Q&A with David Etue, Chief Executive Officer at Nisos

David Etue, Chief Executive Officer at Nisos, has driven the success of security solutions and portfolios as an executive focused on cybersecurity with roles in strategy, corporate development, product management, marketing, business development, management consulting, security program leadership, and technical implementation. He has achieved success in both small and large enterprises.

David has a strong background in information security, cybersecurity, privacy, and integration technologies including both the technology and business impact. In addition to his education in business administration and finance, David has taken leadership training at GE's John F. Welch Leadership Development Center at Crotonville. Additionally, he completed GE's Six Sigma Black Belt Training and is Green Belt Certified. He is trained in the Pragmatic Marketing Framework, is a Certified Information Privacy Professional holding both the base CIPP and CIPP/G government privacy extension, and a Certified CISO.

Financially motivated actors are innovating their fraud, abuse, and eCrime approaches to find new ways to exploit victims. I’m continually amazed by the innovation in how actors are gaming the system.



MEDIA 7: Could you please tell us a little bit about yourself? What inspired you to pursue a career in cybersecurity?
DAVID ETUE:
Hello! Thanks for the opportunity to talk today. I am the CEO of Nisos, where we provide managed intelligence offerings to transform how cyber intelligence enables organizations to disrupt motivated and sophisticated adversaries. 

What inspired me to have a career in cybersecurity? I started using technology as a young kid, including being a sysop (systems administrator) of a BBS (bulletin board system) in high school. I was fascinated by how different systems could interact to share information. I also got my first insight into how technology could be abused. Having to defend a system from attacks, trying to keep others from stealing access to our modems to make long-distance calls, and seeing people share illicit content opened my eyes to how having a deep understanding of how technology works could enable you to better defend it. 

Those experiences piqued my interest in information security. I kept focused on it as a hobby and then I got the opportunity early in my career to become more involved. It wasn’t considered a career path back then like cybersecurity is today, but there was something about it that I just loved. What I’ve realized since is that it has three key attributes that I found really fulfilling. Firstly, the rate of change is very high. We have adversaries who innovate every day and we have to counter that innovation.

Secondly, it is a key intersection of technology and business. There is an old adage that the only secure computer is one that is turned off and locked in a safe, making it not very useful. Finding the right balance of technology enablement and risk mitigation is an awesome challenge. Finally, the mission matters: technology has become an essential element of how we live, and adequately defending that is critical to society. It’s great when something you love also turns out to enable a great career opportunity. 

M7: How do you think medium-sized enterprises should make optimum use of intelligence?
DE:
Intelligence is a key enabler of proper prioritization of resources and focuses when responding to an event. Every organization lacks the resources to protect everything perfectly, so must make decisions on how to apply scarce resources. Understanding your likely adversaries and their tactics, techniques, and procedures (TTPs) is something I’ve found highly approachable to organizations of all sizes. Understanding those factors, enables prioritizations that optimize defense against the more likely attacks. Intelligence can help inform upfront assessment, and external threat hunting and intelligence updates provide continuous feedback for learning and adjustment.

When responding to events, there is often critical context “outside the firewall” that enables better response to an attack. It can show how the attack is occurring and potential methods to mitigate the attack that aren’t visible to the Security Operations Center (SOC) from internal system telemetry. It can often illustrate if you are being targeted directly versus your industry versus an opportunistic attack. Attributing the actor behind the attack can offer insight into the motivations and goals of the attack. It can also open new response methods for some classes of actors, including legal and law enforcement. 

One of the biggest challenges a medium-size enterprise is presented with is getting the signal-to-noise ratio right so they can focus on impactful intelligence. Definitionally, intelligence is information that is actionable to drive a decision. Unfortunately, a lot of threat “intelligence” out there isn’t actionable without expertise or organizational context and creates noise. This is the area that has prevented most organizations with small intelligence teams from making the impact they desire. Ensuring what they get is actionable is critical if you don’t have the internal expertise and capability to turn information into intelligence. That is what excites me so much about what we do at Nisos. We have the expertise to bring context to deliver finished intelligence to make it actionable for our clients.


