Amber Bahl

Fable Security emerged from stealth mode this week with a platform designed to detect and address risky employee behaviors. Fable Security’s human risk management platform leverages a proprietary framework that can synthesize real-time signals from identity, cloud, access, endpoint, and productivity systems in search of risky behavior. The collected data is used by AI to generate “interventions” — this includes chats, automated workflows, nudges and video briefings — aimed at educating employees. These interventions are tailored to the employee’s role and behavior, they are timed to moments of heightened risk, and are delivered through channels such as email and Slack. https://lnkd.in/g3ycdhUY

11

Is security enough for data protection ? Or do we need a little more ? ISMS, or information security management systems are designed to protect information, confidentiality, integrity, availability. Now, when using SFTP, the files are perfectly secure from a transfer standpoint, but, what about governance ? Audit capability ? Access control ? That's where the gap is. And yes, having an authentication bringing audit capability is also a factor in data governance. 👉 https://gag.gl/2ZxYDE #cybersecurity Kiteworks #governance #SSH #SFTP

17

5 Comments

Jason Soroko and I explain the major news items from the most recent CA/Browser Forum face-to-face meeting in Tokyo on the Root Causes Podcast. Topics include MPIC, 47-day certificate term, and Temporary Restraining Orders. Audio: https://lnkd.in/g-RaJifc Video: https://lnkd.in/gDJuyRAg

34

1 Comment

The OpenID Foundation finalized the Continuous Access Evaluation Profile (CAEP) and the Shared Signals Framework (SSF) specs earlier this year. These standards have been adopted by industry leading organizations such as Apple, Google, IBM, Jamf, Okta, Omnissa, SailPoint, SGNL, and others. Many IT decision makers and practitioners, as well as product managers and product engineers are eager to understand these standards better, and how they can go about implementing them. This white paper is just for you, if you have these questions! Registration is not required, so please read / download / share it freely. https://lnkd.in/gSzMeicn

65

1 Comment

🚨 Active Directory security exposures aren’t just audit reports — they should be actionable events. In today’s video, I walk through how to take PingCastle — a free & powerful AD security assessment tool — and turn its findings into structured events your SOC can actually use in Wazuh. https://lnkd.in/gqJmnXZj

73

Despite the many benefits of Data #CleanRooms they may turn participating parties into Data Brokers as per California’s DELETE Act if they happen to bring 3rd party data (no direct relationship) into the platform, triggering a registration and tech alignment requirement (and hefty fines if dates are missed). (Presentation by California Privacy Protection Agency and Ben Isaacson on the DELETE ACT and the new #DROP platform that integrates all data brokers for consumers to place a single request.) Privacy Law Section of the California Lawyers Association. #AdTech

57

5 Comments

Risk isn’t created by a threat source alone—it’s triggered by real-world events, and in this video you’ll learn how to turn abstract threats into concrete scenarios your CMMC Risk Assessment can actually evaluate.

24

A new AboutDFIR.com security bulletin is live! California Finalizes Groundbreaking Regulations on AI, Risk Assessments, and Cybersecurity After much anticipation, the California Privacy Protection Agency has finalized the regulations on automated decisionmaking technologies (ADMT), risk assessments, and cybersecurity audits pursuant to the California Consumer Privacy Act (CCPA), with staggered compliance timelines for each set of requirements. Although the final regulations removed all references to the term “artificial intelligence,” the ADMT provisions remain a groundbreaking attempt to regulate AI technologies—particularly those used to evaluate, monitor, or make decisions about individuals. This is the first installment in a three-part series discussing the new requirements under the CCPA’s new regulations. […]

10

Cyberattacks are getting smarter. Are your defenses keeping up? AI can help you: * Spot threats in real time * Predict risks before they spread * Cut through alert noise * Respond faster * Meet compliance needs But tools alone aren’t enough. You need the right strategy. See how AI + expert guidance can improve your cybersecurity. Read the full post: https://hubs.la/Q03szv3J0 #Cybersecurity #AI #ArtificialIntelligence #Compliance

20

Common Vulnerabilities and Exposures (CVE) program that helps engineers identify how bad an exploit is and how to prioritize applying patches or other mitigations. So there goes all the VAPT startups and solutions 😂 Opportunity: Silver lining we can maybe start looking into a new solution that finally takes into account configuration weakness into account as well. News Link: https://lnkd.in/ddGcxChm #vulnerability #vulnerabilitymanagement #vapt #cve #infosec #security #engineering #technology #boredtoolbox

14

Future-Proofing Compliance: AI-Driven Data Privacy at Scale Managing compliance for sensitive data—whether HIPAA, CMMC, GDPR, PCI DSS, or evolving global regulations—is no longer just a checklist exercise. It’s an ongoing, dynamic challenge that demands AI-powered precision, proactive risk management, and continuous adaptation to new threats and requirements. The Reality? Most organizations struggle not because they lack intent but because they lack visibility. Data is everywhere—structured, unstructured, multi-cloud, hybrid environments—yet compliance starts with knowing what data you have, where it resides, and how it's being used. The Solution? At Data Safeguard, we go beyond compliance to offer privacy-first intelligence—leveraging AI-driven data discovery, real-time risk assessment, and automated policy enforcement. Compliance shouldn’t be a bottleneck—it should be an enabler of trust, efficiency, and business resilience. 🔍 Where’s your sensitive data? ⚠️ Are your compliance guardrails proactive or reactive? 🔐 Is privacy an afterthought or embedded by design? The first step in solving compliance is knowing your data—let's start there. Book a complimentary consultation with DataSafeguarders (Sales@DataSafeguard.AI) and take the first step toward a smarter, AI-driven compliance strategy. Data Safeguard Inc. | Data Safeguard India #DataPrivacy #AICompliance #FutureOfPrivacy #DataGovernance #PrivacyByDesign

13

1 Comment

A zero-day vulnerability that is actively being exploited was reported, and patched, by SAP yesterday. The issue, CVE-2025-31324 with a CVSS score of 10, impacts the Metadata Uploader component of SAP NetWeaver Visual Composer. While many organizations may not be using the component, the issue was discovered by security teams conducting incident response activities during the investigation of multiple NetWeaver breaches. Organizations should immediately verify whether their systems are vulnerable and either patch the vulnerability, or implement a workaround, as soon as possible. #cybersecurity #sap #NetWeaver #zeroday SAPinsider Mastering SAP ERP Today

27

2 Comments