Steve Graham

🚨🚨 Big news for the CMMC (the Cybersecurity Maturity Model Certification) program - the final DFARS rule(s) is at OMB for final review. Once OMB reviews it (and presumably approves it), it will be published in the final register with an effective date in the near future after that. This means that CMMC will be placed onto solicitations/contracts and contractors will be responsible for at least self-certifying to Level 1 or Level 2 compliance for all solicitations from that date forward.

CLAIM: Forensic OSINT can't download Internet Archive videos. FALSE. You're just clicking the wrong link. (Don’t worry, so did we the first time.) Archive.org loves to trick investigators with an embedded player that isn’t the real source file. So if you attempt to download the video on this page, it will often fail. In our latest guide, we show you exactly where to scroll, what to open, and how to generate a proper Evidence Continuity Report every time. 🔗 Link to the article in the first comment below. #OSINT #ForensicOSINT #InternetArchive #DigitalEvidence

Detecting, deterring, and mitigating insider threats is more important than ever in today’s counterintelligence environment. @NCSCgov provides resources to help organizations build  effective insider threat programs, from inception through maturity. Review the documents here: https://lnkd.in/dFXu47U 

🚨 The final CMMC rule is here, and enforcement is coming fast 🚨 The DoD has submitted the final CMMC rule (48 CFR) for review, meaning cybersecurity certification will soon be mandatory for defense contractors. Contract clauses could appear as early as Q4 2025, with full rollout into 2026. With fewer than 80 assessors and over 300,000 contractors needing certification, backlogs are inevitable. Vanta helps govtech and defense contractors prepare for CMMC, NIST 800-171, and FedRAMP. We’re one of the first platforms certified under the FedRAMP 20x pilot and offer tools to centralize controls, automate evidence collection, and fast-track readiness. Read more about it here: https://bit.ly/3UlqzS2 #CMMC #Cybersecurity #GovTech #Defense #Compliance #FedRAMP #NIST800171 #DoD

FBI, @CISA, and other partners published a joint cybersecurity advisory (CSA) on the indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) of cybercriminal group Scattered Spider (SS). SS targets large companies and their contracted IT firms to conduct data theft for extortion and encryption for further ransom. SS’s TTPs continually evolve in order to evade detection. Their TTPs include social engineering techniques like impersonating IT staff or SIM swap attacks to obtain credentials, install remote access tools, and bypass multi-factor authentication. Learn more about potential SS related IOCs and updated TTPs, along with recommended mitigations to better protect your company’s networks: https://lnkd.in/eu64HdWN

#GRCConf opening keynote Rachel Tobac used a YouTube clip of ISACA's Paul Phillips, CISA, CISM, CDPSE, CPT, CNC, MBA, DD to create a deepfake AI voice agent for phone and video; she shows just how quickly (and how creepy!) this cyber threat is evolving. 

🛡 CISA issues urgent emergency directive for high-severity Exchange hybrid flaw. ⏰ Federal agencies must implement Emergency Security Updates for CVE‑2025‑53786 by Monday, 9:00 AM ET as part of a binding operational directive. ➡️ https://lnkd.in/gyG3s8Qw #cybersecurity #CISA #Microsoft #Exchange

The SANS Institute SOC Survey 2025 uncovers how modern SOCs are staffed, structured, and run. It also highlights where teams are falling behind - with manual reporting, alert fatigue, tool sprawl, and limited visibility into budgets and business impact. Download the full report to uncover: ✅ Modern SOC org structures, staffing, and outsourcing trends ✅ Top technologies...and where they’re falling short ✅ How AI is actually being adopted in the SOC ✅ The real story behind SOC metrics and reporting Get the report here: https://lnkd.in/ekWR2UXT

A special edition of #TheFastest5Minutes The DoD has issued its final rule on CMMC (September 10), giving authority to include cybersecurity certification requirements in contracts and potentially extend them to subcontractors. In this episode of Fastest 5 Minutes, Peter Eyre and Michael G. Gruden (CIPP-G) (CMMC-RP) of Crowell & Moring break down: - What’s in the final rule - Why it matters for contractors and subcontractors - How to prepare now Listen here: https://lnkd.in/gHyT-pTz #CMMC #DoD #Cybersecurity #GovCon #FederalContracting