#assetinventory — Public Fediverse posts

Got a FUD mail from someone at cscglobal.com wanting my perspective on the proposed 90 days lifetime on certs, and stating that it would lead to 4 times as much work and increased cost.

(https://www.chromium.org/Home/chromium-security/root-ca-policy/moving-forward-together/).

Here's my reply:
"My perspective can be summarized as "I totally agree with Google". That doesn't happen often.
It'll force IT and OT to become better at inventorying, standardizing, and automating which will increase security overall and lead to significant cost savings going forward.
So what's not to like?"

#Certificates #CertificateLifetime #Automation #Standardization #AssetInventory #CABrowserForum #ACME #RFC8555 #CSCGlobal

Got a FUD mail from someone at cscglobal.com wanting my perspective on the proposed 90 days lifetime on certs, and stating that it would lead to 4 times as much work and increased cost.

(https://www.chromium.org/Home/chromium-security/root-ca-policy/moving-forward-together/).

Here's my reply:
"My perspective can be summarized as "I totally agree with Google". That doesn't happen often."
"It'll force IT and OT to become better at inventorying, standardizing, and automating which will increase security overall and lead to significant cost savings going forward."
"So what's not to like?"

#Certificates #CertificateLifetime #Automation #Standardization #AssetInventory

There are several common ways we lose track of what's on our network, according to runZero Security Evangelist Huxley Barbee.

He discussed these and more with David Spark on the Defense in Depth podcast--part of the CISO Series: https://cisoseries.com/securing-unmanaged-assets/

#ciso #assetinventory #cyberassetmanagement #unmanagedassets

There are several common ways we lose track of what's on our network, according to runZero Security Evangelist @huxley.

He discussed these and more with David Spark on the Defense in Depth podcast--part of the CISO Series.

Check out the full episode here: https://cisoseries.com/securing-unmanaged-assets/

#ciso #assetinventory #cyberassetmanagement #unmanagedassets

CISA BOD 23-01 released new compliance requirements regarding asset inventory and vulnerability management. Federal agencies must comply with this directive by April 2023, but all organizations are encouraged to incorporate the guidelines to strengthen the foundations of their security posture.

How can you achieve compliance? Check out our blog for an overview of the new directive, and steps to meet (or even exceed!) the requirements:

https://www.runzero.com/blog/cisa-bod-23-01/?utm_source=mastodon&utm_medium=social&utm_campaign=cisabod1

#networksecurity #vulnmanagement #assetinventory #itcompliance

The Business Ninjas podcast by WriteForMe chatted with runZero CEO & Co-Founder @chris_kirsch about scaling the business, bringing in the right talent, and a breakdown of how runZero helps businesses get better visibility to every asset connected to their network.

Check out the full episode here: https://podcast.writeforme.io/2025304/12195952
#runZero #assetinventory

A new vuln in Lexmark printers has a critical severity rating. It isn’t yet being exploited, but the POC code is public & available. Firmware updates are available for affected assets.

Check out the latest query to find Lexmark printers in your asset inventory:

https://www.runzero.com/blog/finding-lexmark-printers/

#infosec #assetinventory

Unpatched systems, lack of segmentation, outdated certificates missed in security scans - the consequences of a poorly managed asset inventory are endless.

@huxley lays out the foundations for ensuring you have a comprehensive asset inventory program in place, and the ramifications if you miss this critical step in building your security program, in this episode of The Cybersecurity Readiness Podcast.

You can hear the full episode here: https://the-cybersecurity-readi.captivate.fm/episode/comprehensive-asset-discovery

#assetinventory #networkdiscovery #cyberassetmanagement

Earlier this week, researchers with @Eclypsium shared findings on three vulnerabilities present in American Megatrends (AMI) MegaRAC firmware.

Here's how you find MegaRAC BMC assets on your network:

https://www.runzero.com/blog/finding-megarac-bmc-assets/

#assetinventory