#Ransomware mitigation requires collaboration – which is why NIST, @istorg.bsky.social and CISecurity are working together to share resources to help organizations large and small build their #cybersecurity defenses. Register now: www.nist.gov/news-events/...
Resources for Ransomware Risk Management
Ransomware is a persistent risk to organizations of all sizes and sectors, and addressing this risk requires collabor
www.nist.gov
January 15, 2026 at 4:36 PM
#Ransomware mitigation requires collaboration – which is why NIST, @istorg.bsky.social and CISecurity are working together to share resources to help organizations large and small build their #cybersecurity defenses. Register now: www.nist.gov/news-events/...
Una guía para definir la ciberseguridad razonable. (Inglés)
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: Marcela Pallero (@Marce_I_P)
www.cisecurity.org/insights/whi...
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: Marcela Pallero (@Marce_I_P)
www.cisecurity.org/insights/whi...
June 24, 2024 at 4:02 PM
Una guía para definir la ciberseguridad razonable. (Inglés)
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: Marcela Pallero (@Marce_I_P)
www.cisecurity.org/insights/whi...
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: Marcela Pallero (@Marce_I_P)
www.cisecurity.org/insights/whi...
Cybersecurity Mittendrin - Folge 2 - Die vier P’s in Cybersecurity!
#Cybersecurity #Security #CloudCybersecurity #Baselines #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @linux @mvpaward @NIST @lpi.org
👇👇👇👇
youtu.be/l0FViYgdyxw
#Cybersecurity #Security #CloudCybersecurity #Baselines #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @linux @mvpaward @NIST @lpi.org
👇👇👇👇
youtu.be/l0FViYgdyxw
February 19, 2026 at 5:39 AM
Cybersecurity Mittendrin - Folge 2 - Die vier P’s in Cybersecurity!
#Cybersecurity #Security #CloudCybersecurity #Baselines #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @linux @mvpaward @NIST @lpi.org
👇👇👇👇
youtu.be/l0FViYgdyxw
#Cybersecurity #Security #CloudCybersecurity #Baselines #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @linux @mvpaward @NIST @lpi.org
👇👇👇👇
youtu.be/l0FViYgdyxw
CCyber Resilience Awareness Day – Oct 15 | 1:00 PM ET Session | Virtual
What is “reasonable cybersecurity,” and who decides?
Join Curtis Dukes of @CISecurity for Reasonable Cybersecurity: Emerging New Developments
issa.brighttalk.com/summit/7595/...
#CyberResilience #ISSACRADay #CyberSecurity
What is “reasonable cybersecurity,” and who decides?
Join Curtis Dukes of @CISecurity for Reasonable Cybersecurity: Emerging New Developments
issa.brighttalk.com/summit/7595/...
#CyberResilience #ISSACRADay #CyberSecurity
September 29, 2025 at 4:04 PM
CCyber Resilience Awareness Day – Oct 15 | 1:00 PM ET Session | Virtual
What is “reasonable cybersecurity,” and who decides?
Join Curtis Dukes of @CISecurity for Reasonable Cybersecurity: Emerging New Developments
issa.brighttalk.com/summit/7595/...
#CyberResilience #ISSACRADay #CyberSecurity
What is “reasonable cybersecurity,” and who decides?
Join Curtis Dukes of @CISecurity for Reasonable Cybersecurity: Emerging New Developments
issa.brighttalk.com/summit/7595/...
#CyberResilience #ISSACRADay #CyberSecurity
CISA & international partners release "CI Fortify" guidance, urging critical infrastructure to plan for physical isolation of OT systems from IT networks during cyberattacks. The goal: protect vital services like energy & water. #CISecurity #OT #ICS
🌐 cyber[.]netsecops[.]io
🌐 cyber[.]netsecops[.]io
CISA Urges OT Isolation in New
CISA and international partners have published "CI Fortify," new guidance urging critical infrastructure operators to isolate vital operational technology...
cyber.netsecops.io
July 30, 2026 at 5:52 PM
CISA & international partners release "CI Fortify" guidance, urging critical infrastructure to plan for physical isolation of OT systems from IT networks during cyberattacks. The goal: protect vital services like energy & water. #CISecurity #OT #ICS
🌐 cyber[.]netsecops[.]io
🌐 cyber[.]netsecops[.]io
👉From CISSP to CCSP: My Journey Preparing for the ISC2 CCSP Certification!🏅
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi.org @isc2 @isaca #CyberSecurity #CloudSecurity #CloudComputing #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/from-c...
