Denis Shilkin (@DenShilkin) profile picture

CyberSecurity. Russian in Texas. Tweets are my own.

Texas, USA
Joined November 2010
Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)Photo by Denis Shilkin (@DenShilkin)
My bits on #SolarWinds. We cannot trust our suppliers. We need our own controls to verify their updates/patches for malicious functions/add-ons.
1
How can we verify a vendor’s patch signed with valid cert and without source code? Execute in a sandbox and monitor all actions? We might never find a trigger that stars covert activities.
JPMorgan Chase & Co. to join GitHub in a commitment to make open source safer! linkedin.com/posts/william-p…
Prepare a BCP/DR plan, test it. Make backups, test them. Educate your people, test them. healthitsecurity.com/news/ca…
Denis Shilkin retweeted
1
7
2
13
Dormant or running #cyber threats could be on your endpoints. Don't leave them to escalate. Sign up for a free Threat 360 assessment with Fujitsu: okt.to/aVjfEX?
The name of your first pet should have nothing to do with keeping your data secure. Fujitsu highly recommends #biometrics instead. Sorry, Fido. okt.to/mQQONi
1
1
3
Identity and access management can increase trust and transparency. Protect #data and employees by giving them only the data they need #IAM. Read on: ow.ly/DQrt30l1AWM
blog.global.fujitsu.com/scar… first blog for FJ follow on from @bry_campbell 's scare file last year blog.uk.fujitsu.com/cyber-se…
1
3
Macy’s is warning customers that a #cyberthreat targeted customer information for nearly two months. #databreach chicagotribune.com/business/…
2
2
EXPECTATIONS VS REALITY IN RUSSIA | The Truth About the World Cup 2018 youtu.be/mDHOmwWNJsg via @YouTube
1
#AI is no longer a futuristic technology that will someday reveal its true value – that day is already here. Read more on the Fujitsu blog: okt.to/xDkzoR
Denis Shilkin retweeted
I’m astounded to see people still arguing “my site doesn’t need HTTPS” so I’ll put it simply: either spend a few mins putting it on your site now or continually explaining to your visitors why your site is not “not secure” until you end up doing it anyway. It’s not a negotiation. – at Gold Coast, Queensland
55
386
37
1,130
Cylance and @LogRhythm: Delivering Prevention and Visibility buff.ly/2lHnWtn #infosec #security #prevention
2
3
I believe very strongly that InfoSec should co-own the perimeter spam filter. Operations people sometimes have the responsibility of Make It Werk and are held to stupid SLAs and client surveys. Security should have a hand on brake. Allow temporary solutions, but go back later.
3
3
48
Adding spam filter exceptions should be an operational rarity, at any organization, regardless of size. If you are adding blind whitelisting, you are papering over a deeper issue you do not understand, or helping other people do their job incorrectly that will hurt them later.
11
31
3
145