Jason Larkin

🛠️ Traditional SIEMs weren’t built for today’s threats. Complexity, poor cloud integration, and high false positives are holding security teams back. It’s time to modernize. This guide gives security leaders a clear roadmap to transform their SIEM without disrupting operations. 🔍 Start your SIEM transformation with Cortex XSIAM. https://bit.ly/3JsfsEz

84

Many deepfake attacks succeed because people don't know what to look for. CloudGuard have published a practical guide breaking down 10 visual and audio deepfake warning signs, plus a short interactive walkthrough you can share internally. If your team can spot the signs, they can help stop the attack. 👉 Read it here: https://lnkd.in/eKem5xGe

53

5 Comments

Most breaches start with a click - not a firewall failure. UNVEIL simulates phishing, impersonation, and social engineering tactics to identify human vulnerabilities and help your teams build real resilience. No blame. No shaming. Just insight, education, and stronger defenses.

1

I recommend my five-step approach to achieving ISO/IEC 27001 ISMS, as it has worked for many of my customers. Most customers expect the consultant to bring a strategy that has a low impact on corporate culture and can be achieved within a given timeframe. Teaching customers how to implement an ISO/IEC 27001 ISMS is not the goal. If an ISO/IEC 27001 ISMS consultant wants to demonstrate their experience, the customer only needs to look at their track record of success. The goal is to become ISO/IEC 27001 ISMS Certified /Registered for several reasons: 1/. A client of the customer has asked, How would you be able to protect my information? 2/. During the pursuit of new business and new revenue, ISO/IEC 27001 ISMS has been identified as a requirement and thus a competitive advantage. 3/. The Board of Directors has requested a world-class, globally accepted Cybersecurity program to address all regulatory and shareholder inquiries regarding compliance. I am bringing the best approach to the table. Link: https://lnkd.in/gFeh5n4e

1

Is your security team spending 20 minutes on each phishing email while higher-value projects wait? The Pokémon Company International automated their security operations with Cortex XSOAR, transforming incident response from manual investigation to instantaneous resolution. With a lean team supporting hundreds of millions of customers, they needed to work smarter, not harder. • Automated phishing response reduced manual investigation from 15-20 minutes per email to simple dashboard verification, resolving incidents instantly. • Unified cloud and on-premises security data in one centralized location, enabling coordinated response across AWS, Active Directory, and SaaS environments. • Freed security analysts from repetitive tasks to focus on strategic projects that contribute direct business value. • Enabled seamless collaboration with DevOps by automating credential compromise response across both cloud and local environments. Discover how automation can help your security team scale efficiently while providing stronger protection and better customer service. Explore Palo Alto Networks Quick Start Service: https://lnkd.in/gcDg3rrf Explore Palo Alto Networks Firewall Managed Service: https://lnkd.in/gTt-RcTB #PaloAltoNetworks #ResourceLibrary #PaloAltoNetworksResourceLibrary #CortexXSOAR #SecurityAutomation #SOAR #CloudSecurity #DevSecOps #InfoSec

2

NHS DSPT Mandatory Audit Assertion 7.3 — Incident Response Capability Assertion 7.3 of the NHS DSPT is all about incident response. Discover how to detect, contain, and recover from cyber incidents quickly and effectively.

1

Ready to take control of your cybersecurity - without the jargon or headaches? Our latest blog breaks down the Cyber Essentials checklist into practical steps you can actually use. From firewalls and patching to access control and malware defence, simply follow the path to certification and protection. Drop the stress. Grab your guide. Get Cyber Essentials done. Read more: https://lnkd.in/eGnxY6ks

1

Our Information Security Lead, Ashley Dunn (CISSP, CEH), will be taking the stage later today at an Open Web Application Security Project (OWASP® Foundation) event in Bristol. He’ll be hosting a session on Bug Bounty Programs. Ash’s Q&A session will draw on his experience in the industry and include a breakdown of why companies should consider using bug bounties to help improve their security posture, how to implement them, and the ROI and unexpected wins that can come from implementing them. 📍Dareshack, Bristol 📅 July 15th 🕟 6:40 - 7:30pm For more information on the session, head to the comments below 👇 #OWASP #InformationSecurity #SuperAwesome

