Ty Streifel

Cybercriminals often bypass technical defenses by targeting employees through sophisticated social engineering attacks and phishing scams. A robust security strategy must include ongoing employee training and attack simulations to build a human firewall.

1

Are you measuring the risks that really matter? Traditional assessments rarely capture the sequence of actions attackers use to exploit gaps. At RSAC 2026, we’ll explore how simulating real attacker behavior uncovers exposure hiding in plain sight. Using insights from the 2026 Offensive Security Benchmark Report, we’ll break down reconnaissance, attack paths, and exploitation steps that quantify real enterprise risk. Our CEO, Rogier Fischer, along with our team of experts Matan Shavit and Guy Stockwell, will be at Moscone Center, San Francisco, March 23‑26, sharing these insights with professionals tackling the same risks. If you want to map your blind spots before attackers do, book a time with our team at the conference: https://lnkd.in/e_4dMt2F #RSAC2026 #RSAC #Cybersecurityevents

20

1 Comment

Research shows that offensive security practices like red teaming and pen testing reduce the frequency and cost of security incidents. Unfortunately, not everyone understands this, so CISOs and SecOps leaders must work to get executive buy-in. Our new guide helps you build a practical business case, overcome objections, and outline an investment roadmap for offensive security. Read the CISO's Guide to Justifying Offensive Security Investments: https://ow.ly/e2n650WVuW8 #OffSec #CISO #Cybersecurity

23

Identity and Access Management (IAM) is a key guardrail for secure access. This guide explains core IAM components, how they protect resources, and why they are foundational to Zero Trust security strategies. Read the breakdown: http://oal.lu/Q1obO #IAM #ZeroTrust #Security

1

What is an SSP and why is it so important for CMMC readiness? If you're preparing for CMMC certification, there’s one document that assessors will expect to see: your System Security Plan (SSP). By now, you’ve identified vulnerabilities through your gap analysis and started remediating risks with appropriate controls. Now it’s time to prove your progress with clear evidence and documentation. Your SSP does exactly that, and it’s a required step to achieve CMMC certification. Watch this short video to learn exactly what assessors are looking for, and how to create an SSP that meets their expectations. This video breaks down what an SSP is, what it must include, and why it’s critical for your CMMC readiness. We help organizations become CMMC audit-ready by developing SSPs that align with their required CMMC level and demonstrate readiness for assessment. #CMMC #SSP #Cybersecurity #Compliance #AuditReady #NIST800171 #GovCon #DFARS #InformationSecurity

4

🚨 CISA-FBI ALERT: Interlock Ransomware Attacks Surge 🚨 A new wave of sophisticated attacks is underway. Interlock uses fake updates and download pop-ups to infiltrate systems—then encrypts and threatens to leak data. At RansomEye, we respond with real-time, modular defense built for this threat landscape. 🛡️ DPI Defense – Powered by RansomEye Modules: 🔹 DETECT • Linux Agent – Real-time system monitoring & AI inference • Windows Agent – File activity and user behavior tracking • KillChain Core – TTP mapping, adversarial graph scoring • Threat Intel Engine – Live IOC ingestion from MISP, OTX, Abuse.ch 🔹 PROTECT • Forensic Dump Engine – Auto-quarantines suspicious memory/process • Quarantine Manager – Service kill & hash-blocking on compromise • Policy Engine – Dynamic response rules per system criticality 🔹 INVESTIGATE • Timeline Builder – Root cause and chain-of-event reconstruction • IOC Export CLI – On-demand extraction of attack fingerprints • Dashboard UI – Full visibility across assets, alerts, and status With RansomEye, you don’t just detect threats — you contain, understand, and stay ahead of them. #RansomEye #Interlock #CISA #FBI #CyberSecurity #Ransomware #ThreatIntel #AIforSecurity #DPIDefense https://lnkd.in/eUeUSjq5

2

DFARS 7012 requires contractors to implement NIST SP 800-171 to protect Covered Defense Information (CDI). DFARS 7019/7020 requires contractors to perform a basic assurance self-assessment and submit a score to SPRS that is within 3 years of contract award. DFARS 7021 specifies the CMMC level required to be awarded a DoD contract. CMMC levels require either self-assessment or third-party assessment. When making the determination of the level required for a contract, there is a memo that outlines the process that must be followed by the DoD program manager to obtain a waiver to "CMMC assessment requirements" for that contract. "Program Managers and requiring activities should identify information security requirements for the types of information most likely to be associated with the planned contract effort. When market research indicates that including a CMMC assessment requirement may impede ability to generate robust competition or delay delivery of mission critical capabilities, the SAE, CAE, or DAE may approve requests to waive inclusion of CMMC assessment requirements. SAEs and CAEs must carefully weigh the risk of potential loss of CUI associated with mission critical capabilities before granting a waiver." Level 1 - "There are no circumstances likely to warrant approval of requests to waive CMMC Level 1 requirements." Level 2 - "In rare circumstances. such as when seeking competition from non-traditional DoD sources. waivers may be warranted for CMMC Level 2 third-party assessment requirements. Such waivers are not appropriate for contracts requiring performance by a cleared defense contractor. Approved waivers on a class basis must include a planned expiration date and guidance for requiring CMMC certification in subsequent solicitations." Level 3 - "In rare circumstances, waivers may be warranted for CMMC Level 3 third-party assessment requirements: such waivers, however, are not appropriate for contracts or work statements requiring access to both unclassified and classified DoD information." Full memo on the process found here, starting on page 6: https://lnkd.in/eeBCW53n #cmmc #dib #dfars

58

12 Comments

Detection rules aren’t set-and-forget. Map them to MITRE ATT&CK tactics to track coverage & gaps. Start with crafting, then testing, deploying, and tuning—repeat. It’s a cycle that turns alerts into actionable intel. Stay sharp, stay ahead. 🔍 #CyberDefense #MITREATTACK

1

Learn about the "Cyber Resilient Weapon Systems Body of Knowledge (CRWS-BoK)" in this past CSIAC webinar, which provides an overview of its capabilities and key features. The CRWS-BoK is designed to provide users by providing up-to-date, publicly accessible CRWS resources directly accessible to users via a web browser. #cybersecurity #cyberresilience #cyberresiliency #DoW #cybercommand #weaponsystems #usmilitary #FlashbackFriday

1

#OSINT isn’t just for experts anymore. Horizon Identity empowers any team to uncover patterns, links, and real-world identity details - without needing OSINT skills or special training. One search bar for access to more than 550 publicly available data sources and more than 1,500 endpoints to make your investigation easy. Learn more here: https://hubs.la/Q03rsWqm0 #cai #investigations #shadowdragon #horizonidentity #pai #osintforgood #realtimeintel

23

The departure of CISA's PRNI lead staffer jeopardizes the agency's pre-ransomware notification program, potentially disrupting critical information sharing and collaboration with private-sector partners, thus weakening early warning capabilities. Defenders should proactively seek alternative threat intelligence sources and strengthen relationships with private sector partners to maintain early warning capabilities. 💰 #CyberNewsLive https://lnkd.in/eAabx_2v

1

Every acquisition multiplies tabs. Tabs multiply risk. Start at the session. M&A adds new portals, vendors, and logins overnight. Most of it lands in the browser, not behind your firewall. If sessions are blind, attackers get a free path. Secure the session where credentials, files, and prompts move. Visual credit: Nimble #Cybersecurity

28

4 Comments

Learn about federal cybersecurity requirements, assess gaps in your systems, and get guidance on frameworks like NIST SP 800-171 and CMMC. Plus, connect with tools, partners, and expert insights. Topics include: 🔹 NIST Risk Management 🔹 Tentative DoD CIO Briefing 🔹 CMMC Compliance with a C3PAO Date/Time: Oct. 1: 1 - 2:30PM Oct. 8: 11 - 12PM Oct. 15: 10 - 11:30AM Oct. 23: 11 - 12:30PM East Michigan APEX Accelerator Michigan Alliance of APEX Accelerators Northwest Michigan APEX Accelerator South Central Michigan APEX Accelerator Cornerstone Alliance https://lnkd.in/gegJm3S7

7

1 Comment