As more of our interactions become digital, it presents new opportunities for financially motivated malicious actors to take advantage of and conduct fraudulent activity.



M7: What is your approach at Nisos to solving adversary-centric problems?
DE:
Threat actors are a “who”, not a “what” and we provide our clients with insight into their adversaries (the “who”); their tactics, techniques, and procedures (the “how”); and their motivations and intentions (the “why”). Importantly, we deliver that in a way that is actionable to our clients and goes beyond traditional cybersecurity attacks including fraud, risk, reputation, key person, and other non-traditional business risks.
We have designed our intelligence collection and analysis with this adversary-centric approach, and also have a number of operators who managed adversarial operations on behalf of government agencies and therefore have a unique perspective on the challenge.
 
There is a naïve perspective that knowing your adversary isn’t necessary and that you should just protect your systems and all will be okay. As mentioned previously, we need to apply our scarce resources wisely, and understanding our adversaries gives an important lens to that decision. Additionally, the attribution or unmasking of adversaries can give insight into how to best mitigate an attack, and also can open up additional response methods including legal and law enforcement approaches. 

M7: What do you believe are the top cybersecurity threats that have arisen post-COVID-19?
DE:
COVID-19 has accelerated our adoption of, and therefore dependence on, technology by leaps and bounds. We have jumped 5+ years on the adoption curve out of necessity and invention. While remote work and e-commerce rightfully get a lot of attention, it has also impacted how we get health care, how we experience performance art, and so many other things. In many cases, we adopted these technologies out of necessity and therefore increased our attack surface without adequate time for planning security given the broader adoption and new use cases.

So broadly, I have a serious concern that we are adopting technology faster than our ability to secure it, which provides adversaries significant opportunities. Additionally, a global recession impacts employment and past research points to growth to people pursuing illicit paths in those times increasing the number of adversaries we need to defend against. We need to deal with that increased attack surface, broader technology dependency, and potentially additionally motivated adversaries.

The other risk I think about related to the changes driven by COVID-19 is how systems can be used to maliciously leverage human relationships. Much of the recent acceleration of technology has been driven by how we interact, requiring more trust in electronic interactions, but often without support for that trust in the underlying technology has changed. 

Financially motivated actors are innovating their fraud, abuse, and eCrime approaches to find new ways to exploit victims. I’m continually amazed by the innovation in how actors are gaming the system. We see it everywhere—from the gig economy to advertising fraud to counterfeit goods to fake customer service and more. 

One of the key areas impacting trust is disinformation and misinformation. The spotlight has rightfully been shined on geopolitical disinformation, but it is also occurring elsewhere. Our security measures were typically designed to protect the technology and not focused on the trust and safety of the interactions occurring on them.

This has become a tool available to every class of adversary, and you can see the early adoption - fake product reviews to influence buying decisions, misleading company news to drive stock prices, local application to politics and charitable endeavors, and more. I expect continued adversary use of misinformation as a tool, and a need to adapt our systems and intelligence to address it.


Organizations are ramping up security monitoring to try to know what is happening on endpoint devices. It’s a unique opportunity for security to advocate for the employee experience.



M7: How do you ensure data security while your employees work from home?
DE:
I think we need to think differently about the problem. There are many things that security and infrastructure teams are doing to improve security posture. There are some baseline controls that if not already deployed, should be. Strong authentication and proper security controls for internet-facing systems, and endpoint security visibility are the key ones that come to mind. 

However, when you experience a significant change like we have with pandemic-driven work from home, it really requires stepping back and getting a new perspective on your approach. Poor security hygiene on a family member’s device could create lateral movement risk to a corporate device. That security control that prevented non-corporate approved printers needs to be turned off because the corporate ones are no longer available.

Intellectual property is now in the employee’s home office. I’d argue that all of those risks have been present for years, but they’ve grown in prevalence. In general, I think zero trust principles are one of the best paths forward from a technology perspective.

