AI Security Consultant

SEATTLE, May 15, 2024 (GLOBE NEWSWIRE) -- IOActive, Inc., the worldwide leader in research-fueled security services, was named as a winner of the Trailblazing Cybersecurity Research and Trailblazing Cybersecurity Provider categories by Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine. “This selection from Cyber Defense Magazine as one of the industry’s most influential cybersecurity research firms is a testament to the hard work and expertise of our team,” said Jennifer Sunshine Steffens, CEO at IOActive. “We believe in approaching cybersecurity from an attackers’ perspective, and this philosophy underpins everything we do - from our groundbreaking research across industries to our comprehensive security services tailored to meet the evolving needs of our clients. As we continue to innovate and push the boundaries of cybersecurity, we remain steadfast in our mission to make the world a safer place for all.” This award highlights ongoing momentum for the company as Steffens was recently recognized as one of The Top 50 Women Leaders of Washington for 2024, in addition to IOActive winning three award categories at the 2024 Cybersecurity Excellence Awards. IOActive is proud to be recognized as part of a coveted group of industry leaders. The full list of this year’s award recipients can be found here: http://www.cyberdefenseawards.com/ For more information, please visit www.ioactive.com or join us on LinkedIn and X

“What should keep you up at night is, ‘What do I not know?’ There may be things that you know you don’t know, and there may be things you don’t know that you don’t know.”During the National Motor Freight Traffic Association’s (NMFTA) May webinar, John Sheehy, senior vice president of research and strategy at IOActive, a research-fueled security services firm, offered that thought-provoking reminder.Sheehy’s presentation, hosted by Antwan Banks, director of cybersecurity of NMFTA, is part of the organization’s cybersecurity series leading up to its October Digital Solutions Conference in Houston. The conference will be a meeting of minds to discuss emerging cybersecurity threats and related issues faced by the transportation and logistics industries.Cybercrime attacks on large transportation businesses have made headlines in recent years, and as the industry has become more appealing to attackers, companies of all sizes are vulnerable to system breaches. The range of threat techniques only continues to grow as hackers adapt and evolve ways to gain access to critical company information.For transportation companies, threats don’t just apply to internal digital systems, but also to the vehicles and equipment they use to move freight. Additionally, how these systems interface with one another through telematics devices presents risk. With many entry points for hackers, the importance of cybersecurity is paramount.The prevalence of these “hackable” interfaces that organizations build their business on provides malicious individuals and entities many opportunities to breach an organization and wreak havoc.“[It] could be as simple as one of your employee’s laptops or something more complex such as your overall wide area network. Or … from an operational technology perspective, something that might move freight on the warehouse floor that is necessary for shipping and receiving can be disrupted too,” Sheehy elaborated.Identifying critical digital security lapses is the first step in defending your business from bad actors, who, in the worst-case scenario, could pose an existential threat to your company.Penetration testing is one of the most impactful ways to figure out what it is you don’t know about your company’s vulnerabilities, allowing you to mitigate risks before an attacker can exploit them.During the webinar, Sheehy discussed what penetration tests are, as well as the methodologies and the best practices you can implement to gain maximum value from them.What is a penetration test?Simulating an attack on your computer system or network using the same tools, techniques and procedures as the real thing, penetration testing allows an organization to evaluate its security and expose the business impacts of its vulnerabilities. “These vulnerabilities may result from poor or improper system configuration, known and/or unknown hardware or software flaws, or operational weaknesses in processes or technical countermeasures,” Banks said.Penetration test methodologiesPenetration tests are not one-size-fits-all processes; Sheehy identified three main kinds of test methodologies, which fall on a spectrum from limited to more information provided to testers