Lillian Røstad

Super pumped to release the latest version of SOF-ELK, an appliance-style VM preconfigured with the Elastic Stack, a ton of log and related parsers, built to ease analysts' workflows even with massive amounts of data. Get the details and download link here: https://lnkd.in/eK6XG8cG Enjoy!! This version's updates include: - Elastic Stack v9.1.0 components - Updated parsers and dashboards - Integrated tests in external Ruby scripts - Streamlined Ansible build instructions for custom, bare metal, cloud, or other purposes - Numerous bug fixes and improvements

450

14 kommentarer

"More incidents = better security" Sounds backwards? Finnish researchers tracking 15 years of construction accidents found exactly that. Organisations with more small incidents had fewer serious ones. At WHY2025, I explored why security needs controlled failure, not perfect prevention. From Netflix's Chaos Monkey to bicycle physics - here's how embracing wobbles builds antifragility. 📊 Slides in PDF: https://lnkd.in/eagaDQd7 🎥 Full presentation recording: https://lnkd.in/e2QGnJ4Z Three takeaways: - Provoke your environment safely - Learn from near-misses (not just disasters) - Build psychological safety for speaking up Time to stop building training wheels and start getting comfortable with controlled falling. #ChaosEngineering #CyberSecurity #Resilience #SafetyScience #WHY2025

72

4 kommentarer

Jørgen Hartig is the founder of SecuriOT ApS, he works closely with clients to ensure compliance with NIS2, IEC 62443, NIST CSF and more to make sure that security strategies are not only compliant but also resilient, scalable, and tailored to the operational reality on the ground. I'm pleased to introduce Jørgen as my co-host for our upcoming webinar "Analyzing Recent NIS2 Regulations – OT security is changing" Together we’ll explore new regulations as Eu nation after nation releases new rules for their energy infrastructures to comply with the NIS2 directive. Together, we’ll examine new regulations as European nations release NIS2 rules for their energy infrastructures. We’ll compare these rules, explore how they align with NERC CIP and IEC 62443, and discuss what’s truly new for OT security. We invite you to join us for this free live webinar on Tuesday, Oct 28th ➡️ https://bit.ly/42TfpZt

64

The real PKI threat? It's not just compromised certificate's, it's complacency. Too many organizations are too slow to replace exposed certificates. This is exactly why shorter certificate lifespans matter! They don’t just tighten security. They force agility. As Arvid Vermote explained on TrustID Talk - agility isn’t optional anymore. It’s the only way to survive in a world of key compromises, compliance failures, and quantum looming on the horizon. Don’t fall behind. Learn more by tuning into the full episode👇 Spotify: https://bit.ly/48cByFk Apple: https://loom.ly/DSftlVk YouTube: https://loom.ly/CMdy-T8 #TrustIDTalkPodcast #CABrowserForum #CertificateValidityPeriods

46

Following the permanent loss of 858TB data due to a fire in a South Korea government datacenter, here's a reminder on the several technologies that are NOT backup solutions: RAID, snapshots, Apple Time Machine, Windows Volume Shadow, cloud storage, availability zone mirroring, database replication, Git/GitHub, DRBD. Real backups must to be automatically maintained as multiple encrypted, integrity-checked, tested, monitored, and documented historical copies, on different media, offsite, and offline or immutable. https://lnkd.in/d8Y-Hb4y

106

7 kommentarer

LLM-driven Provenance Forensics for Threat Investigation and Detection Sharing this new paper that presents PROVSEEK, an LLM-powered framework for provenance-based forensic analysis and threat intelligence. It dynamically fuses context from threat report knowledge bases and system provenance logs, orchestrating multiple agents to check hypotheses, avoid hallucination, and generate verifiable forensic summaries. Great example of using multi-agent pipelines to break down very large complex expert tasks into small, specialized steps, especially for ground truth verification & mitigating hallucinations. 🔗 to paper in the comments!

159

6 kommentarer

Cybersecurity analysis of brain-computer interfaces (BCIs): attacks, risks, and recommended actions. 🧠🗜️၊၊||၊🥷🏻😱 A group of academia researchers and cybersecurity experts from Yale University (US) presented in August their analysis of brain-computer interfaces (BCI) - medical devices that directly interact with the brain for monitoring or stimulation. As BCIs become more advanced and network-connected, we are already seeing them in the news, and the mass production of these devices has already been announced. The authors present a threat model for BCI devices for the first time in publicly available, non-commercial research. I’m sure we can add a few more threat vectors to the model. Feel free to share your thoughts in the comments, and hopefully the next off-the-shelf brain implant will be secure by design. 🤞 More details: Cyber Risks to Next-Gen Brain-Computer Interfaces: Analysis and Recommendations [PDF]: https://lnkd.in/dGt7BwFR #technology #cybersecurity #innovation #brain #healthcare #medical #cyber #security #FutureOfWork #robotics #infosec #data #safety

51