Another element that we need to look at is the mental health and engagement of our teams. It’s short-sighted to think that this doesn’t impact our cybersecurity posture. If people are exhausted from not figuring out work-life separation, are depressed, or feel disconnected from work, what will that cause? They may not realize the phishing attempt isn’t a real request. They may not report a security incident. They may decide to find employment elsewhere in search of an environment that feels more inclusive or supportive. 

Organizations are ramping up security monitoring to try to know what is happening on endpoint devices. While it may be right to add more monitoring given the change in risk posture, a “Big Brother” emotion without the appropriate employee support infrastructure to accompany it, isn’t well-positioned to achieve the planned risk reduction outcomes. It’s a unique opportunity for security to advocate for the employee experience.

M7: What is your advice to our readers to prevent and be aware of fraud and eCrime?
DE:
 As more of our interactions become digital, it presents new opportunities for financially motivated malicious actors to take advantage of and conduct fraudulent activity. It is important to understand these trends as you use technology, as you engage with customers and partners, and as you deploy and manage technology platforms of your own. 

As I mentioned before, the continual innovation by adversaries is amazing. While unsophisticated actors engage with methods that are easy to detect with the old adage, “If it sounds too good to be true, it probably is”, investment in more sophisticated attacks is prevalent. We have seen audio deep fakes, account farming, synthetic identity fraud, as well as the sale of fraud-enablement tools in the underground.

When launching a technology platform, security teams will often generate “abuse cases”, which is like a “use case” but from the perspective of how an adversary could misuse the platform. Abuse cases need to evolve from being focused on the confidentiality, availability, and integrity of the system to also cover fraud and abuse cases. I’ve found it helpful to define fraud as actions that create losses for your organization and abuse as actions that use your platform to cause losses to others and to ensure your abuse cases cover both. 

Examples of fraud would be activities like unpaid premium accounts or creating gift cards illegally. Examples of abuse would include using your platform to run scams or fake product reviews impacting what products a consumer purchases. Beyond developing to prevent those cases, it is also important to monitor for activity outside of norms, have the ability to determine if it is malicious and if so, respond. We continually are evolving our monitoring and response capabilities at Nisos as adversaries innovate.

ABOUT NISOS

Nisos is a Managed Intelligence company. Our services enable security, intelligence, and trust & safety teams to leverage a world-class intelligence capability tailored to their needs. We fuse robust data collection with a deep understanding of the adversarial mindset delivering smarter defense and more effective response against advanced cyber attacks, disinformation and abuse of digital platforms. For more information visit: www.nisos.com

More C-Suite on deck

‘In the industry, we've observed fragmentation, especially among larger organizations,’ says Chris Fisher

Media 7 | October 16, 2023

Chris Fisher is a seasoned marketing professional who specializes in digital marketing and demand generation to fuel business growth. I integrate product messaging and innovative strategies with data-driven marketing to achieve quantifiable outcomes. Read on to know his thoughts about safeguarding the layers of Cyber-security.

Read More

'AI & ML algorithms will play a critical role in identifying cyber threats,' asserts Trishneet Arora

Media 7 | July 28, 2023

Trishneet Arora, a self-made individual, demonstrated remarkable vision, intellect, and competence when he established a startup at the young age of 19. Under his guidance, the flagship venture has expanded into both the entertainment and educational sectors. With Trishneet at the helm, the potential for growth and success knows no bounds. Let's delve into his insights on securing UPI-based applications.

Read More

‘Data and analytics play a crucial role in shaping our advertising strategies,' asserts Aleksander Groshev

Media 7 | June 28, 2023

Aleksander Groshev is the CEO and Co-Founder of Autobahn Security. Previously he was Vice President of Product responsible for the product development of the SaaS platform. Before joining Autobahn Security he held the position of Head of Product at Fincite, a wealth management B2B platform.

Read More

‘In the industry, we've observed fragmentation, especially among larger organizations,’ says Chris Fisher

Media 7 | October 16, 2023

Chris Fisher is a seasoned marketing professional who specializes in digital marketing and demand generation to fuel business growth. I integrate product messaging and innovative strategies with data-driven marketing to achieve quantifiable outcomes. Read on to know his thoughts about safeguarding the layers of Cyber-security.

