#cyberstrategy — Public Fediverse posts

RE: https://mastodon.bsd.cafe/@grahamperrin/116708332410403878

Preparing for a ‘vulnerability patch wave’ | National Cyber Security Centre

https://www.ncsc.gov.uk/blogs/prepare-for-vulnerability-patch-wave

＂Patching alone won’t address the systemic problems that my previous blogs have addressed. I’ve appealed to technology producers and vendors to ensure systemic technical security debt is minimised by including - where appropriate - memory safety and containment technologies such as CHERI and others. …＂

#CHERI #AI #cyberstrategy #CNI

cc @david_chisnall FYI I found this NCSC blog post indirectly via the closing line at <https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities>.

RE: https://mastodon.bsd.cafe/@grahamperrin/116708332410403878

Preparing for a ‘vulnerability patch wave’ | National Cyber Security Centre

https://www.ncsc.gov.uk/blogs/prepare-for-vulnerability-patch-wave

＂Patching alone won’t address the systemic problems that my previous blogs have addressed. I’ve appealed to technology producers and vendors to ensure systemic technical security debt is minimised by including - where appropriate - memory safety and containment technologies such as CHERI and others. …＂

#CHERI #AI #cyberstrategy #CNI

cc @david_chisnall FYI I found this NCSC blog post indirectly via the closing line at <https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities>.

🚨 DoD drafting new cyber strategy
Offense, integration, preemption
Cyber = warfighting domain
💬 Where’s the red line?

Source: https://therecord.media/defense-cyber-strategy-warfare

Follow TechNadu

#InfoSec #CyberStrategy

The U.S. is reframing cyber strategy from pure resilience to coordinated deterrence.
At the Munich Cyber Security Conference, Sean Cairncross outlined a whole-of-government cyber approach integrating law enforcement, offensive capabilities, diplomacy, and industry collaboration.

Key focus areas:
• Raising attacker cost calculus
• Enhanced public-private intel sharing
• Addressing nation-state & ransomware ecosystems
• Promoting a “clean” allied tech stack

Is deterrence achievable in cyberspace - or structurally limited?

Source: https://therecord.media/us-wants-cyber-partnerships-to-send-message-to-adversaries

Security leaders, weigh in below.
Follow @technadu for strategic cyber intelligence.

#InfoSec #CyberStrategy #ThreatIntelligence #CISO #CyberOperations #DigitalSovereignty #Ransomware #CyberPolicy #SecurityLeadership #CyberDeterrence

Reports of a new national cyber strategy are surfacing (leaked to test the water?), that will enlist private companies to go on offense and mount cyberattacks against foreign adversaries.... in spite of the current fact that there is no legal basis for private firms to conduct offensive cyber operations. Interesting times. https://www.bloomberg.com/news/articles/2025-12-12/trump-administration-turning-to-private-firms-in-cyber-offensive?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc2NTYzNTc0MSwiZXhwIjoxNzY2MjQwNTQxLCJhcnRpY2xlSWQiOiJUNzI0WDRLSkg2VjQwMCIsImJjb25uZWN0SWQiOiJBNUNGNjk1RTU1RUM0MTg4OUQxRkNENkU1MTQ5M0YzRCJ9.xe9r4NC5Dvxfpxr3yY_Duti540bk4vMJ12gFIylKVFE&leadSource=uverify%20wall #CyberSecurity #CyberAttacks #Hackers #NationalSecurity #CyberStrategy #State_Sponsored_Hackers #Offense

Reports of a new national cyber strategy are surfacing (leaked to test the water?), that will enlist private companies to go on offense and mount cyberattacks against foreign adversaries.... in spite of the current fact that there is no legal basis for private firms to conduct offensive cyber operations. Interesting times. https://www.bloomberg.com/news/articles/2025-12-12/trump-administration-turning-to-private-firms-in-cyber-offensive?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc2NTYzNTc0MSwiZXhwIjoxNzY2MjQwNTQxLCJhcnRpY2xlSWQiOiJUNzI0WDRLSkg2VjQwMCIsImJjb25uZWN0SWQiOiJBNUNGNjk1RTU1RUM0MTg4OUQxRkNENkU1MTQ5M0YzRCJ9.xe9r4NC5Dvxfpxr3yY_Duti540bk4vMJ12gFIylKVFE&leadSource=uverify%20wall #CyberSecurity #CyberAttacks #Hackers #NationalSecurity #CyberStrategy #State_Sponsored_Hackers #Offense

The White House says its updated national cyber strategy is nearly ready - focused on shaping adversary behavior, improving federal-industry coordination, and speeding up adoption of modern tech across agencies.

The upcoming strategy will be concise, action-driven, and paired with immediate follow-up tasks.

What’s your view on prioritizing consequence-based signaling in national cyber policy?
Follow TechNadu for more detailed infosec reporting.