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi.org @isc2 @isaca #CyberSecurity #CloudSecurity #CloudComputing #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/from-c...
From CISSP to CCSP: My Journey Preparing for the ISC2 CCSP Certification!
Recently, I dedicated a significant amount of time to preparing for the ISC2 Certified Cloud Security Professional (CCSP) certification. Looking back, one decision proved extremely valuable: earning t...
www.linkedin.com
March 10, 2026 at 6:00 AM
👉From CISSP to CCSP: My Journey Preparing for the ISC2 CCSP Certification!🏅
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi.org @isc2 @isaca #CyberSecurity #CloudSecurity #CloudComputing #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/from-c...
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi.org @isc2 @isaca #CyberSecurity #CloudSecurity #CloudComputing #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/from-c...
Cordyceps showed how valid GitHub Actions workflows can chain into secret exposure, affecting 30,000 repos and 300+ cases. Scanners can miss risks from pull_request_target and workflow_run composition. #GitHubActions #Cordyceps #CIsecurity
The GitHub Actions Attack Pattern Your CI Security Scanners Miss
Cordyceps exposed a CI/CD weakness in GitHub Actions where individually valid workflows combined into exploitable privilege chains, leaving many “green” pipelines vulnerable despite passing scans. The article highlights real cases at Microsoft, Google, and Apache, and argues that AI-generated workflows are accelerating governance gaps that scanners alone cannot catch. #Cordyceps #Microsoft #AzureSentinel #Google #Apache #GitHubActions
www.hendryadrian.com
July 7, 2026 at 5:15 PM
Cordyceps showed how valid GitHub Actions workflows can chain into secret exposure, affecting 30,000 repos and 300+ cases. Scanners can miss risks from pull_request_target and workflow_run composition. #GitHubActions #Cordyceps #CIsecurity
CISA & international partners release "CI Fortify" guidance, urging critical infrastructure to plan for physical isolation of OT systems from IT networks during cyberattacks. The goal: protect vital services like energy & water. #CISecurity #OT #ICS
🌐 cyber[.]netsecops[.]io
🌐 cyber[.]netsecops[.]io
CISA Urges OT Isolation in New
CISA and international partners have published "CI Fortify," new guidance urging critical infrastructure operators to isolate vital operational technology...
cyber.netsecops.io
July 29, 2026 at 4:57 PM
CISA & international partners release "CI Fortify" guidance, urging critical infrastructure to plan for physical isolation of OT systems from IT networks during cyberattacks. The goal: protect vital services like energy & water. #CISecurity #OT #ICS
🌐 cyber[.]netsecops[.]io
🌐 cyber[.]netsecops[.]io
Una guía para definir la Ciberseguridad Razonable
«Diseñada para ayudar a las organizaciones a comprender y aplicar prácticas de ciberseguridad razonables alineadas con los Controles Críticos de Seguridad de CIS»
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: @marcelipa.bsky.social
«Diseñada para ayudar a las organizaciones a comprender y aplicar prácticas de ciberseguridad razonables alineadas con los Controles Críticos de Seguridad de CIS»
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: @marcelipa.bsky.social
Spanish Translation of the CIS Reasonable Cybersecurity Guide
Spanish translation of the CIS Reasonable Cybersecurity Guide, offering practical, risk‑informed cybersecurity guidance aligned with the CIS Controls.
www.cisecurity.org
July 29, 2026 at 3:45 PM
Una guía para definir la Ciberseguridad Razonable
«Diseñada para ayudar a las organizaciones a comprender y aplicar prácticas de ciberseguridad razonables alineadas con los Controles Críticos de Seguridad de CIS»
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: @marcelipa.bsky.social
«Diseñada para ayudar a las organizaciones a comprender y aplicar prácticas de ciberseguridad razonables alineadas con los Controles Críticos de Seguridad de CIS»
Fuente: Center for Internet Security (CIS) (@CISecurity)
Vía: @marcelipa.bsky.social
🛡 Programa de Ciberseguridad Moderna
340 clases · 19 partes · de fundamentos a nivel experto
El programa de ciberseguridad más completo en español
www.hackingteamoficcial.uk/posts/6a5aae...
#CISecurity #ProgramaDeCiberseguridadEnEspañol #CiberseguridadEnEspañol #CursoDeCiberseguridad
340 clases · 19 partes · de fundamentos a nivel experto
El programa de ciberseguridad más completo en español
www.hackingteamoficcial.uk/posts/6a5aae...
#CISecurity #ProgramaDeCiberseguridadEnEspañol #CiberseguridadEnEspañol #CursoDeCiberseguridad
July 18, 2026 at 4:00 AM
🛡 Programa de Ciberseguridad Moderna
340 clases · 19 partes · de fundamentos a nivel experto
El programa de ciberseguridad más completo en español
www.hackingteamoficcial.uk/posts/6a5aae...
#CISecurity #ProgramaDeCiberseguridadEnEspañol #CiberseguridadEnEspañol #CursoDeCiberseguridad
340 clases · 19 partes · de fundamentos a nivel experto
El programa de ciberseguridad más completo en español
www.hackingteamoficcial.uk/posts/6a5aae...
#CISecurity #ProgramaDeCiberseguridadEnEspañol #CiberseguridadEnEspañol #CursoDeCiberseguridad
🔒 Seguridad desde el código: CI/CD DevSecOps en Azure con GitHub Actions
https://devops.com/how-to-build-a-devsecops-ci-cd-pipeline-on-azure-with-github-actions/
#DevSecOps #Azure #GitHubActions #CISecurity
https://devops.com/how-to-build-a-devsecops-ci-cd-pipeline-on-azure-with-github-actions/
#DevSecOps #Azure #GitHubActions #CISecurity
July 9, 2026 at 3:24 PM
🔒 Seguridad desde el código: CI/CD DevSecOps en Azure con GitHub Actions
https://devops.com/how-to-build-a-devsecops-ci-cd-pipeline-on-azure-with-github-actions/
#DevSecOps #Azure #GitHubActions #CISecurity
https://devops.com/how-to-build-a-devsecops-ci-cd-pipeline-on-azure-with-github-actions/
#DevSecOps #Azure #GitHubActions #CISecurity
⚡ ¿Tu IA de código expone secretos? El caso Claude Code
https://devops.com/security-flaw-in-claude-code-illustrates-the-risk-of-ai-in-developer-workflows/
#SeguridadDevOps #InteligenciaArtificial #CISecurity #PromptInjection
https://devops.com/security-flaw-in-claude-code-illustrates-the-risk-of-ai-in-developer-workflows/
#SeguridadDevOps #InteligenciaArtificial #CISecurity #PromptInjection
June 10, 2026 at 3:25 PM
⚡ ¿Tu IA de código expone secretos? El caso Claude Code
https://devops.com/security-flaw-in-claude-code-illustrates-the-risk-of-ai-in-developer-workflows/
#SeguridadDevOps #InteligenciaArtificial #CISecurity #PromptInjection
https://devops.com/security-flaw-in-claude-code-illustrates-the-risk-of-ai-in-developer-workflows/
#SeguridadDevOps #InteligenciaArtificial #CISecurity #PromptInjection
Tomorrow I will be moderating a panel of ISSA Thought Leaders from @proofpoint @CISecurity and @WombatSecurity at 1pm EDT! Join us? https://www.brighttalk.com/webcast/16125/332335
There was a problem showing this webinar
www.brighttalk.com
December 1, 2024 at 4:47 AM
Tomorrow I will be moderating a panel of ISSA Thought Leaders from @proofpoint @CISecurity and @WombatSecurity at 1pm EDT! Join us? https://www.brighttalk.com/webcast/16125/332335
I wrote a blog about kube-bench, @CISecurity, and the challenges of security config benchmarks for multiple platforms. Shout-out to @raesene! https://blog.aquasec.com/kubernetes-security-cis-benchmarks
Security Configuration Benchmarks for Kubernetes
Kubernetes with its control plane components and numerous...
blog.aquasec.com
November 9, 2024 at 6:50 AM
I wrote a blog about kube-bench, @CISecurity, and the challenges of security config benchmarks for multiple platforms. Shout-out to @raesene! https://blog.aquasec.com/kubernetes-security-cis-benchmarks
Compromising clusters through bad config / excessive rights granted to service accounts. (Can also give access to cloud metadata!) @CISecurity benchmarks are important! #kubesec2019
November 9, 2024 at 6:37 AM
Compromising clusters through bad config / excessive rights granted to service accounts. (Can also give access to cloud metadata!) @CISecurity benchmarks are important! #kubesec2019
Expanding partnership within CIS meets interests of its people: Putin yespunjab.com?p=196594
#VladimirPutin #CISSummit #CISPartnerships #RussiaDiplomacy #SocioeconomicDevelopment #CISecurity #FairWorldOrder #UnitedNations #GlobalGovernance #RegionalStability #CISNews #InternationalLaw
#VladimirPutin #CISSummit #CISPartnerships #RussiaDiplomacy #SocioeconomicDevelopment #CISecurity #FairWorldOrder #UnitedNations #GlobalGovernance #RegionalStability #CISNews #InternationalLaw
Expanding partnership within CIS meets interests of its people: Putin - Yes Punjab News
Putin highlights CIS partnerships, socioeconomic development, and security cooperation, advocating a fair world order with UN at its center.
yespunjab.com
December 22, 2025 at 2:39 PM
Expanding partnership within CIS meets interests of its people: Putin yespunjab.com?p=196594
#VladimirPutin #CISSummit #CISPartnerships #RussiaDiplomacy #SocioeconomicDevelopment #CISecurity #FairWorldOrder #UnitedNations #GlobalGovernance #RegionalStability #CISNews #InternationalLaw
#VladimirPutin #CISSummit #CISPartnerships #RussiaDiplomacy #SocioeconomicDevelopment #CISecurity #FairWorldOrder #UnitedNations #GlobalGovernance #RegionalStability #CISNews #InternationalLaw
Beyond Nix, the discussion covered broader CI/CD security. Securing pipelines with untrusted PRs is tough: distinguishing execution contexts & the risk of bearer tokens are major concerns. #CISecurity 5/6
October 17, 2025 at 1:00 AM
Beyond Nix, the discussion covered broader CI/CD security. Securing pipelines with untrusted PRs is tough: distinguishing execution contexts & the risk of bearer tokens are major concerns. #CISecurity 5/6
"Haftung kann niemals delegiert werden!"
Cybersecurity Mittendrin - Folge 4 - Die richtigen Fragen stellen + Haftbarkeit = Cybersecurity!
@CISecurity @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi #Cybersecurity #CloudCybersecurity #coolstuff #mvpbuzz
👇👇👇👇
youtu.be/jou5jPHqXDg
Cybersecurity Mittendrin - Folge 4 - Die richtigen Fragen stellen + Haftbarkeit = Cybersecurity!
@CISecurity @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi #Cybersecurity #CloudCybersecurity #coolstuff #mvpbuzz
👇👇👇👇
youtu.be/jou5jPHqXDg
Cybersecurity Mittendrin - Folge 4 - Die richtigen Fragen stellen + Haftbarkeit = Cybersecurity!
YouTube video by Tom Wechsler
youtu.be
March 11, 2026 at 6:07 AM
"Haftung kann niemals delegiert werden!"
Cybersecurity Mittendrin - Folge 4 - Die richtigen Fragen stellen + Haftbarkeit = Cybersecurity!
@CISecurity @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi #Cybersecurity #CloudCybersecurity #coolstuff #mvpbuzz
👇👇👇👇
youtu.be/jou5jPHqXDg
Cybersecurity Mittendrin - Folge 4 - Die richtigen Fragen stellen + Haftbarkeit = Cybersecurity!
@CISecurity @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi #Cybersecurity #CloudCybersecurity #coolstuff #mvpbuzz
👇👇👇👇
youtu.be/jou5jPHqXDg
"You cannot protect what you do not know and understand."
The 5 most important assessments in cybersecurity!
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi @isc2
#Cybersecurity #Security #ITSecurity #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/compre...
The 5 most important assessments in cybersecurity!
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi @isc2
#Cybersecurity #Security #ITSecurity #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/compre...
Comprehensive Guide to IT Cybersecurity Assessments: Risk, Security Control, Compliance, Vulnerabilities, and Penetration Testing!
Introduction In today's dynamic cybersecurity landscape, ensuring robust protection of IT systems and data is a complex task. Organizations must deploy a layered defense strategy, aligned with busines...
www.linkedin.com
February 21, 2026 at 3:34 PM
"You cannot protect what you do not know and understand."
The 5 most important assessments in cybersecurity!
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi @isc2
#Cybersecurity #Security #ITSecurity #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/compre...
The 5 most important assessments in cybersecurity!
@CISecurity @windows @microsoft @CompTIA @MITREattack @ECCOUNCIL @mvpaward @NIST @lpi @isc2
#Cybersecurity #Security #ITSecurity #coolstuff #mvpbuzz
👇👇👇👇
www.linkedin.com/pulse/compre...
Cyber and Information Security Knowledge Base - The Critical Role of Baselines in Cybersecurity!
@CISecurity @windows @microsoft.com @comptia.bsky.social @MITREattack @ECCOUNCIL @mvpaward @NIST #Baseline #Security #Benchmarks #coolstuff #mvpbuzz
www.linkedin.com/pulse/critic...
@CISecurity @windows @microsoft.com @comptia.bsky.social @MITREattack @ECCOUNCIL @mvpaward @NIST #Baseline #Security #Benchmarks #coolstuff #mvpbuzz
www.linkedin.com/pulse/critic...
The Critical Role of Baselines in Cybersecurity!
Introduction In cybersecurity, you cannot protect what you do not understand, and you cannot detect what you cannot measure. Baselines provide a trusted reference point that defines what "normal" look...
www.linkedin.com
February 14, 2026 at 3:45 PM
Cyber and Information Security Knowledge Base - The Critical Role of Baselines in Cybersecurity!
@CISecurity @windows @microsoft.com @comptia.bsky.social @MITREattack @ECCOUNCIL @mvpaward @NIST #Baseline #Security #Benchmarks #coolstuff #mvpbuzz
www.linkedin.com/pulse/critic...
@CISecurity @windows @microsoft.com @comptia.bsky.social @MITREattack @ECCOUNCIL @mvpaward @NIST #Baseline #Security #Benchmarks #coolstuff #mvpbuzz
www.linkedin.com/pulse/critic...
Cybersecurity Mittendrin - Folge 1 - Was ist Cybersecurity?
#Cybersecurity #Security #CloudCybersecurity #Benchmarks #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @ECCOUNCIL @mvpaward.bsky.social @NIST
👇👇👇👇
youtu.be/MEDV159JrXY
#Cybersecurity #Security #CloudCybersecurity #Benchmarks #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @ECCOUNCIL @mvpaward.bsky.social @NIST
👇👇👇👇
youtu.be/MEDV159JrXY
February 12, 2026 at 5:45 AM
Cybersecurity Mittendrin - Folge 1 - Was ist Cybersecurity?
#Cybersecurity #Security #CloudCybersecurity #Benchmarks #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @ECCOUNCIL @mvpaward.bsky.social @NIST
👇👇👇👇
youtu.be/MEDV159JrXY
#Cybersecurity #Security #CloudCybersecurity #Benchmarks #coolstuff #mvpbuzz @CISecurity @microsoft.com @comptia.bsky.social @attack.mitre.org @ECCOUNCIL @mvpaward.bsky.social @NIST
👇👇👇👇
youtu.be/MEDV159JrXY
Love seeing more resources for critical infra including K12 ♥️
Currently SLTT (K12 too!) can use MDBR (Akamai DNS filtering) through @CISecurity for free as part of MS-ISAC. They can also get Albert (managed IDS) for free/low cost:
https://t.co/Bqm4fi4uGk
Use these services! https://t.co/9342e...
Currently SLTT (K12 too!) can use MDBR (Akamai DNS filtering) through @CISecurity for free as part of MS-ISAC. They can also get Albert (managed IDS) for free/low cost:
https://t.co/Bqm4fi4uGk
Use these services! https://t.co/9342e...
Albert Network Monitoring
Albert is a unique network monitoring solution that provides automated alerts on both traditional and advanced network threats, allowing organizations to respond quickly when their data may be at risk.
www.cisecurity.org
November 17, 2024 at 11:47 PM
Love seeing more resources for critical infra including K12 ♥️
Currently SLTT (K12 too!) can use MDBR (Akamai DNS filtering) through @CISecurity for free as part of MS-ISAC. They can also get Albert (managed IDS) for free/low cost:
https://t.co/Bqm4fi4uGk
Use these services! https://t.co/9342e...
Currently SLTT (K12 too!) can use MDBR (Akamai DNS filtering) through @CISecurity for free as part of MS-ISAC. They can also get Albert (managed IDS) for free/low cost:
https://t.co/Bqm4fi4uGk
Use these services! https://t.co/9342e...
x.com
x.com
February 9, 2025 at 6:00 AM