Read More

'AI & ML algorithms will play a critical role in identifying cyber threats,' asserts Trishneet Arora

Media 7 | July 28, 2023

Trishneet Arora, a self-made individual, demonstrated remarkable vision, intellect, and competence when he established a startup at the young age of 19. Under his guidance, the flagship venture has expanded into both the entertainment and educational sectors. With Trishneet at the helm, the potential for growth and success knows no bounds. Let's delve into his insights on securing UPI-based applications.

Read More

‘Data and analytics play a crucial role in shaping our advertising strategies,' asserts Aleksander Groshev

Media 7 | June 28, 2023

Aleksander Groshev is the CEO and Co-Founder of Autobahn Security. Previously he was Vice President of Product responsible for the product development of the SaaS platform. Before joining Autobahn Security he held the position of Head of Product at Fincite, a wealth management B2B platform.

Read More

Related News

API Security

Cequence and Vercara Partner to Combat Cyber Threats and Revolutionize API Security

Cequence Security | January 25, 2024

Cequence Security is proud to announce a new partnership with Vercara, a leading provider of cloud-based services that secure the online experience. This collaboration aims to fortify the cybersecurity landscape by pairing Vercara’s network and application protections with Cequence Security's innovative Unified API Protection (UAP) platform. Security teams encounter substantial hurdles in safeguarding API applications from cyber-attacks, including the rapid development and deployment of API applications across diverse cloud providers. The unmanaged and unprotected nature of these APIs can harbor critical vulnerabilities, making them susceptible to exploitation. Moreover, the lack of a clear and consistent security posture across the application footprint introduces further complexities. To address these challenges, Cequence Security's UAP platform provides a comprehensive discovery of the entire API attack surface, encompassing both external and internal APIs. It ensures compliance with security and governance best practices, eliminating unknown and unmitigated API security risks. Furthermore, the solution offers native real-time inline protection, blocking API attacks before they reach applications. "The absence of API protection puts you at risk of potential theft, fraud, non-compliance, and business disruptions,” said Carlos Morales, SVP Solutions at Vercara. “Our partnership with Cequence combines our collective best-in-class services to address the evolving demands of the cybersecurity landscape, ensuring that businesses can confidently deploy needed applications and successfully navigate the complexities of API security with advanced, holistic protection.” Arun Gowda, VP, Business Development at Cequence Security, said, “In the evolving landscape of cybersecurity, the extensive risk of data compromise in API breaches goes beyond external APIs to internal ones. These often-overlooked internal APIs can access sensitive data not intended for public exposure. APIs have changed the game for attackers, making it imperative to prioritize the security of all assets accessible through APIs, including those not expected to be publicly exposed.” He added, “We are pleased to combine our innovative API security solutions with Vercara's innovative WAF and DDoS services to deliver advanced, holistic API protection. This collaboration reinforces our commitment to provide unparalleled security measures for businesses reliant on APIs.” Cequence Security's UAP platform is unparalleled in addressing all phases of the API security lifecycle. It provides: Discovery: A continuous API attack surface discovery management product that assesses your application footprint, offering a complete inventory of external APIs. Compliance: A security posture management product that identifies security risks in APIs, ensuring compliance with specifications, security test requirements, and governance best practices. Protection: Detects and prevents sophisticated automated API attacks and business logic abuse using advanced machine learning rules, providing real-time protection without relying on third-party components. About Cequence Security Cequence, a pioneer in API security and bot management, is the only solution that delivers Unified API Protection (UAP), uniting discovery, compliance, and protection across all internal and external APIs to defend against attacks, targeted abuse, and fraud. Requiring less than 15 minutes to onboard an API without requiring any instrumentation, SDK, or JavaScript integration, the flexible deployment model supports SaaS, on-premises, and hybrid installations. Cequence solutions scale to handle the most demanding Fortune and Global 2000 organizations, securing more than 8 billion daily API calls and protecting more than 3 billion user accounts across these customers. To learn more, visit www.cequence.ai. About Vercara Vercara is a purpose-built, global, cloud-based security platform that provides layers of protection to safeguard businesses’ online presence, no matter where attacks originate or where they are aimed. Delivering the industry’s highest-performing solutions and supported by unparalleled 24/7 human expertise and hands-on guidance, top global brands depend on Vercara to protect their networks and applications against threats and downtime. Vercara’s suite of cloud-based services is secure, reliable, and available, delivering peace of mind and ensuring that businesses and their customers experience exceptional interactions all day, every day. Pressure-tested in the world’s most tightly regulated and high-traffic verticals, Vercara’s mission-critical security portfolio provides best-in-class DNS and application and network security (including DDoS and WAF) services to its Global 5000 customers and beyond. For more information, visit vercara.com.

