Last Chance to Save (NO EXCLUSIONS)

December 15, 2017 at 11:06 am | Posted in Careers, Certification Paths, LPI, Microsoft, Oracle, PMI | Leave a comment
Tags: , , , , , , , , , , , , , , , , ,

After a long 2017, it’s now that time of year to think about what you should give up or do differently for 2018. Are you planning on losing or gaining more weight? Exercising more, watching more streaming shows,  or curling up with more good books? Perhaps picking up a new hobby or going back to a project you once abandoned?

We have a better idea. One that could translate into a higher salary or better career. Why not make getting an IT or project management certification as one of your New Year’s Resolutions? From the highly sought-after certifications like CISSP, CEH, and Security+ (just released the new version last month) to the latest Microsoft Azure, Windows, and security certifications, Transcender has got you covered!

mkt-006929-last-chance

And this time, it’s no exclusions – opening up the discount to our up-to-date eLearning (now including Juniper to Amazon Web Services) to get started and cloud-based labs to help you hone your new skills . Hurry now. This deal is too good to last into 2018, so you better act now!

PolitiHack, Or How I Learned to Stop Worrying About Russians Influencing the US Election and Learned to Love Cybersecurity

December 23, 2016 at 4:12 pm | Posted in cybersecurity, Knowledge | 2 Comments
Tags: , , , , , , , , , , , , , ,

Hackitivism and cyberespionage are certainly nothing new, especially emanating from Russia. But the 2016 US presidential election was a swift education for Americans and the watching world regarding the widespread consequences of a successful  APT (advanced persistent threat). A joint statement issued by the Department of Homeland Security and the Office of the Director of National Intelligence on Election Security stated that the “U.S. Intelligence Community (USIC) is confident that the Russian Government directed the recent compromises of e-mails from US persons and institutions, including from US political organizations” (emphasis ours).

Thanks to the detailed reporting from the New York Times, the fog of war is beginning to clear and the full extent of the cyberattack has become clear. And what is increasingly apparent is that at every stage, cybersecurity training could have significantly mitigated or (perhaps) even prevented portions of the attack altogether.

kaperskythreatmap

Real-time cyberthreat map from Kapersky Lab

Enter the low-rung MIS contractor hired by the DNC — Yared Tamene.  He claims no cybersecurity expertise, much less any cybersecurity-related certification like GSEC, CASPCISSP, CEH or CFR. So it’s hardly appropriate to assign him the brunt of the blame. Instead, we should use his example to learn how cybersecurity knowledge and skills could have better informed the fateful decisions that he, and many others, made along the way.

In the fall of 2015, the FBI noticed some unusual outgoing network traffic from the DNC network, suggesting that at least one computer was compromised. The early forensics linked the compromise to a known Russian cyberespionage group going by the moniker “the Dukes” (AKA “Cozy Bear” and “APT29”) , who had in just the last few years, penetrated the White House, State Department and Joint Chiefs of Staff email systems. A special agent picked up the phone, called Tamene, and told him what they knew.

Before we even get to Tamene’s response, any trained cybersecurity first responder knows why the FBI called via phone rather than emailing their dire message. Communication protocol during a security incident should be out-of-band, meaning outside of the primary communication channels (primarily network where the attacker could be listening). Ironically, Tamene was convinced that the FBI call was a hoax, and after repeated calls over the new few months, he ignored the urgency. In November, the FBI even confirmed with Tamene that known malware was routing data to servers located in Moscow.

Continue Reading PolitiHack, Or How I Learned to Stop Worrying About Russians Influencing the US Election and Learned to Love Cybersecurity…

Now Offering CFR-210 Test Prep

December 1, 2016 at 3:16 pm | Posted in Logical Operations, Vendor news | Leave a comment
Tags: , , , , , , , , , , ,

Who says there’s no news in December? In cybersecurity, it’s never a question of if, but a question of when a breach will occur. So rather than wait for the new year, we thought we’d get the jump on 2017 and together with Logical Operations, release the Cybersec First Responder (CFR-210) practice test today.

What exactly is the CFR certification all about? Well, CFR-210 showcases your ability to to quickly detect and respond to active cyber threats. It’s not just about detailed knowledge of the analysis techniques and tools, but how to identify and respond, in real time, to the broad array of security threats affecting organizations worldwide.

So, white hats, rejoice and black hats, you’re on notice. They’re some new sheriffs rolling into town with some serious skills — and they’re not afraid to use them!

Here’s the press release for your reading pleasure.


Entries and comments feeds.

%d bloggers like this: