#secops — Public Fediverse posts

KI - Segen und Fluch zugleich!

#satire #image #ki #ai #it #devops #secops #grafik #karikatur #alltag #zukunft #angst #fortschritt #segen #fluch #arbeitsalltag #arbeitsbedingungen

NCSC Warns of Flawed SOC Metrics

The National Cyber Security Centre is warning that common security operations center metrics are fundamentally flawed, and that the only metric that truly matters is whether attacks are detected and responded to in a timely manner. By focusing on easily quantifiable but misleading metrics, organizations may inadvertently be encouraging their teams to prioritize…

https://osintsights.com/ncsc-warns-of-flawed-soc-metrics?utm_source=mastodon&utm_medium=social

#SocMetrics #SecurityOperations #Secops #NationalCyberSecurityCentre #Ncsc

Investing the weekend in reducing some of the security debt of my digital private life, especially on services from external providers. Things like:

- Rotating passwords to stronger ones
- Enabling 2FA where possible
- Enabling complex app specific passwords on apps accessing my accounts

#SecOps #CyberSecurity #DigitalLife #ProtectYourself

If you're running any of our firewall scripts, you'll probably want to update them!

They're all now reworked to keep their defined iptables chains attached to the top of the INPUT chain, to make sure default policies don't just override them. At least two of our servers had ended up not actually blocking IPs before this rewrite.

https://github.com/qwebltd/Useful-scripts/blob/main/Bash%20scripts%20for%20Linux/spamhaus-firewall.sh

https://github.com/qwebltd/Useful-scripts/blob/main/Bash%20scripts%20for%20Linux/tor-firewall.sh

https://github.com/qwebltd/Useful-scripts/blob/main/Bash%20scripts%20for%20Linux/asn-firewall.sh

#iptables #linux #firewall #serveradmin #security #secops #hosting

We've built another #firewall script, now running on all of our #servers. This one pulls the #Spamhaus list of spammy & malicious ASNs, uses our #ASN Lookup #API to convert each into IP lists, & adds those IPs to an #IPTables firewall chain.

Like with our other firewall scripts, this is #FOSS that you can grab for your own servers! You'll need an access key from our API portal for the lookups with this one, but they're only $8 for unlimited lookups! 😉

https://github.com/qwebltd/Useful-scripts/blob/main/Bash%20scripts%20for%20Linux/asn-firewall.sh

#secops #security

New blog post live for my Sentinel Saturday series! :1000: :apartyblobcat:
Read the blog 👉 https://marshsecurity.org/sentinel-saturday-using-tasks-with-automation/

In this post, I explore the power of using Microsoft Sentinel Tasks as part of your automation workflows.

Most teams aren’t getting the full #value out of Tasks in Microsoft Sentinel. Are you? When you combine Sentinel Tasks with automation, they become a game-changer.

- Auto-create tasks when automation fails (so nothing slips through the cracks)
- Auto-complete tasks when automation succeeds
- Use tasks to verify automation outcomes
- Build engineering feedback loops and automation #QA

Read the blog 👉 https://marshsecurity.org/sentinel-saturday-using-tasks-with-automation/

#MicrosoftSentinel #SentinelAutomation #CyberSecurity #SOCAutomation
#CloudSecurity #AzureSecurity #SIEM #SecOps #Automation #InfoSec
#CyberSecurityCommunity #BlueTeam #ThreatDetection #SecurityEngineering #SecurityOperations

I'm not wild about the "Year of" trope, but I think we can go ahead and call this the Year of Agentic AI. I've rarely seen one topic so thoroughly absorb the entire industry's attention.

#Cybersecurity often follows the initial hype around the latest shiny object. Still, some IT pros and vendors are considering what #agenticAI means for security, particularly in identity and access management.

In this feature that was months in the making, experts from academic, vendor, and enterprise backgrounds weighed in.

#AIagents #IAM #identityandaccessmanagement #SecOps #ITOps #identitysecurity #PAM #abac #accesscontrols #AI #GenAI #LLMs

https://www.techtarget.com/searchitoperations/news/366622025/AI-agents-raise-stakes-in-identity-and-access-management

New report by me and @joltsik on Cloud Detection and Response #CDR. If you're a client, check it out or ping us to learn more: https://research.esg-global.com/reportaction/515201711/Toc
#CSPM #devsecops #cloudsecurity #threatdetection #infosec #cybersecurity #CSO #CISO #XDR #secops

Check out the latest from my Enterprise Strategy Group colleague Jon Oltsik on top investments and priorities for organizations to stay ahead of threats
https://www.csoonline.com/article/3699388/threat-intelligence-programs-poised-for-growth.html

@csoonline #ciso #cso #infosec #cybersecurity #threatintelligence #secops #SOC #DRP #SIEM #CASB #TIP #XDR