Read More

Software Security

Keeper Streamlines Compliance Processes With Granular Sharing Enforcements

Keeper Security, Inc. | January 11, 2024

Keeper Security, the leading provider of zero-trust and zero-knowledge cybersecurity software protecting passwords, passkeys, privileged access, secrets and remote connections, announces Granular Sharing Enforcements will soon be available for all products in the Keeper® platform. Granular Sharing enables administrators to enforce detailed creating and sharing permissions at the user level. By implementing these permissions, organizations can ensure employees only have access to the resources necessary for their roles, minimizing the risk of unauthorized access, data breaches and lateral movement within a network. "It's critical for organizations to have security solutions that help them adhere to increasing regulations and compliance requirements," said Craig Lurey, CTO and Co-founder of Keeper Security. "Granular permission control helps organizations enhance their security posture by restricting access to sensitive information and systems. With Granular Sharing Enforcements, it's easier than ever for IT administrators to better control the principle of least privilege and streamline operations within their organizations." Keeper's added Granular Sharing Enforcement policies provide more detailed restrictions that administrators can apply to users for both creating and sharing records. Most employees do not need access to all of the data or functionalities within an organization, and many industries and geographical regions have specific regulations and compliance requirements regarding data protection and privacy, including HIPAA, GDPR, PCI DSS and SOX. Granular permission controls enable organizations to align with local and industry regulations by allowing them to define and enforce access policies. This helps in ensuring the organization is compliant with industry standards and legal requirements. Key features of Keeper's Granular Sharing Enforcements include: Auditing: Keeper provides clear alerting and reporting on over 100 different event types. Version control: Only a small subset of users have permissions to update or share records, helping teams ensure information is consistent and accurate. Seamless access on any device: Keeper provides the same user experience across platforms, ensuring cross functionality and ease of use, whether on web, desktop or mobile. Encryption: Keeper provides secure sharing with elliptic curve encryption, ensuring cybercriminals cannot intercept passwords or other shared records in transit. Keeper Administrators can easily customize permissions to best suit the compliance needs of their organization. Administrators modify permissions in the Enforcement Policies section of the Admin Console for the chosen role by selecting Creating and Sharing. Most permissions are activated by default for maximum security. Enforcements have been designed to be simple and powerful, allowing admins to choose the appropriate settings for their unique needs. Granular Sharing Enforcements will be available for all sharing needs within Keeper's Enterprise Password Manager, Keeper Secrets Manager and KeeperPAM. With Keeper's zero-knowledge password management and security platform, IT administrators have complete visibility into employee password practices, enabling them to monitor password use and enforce password security policies, including strong, unique passwords, Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and other security policies. Keeper Secrets Manager® is a fully managed cloud-based, zero-knowledge platform for securing infrastructure secrets such as API keys, database passwords, access keys, certificates and any type of confidential data. Its latest offering, KeeperPAM™, provides next-generation Privileged Access Management (PAM) that is disrupting the traditional PAM market. KeeperPAM delivers enterprise-grade password, secrets and privileged connection management within a unified SaaS platform that is cost-effective, easy to use and simple to deploy. KeeperPAM enables least-privilege access with zero-trust and zero-knowledge security. Enterprises select Keeper because of its strong security architecture, ability to support federated and passwordless authentication with any identity provider, seamless integration into on-premises, cloud or hybrid environments and ease of use across desktop and mobile devices. About Keeper Security Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper's affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance. Trusted by millions of individuals and thousands of organizations, Keeper is the leader for best-in-class password and passkey management, secrets management, privileged access, secure remote access and encrypted messaging.