#CyberStrategy #NationalCyberDefense #WhiteHouse #Infosec #CyberPolicy #SecurityLeadership #CyberReadiness

Your Vendors Are Your New Perimeter — And Attackers Know It
https://youtu.be/bq05EvcpSVY #Cybersecurity #SupplyChainRisk #IdentityManagement #ZeroTrust #ThreatIntelligence #AIinSecurity #CyberResilience #CyberStrategy

Adobe is restructuring its Creative Cloud subscriptions by automatically transitioning current “All Apps” customers to a new “Pro” tier with built-in generative AI... and a $10/month increase.

TL;DR
🔍 Full desktop suite now includes expanded AI tools
💰 Price jump for individuals, teams, education plans
🧱 New “Standard” tier strips mobile/web and advanced AI
⚠️ Users feeling cornered, some exploring non-sub alternatives

https://arstechnica.com/gadgets/2025/05/adobe-to-automatically-move-subscribers-to-pricier-ai-focused-tier-in-june/
#cyberstrategy #riskmanagement #AIgovernance #leadership

Adobe is restructuring its Creative Cloud subscriptions by automatically transitioning current “All Apps” customers to a new “Pro” tier with built-in generative AI... and a $10/month increase.

TL;DR
🔍 Full desktop suite now includes expanded AI tools
💰 Price jump for individuals, teams, education plans
🧱 New “Standard” tier strips mobile/web and advanced AI
⚠️ Users feeling cornered, some exploring non-sub alternatives

https://arstechnica.com/gadgets/2025/05/adobe-to-automatically-move-subscribers-to-pricier-ai-focused-tier-in-june/
#cyberstrategy #riskmanagement #AIgovernance #leadership

Signal has introduced a default “Screen security” setting on Windows 11 that uses DRM to block Microsoft’s Recall from capturing private chats. This workaround brings up big concerns about OS-level AI features.

TL;DR
🔍 Signal repurposed DRM meant for copyrighted content
🧱 Blocks screenshots at OS level by default
⚠️ Could affect accessibility tools that rely on screenshots
🔄 Signals need OS vendors to provide granular privacy controls

https://arstechnica.com/security/2025/05/signal-resorts-to-weird-trick-to-block-windows-recall-in-desktop-app/
#leadership #riskmanagement #AIgovernance #cyberstrategy #security #privacy #cloud #infosec #cybersecurity

Signal has introduced a default “Screen security” setting on Windows 11 that uses DRM to block Microsoft’s Recall from capturing private chats. This workaround brings up big concerns about OS-level AI features.

TL;DR
🔍 Signal repurposed DRM meant for copyrighted content
🧱 Blocks screenshots at OS level by default
⚠️ Could affect accessibility tools that rely on screenshots
🔄 Signals need OS vendors to provide granular privacy controls

https://arstechnica.com/security/2025/05/signal-resorts-to-weird-trick-to-block-windows-recall-in-desktop-app/
#leadership #riskmanagement #AIgovernance #cyberstrategy #security #privacy #cloud #infosec #cybersecurity

Bold insights on how CIOs turn cyber simulations into a strategic advantage—share your views! #CIO #CyberWarGames #TabletopExercises #Cybersecurity #IncidentResponse #DigitalResilience #LeadershipInTech #CyberStrategy #ITSecurity #BusinessContinuity
https://medium.com/@sanjay.mohindroo66/command-and-control-why-the-cio-must-lead-cyber-war-games-and-tabletop-exercises-f1f0b4c686d4

Brittiska cybersäkerhetscentret NCSC satsar på bl.a. honeypots i en ny stor satsning. Läs mer på bloggen: https://kryptera.se/storbritannien-satsar-pa-honeypots/

#CyberSecurity #NCSC #Honeypots #Honeytokens #Breadcrumbs #CloudSecurity #CyberDefense #ThreatDetection #UKCyberSecurity #IPv4 #IPv6 #Infosec #CyberAwareness #SecurityTokens #NationalSecurity #CyberStrategy #DigitalDefense #Cybersäkerhet #CyberThreats #CanaryTokens #itsakerhet

Brittiska cybersäkerhetscentret NCSC satsar på bl.a. honeypots i en ny stor satsning. Läs mer på bloggen: https://kryptera.se/storbritannien-satsar-pa-honeypots/

#CyberSecurity #NCSC #Honeypots #Honeytokens #Breadcrumbs #CloudSecurity #CyberDefense #ThreatDetection #UKCyberSecurity #IPv4 #IPv6 #Infosec #CyberAwareness #SecurityTokens #NationalSecurity #CyberStrategy #DigitalDefense #Cybersäkerhet #CyberThreats #CanaryTokens #itsakerhet

HIRING: Cyber Security Strategy Consultant / New York City

👉 https://infosec-jobs.com/J132027/

#InfoSec #infosecjobs #CyberSecurity #CyberCareer #cyber #security #jobs #cyberjobs #jobsearch #techjobs #hiring #cyberstrategy #NYC #NYCjobs #DigitalTrust #IAM #CloudSecurity #AppSec #IAMjobs #consultants #datasecurity

HIRING: Cyber Security Senior Consultant / Chicago, IL

👉 https://infosec-jobs.com/J132026/

#InfoSec #infosecjobs #CyberSecurity #CyberCareer #cyber #security #cyberjobs #CyberStrategy #techjobs #hiring #consulting #BeYourselfAtWork #CloudSecurity #AppSec #ChicagoJobs

I'm working on an assignment so hear me out...