14

1 Comment

🚨 High Risk Vulnerability Alert 🚨 AlertEnterprise Guardian has a security issue (CVE-2025-31511) where one can bypass manager approval by changing the user ID in a Request%20Building%20Access requestSubmit API. This is a clear example of why API security is so important. The risk level is high with a CVSS score of 7.5. Stay safe! #AlertEnterprise #Guardian #APIsecurity #OWASP #CVE202531511 https://lnkd.in/e55RETXw

2

The UK Government has released guidance for a voluntary Software Security Code of Practice, with plans for offering a certification based on compliance. There are four themes: Secure design and development, Build environment security, Secure deployment and maintenance, and Communication with customers. The guidance consists of fourteen principles which are reasonable for vendors of all shapes and sizes to satisfy (at least to some degree). I typically dislike these generic guidance documents stating things like "Distribute software securely to customers," but not everyone is fortunate enough to have a team of internal security professionals. If it's any signal for software supply chain security, to see even the most fundamental guidance include software composition analysis and maintenance of third-party components is a huge win!

24

If your security team is overwhelmed by alerts, operating with blind spots across SaaS and cloud tools, and learning about data incidents too late, your DLP is no longer doing its job. Modern data loss prevention requires: - Risk-scored prioritisation instead of alert noise - Behaviour-based detection instead of static rules - Continuous visibility across endpoints, SaaS, and GenAI tools FortiDLP replaces legacy DLP with behaviour analytics, data lineage tracking, and insider risk sequencing. When HANDD Business Solutions manages FortiDLP, data protection becomes proactive, prioritised, and operationally sustainable. Let’s assess how your current DLP really performs: https://lnkd.in/eDc_GZ3x #DLPUpgrade #FortinetManagedServices #DataLeakPrevention #HANDD

7

If your security team is overwhelmed by alerts, operating with blind spots across SaaS and cloud tools, and learning about data incidents too late, your DLP is no longer doing its job. Modern data loss prevention requires: - Risk-scored prioritisation instead of alert noise - Behaviour-based detection instead of static rules - Continuous visibility across endpoints, SaaS, and GenAI tools FortiDLP replaces legacy DLP with behaviour analytics, data lineage tracking, and insider risk sequencing. When HANDD Business Solutions Asia manages FortiDLP, data protection becomes proactive, prioritised, and operationally sustainable. Let’s assess how your current DLP really performs: https://lnkd.in/eDc_GZ3x #DLPUpgrade #FortinetManagedServices #DataLeakPrevention #HANDD

5

Chartered Insurance Institute sets out plan for vulnerability data sharing In the new report, the CII called for a move away from just ticking compliance boxes, towards sharing data to improve things for customers.

2

Today’s critical patch alert for UK organisations Microsoft’s July 2025 security update is one of the biggest this year — addressing 130 vulnerabilities, including 14 critical flaws and a publicly disclosed zero-day in SQL Server. Key risks include: ⚠️ A “wormable” Windows SPNEGO vulnerability (CVE-2025-47981) that could spread like WannaCry ⚠️ Zero-day SQL Server flaw exposing sensitive data ⚠️ Critical SharePoint and KDC Proxy weaknesses impacting enterprise environments UK security teams can’t afford to wait. With regulatory pressures under UK GDPR, NIS, and NCSC guidance, timely patching isn’t optional — it’s essential. Immediate priorities: ✅ Patch internet-facing systems and critical infrastructure within 48 hours ✅ Focus on Windows, SQL Server, SharePoint, and hybrid AD environments ✅ Coordinate with your business for maintenance windows and rollback plans Because a single unpatched server could compromise your entire network. 🔗 Read the full summary and see recommended actions: https://lnkd.in/gg7ZeCjU #ProCheckUp #PatchTuesday #Microsoft #CyberSecurity #UKCyber #NCSC #SQLServer #InfoSec #RiskManagement #VulnerabilityManagement

5

I’d echo this. The assessor you choose is often the difference between PCI being an annual headache and something that genuinely supports the business. You want a QSA who challenges scope, explains the “why” and works with you and your acquirer on a realistic plan and who brings original, experience-based guidance rather than recycled talking points.

2

Progress isn't always linear, but your offensive security strategy should be. Our 7th annual State of Pentesting Report uncovers why critical vulnerabilities are slipping through the cracks—especially with new #genAI risks emerging. Build your action plan. Learn why knowledge from expert-led pentesting is power. Download the report and transform assumptions into actionable clarity. 🔗: https://hubs.la/Q03vrqqM0

18