Read More

Platform Security

D3 Security is a proud participant in the Microsoft Security Copilot Partner Private Preview

D3 Security | January 08, 2024

D3 Security today announced its participation in the Microsoft Security Copilot Partner Private Preview. D3 Security was selected based on their proven experience with Microsoft Security technologies, willingness to explore and provide feedback on cutting edge functionality, and close relationship with Microsoft. “In the context of security, AI’s impact is likely to be profound, tilting the scales in favor of defenders and empowering organizations to defend at machine speed. At Microsoft, we are privileged to have a leading role in advancing AI innovation, and we are so grateful to our incredible ecosystem of partners, whose mission-driven work is critical to helping customers secure their organizations and confidently bring the many benefits of AI into their environments,” said Vasu Jakkal, Corporate Vice President, Microsoft Security. D3 Security is working with Microsoft product teams to help shape Security Copilot product development in several ways, including validation and refinement of new and upcoming scenarios, providing feedback on product development and operations to be incorporated into future product releases, and validation and feedback of APIs to assist with Security Copilot extensibility. “D3 has always pushed SOAR technology forward, be it through our deep research into integration design; our Event Pipeline, which reduces alert-handling time by up to 99%; or our operationalizing of the MITRE ATT&CK and D3FEND frameworks,” said Gordon Benoit, President, D3 Security. “By teaming with Microsoft in the Security Copilot Partner Private Preview, we will be able to use AI to evolve SOAR in ways that would have sounded impossible just a year ago.” Security Copilot is the first AI-powered security product that enables security professionals to respond to threats quickly, process signals at machine speed, and assess risk exposure in minutes. It combines an advanced large language model (LLM) with a security-specific model that is informed by Microsoft's unique global threat intelligence and more than 65 trillion daily signals. About D3 Security D3 Security’s Smart SOAR™ (security orchestration, automation, and response) solves entrenched problems in cybersecurity by transforming separate tools into a unified ecosystem with multi-tier automation, codeless orchestration, and robust case management. Smart SOAR performs autonomous triage and reduces false positives so enterprise, MSSP, and public sector security teams can spend more time on real threats. Product or service names mentioned herein may be the trademarks of their respective owners.

Read More

API Security

Cequence and Vercara Partner to Combat Cyber Threats and Revolutionize API Security

