AGorecki

Published Author & Cybersecurity Professional

[AGorecki @ThisIsAGorecki]

With the digitization of business, is there still a difference between Information Security and Cyber Security, or have these terms become synonymous? I see them used interchangeably. As a purist, I still see Cyber Security as a Subset of Information security. Any thoughts?

[Dwyer @_Dwyer_]

More great work coming out of X-Force. Today we released new research indicating ITG23 (Trickbot, Wizard Spider, Conti) has shifted it's scope to now include Ukrainian targets for at least 6 campaigns during which they deployed various malware and tooling. https://t.co/B3LFmQvtT8

[AGorecki @ThisIsAGorecki]

I'm excited to announce that Christ Scott and I partnered with CISO DRG Publishing to publish a book on cyber crisis response.
https://t.co/63OONVgEjN

[AGorecki @ThisIsAGorecki]

@anton_chuvakin Arguably, most mid and large-sized enterprises have VPN but not all leverage cloud yet. In terms of total buyers, the number doesn't surprise me. However, if you measure market size in total sales revenue, then I'm a bit more skeptical.

[AGorecki @ThisIsAGorecki]

@James_Pat_Wicks That's disappointing. I've been using DuckDuckGo for privacy reasons too.

[AGorecki @ThisIsAGorecki]

@klrgrz Congrats! Looking forward to working together.

[AGorecki @ThisIsAGorecki]

Excited I will be speaking at this year's ISC2 Security Congress in Las Vegas in October. I received a formal notification from ISC2 that my talk entitled "Taking a threat-centric approach to building cyber resiliency" has been accepted and placed on the main program agenda.

[James Kainth @j3st3rjam3s]

Hopping on a flight to California for some time off with my fam, I’m reminded of my dear friend @ThisIsAGorecki and what better way to spend the flight than enjoying his book! One day I gotta get this copy signed 😁

[AGorecki @ThisIsAGorecki]

@angus_tx Regulation alone is not enough. A threat-driven approach is essential. One challenge with more regulation is redirecting resources away from combating threats toward implementing and adhering to compliance requirements.

[AGorecki @ThisIsAGorecki]

A well-known mantra in the cybersecurity industry is “compliance does not equal security.” With the colonial pipeline attack anniversary, I decided to provide my own perspective on this topic. #cybersecurity #security #compliance
https://t.co/5YBMLfqNP0

[Dwyer @_Dwyer_]

Figured this was the case but after spending weeks reading IR reports, now I know for sure. We've investigated exactly 1 successful enterprise-wide ransomware attack where the client had MFA/PAM on privilege accounts since 2019

[AGorecki @ThisIsAGorecki]

@badola888 Agree. For me, it's about scope. I will create a Venn diagram to depict the overlap areas.

[AGorecki @ThisIsAGorecki]

For those who can happily spend hours arguing about terminology and semantics, here is one for you... security, information security, and cybersecurity. Are these terms synonymous, or does each have a particular application and precise meaning?

[AGorecki @ThisIsAGorecki]

@anton_chuvakin Automate incident response

[AGorecki @ThisIsAGorecki]

@TactiKoolSec Now I know how you spent all the referral money

[AGorecki @ThisIsAGorecki]

@johnjhacking I'd have to send you back an ICMP Type 3 Code 3 (unreachable) message if my corporate firewall allowed it

[AGorecki @ThisIsAGorecki]

@vmiss33 Are you interested in technical hands-on skills (analysis, tooling etc) or softer skills (program development, incident management, reporting, etc)?

[AGorecki @ThisIsAGorecki]

One argument I frequently hear is to enact regulations to force organizations to build more robust security. But, does regulation actually increase security? Or does it just redirect resources to implement and adhere to compliance requirements instead of combating real threats?

[AGorecki @ThisIsAGorecki]

@Teck923 @anton_chuvakin @immutablesec And a policy is enforced across platforms, so logs are generated and available :)

[AGorecki @ThisIsAGorecki]

@cybersecmeg Consultants are also required to have a broader skill set. In addition to technical subject mater expertise, you need to communicate with a variety of audiences and write quality reports. Good consulting skills are hard to develop.