Security Strategy, Plan, Budget

This month’s Patch Tuesday from Microsoft comes just days after out-of-band updates were released to address PrintNightmare and other vulnerabilities.

Jon Neuhaus of Nisos explains how crafting identities allows threat hunters to gain trust and eventually collect breadcrumbs tied to techniques of bad actors, which support defensive measures by target organizations.

Eric Doerr, vice president of Microsoft Cloud Security, said companies need better visibility into their assets and exposure to the internet, regardless if they run in multi-cloud or hybrid cloud environments.

Sheldon Cuffie of American Family Insurance pointed to the need for security leaders to maintain an unrelenting curiosity in and out of your industry vertical.

The vulnerabilities were fixed according to Rapid7’s vulnerability disclosure process and were patched in recent releases of Sage X3 Version 9.

APIs have been around for years, but the adoption of cloud and cloud services are leading drivers behind explosive use recently, enabling attackers to elevate privileges and move laterally throughout networks.

The red-hot cyber investment market in 2020 was replete with action from top dogs, both from outside the industry and within.

Today’s columnist, Aviv Grafi of Votiro, says companies need stronger, more proactive tools, and must give CISOs a seat at the table –or else we’ll have more major attacks like the ones on SolarWinds, Microsoft Exchange, Colonial Pipeline, and now Kaseya.