#blackhatusa — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blackhatusa, aggregated by home.social.
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
#Cybersecurity Hiring Is Not Broken—Your Job Descriptions Are
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're thrilled to share this transformative Brand Story conversation thanks to our friends at CyberSN 🙏
Cybersecurity Hiring Is Not Broken—Your Job Descriptions Are
The cybersecurity #talentgap isn't just about finding people—it's about understanding who you have and what you actually need.
At #BlackHat2025, Deidre Diamond (CEO of #CyberSN) and Carraig Stanwyck (CEO of 3 Tree Tech) reveal why outdated job descriptions and static spreadsheets are sabotaging your security team's success.
The hidden problems killing your team effectiveness:
• Leaders manage complex teams with tools that can't capture real-time role changes or skill utilization
• Employees burn out doing work outside their job descriptions
• Strategic plans and budgets are built on incomplete or inaccurate information • Generic job postings create the "square peg, round hole" hiring problem
• Retention suffers when skills and roles don't alignCyberSN's workforce risk management platform changes the game by providing:
• Dynamic capability mapping—see how each capability is staffed and identify gaps
• Role realignment insights to match employees with work that fits their strengths
• Accurate job descriptions based on actual needs, not outdated templates
• Employee engagement data for better career planning and retention
• Data-backed insights that strengthen budget requestsThe #business impact?
Improved retention, stronger budgets, reduced burnout, and teams that can proactively adapt to changing priorities. When you truly understand your #workforce, you can transform cybersecurity from a reactive function into a strategic force.📺 Watch the video: https://youtu.be/TIIwtawhGFE
➤ Learn more about CyberSN: https://itspm.ag/cybersn-476941
✦ Catch more stories from CyberSN: https://www.itspmagazine.com/directory/cybersn
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #TalentManagement #WorkforceRisk #CyberHiring #BlackHatUSA #BHUSA25 #SecurityTeams #CyberCareers #TeamBuilding
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
"Data Kidnapping: Because File Encryption Is So 2020" 🫢
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're excited to share this eye-opening Brand Story conversation thanks to our friends at Zscaler 🙏
#Ransomware has evolved. Attackers no longer need to encrypt your data—they're stealing it and threatening public exposure unless you pay.
At #BlackHat2025, Brett Stone-Gross from #Zscaler reveals how this shift changes everything about defense strategies.
The new reality organizations face:
• Stolen data moves slowly enough to avoid alerts—or quickly enough to overwhelm teams
• File transfer tools and other apps left exposed to the internet create easy entry points
• Advanced groups target single victims for multimillion-dollar payouts based on stolen data value
• The U.S. accounts for ~50% of ransomware incidents, making American companies prime targets
• Legacy systems in #healthcare, #manufacturing, and oil & gas amplify risksZscaler's #zerotrust approach tackles these challenges by:
• Eliminating internet-facing vulnerabilities—hiding applications from public view
• Advanced #threatprevention that blocks exploits before escalation
• Segmentation that prevents lateral movement from compromised accounts
• #DLP that detects and stops unauthorized data transfers
• Continuous monitoring that catches privilege escalation attemptsThe business impact?
Reduced attack surface, faster threat containment, lower risk of repeated incidents, and better security #ROI.When attackers can't see your applications, they can't exploit them.
➤ Learn more about Zscaler: https://itspm.ag/zscaler-327152
✦ Catch more stories from Zscaler: https://www.itspmagazine.com/directory/zscaler
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #Ransomware #ZeroTrust #DataProtection #BlackHatUSA #BHUSA25 #ThreatIntelligence #DLP #CloudSecurity #DataKidnapping #infosec #infosecurity
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're thrilled to share this critical Brand Story conversation thanks to our friends at ReversingLabs 🙏
Your Business Apps Are Bringing Friends You Didn't Invite
Every commercial software application is a complex assembly of first-party, contracted, open source, and third-party code. But when #SolarWinds, #Kaseya, and #Ivanti happened, we learned that vendor questionnaires and contractual assurances offer little protection against supply chain compromises.
At #BlackHat2025, Saša Zdjelar, Chief Trust Officer at ReversingLabs, reveals how organizations can finally verify the integrity of #software from outside vendors—without relying on blind trust.
The game-changer: Comprehensive binary analysis that deconstructs any file into its components to:
• Detect malware, tampering, and embedded secrets
• Identify #vulnerabilities and insecure practices
• Uncover undocumented network connections
• Flag #compliance risks from restricted regions
This isn't just another policy checkbox—it's a true technical control that inspects the software itself, regardless of size or complexity.
Real-world applications:
• Procurement: Auto-scan all software before deployment
• Version Monitoring: Detect unexpected behavior changes between releases
• Critical Environments: Verify integrity before software enters OT, ICS, or financial systems
• Risk Management: Assess COTS software as part of ongoing vendor reviews
With regulations like EO 14028 and the EU's #CyberResilience Act demanding transparency, the ability to technically validate every application delivers both strategic protection and measurable benefits.
