Founded in 2019, PurpleSec is a cybersecurity firm built by practitioners. Our leadership brings experience from defense, government, and regulated industries.
Fairfax, Virginia
Joined December 2019
- Tweets423
- Following802
- Followers457
- Likes154
PurpleSec retweeted
Had a good conversation with a #cybersecurity expert on how vulnerability management should actually be implemented.
PurpleSec retweeted
Which insider threat is the most likely to lead to a breach?
#cybersecurity #infosec #securityawareness
50%Disgruntled Employees
0%Human Error
50%Compromised Account
0%(Other): Comment Below
2 votes • Final results PurpleSec retweeted
What is the greatest challenge in vulnerability management today?
#vulnerabilitymanagement #cybersecurity #infosec
100%Poor visiblity
0%Incompatible/complex tool
0%No buy-in from leaders
0%Other (comment below)
4 votes • Final results PurpleSec retweeted
What KPIs should you be tracking for your vulnerability and patch management programs?
Here's my list of the top 10:
1. Average Time To Action
2. Mean Time To Remediation
3. Risk Score
4. Accepted Risk Score
5. Average Vulnerability Age
6. Internal Vs External Exposure
7. Rate Of Recurrence
8. Total Risk Remediated
9. Asset Inventory/Coverage
10. Service Level Agreement (SLA)
Did I miss any?
#vulnerabilitymanagement #cybersecurity #infosec
PurpleSec retweeted
Most vulnerabilities go undetected for 6-7 months.
The MTTR critical/high vulns are between 60 - 150 days (screw you "low" vulns!)
The answer is to improve visibility and bring automation into every aspect of the VM lifecycle. This will improve most KPIs and free up your team’s time to work on less tedious projects.
#vulnerabilitymanagement #cybersecurity #infosec
PurpleSec retweeted
The top 10 cyber attacks in 2022 according to experts:
1. Rackspace Ransomware Attack
2. Cisco Suffers Cyber Attack
3. Uber’s Internal Systems Compromised
4. Sensitive NATO Data Leaked
5. US Airport Websites Hacked
6. TikTok Denies Cyber Attack
7. Twitter Zero-Day Exposed Data
8. 2.4 TB Microsoft Data Leak
9. Samsung Exposes PII
10. Starlink Dish Hacked
Continue reading: purplesec.us/security-insigh…
#cyberattacks #cybercrime #cyberthreats #infosec #cybersecurity
PurpleSec retweeted
Big shout out to the #PurpleBook community for releasing a TON of free security policy templates!
purplesec.us/resources/cyber…
PurpleSec retweeted
The high-level goals of network penetration testing should include testing all potential MITRE CVE vulnerabilities and attempting to evaluate the resilience against known attacker TTP included in the MITRE ATT&CK framework. cstu.io/cdf6cf ...
PurpleSec retweeted
Had a lot of fun recording a video with a veteran defensive security expert.
We talk about the traditional remediation process and why it's broken.
youtu.be/Bns79gIwxIA
#cybersecurity #infosec #vulnerabilitymanagement
PurpleSec retweeted
💡Conti Costa Rica Ransomware Attack Explained Security Insights By PurpleSec
youtu.be/hW3t36YG2s8 #Ransomware
PurpleSec retweeted
What exactly does data security mean and why is it important? 🤔
Check out my article on @Purple_Sec’s blog to learn how #datasecurity is essential to any business strategy.
#cybersecurity #data #security #databreach #cyberattacks #hacking #cybercrime
purplesec.us/learn/data-secu…
PurpleSec retweeted
As a Consciously Secure Leader, how are you protecting your website?
Over 18 million websites are infected with malware at a given time each week (PurpleSec).
Our websites are oftentimes our first dialogue with the world. Not just our personal world, but THE collective world(1/7)
PurpleSec retweeted
An estimated 25% of businesses have been victims of cryptojacking. [Source: bit.ly/3ySgD5d]
⛏️ Cryptojacking, or the unauthorized use of another's computer to mine cryptocurrency, usually occurs by tricking the victim into clicking on a malicious link in an email ...
PurpleSec retweeted
Red Team VS Blue Team: What's The Difference? | PurpleSec purplesec.us/red-team-vs-blu…
PurpleSec retweeted
Did you know?
Cybercrime rose up 600% due to the COVID-19 pandemic according to PurpleSec.
#cybersecurity #infosecurity #technology
PurpleSec retweeted
New Fusion detection for ransomware is now in public preview: techcommunity.microsoft.com/… - Ransomware attacks have taken a massive turn in being the top priority as a threat. A recent report released by PurpleSec revealed that the estimated cost of ransomware purplesec.us/resources/cyber…
PurpleSec retweeted
What Are The Different Types Of Cyber Attacks?
#sealit #encryption #cybersecurity #dataprivacy #dataprotection #data #datasecurity #databreach #cyberattacks #ransomware #malware #finance #business
@Purple_Sec secure.sealit.id/3xabIf3
