Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Jason Garbis
Gain Business Support for Your Zero Trust Initiative
Written by Alex Sharpe and Jason Garbis of the CSA Zero Trust Working Group. Zero Trust is a major industry trend that is being adopted and promoted by security teams within many organizations around the globe, and for good reason. Zero Trust mitigates cyber risk, allowing the business to create new revenue streams, penetrate new markets, and offer new products. Zero Trust can also be used to reduce compliance costs, promote resilience, and recover from incidents faster.
Log4Shell and Zero Trust
This blog was originally published by Appgate here. Written by Jason Garbis, Appgate. We’re only a few weeks past the emergence of the Log4Shell vulnerability (with a few ongoing related issues still open) and security teams worldwide have been in a mad scramble to diagnose, validate, update and communicate. While it may be a little early to take a step back and reflect, I have some thoughts I want to share with our community.
Zero Trust Security
Authors: Jason Garbis Boston, USA Jerry W. Chapman Atlanta, USA Teaches you how to view your complete enterprise security and IT infrastructure through the lens of Zero Trust Helps you understand how Zero Trust security will integrate with and impact your existing identity, network, and security systems Shows you how to plan for and execute a successful journey to Zero Trust security in your organization Sections This is a preview of subscription content, access via your institution.
It's refreshing to see government agencies recognising the dangers VPNs bring to a company
By Jason Garbis (pictured) Chief Product Officer at Appgate It’s unsurprising to see VPNs listed in the NCSC joint advisory as being some of the top, most targeted vulnerabilities of 2020 and 2021. It is also refreshing to see government agencies recognising the dangers VPNs bring to a company. VPN appliances have always been a security concern, and in the past year, these concerns have escalated.
Appgate comments on new NCSC advisory
The comment by Jason Garbis, Chief Product Officer at Appgate on the NCSC joint advisory offering advice on the most common software vulnerabilities that are currently being exploited by cyber criminals, including the use of VPNs and its dangers: “It’s unsurprising to see VPNs listed in the NCSC joint advisory as being some of the top, most targeted vulnerabilities of 2020 and 2021. It is also refreshing to see government agencies recognising the dangers VPNs bring to a company.
Could Your Organisation’s Servers Be A Botnet?
Most organisations are aware that they could be the target of a DDoS attack and have deployed protection to keep their public-facing services online in the face of such attacks. However, far fewer have thought about the potential for their servers to be harnessed for use in a botnet, the group of servers used to conduct such DDoS attacks.
Software-Defined Perimeter Prevents Attackers
A new wave of record-breaking distributed denial-of-service (DDoS) attacks have struck enterprises, changing the DDoS threat landscape yet again. Last month, researchers discovered that attackers are abusing a previously obscure method that delivers attacks over 50,000 times their original size, the biggest amplification method ever used.
Cisco Warns Of A Critical Vulnerability In Its SSL VPN Solution
Cisco has confirmed a critical security vulnerability in its SSL VPN solution, Adaptive Security Appliance (ASA), which is arguably one of the most widely-deployed SSL VPNs on the market. Traditional VPNs, like Cisco’s ASA, expose an open port to the Internet which means that any remote user can connect to it. The vulnerability announced yesterday allows an unauthenticated, remote attacker to remotely execute code on the VPN box.
As The Cloud’s Popularity Grows, So Does The Risk To Sensitive Data
A new survey – part of the Ponemon Institute “2018 Global Cloud Data Security Study” – showed that despite the increasing adoption of cloud services worldwide, there is a wide gap in the level of security precautions applied by companies in different markets. The survey found that organizations in the UK (35%), Brazil (34%) and Japan (31%) are less cautious than those in Germany (61%) when sharing sensitive and confidential information stored in the cloud with third parties.
Research Shows System Compromises Are The Biggest Cyber Security Concern For Businesses
Neustar International Security Council (NISC) research revealed yesterday that system compromises are now the greatest cyber concern for IT security leaders, with nearly one in four (23%) security leaders citing them as the biggest threat to their business. Jason Garbis, VP at Cyxtera Technologies commented below. “The traditional network perimeter as we knew it no longer exists, so relying solely on it is a doomed security strategy. IT is more distributed and diverse than ever.
What’s Better: NAC or Software-Defined Perimeter?
Network security solutions that most organizations are deploying are clearly falling short (insert any data breach news headline that comes to mind here!). We see far too many breaches and successful attacks, and those of us who have experienced it know just how disruptive and expensive it can be. A lot of this has to do with traditional Network Access Control (NAC) solutions not meeting today’s business, security, technical and compliance requirements.
Securing a Moving Target: The Network Perimeter
In today’s fast-paced business landscape, it’s no longer enough to set up a traditional network perimeter. Cloud services, employee mobility and increased inter-organization collaboration mean that the trusted perimeter is extremely fluid and virtually meaningless. Security practitioners and CISOs can no longer count on extra hours on the job resulting in a secure network. Something new is required – something that eliminates the idea of a trusted network inside or outside the corporate perimeter.
People are not IP addresses. Why do security solutions think they are?
Attackers are erasing database contents and replacing them with a note demanding Bitcoin ransom payment for restoration. It also appears that victims who pay are often not getting their data back, and that multiple attackers are overwriting each other’s ransom demands. Seriously, these databases are of course important to their owners, and these attacks are clearly a headache for them. Hopefully they have backups. Let’s explore this situation a bit more, and then step back for some analysis.
MongoDB Ransom Attack - Just The Beginning
After multiple attackers hijacking MongoDB databases for ransom, Cryptzone, a provider of dynamic, context-aware network, application and content security solutions, suggests the attack will give start to much broader database attacks in 2017. Jason Garbis, Vice President of Products at Cryptzone commented below. Jason Garbis, Vice President of Products at Cryptzone: “The MongoDB ransom attack is just a precursor to the much broader database attacks we’re going to see in 2017.
Protecting Against Malicious Insiders and Targeted Attacks
Malicious insiders and targeted attacks consistently defeat much of the security technology that security professionals trust to defend their organizations and networks. So why is security technology not doing its job? Another way is to look at the entire perimeter concept, if that is stronger and more resilient, can that protect against those trying to get in – and prevent those trying to get information out.
Improve Security, Streamline Ops of HPE Helion OpenStack with AppGate: See it at HPE Protect 2016
Cloud environments are dynamic and complex, and managing user access is a continual challenge. Cloud platforms manage access control via IP addresses, rather than users. As a result, organizations end up with over-privileged users, unmanaged vulnerabilities and a never-ending manual configuration change treadmill. And, they can’t easily meet security or compliance needs, which ultimately poses a barrier to adoption of cloud platforms.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Jason
Contact Jason, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack