Virtual CISO Leads

Brandon Griffin's reaction on Huntress's post

Here’s a new twist on a threat that pairs two tactics from our Tragic Quadrant. It starts with a little AI platform abuse and runs straight into ClickFix. A "Service Availability Notice" tells users that ChatGPT is down and directs them to a Google Sites domain. From there, the page presents as a Cloudflare CAPTCHA check and tells users to copy and paste a command into their Terminal. After a user pastes the command, the ClickFix lure kicks off an attack chain that ends with a remote access tr

Raj Atwal's reaction on Aron Lange's post

LLMs have worsened the documentation problem. Organizations have always had the following problems: - Too many documents - Use of handbooks, manuals, concepts and other undefined document types - Unclear separation between procedures and standards With AI, the effort to create documentation has basically vanished. It's easier than ever before to generate documentation nobody needs. What we need more than ever before is clear rules on what a proper documentation looks like. The good news is,

Matt Hightower's reaction on Andrew Morgan's post

The FTC's current probe into the Frontier AI companies, makes me wonder about MSPs cyber coverage for themselves and their clients. What are your thoughts 👇. If your client's own AI agent causes a breach, their cyber policy might not cover it. Most policies pay out when an outside attacker gets in or an employee gets tricked. But when an agent causes the damage, it was authenticated. Its actions were authorized. Nobody was "tricked" into doing something by a threat actor. An insurer could argu

Martin S.'s reaction on Huntress's post

We've partnered with ALSO Group to bring the Huntress Agentic Security Platform and our 24/7 SOC to VARs and MSPs across 31 European countries. "ALSO gives us the combination of European scale and local market expertise we need to reach more partners without compromising the regional support and relationships businesses deserve." – Kevin Hallmark, Head of Global Distribution at Huntress. Through the ALSO Cloud Marketplace, partners can now purchase Huntress and manage their subscriptions from

Edouard von Herberstein's reaction on Andrew Morgan's post

79% of companies running AI agents have no documented policies for them, according to research by EMA and Ory Corp. We spent years getting user identities under control with MFA, conditional access and least privilege. Agents need the same controls. This summer, OpenAI's agents accessed Commerce Department and SEC websites. In Australia, they got into non-public parts of the Medicare site, and it took two months for anyone to notice. The FTC chairman said last week that the people instructing

Walter Raquet's reaction on Chuck Brooks's post

Next-Gen Artificial Intelligence and Autonomous Risks: Why AI Supply Chains Need SBOMs | CyBeats By Chuck Brooks https://lnkd.in/ez7adUZJ #sboms #ai #cybersecurity CyBeats

Connor Swalm's reaction on Tom Lawrence ✅'s post

Attackers Have Technical Problems. Defenders Have Political Ones. Attackers need to understand what they are attacking, how to attack it, and how to turn access into whatever they are after. AI is shrinking that learning curve. It helps attackers map infrastructure, find flaws faster, and produce more convincing lures to use against users. Defenders have the opposite problem. It is not "we don't know what to do." Frameworks like CIS are not exotic ideas; they are approachable, practical paths

Slava Brodskiy's reaction on Rob Black's post

My wife when I solve complex cybersecurity challenges:

Euan Miller's comment on Aron Lange's post

I think this is where people can get a bit mixed up. A framework requirement isn’t the same thing as an operating control. The useful question is what the organisation actually does, who does it, how often, and what evidence shows it worked. A control statement can describe the intent, but the control lives in the process.

David Vozzola's comment on Gerald Auger, Ph.D.'s post

Congratulations!

Trey Rutledge's reaction on Chuck Brooks's post

Sharing a link to 50 of my GovConWire articles on #security, #cybersecurity, #innovation in #government, and #GovCon, and also on AI and quantum topics. Thanks for checking them out! Chuck Brooks https://lnkd.in/ex_cF4AV