure the likelihood of a person clicking on a phishing link is artificially maximized.” The purpose of a phishing test is to assess an email user’s ability to spot (and defend against) an email crafted using techniques similar to threat actors. The “user phishing exercise” has no interest in testing phishing/spam/security controls. That is a valid test and should be done, however that isn’t the objective of the test. “Some (e.g, FedRAMP) phishing tests require bypassing existing anti-phishing defenses. This creates an inaccurate perception of actual risks, allows penetration testing teams to avoid having to mimic actual modern attacker tactics, and creates a risk that the allowlists put in place to facilitate the test could be accidentally left in place and reused by attackers.” I’ve heard these comments about security my whole career on an assortment of security assessment methods used. An example is pushback against white/gray box Pen testing because IT says “the pentest team should have to go through all the controls a hacker would have to go through.” That’s fine, that’s a certain kind of test with a specific objective. There is still value having a pentest when the attackers are “allowed into” the network to snoop around and look for vulnerabilities simulating if a valid user unknowingly let a threat actor into the trusted environment…which happens…. a lot. “There has been a significantly increased load on Detection and Incident Response (D&R) teams during these tests, as users saturate them with thousands of needless reports. “ What?!?! This seems like a weak point. Either inform them there is a test going on and ignore the reports or include them in tests and use the experience to “drill” your Response to phishing emails. “At larger enterprises with multiple independent products, people can end up with numerous overlapping required phishing tests, causing repeated burdens.” This is very true and needs serious consideration by Cyber teams. “In short - we need to stop doing phishing tests and start doing phishing fire drills.” This statement seems like word play instead of anything substantial. I support the list in the article of what the author includes in a “phishing fire drill”. My initial impression of the article is it seems to challenge phishing tests as a general practice, which I disagree with. If the point they are making is our “Cyber Awareness Program’s “phishing” component should use positive reinforcement instead of penalizing users when they get it wrong, then I agree. Seems like a lot of pushbacks on “Phishing Tests” just to change the name to “Phishing Fire Drills”. 

One of IANS' most popular reports just went live this morning - the 2024 CISO Compensation Benchmark Report. With insights collected from 750+ CISOs, this report provides: --> A detailed look at compensation trends for CISOs, including data broken down by region and industry. --> A breakdown of factors that contribute to compensation increases for CISOs. --> Benchmarking data on contractual perks/benefits for CISOs, including D&O insurance coverage and specialized severance packages. --> Anecdotal perspectives to help you contextualize the data and use it for your career planning. Reach out if you're curious to see the full report 👀