📺 Watch the video: https://youtu.be/pU9bHYFND7c
➤ Learn more about ReversingLabs: https://itspm.ag/reversinglabs-v57b
✦ Catch more stories from #ReversingLabs: https://www.itspmagazine.com/directory/reversinglabs
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #SupplyChainSecurity #SoftwareIntegrity #BlackHatUSA #BHUSA25 #ThirdPartyRisk #SBOM #BinaryAnalysis #Compliance #ZeroTrust
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're excited to share this transformative Brand Story conversation thanks to our friends at Crogl, Inc. 🙏
How #AI Can Help Eliminate Alert Fatigue in #Cybersecurity
Security teams drowning in alerts finally have a lifeline that doesn't compromise their data sovereignty. At #BlackHatUSA 2025, #Crogl CEO monzy merza revealed how they're solving one of cybersecurity's most persistent challenges.
The harsh reality: Analysts routinely close hundreds of alerts with a single click—not from laziness, but from sheer necessity. As Merza notes, "When you look at the history of #breaches, the signal was there. And somebody ignored it."
Traditional approaches fail because they expect analysts to become "unicorns"—experts in multiple platforms while remembering complex query languages. Crogl's solution fundamentally reimagines this relationship between human intuition and #machineautomation.
Key innovations:
• Semantic knowledge graphs that map relationships across your entire security ecosystem
• Automated investigations using established kill chain methodologies
• Natural language processing that converts descriptions into executable security processes
• Privacy-first architecture that runs air-gapped with no internet dependencies • Response times reduced from weeks to minutes for complex threat huntingThe result?
#Analysts focus on strategic #threathunting while AI handles routine investigations—all without moving, duplicating, or exposing your data.📺 Watch the video: https://youtu.be/0GqPtPXD2ik
🎧 Listen to the podcast: https://brand-stories-podcast.simplecast.com/episodes/black-hat-2025-crogls-ceo-monzy-merza-explains-how-ai-can-help-eliminate-alert-fatigue-in-cybersecurity-a-black-hat-usa-2025-conference-on-location-brand-story
📖 Read the blog: https://www.itspmagazine.com/their-stories/black-hat-2025-crogls-ceo-monzy-merza-explains-how-ai-can-help-eliminate-alert-fatigue-in-cybersecurity
➤ Learn more about Crogl: https://itspm.ag/crogl-103909
✦ Catch more stories from Crogl: https://www.itspmagazine.com/directory/crogl🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #AIinSecurity #AlertFatigue #ThreatHunting #BlackHatUSA #BHUSA25 #SecurityAutomation #DataPrivacy #SOC #SecurityAnalytics
-
🎯 NOW PUBLISHING: On-Location Coverage from Black Hat USA 2025!
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're proud to share this insightful Brand Story conversation thanks to our friends at ThreatLocker 😬
Simplifying #CyberSecurity Without Sacrificing Control
At #BlackHat2025, Danny Jenkins, CEO of #ThreatLocker, proves that effective cybersecurity doesn't have to be overly complex. The key? Security should be simple enough to implement quickly while still addressing evolving organizational needs.
Jenkins shares how ThreatLocker has moved beyond "magic" solutions to deliver tangible results—tools that block threats by default, simplify approvals, and make exceptions easy to manage. With over 54,000 organizations worldwide trusting their platform, they're showing that security doesn't have to slow business down.
A standout feature: ThreatLocker's Defense Against Configurations (#DAC) module performs 170 daily checks on every endpoint, aligning with #NIST and #FedRAMP frameworks. It doesn't just detect misconfigurations—it explains why they matter and how to fix them. Jenkins even admits it revealed gaps in ThreatLocker's own environment, fixed in minutes!
Plus, learn how their recent #FedRAMP authorization validates both product and company security maturity, benefiting federal agencies and commercial clients alike.
📺 Watch the video: https://youtu.be/uYIAEc_ErXo
🎧 Listen to the podcast: https://brand-stories-podcast.simplecast.com/episodes/simplifying-security-without-sacrificing-control-a-threatlocker-event-coverage-of-black-hat-usa-2025-las-vegas-brand-story-with-danny-jenkins
➤ Learn more about ThreatLocker: https://itspm.ag/threatlocker-r974
✦ Catch more stories from ThreatLocker: https://www.itspmagazine.com/directory/threatlocker
🎪 Follow all of our #BHUSA2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #ZeroTrust #SecuritySimplicity #FedRAMP #Compliance #BlackHatUSA #BHUSA25 #EndpointSecurity #NIST #ThreatPrevention
-
Magic Patches and Upgrade Analysis Tool launched by Endor Labs at Black Hat USA https://www.admin-magazine.com/News/Endor-Labs-Launches-Magic-Patches-and-Upgrade-Analysis-Tool
#security #tools #patch #upgrade #vulnerabilities #dependency #FedRAMP #EndorLabs #BlackHatUSA