CyberSecShawn

Chief Information Security Architect ; C|CISO ; #ICS #OT Defender ; pardon the pop culture references ; "don't react, respond"

[CyberSecShawn @CyberSecShawn]

“Chance favors the prepared mind” - L. Pasteur. Don’t take chances with #ics #CyberSecurity or #infosecurity. Do the basics (patch, limit admin rights, stop unneeded services, ...) and prepare to respond to incidents, not react to events. It makes you a less attractive target.

[CyberSecShawn @CyberSecShawn]

This week in cybersecurity, a private cellular APN became a route into OT, Trivy may greatly expand the LiteLLM supply-chain exposure, and cyber AI & post-quantum planning require governance decisions.

https://t.co/RnCJFpf7hw

#Cybersecurity #OTSecurity #CISO

[CyberSecShawn @CyberSecShawn]

OT isolation isn’t just a firewall rule. Many operations depend on IT/OT connectivity. The goal is tested, selective isolation that preserves safe, viable operations.
https://t.co/FHJqnVczsN
#OTSecurity #CriticalInfrastructure #Cybersecurity

[CyberSecShawn @CyberSecShawn]

SABSA and Enterprise Security Frameworks: Current State & Enhancement Needs For Modernization
https://t.co/kEXRp0QLKW

[CyberSecShawn @CyberSecShawn]

@thephreck If I have to hear someone say “AI” one more time…

[CyberSecShawn @CyberSecShawn]

@brysonbort I had a very similar run-in last night near my hotel. First time in 4 RSACs where something like that happened. They didn't punch, but they threated it. I just moved around them and kept going. They did throw something but didn't follow. Be safe all.

[CyberSecShawn @CyberSecShawn]

So #RSAC #RSA2024 #RSAConference - who has seen something mind-blowing and innovative? So far things are more evolutionary than revolutionary. Some great stuff, but no big ‘ah ha’ moments yet. I'll revisit this near the end of the week, we’re just getting started.

[CyberSecShawn @CyberSecShawn]

Understanding the New Cyber Threat: Autonomous LLMs as Hackers
https://t.co/yr0hZ4Dwrk

[CyberSecShawn @CyberSecShawn]

Navigating the Implications of Google's 90-Day TLS Certificate Expiration
https://t.co/vOH3azlUgI

[CyberSecShawn @CyberSecShawn]

Navigating State-Sponsored Threats: A Business Leader's Guide to Staying Ahead
https://t.co/uA9JbF2Qpb

[CyberSecShawn @CyberSecShawn]

Leveraging Generative AI in Cybersecurity: A Look into Foretrace's "Tim"
https://t.co/4jNziodaf0

[CyberSecShawn @CyberSecShawn]

Game of Threats: Winter is Coming for Unsecured APIs
https://t.co/9up3FYdMlc

[CyberSecShawn @CyberSecShawn]

Insight into CODESYS Vulnerabilities: A Look into Industrial Cybersecurity
https://t.co/tuSiTPVrV1

[CyberSecShawn @CyberSecShawn]

Addressing the Latest Vulnerabilities in Data Centers: Top Concerns for Businesses
https://t.co/qpL3QxxvoW

[CyberSecShawn @CyberSecShawn]

IBM’s New Framework: Strengthening Defenses Against Managed File Transfer (MFT) Cyberattacks - https://t.co/uNfAqkhdlk

[CyberSecShawn @CyberSecShawn]

Safeguarding Wi-Fi Settings: An Essential Step in Information Technology Disposal - https://t.co/9epBBOF87u

[CyberSecShawn @CyberSecShawn]

Harnessing AI in Cybersecurity: The Double-Edged Sword of WormGPT - https://t.co/J5yGr9vPVk

[CyberSecShawn @CyberSecShawn]

A Look at North Korea’s Infiltration of Russian Defense Systems - https://t.co/roE07aHsYz

[CyberSecShawn @CyberSecShawn]

Understanding the Citrix Zero-Day Vulnerability: An Expert Analysis for Business Leaders - https://t.co/KyXAt0Q6qx

[CyberSecShawn @CyberSecShawn]

Cyber⁤ Attackers⁤ Catch⁤ a Cloud Nine: Unmasking the Latest Mischief through Cloudflare Tunnel! - https://t.co/BcZQwsjxXU

[CyberSecShawn @CyberSecShawn]

Deepening the Darkness: Shedding⁢ Light on the Expanding⁤ Realm ⁣of the Dark Web - https://t.co/XPs5h50ird