Wes Spencer’s Post

On July 2, 2021 a cyber attack was launched on an International scale. A 0-day exploit in our RMM tool allowed Threat Actors to do the unthinkable. Dubbed the proverbial "Nightmare Scenario", come listen to 1 MSP who not only survived, but thrived in spite of a near business ending event. 🔊 Listen to a firsthand account of the emotional and psychological trauma. 🔥Follow along as you imagine your own footsteps on the path through hell. Imagine yourself in a very real and fatal situation. 👀 🤔 Consider how well you are - or are not - prepared. Have you already heard the story? 👉 Come listen again as I've got new updates including the capture, extradition, and sentencing of one of our attackers. Spread the news. 📰 This is THE 1 event NOT to be missed. This is NOT about me or my company. This is about US - the MSP community - each and every one of us. Why do I tell our story? This industry needs great Vulnerability and Transparency. IMO, it's the only path toward victory against our enemies. Will you join me at The IT Nation Secure 2024 event? #msp #cybersecurity #itnation #itnationsecure #itnationsecure2024

This is a talk every #MSP should see. On July 2, 2021, my phone rang off the hook (and continued to do so for 3 days). There were #ConnectWise MSPs from around the globe that beat a path to our doorstep. They saw the Kaseya VSA disaster unfolding and were scared themselves. At Automation Theory, we sell reverse proxy and WAF services for MSP tools. This technology allows for additional security controls and offers protection against 0-day exploits. I can't speak for Robert, but I'm guessing he'll give you advice on how to prepare for and prevent situations like this. I don't know if security technology will come up, but the old saying "an ounce of prevention is worth a pound of cure" probably still applies. Go to this talk, and get yourself a healthy dose of reality. Once you're ready to take action, come talk to us, and we can go over the technology you can put in place to defend against your worst nightmare.

Staying in peak shape isn’t just for you; it’s also essential for your network. A secure network is your first line of defense against cyber threats. Optimal network health not only safeguards your operations but also upholds the trust of your customers and stakeholders. Are you eager to get your network into top shape for peak performance? Send us a message, and we’ll guide you. 800.728.6821 www.istonish.com A minority enterprise business.

For a long time the cyber security industries solution to an adversary carrying out their actions on objectives is to call in incident response. I think the belief that when an adversary is carrying out their actions on objectives it's too late is misguided. Actually, it's often the place where you can defend most effectively. There are three reasons that I see for this dynamic: 1) Defence is usually seen as mitigating an adversaries actions rather than controlling an adversaries actions, so by default defenders are putting themselves on the back foot. 2) Often defensive focus is put on defending assets, systems or privileges rather than preventing undesirable outcomes. 2) Defence is often too tooling centric. If you want to do anything more than prevent generic threats then that tooling needs telling what to do, it needs to be given context specific to what outcomes you wish to prevent. Give it context and it can be extremely powerful. I wrapped some of this thinking up in a recent post on the Lab539 website. My thinking generally is that, far too frequently, the cyber security industry is not looking past the positioning phase of an attack: https://lnkd.in/en-VZ3r5 #CyberDefence #TCDO #CyberDefense #Lab539 #CyberDefendersKillChain

Having an incident response plan in place is so critical for state and local governments -- a robust cyber incident response plan can mean the difference between constituents and employees losing access to life essentials or minimal disruption and faster recovery. In this recent blog post, we detail 4 practical tips to build an incident response plan that protects critical constituent services with limited budgets. Read it here: https://okt.to/gt1Pkw #localgovernment #incidentresponse #InfoSec

I'd say that the biggest threat to our National Security are the amount of unsecure networks across the nation. Vulnerable networks are being exploited at a neckbreaking pace it seems. The targets range from Local Government, Healthcare, Finance, Agriculture, etc. Needless to say but these targets are vital sectors for maintaining and sustaining life as we know it. So, we've got to start being more proactive with Cybersecurity. Cybersecurity goes way beyond securing Network Infrastructure. Physical security is a factor. Your employees' level of Security Awareness is a factor. The list goes on. The U.S. will always be a target, but that does not mean we have to make it easy on the assailants! Right now the door is pretty much wide open. "The art of war teaches us to rely not on the likelihood of the enemy's not coming, but on our own readiness to receive him; not on the chance of his not attacking, but rather on the fact that we have made our position unassailable." — Sun Tzu #cybersecurity #nationalsecurity #artofwar #network #securityawareness #InfoSec

🔒💼 In a world where shadows dance with digital peril, only the vigilant prevail. 💼🔒 As guardians of your digital realm, GnomeGuard Group understands the ever-evolving nature of cyber threats. That's why we offer continuous monitoring and threat intelligence services to keep your business one step ahead of the lurking dangers. 🌐👁️🗨️ With our watchful gaze and cutting-edge technology, we stand as sentinels against the forces of darkness that seek to breach your defenses. 💪🔮 Don't wait for disaster to strike – protect your business today with our proactive defense measures. Trust in GnomeGuard Group to safeguard your digital assets and ensure your business emerges unscathed from the trials of cyberspace. Contact us now and fortify your defenses against the ever-present threats of the digital realm. 🛡️🌟 #GnomeGuardGroup #CyberSecurity #ProactiveDefense #ContinuousMonitoring #ThreatIntelligence

If your house is on fire, call the fire brigade. If you're being robbed, call the police. 🚨 👻 Who will you call when cybercriminals are invading your company network? Enter Secutec! You can count on our cyber experts to stop ongoing attacks, analyze the damage done and start the remediation process. 📚 Learn more about our SecureRESPONSE services at https://lnkd.in/eHuQwaWu #cybersecurity #incidentresponse #SecureRESPONSE

Humana associates, check out this session at our 15th Annual Cyber Security Awareness Week! In "In it Together: The FBI’s Effort to Wage Digital Justice Requires Strong Partnerships Within our Community," Special Agent Ted Jones will delve into the latest cyber-criminal activities, including ransomware, business email compromise (BEC), and the increasingly prevalent pig butchering scams. SA Wells will share compelling anecdotes from recent investigative successes, highlighting the critical role of strong community partnerships in combating these threats. You’ll gain a deeper understanding of the FBI's strategies and collaborative efforts to protect our digital landscape and ensure justice is served in the cyber realm. Don't miss this opportunity to learn from real-world cases and discover how you can contribute to a safer cyber environment. #cybersecurityawareness #cybersecuritytraining

Huge thank you to Ong Johnson, Khai Yi Lo and the team at Halim Hong & Quek, a member firm of Andersen Global for having us yesterday. It was a great session sharing one of S-RM cyber training series, "The First 48 Hours," which provided an overview of what a cyber incident response typically entails, including recommendations and common missteps to avoid.   From our experience in dealing with cyber incidents, the first 48 hours are often the most critical. The decisions and actions taken during this vital period can have significant impacts on the overall response.   Taking the right actions early can prevent further harm and stop the threat actor from maintaining or regaining access to the network. This allows attention and efforts to be focused on restoring and recovering systems, ultimately minimizing business interruption, which is often the most costly aspect of a response and notoriously difficult to quantify. Mark Farley Shradha Borar Kyle Schwaeble #yourfirstcall #incidentresponse #cyber