Tony LaRosa, CISSP

In the market for a cloud access security broker (CASB)? CSO Online shared what you should consider when selecting the right solution for your enterprise, noting that Proofpoint's CASB provides granular visibility into who interacts with your data.

7

Data durability and reliability, plus lower-cost tiering for efficient storage management. A smart choice for businesses looking to optimize long-term data retention without compromising on security or accessibility.

6

The Megatrends report is always interesting. I’m sure it will be even more insightful to hear the discussion with Steve Van Till. You won’t want to miss this!

3

Exploitation timelines are increasingly measured in days rather than weeks. Our latest report from Rapid7 Labs correlates vulnerability publication data, confirmed exploitation trends, frontline MDR incident response telemetry, and dark web, cybercrime, and nation-state intelligence to provide a unified view of how exposure evolves into compromise. One of the biggest standouts: how rapidly AI is being integrated into attacker playbooks, accelerating the operationalization of exposure. Many of the incidents we investigate still originate from known, unaddressed exposure. In those cases, attackers don’t need sophistication - they need opportunity. As remediation windows shrink, reducing that opportunity becomes essential to limiting compromise. You can download the 2026 Global Threat Landscape report here: https://r-7.co/4bQOAtq #infosec #cybersecurity

37

1 Comment

The CSA STAR certification brings clarity and confidence by harmonizing multiple security frameworks into a globally recognized standard. Its tiered assurance model empowers cloud providers to: ✅ Document and assess their security posture ✅ Demonstrate compliance with global expectations ✅ Proactively manage risks and build stakeholder trust Whether you’re a cloud provider, security leader, or compliance professional, CSA STAR offers the framework to strengthen governance and future-proof your cloud security.

23

Running a high-profile event? You need more than just a firewall. You need a strategy. Cisco’s new Event SOC Guide breaks down the essential steps to securing temporary, high-density networks against modern threats. Key Takeaways: 🔹 Why visibility is your greatest weapon. 🔹 How to build a temporary team that performs like a veteran unit. 🔹 The tech stack required for security. Don't start from scratch. Use the guide the pros use. Check it out: https://cs.co/6048hjKse #SOC #CiscoSecurity

5

See how the Borough of West Chester strengthened its cybersecurity posture over time with Barracuda. Learn about their journey with early BarracudaONE adoption and a comprehensive, layered defense strategy. http://cuda.co/csbow  #BarracudaONE #CaseStudy #cybersecurity

2

☁️ As cloud workloads evolve, security teams need to proactively tackle the exposures that matter. New innovations in Rapid7 Exposure Command bring together continuous runtime validation and data security posture management to help security, development, and business teams identify, in real-time, what is actively exploited. Get the full scoop in a new press release: https://r-7.co/479uojW

42

Exploring alternatives to Broadcom, VMware, Hyper-V, and Nutanix can be a challenging task. However, consider this: licensing should be free of penalties, offering VMs, all feature sets, unlimited core counts, and scaling. Our approach does not involve charges per core, per feature, or for scaling. The pricing remains the same whether you have five VMs or fifty. 50 TB on on server or 10. This perspective will surely have the /r/sysadmin community calling bull****. Typically, licensing models come with hidden constraints such as support tiers, feature locks, and per-cluster limits. If a vendor were to provide flat licensing without regard to cores, features, or workloads, it would disrupt the entire business model in the HCI market, including VMware, Nutanix, Red Hat, and Scale. Even open-source platforms with enterprise support, like Proxmox or XCP-ng, often implement per-socket or subscription-tiered pricing to sustain development and support. While this proposition is remarkable, it may seem almost unbelievable when applied at scale. Until you see what we are doing. Comment spill the beans if you want me to drop a dime on you.

16

It took #Merck three months to fully restore #ActiveDirectory after the #NotPetya attack.Three months of global disruption.Three months of identity chaos. A $1.4 billion price tag. In this episode of the Hybrid Identity Protection Podcast, Lance Peterman takes us inside the aftermath—what it really meant to rebuild Merck’s identity infrastructure from scratch, under massive pressure, and with the world watching. Now ask yourself: 1️⃣What if your Active Directory went down today? 2️⃣How many days of lost productivity, revenue, and trust could your business survive? And here’s the uncomfortable question: Is it really worth not having a robust AD security and recovery strategy in place? If you think the cost of #prevention is high, wait until you see the cost of #recovery. Don’t miss this powerful episode. #TeamSemperis #Semperis #Cybersecurity #Identitysecurity

8