The C-Suite is continuously evolving, and plays a key stakeholder role in all facets of business let along, cyber strategy today. What question(s) would you ask anyone in your C-Suite if given the opportunity?

#CSuite
#cyberstrategy
#CyberPolicy
#Cybersecurity

I'm working on an assignment so hear me out...

The C-Suite is continuously evolving, and plays a key stakeholder role in all facets of business let along, cyber strategy today. What question(s) would you ask anyone in your C-Suite if given the opportunity?

#CSuite
#cyberstrategy
#CyberPolicy
#Cybersecurity

In a rapidly changing digital world, cybersecurity is becoming increasingly urgent, and Belgium is no exception. Recent attacks on government websites signal a wake-up call. It is no longer a question of whether a major cyberattack will occur, but when.

https://www-ccinfo-nl.translate.goog/cybercrime/cyberoorlog/1513211_de-onzichtbare-cyberoorlog-uitdagingen-risico-s-en-strategieen-voor-een-veilige-digitale-toekomst-in-belgie?_x_tr_sl=nl&_x_tr_tl=en&_x_tr_hl=nl&_x_tr_pto=wapp

#CyberWar #CyberSecurity #DigitalFuture #CyberAttacks #Belgium #CyberStrategy #CyberRisk #CyberAwareness #InternationalCooperation #AIandCybersecurity
-

Fundamental IoT Security Concepts That Startups Should Know - The Internet of Things (IoT) is revolutionizing how we live and work, connecting e... - https://readwrite.com/fundamental-iot-security-concepts-that-startups-should-know/ #cybersecurityforbusinesses #allcategories #cyberstrategy #cyberattacks #iotstartups #ai

Fundamental IoT Security Concepts That Startups Should Know - The Internet of Things (IoT) is revolutionizing how we live and work, connecting e... - https://readwrite.com/fundamental-iot-security-concepts-that-startups-should-know/ #cybersecurityforbusinesses #allcategories #cyberstrategy #cyberattacks #iotstartups #ai

Do you have a fireside talk series, conference, class, or podcast? Would your audience like hearing about:
-Cyberpower & American hegemony
-Cyber domain decision advantage (how to get, keep & sustain it)
-Operationalizing cyber deterrence by denial
-The real objective of adversary persistant agression

Please reach out. These are all topics in my forthcoming book & I’d live to give you a sneak peek.

(Et je suis également à l'aise en français ou anglais)

#natsec #cyberwar #cyberconflict #cyberstrategy #cyber #cybersecurity

Do you have a fireside talk series, conference, class, or podcast? Would your audience like hearing about:
-Cyberpower & American hegemony
-Cyber domain decision advantage (how to get, keep & sustain it)
-Operationalizing cyber deterrence by denial
-The real objective of adversary persistant agression

Please reach out. These are all topics in my forthcoming book & I’d live to give you a sneak peek.

(Et je suis également à l'aise en français ou anglais)

#natsec #cyberwar #cyberconflict #cyberstrategy #cyber #cybersecurity

#introduction are there any other #natsec people in the house? Or #cyberstrategy #militarystrategy #cyberconflict practitioners or #thinktank #academicpublishing types? Fellow #computationalsecurity professionals?

Also I have a thing for #pugs

#introduction are there any other #natsec people in the house? Or #cyberstrategy #militarystrategy #cyberconflict practitioners or #thinktank #academicpublishing types? Fellow #computationalsecurity professionals?

Also I have a thing for #pugs

I realize I forgot the whole "Who is this guy?" post. So here goes. I have been doing #infosec since 1997. I got started as a #fed contractor in the DC metro and spent about 25 years there. After consulting/contractor, I moved to #globalfinance and developed a passion for #enterprisesecurityarchitecture and #cyberstrategy. I currently work for a media company but that is coming to end as I embark on the next challenge/adventure next month.

I realize I forgot the whole "Who is this guy?" post. So here goes. I have been doing #infosec since 1997. I got started as a #fed contractor in the DC metro and spent about 25 years there. After consulting/contractor, I moved to #globalfinance and developed a passion for #enterprisesecurityarchitecture and #cyberstrategy. I currently work for a media company but that is coming to end as I embark on the next challenge/adventure next month.