Cequence Security | January 25, 2024

Cequence Security is proud to announce a new partnership with Vercara, a leading provider of cloud-based services that secure the online experience. This collaboration aims to fortify the cybersecurity landscape by pairing Vercara’s network and application protections with Cequence Security's innovative Unified API Protection (UAP) platform. Security teams encounter substantial hurdles in safeguarding API applications from cyber-attacks, including the rapid development and deployment of API applications across diverse cloud providers. The unmanaged and unprotected nature of these APIs can harbor critical vulnerabilities, making them susceptible to exploitation. Moreover, the lack of a clear and consistent security posture across the application footprint introduces further complexities. To address these challenges, Cequence Security's UAP platform provides a comprehensive discovery of the entire API attack surface, encompassing both external and internal APIs. It ensures compliance with security and governance best practices, eliminating unknown and unmitigated API security risks. Furthermore, the solution offers native real-time inline protection, blocking API attacks before they reach applications. "The absence of API protection puts you at risk of potential theft, fraud, non-compliance, and business disruptions,” said Carlos Morales, SVP Solutions at Vercara. “Our partnership with Cequence combines our collective best-in-class services to address the evolving demands of the cybersecurity landscape, ensuring that businesses can confidently deploy needed applications and successfully navigate the complexities of API security with advanced, holistic protection.” Arun Gowda, VP, Business Development at Cequence Security, said, “In the evolving landscape of cybersecurity, the extensive risk of data compromise in API breaches goes beyond external APIs to internal ones. These often-overlooked internal APIs can access sensitive data not intended for public exposure. APIs have changed the game for attackers, making it imperative to prioritize the security of all assets accessible through APIs, including those not expected to be publicly exposed.” He added, “We are pleased to combine our innovative API security solutions with Vercara's innovative WAF and DDoS services to deliver advanced, holistic API protection. This collaboration reinforces our commitment to provide unparalleled security measures for businesses reliant on APIs.” Cequence Security's UAP platform is unparalleled in addressing all phases of the API security lifecycle. It provides: Discovery: A continuous API attack surface discovery management product that assesses your application footprint, offering a complete inventory of external APIs. Compliance: A security posture management product that identifies security risks in APIs, ensuring compliance with specifications, security test requirements, and governance best practices. Protection: Detects and prevents sophisticated automated API attacks and business logic abuse using advanced machine learning rules, providing real-time protection without relying on third-party components. About Cequence Security Cequence, a pioneer in API security and bot management, is the only solution that delivers Unified API Protection (UAP), uniting discovery, compliance, and protection across all internal and external APIs to defend against attacks, targeted abuse, and fraud. Requiring less than 15 minutes to onboard an API without requiring any instrumentation, SDK, or JavaScript integration, the flexible deployment model supports SaaS, on-premises, and hybrid installations. Cequence solutions scale to handle the most demanding Fortune and Global 2000 organizations, securing more than 8 billion daily API calls and protecting more than 3 billion user accounts across these customers. To learn more, visit www.cequence.ai. About Vercara Vercara is a purpose-built, global, cloud-based security platform that provides layers of protection to safeguard businesses’ online presence, no matter where attacks originate or where they are aimed. Delivering the industry’s highest-performing solutions and supported by unparalleled 24/7 human expertise and hands-on guidance, top global brands depend on Vercara to protect their networks and applications against threats and downtime. Vercara’s suite of cloud-based services is secure, reliable, and available, delivering peace of mind and ensuring that businesses and their customers experience exceptional interactions all day, every day. Pressure-tested in the world’s most tightly regulated and high-traffic verticals, Vercara’s mission-critical security portfolio provides best-in-class DNS and application and network security (including DDoS and WAF) services to its Global 5000 customers and beyond. For more information, visit vercara.com.

Read More

Software Security

Keeper Streamlines Compliance Processes With Granular Sharing Enforcements

Keeper Security, Inc. | January 11, 2024

Keeper Security, the leading provider of zero-trust and zero-knowledge cybersecurity software protecting passwords, passkeys, privileged access, secrets and remote connections, announces Granular Sharing Enforcements will soon be available for all products in the Keeper® platform. Granular Sharing enables administrators to enforce detailed creating and sharing permissions at the user level. By implementing these permissions, organizations can ensure employees only have access to the resources necessary for their roles, minimizing the risk of unauthorized access, data breaches and lateral movement within a network. "It's critical for organizations to have security solutions that help them adhere to increasing regulations and compliance requirements," said Craig Lurey, CTO and Co-founder of Keeper Security. "Granular permission control helps organizations enhance their security posture by restricting access to sensitive information and systems. With Granular Sharing Enforcements, it's easier than ever for IT administrators to better control the principle of least privilege and streamline operations within their organizations." Keeper's added Granular Sharing Enforcement policies provide more detailed restrictions that administrators can apply to users for both creating and sharing records. Most employees do not need access to all of the data or functionalities within an organization, and many industries and geographical regions have specific regulations and compliance requirements regarding data protection and privacy, including HIPAA, GDPR, PCI DSS and SOX. Granular permission controls enable organizations to align with local and industry regulations by allowing them to define and enforce access policies. This helps in ensuring the organization is compliant with industry standards and legal requirements. Key features of Keeper's Granular Sharing Enforcements include: Auditing: Keeper provides clear alerting and reporting on over 100 different event types. Version control: Only a small subset of users have permissions to update or share records, helping teams ensure information is consistent and accurate. Seamless access on any device: Keeper provides the same user experience across platforms, ensuring cross functionality and ease of use, whether on web, desktop or mobile. Encryption: Keeper provides secure sharing with elliptic curve encryption, ensuring cybercriminals cannot intercept passwords or other shared records in transit. Keeper Administrators can easily customize permissions to best suit the compliance needs of their organization. Administrators modify permissions in the Enforcement Policies section of the Admin Console for the chosen role by selecting Creating and Sharing. Most permissions are activated by default for maximum security. Enforcements have been designed to be simple and powerful, allowing admins to choose the appropriate settings for their unique needs. Granular Sharing Enforcements will be available for all sharing needs within Keeper's Enterprise Password Manager, Keeper Secrets Manager and KeeperPAM. With Keeper's zero-knowledge password management and security platform, IT administrators have complete visibility into employee password practices, enabling them to monitor password use and enforce password security policies, including strong, unique passwords, Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and other security policies. Keeper Secrets Manager® is a fully managed cloud-based, zero-knowledge platform for securing infrastructure secrets such as API keys, database passwords, access keys, certificates and any type of confidential data. Its latest offering, KeeperPAM™, provides next-generation Privileged Access Management (PAM) that is disrupting the traditional PAM market. KeeperPAM delivers enterprise-grade password, secrets and privileged connection management within a unified SaaS platform that is cost-effective, easy to use and simple to deploy. KeeperPAM enables least-privilege access with zero-trust and zero-knowledge security. Enterprises select Keeper because of its strong security architecture, ability to support federated and passwordless authentication with any identity provider, seamless integration into on-premises, cloud or hybrid environments and ease of use across desktop and mobile devices. About Keeper Security Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper's affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance. Trusted by millions of individuals and thousands of organizations, Keeper is the leader for best-in-class password and passkey management, secrets management, privileged access, secure remote access and encrypted messaging.

