Asset Management

<body>This week Dr. Doug talks: ASCII Porn, Pirate Hunting, The Ukraine, Conti, Pandora, Mobile Device Hell, and Crypto ATMs, along with Jason Wood on this edition of the Security Weekly News!</body>

<body>This week Dr. Doug talks: ASCII Porn, Pirate Hunting, The Ukraine, Conti, Pandora, Mobile Device Hell, and Crypto ATMs, along with Jason Wood on this edition of the Security Weekly News!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”10226″} podcast from PPWorks

Cloud Security

Privacy

Application security

Data Security

Network Security

Malware

Ransomware

Breach

Security Staff Acquisition & Development

DevSecOps

Threat Management

The Ukraine, Conti, Pandora, BYOD, Crypto ATMS, & Pirate Hunting – SWN #195

<body>It doesn't matter how much security technology you have, how much you spend on security: security outcomes are achieved by doing all the little things right. You can spend $10M on network security technology from any vendor, but you will fail to effectively secure your enterprise if you don't properly manage the policy enforced by those firewalls.</body>

<body>It doesn't matter how much security technology you have, how much you spend on security: security outcomes are achieved by doing all the little things right. You can spend $10M on network security technology from any vendor, but you will fail to effectively secure your enterprise if you don't properly manage the policy enforced by those firewalls. </body>

<body>That sounds really simple, but simple doesn't scale. If you only have a few firewalls with policies consisting of tens of rules, it may be simple. But imagine an enterprise that has 2,000 firewalls, each firewall has a policy with an average of 500 rules, each rule has an average of 15 objects, each source and destination object represent an average of 50 IP addresses. This enterprise is managing, 2,000 firewalls, 1 million rules, 125 million connections, representing over 300 billion access paths. And just 1 wrong rule could expose the network to compromise.</body>

<body>That sounds really simple, but simple doesn't scale. If you only have a few firewalls with policies consisting of tens of rules, it may be simple. But imagine an enterprise that has 2,000 firewalls, each firewall has a policy with an average of 500 rules, each rule has an average of 15 objects, each source and destination object represent an average of 50 IP addresses. This enterprise is managing, 2,000 firewalls, 1 million rules, 125 million connections, representing over 300 billion access paths. And just 1 wrong rule could expose the network to compromise.</body>

<body>This segment is sponsored by FireMon. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/firemon">https://securityweekly.com/firemon</a> to learn more about them!</body>

<body>This segment is sponsored by FireMon. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/firemon">https://securityweekly.com/firemon</a> to learn more about them!</body>

Featured image for Security Hygiene, Doing All the Little Things Right (All the Time) – Jody Brazil – BSW #254 podcast from PPWorks

Vulnerability Management

Security Hygiene, Doing All the Little Things Right (All the Time) – Jody Brazil – BSW #254

DeanSysmanAxonius

News

Axonius raises $200 million in Series E funding for $2.6 billion valuation

<body>In a world with rapidly-changing technology, it can be tempting to constantly reach for the newest, shiniest security tools/techniques at both the program management and engineering levels. But even given unusual circumstances like startup hypergrowth or Web3 applications, sometimes we should focus on more basic issues. We can learn a lot about where to start with some of these basics when thinking about recent current events, especially related to widely-reported vulnerabilities or specific security incidents.</body>

<body>In a world with rapidly-changing technology, it can be tempting to constantly reach for the newest, shiniest security tools/techniques at both the program management and engineering levels. But even given unusual circumstances like startup hypergrowth or Web3 applications, sometimes we should focus on more basic issues. We can learn a lot about where to start with some of these basics when thinking about recent current events, especially related to widely-reported vulnerabilities or specific security incidents.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”10196″} podcast from PPWorks

Technology Changes, but Security (Often) Stays the Same – Daniel Trauner – PSW #731

<body>This week in the Security Weekly News, Dr. Doug talks: Ragnar Locker, more Linux vulnerabilities, Samsung, Nvidia, Adafruit and Ada Lovelace, CrowdStrike, Cloudflare, Ping Coalition, and ICS along with the Expert Commentary of Jason Wood on this edition of the Security Weekly News!</body>

<body>This week in the Security Weekly News, Dr. Doug talks: Ragnar Locker, more Linux vulnerabilities, Samsung, Nvidia, Adafruit and Ada Lovelace, CrowdStrike, Cloudflare, Ping Coalition, and ICS along with the Expert Commentary of Jason Wood on this edition of the Security Weekly News!</body>

Asset Management

The Ukraine, Conti, Pandora, BYOD, Crypto ATMS, & Pirate Hunting – SWN #195

Security Hygiene, Doing All the Little Things Right (All the Time) – Jody Brazil – BSW #254

Axonius raises $200 million in Series E funding for $2.6 billion valuation

Technology Changes, but Security (Often) Stays the Same – Daniel Trauner – PSW #731

Ragnar Locker, Linux Vulns, Samsung Code, Nvidia Certs, Adafruit Data Breach, & ICS – SWN #193

OCR director urges providers to strengthen cyber posture, risk management

NIST unveils final telehealth, remote patient monitoring guidance

Could healthcare serve as a model for adoption of software bill of materials?

Fast Five

Selected by the SC Media Editorial team every Tuesday.