{"id":4605,"date":"2024-05-24T14:45:50","date_gmt":"2024-05-24T02:45:50","guid":{"rendered":"https:\/\/ostermanresearch.com\/2024\/05\/24\/rsac2024-cybersixgill\/"},"modified":"2025-03-10T16:58:21","modified_gmt":"2025-03-10T03:58:21","slug":"rsac2024-cybersixgill","status":"publish","type":"post","link":"https:\/\/ostermanresearch.com\/2024\/05\/24\/rsac2024-cybersixgill\/","title":{"rendered":"Notes on our briefing with Cybersixgill &#8211; the RSAC2024 files"},"content":{"rendered":"\n<p><em>We attended RSAC 2024 in San Francisco from May 6-8. Our days at the conference were packed with back-to-back briefings.&nbsp;<\/em><\/p>\n\n\n\n<p>Here\u2019s some notes on our briefing with Christopher Strand (Chief Risk and Compliance Officer). The briefing was organized by Liz Youngs of <a href=\"https:\/\/triercompany.com\" target=\"_blank\" rel=\"noreferrer noopener\">Trier and Company<\/a>.<\/p>\n\n\n\n<p>Key takeaways:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cybersixgill offers automated threat intelligence solutions drawing on data collected from the clear, deep and dark webs. Their website puts it this way: <em>Cybersixgill covertly extracts data in real-time from a wide range of sources, including limited-access deep and dark web forums and markets, invite-only messaging groups, code repositories, paste sites and clear web platforms<\/em>.<\/li>\n\n\n\n<li>Cybersixgill&#8217;s approach delivers threat intelligence as more than just a threat intel feed. It aggregates data in a data lake, enabling the addition of context to newly curated data, which is aimed at helping security defenders make better informed decisions on mitigations and responses.\u00a0<\/li>\n\n\n\n<li>If you are a Cybersixgill customer, you can receive threat reports for your vertical industry periodically (depending on your service level). This is a written report to provide analysis and context. It is complementary to the context-rich threat intelligence data.<\/li>\n\n\n\n<li>The company is investing in building out the conceptual framework of a risk intelligence approach. Threat intelligence is part of this framework, but not the whole story anymore. Risk intelligence is a long-term play for Cybersixgill. Christopher has written a couple of blog posts on this topic &#8211; see <a href=\"https:\/\/cybersixgill.com\/news\/articles\/enhancing-security-posture-with-cyber-risk-intelligence-part-1\" target=\"_blank\" rel=\"noreferrer noopener\">part 1<\/a> and <a href=\"https:\/\/cybersixgill.com\/news\/articles\/enhancing-security-posture-with-cyber-risk-intelligence-part-2\" target=\"_blank\" rel=\"noreferrer noopener\">part 2<\/a>. <\/li>\n\n\n\n<li>In terms of risk intelligence, the big idea is moving beyond threat intelligence only to incorporate vulnerability intelligence (identifying and prioritizing), attack surface intelligence (gap identification for defense fortification), third-party intelligence (assessing security posture of supply chains and third-parties), and regulatory intelligence (sector\/industry-specific regulations). It is, therefore, a much more holistic view of risk beyond adversary intent, capabilities, and techniques.<\/li>\n\n\n\n<li>See also our write up on Cybersixgill&#8217;s <a href=\"https:\/\/ostermanresearchnotes.com\/2024\/04\/29\/cybersixgill-2024\/\" target=\"_blank\" rel=\"noreferrer noopener\">State of the Underground 2024<\/a> report.<\/li>\n<\/ul>\n\n\n\n<p>For more, see <a href=\"https:\/\/cybersixgill.com\" target=\"_blank\" rel=\"noreferrer noopener\">Cybersixgill<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Some notes on our briefing with Cybersixgill at RSAC2024. Cybersixgill is investing in a risk intelligence approach, encompassing various aspects beyond threat intelligence.<\/p>\n","protected":false},"author":384585,"featured_media":4728,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[712027168,712027503,21182911],"tags":[712027518],"class_list":["post-4605","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-risk-intelligence","category-threat-intelligence","tag-notes-on-briefings"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/ostermanresearch.com\/wp-content\/uploads\/2024\/05\/cybersixgill2024.jpg?fit=1100%2C350&ssl=1","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pcHAk4-1ch","_links":{"self":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/posts\/4605","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/users\/384585"}],"replies":[{"embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/comments?post=4605"}],"version-history":[{"count":2,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/posts\/4605\/revisions"}],"predecessor-version":[{"id":4729,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/posts\/4605\/revisions\/4729"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/media\/4728"}],"wp:attachment":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/media?parent=4605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/categories?post=4605"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/tags?post=4605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}