Simone Gammeri

I look forward to be at Cal Poly Pomona’s 21st Annual Cybersecurity and Awareness Fair, representing Presidio and connecting with the next generation of cybersecurity talent. Cybersecurity isn’t just about technology — it’s about people who are curious, resilient, and driven to protect what matters most. At Presidio, we help organizations secure their digital future — from cloud and AI risk to identity, network, and offensive testing. We also invest in people and pathways, helping early-career professionals build skills that make a real impact. https://lnkd.in/gN6aurYK #CybersecurityAwarness #CareerFair #Presidio #CalPolyPomona #FutureCyberTalent

35

2 Comments

I knew when Jim Alkove presented at our CISO / Risk Executive Workshop in Jackson Hole a year ago that there was a need to build something with viable and important recommendations for the future of identity management. Through the collaborative efforts of subject matter experts and leading practitioners active in the #SINETCommunity, this handbook is a tangible example of how SINET fosters opportunities for thought leadership and knowledge sharing to defeat global cybersecurity threats. Thank you to Jim and the SINET Working Group for their extensive work on this. http://bit.ly/3TUyaqu

47

3 Comments

Exploitation timelines are increasingly measured in days rather than weeks. Our latest report from Rapid7 Labs correlates vulnerability publication data, confirmed exploitation trends, frontline MDR incident response telemetry, and dark web, cybercrime, and nation-state intelligence to provide a unified view of how exposure evolves into compromise. One of the biggest standouts: how rapidly AI is being integrated into attacker playbooks, accelerating the operationalization of exposure. Many of the incidents we investigate still originate from known, unaddressed exposure. In those cases, attackers don’t need sophistication - they need opportunity. As remediation windows shrink, reducing that opportunity becomes essential to limiting compromise. You can download the 2026 Global Threat Landscape report here: https://r-7.co/4bQOAtq #infosec #cybersecurity

37

1 Comment

I'd like to think that people would recognize an obvious point here. Safe, which relies on FAIR analytics, was miles ahead of even the other CRQ leaders in Forrester's analysis (and Safe isn't the only FAIR-based player in the market). If this doesn't blow a great big gaping hole in ridiculous claims that FAIR is somehow irrelevant in 2025, I don't know what will. Unfortunately, many of these claims about FAIR are driven by one of two things -- 1) ignorance, or 2) misinformation for competitive messaging. As far as ignorance goes, very often that's simply a mistaken belief that FAIR is dependent on SME estimates and/or relies solely on betaPERT distributions. Neither is true. If you have empirical data, FAIR can consume it. If you want to use a different distribution, FAIR's fine with that too. FAIR is a model, folks. It defines factors and their relationships -- period. As such, there are many ways to implement it, each with its strengths and weaknesses. Furthermore, FAIR describes how risk works, which doesn't change as the risk landscape changes. Yes, the details of the risk landscape (e.g., threats, assets, controls, etc.) change over time, but how RISK works (and therefore FAIR) is resilient to these changes. Think of this as being similar to Copernicus' observations of the solar system -- elliptical orbits, etc. Those observations describe how the solar system appears to behave. You may discover (or remove) planets but the nature of the system remains unchanged. I'm excited for my friends at Safe, who have worked very hard to get the product to where it is. But let's also recognize that CRQ is still largely thought of as a nice-to-have, and we're only going to overcome that by educating the market and raising risk measurement expectations, and not through misrepresentations.

116

11 Comments

Cyberattacks are getting smarter. Are your defenses keeping up? AI can help you: * Spot threats in real time * Predict risks before they spread * Cut through alert noise * Respond faster * Meet compliance needs But tools alone aren’t enough. You need the right strategy. See how AI + expert guidance can improve your cybersecurity. Read the full post: https://hubs.la/Q03szv3J0 #Cybersecurity #AI #ArtificialIntelligence #Compliance

20

Ventura County Deputy CIO and CyberEdBoard member Gary Gooden, BSc., MBA, CISM, ZTSX-I shares why strong problem statements and effective storytelling are critical to gaining stakeholder buy-in, strengthening identity and access management, and building resilient, modern infrastructure. Watch this Profiles in Leadership conversation from the Gartner IAM Summit to hear how consistent delivery, clear communication, and trust drive real transformation across public-sector ecosystems. Watch the full interview: https://lnkd.in/dy53PBHq #CyberEdBoard #Leadership #IdentityManagement #CyberResilience #PublicSectorIT #CIO #DigitalTransformation #IAM

5

Over the past few years, Culsight has grown in scope and depth. What started as focused awareness initiatives has evolved into structured programs around CPA (Cybersecurity, Privacy and AI) governance, human risk, crisis readiness, and leadership engagement. As part of this natural progression, we are happy to announce that we are bringing everything together under a more defined identity – Culsight Culsight represents how we see security today: culture with visibility. Attached is our new identity. Why Purple? Purple represents vision, clarity, and leadership. It reflects a balance of stability and strength, combining trust with forward thinking. Tagline – Where Security Culture Becomes Visible Our tagline reflects our core belief that security should not remain confined to policies or compliance checklists. It should be visible in behavior, leadership decisions, risk conversations, dashboards, and crisis response. It represents our commitment to making security culture measurable, observable, and embedded across the organization. For more details and discussion, you can reach out to us at risk@culsight.com #Risk #Cybersecurity #Privacy #Artificialintelligence #CPA #Governance #HRA

35

Cyber tip: Always patch your systems. AI tip: ChatGPT won’t build your network—but showing up to happy hour might. 🤖🍻 Whether you’re defending networks or just trying to make new ones (friends, not IPs), join us on Sept 18 at Ballast Point Brewing Company (San Diego) for a FUEL Happy Hour. Smart convos, cold drinks, and zero awkward breakout rooms. RSPV: https://lnkd.in/g824-jrg

9

2024’s cyber attacks with physical consequences continue to disproportionately impact the transportation and discrete manufacturing industries. These two industries have alternated “first place” for the last 3 years. The 2025 Waterfall Security Solutions / ICS Strive 2025 OT Cyber Threat Report documents 7 new consequential attacks and near misses on water utilities. Both the power and metals & mining industries disclosed a small number of incidents this year (5 combined), with similar numbers last recorded in 2022 (6 combined). 2024 saw 2 more incidents in automated “smart” buildings, both on the hospitality industry. The oil and gas sectors saw no new disclosed incidents in 2024. Access all the data in our 2025 OT Cyber Threat Report. Each data point is meticulously documented and can be independently verified... including an appendix which contains the full data set of all incidents since 2010 and their public descriptions. Download here ➡️ https://bit.ly/46SncJp

32

1 Comment

The California Privacy Protection Agency has opened up a new position -- a Research Technologist to help facilitate audits of businesses covered under the CCPA. https://lnkd.in/gsBE-Ses

55

2 Comments