Read More

Platform Security

D3 Security is a proud participant in the Microsoft Security Copilot Partner Private Preview

D3 Security | January 08, 2024

D3 Security today announced its participation in the Microsoft Security Copilot Partner Private Preview. D3 Security was selected based on their proven experience with Microsoft Security technologies, willingness to explore and provide feedback on cutting edge functionality, and close relationship with Microsoft. “In the context of security, AI’s impact is likely to be profound, tilting the scales in favor of defenders and empowering organizations to defend at machine speed. At Microsoft, we are privileged to have a leading role in advancing AI innovation, and we are so grateful to our incredible ecosystem of partners, whose mission-driven work is critical to helping customers secure their organizations and confidently bring the many benefits of AI into their environments,” said Vasu Jakkal, Corporate Vice President, Microsoft Security. D3 Security is working with Microsoft product teams to help shape Security Copilot product development in several ways, including validation and refinement of new and upcoming scenarios, providing feedback on product development and operations to be incorporated into future product releases, and validation and feedback of APIs to assist with Security Copilot extensibility. “D3 has always pushed SOAR technology forward, be it through our deep research into integration design; our Event Pipeline, which reduces alert-handling time by up to 99%; or our operationalizing of the MITRE ATT&CK and D3FEND frameworks,” said Gordon Benoit, President, D3 Security. “By teaming with Microsoft in the Security Copilot Partner Private Preview, we will be able to use AI to evolve SOAR in ways that would have sounded impossible just a year ago.” Security Copilot is the first AI-powered security product that enables security professionals to respond to threats quickly, process signals at machine speed, and assess risk exposure in minutes. It combines an advanced large language model (LLM) with a security-specific model that is informed by Microsoft's unique global threat intelligence and more than 65 trillion daily signals. About D3 Security D3 Security’s Smart SOAR™ (security orchestration, automation, and response) solves entrenched problems in cybersecurity by transforming separate tools into a unified ecosystem with multi-tier automation, codeless orchestration, and robust case management. Smart SOAR performs autonomous triage and reduces false positives so enterprise, MSSP, and public sector security teams can spend more time on real threats. Product or service names mentioned herein may be the trademarks of their respective owners.

Read More

Spotlight

Nisos

Nisos

Nisos is a Managed Intelligence company. Our services enable security, intelligence, and trust & safety teams to leverage a world-class intelligence capability tailored to their needs. We fuse robust data collection with a deep understanding of the adversarial mindset delivering smarter defense and ...

Events

Resources