Sign In

Marcos Christodonte

Marcos Christodonte is a distinguished professional in the field of information security, holding notable positions throughout his impressive career. With a strong educational foundation, he earned a Master of Business Administration from Saint Leo University, and a Bachelor of Science in Information Systems from the University of Maryland - University College. His path in academia began with an Associate of Arts also from the University of Maryland - University College, establishing a comprehensive understanding of various business and technology disciplines. This robust educational background has propelled him into a successful career where he has made significant contributions in multiple high-profile roles, demonstrating both leadership and expertise in cybersecurity and information assurance.

Marcos has served as the Global Chief Information Security Officer (CISO) at Unqork, a prominent company that focuses on modern software development solutions. In this pivotal role, he has been integral in fortifying organizational security postures, crafting strategies to protect sensitive information while ensuring regulatory compliance. Prior to his role at Unqork, he was the Global CISO at Gartner, where he played a crucial part in enhancing cybersecurity initiatives and advancing industry standards, establishing himself as a thought leader in the cybersecurity community.

His tenure at Bridgewater Associates showcased his deep-rooted understanding of security management, where he held several key positions including Head of Information Security for the Investment Engine Department and the Corporate Service Departments. His responsibilities included overseeing comprehensive security practices and ensuring that robust policies were firmly implemented to mitigate risks in this highly dynamic financial landscape. His time at Bridgewater Associates strategically positioned him to handle complex security challenges, displaying his adeptness in risk management and response strategies throughout the organization.

In addition to his roles in the corporate sector, Marcos has also shared his knowledge and expertise through academia as an Adjunct Faculty member at the American Public University System. His commitment to education is further reflected in his earlier roles as a Lead Cybersecurity Consultant and Program Director at Booz Allen Hamilton, where he drove initiatives to bolster cybersecurity frameworks for various clients. His contributions as an author and speaker at Proactive Assurance highlight his commitment to disseminating knowledge in the cybersecurity domain.

Marcos's career began with a solid foundation in the military as an Information Systems Security Officer with the U.S. Army, where he received extensive training in the implementation of security protocols. This early experience in maintaining the integrity and confidentiality of data has laid the groundwork for his ongoing commitment to vigilant cybersecurity measures. Furthermore, Marcos began his professional journey in roles that involved significant responsibility, including positions as a Corrections Officer and Business Development Manager, showcasing his versatile background and ability to adapt to varying environments.

Highlights

Aug 27 · linkedin

CISO Daily Update - August 27, 2024

Seattle-Tacoma Airport Cyberattack:

  • What: IT systems down due to suspected cyberattack
  • Details: Caused flight delays and disrupted check-ins; FBI investigating; no group has claimed responsibility yet

ServiceBridge Data Exposure:

  • What: 2 TB of sensitive records exposed due to cloud misconfiguration
  • Details: Over 31 million records dating back to 2012 exposed; included personal info and HIPAA-related documents

Patelco Credit Union Breach:  - What: 726,000 customers impacted by ransomware attack.  - Details: RansomHub stole personal data, including social security numbers, and is auctioning it.

Texas Dow Employees Credit Union Breach:  - What: 500,000 members affected by MOVEit hack.  - Details: Cl0p ransomware exploited a zero-day flaw, exposing social security numbers and financial details. No identity fraud reported.

AMD Data Breach Claims:

  • What: Cybercriminals claim to have stolen internal AMD data
  • Details: Data offered for sale on BreachForums; second alleged theft in three months

Highway Toll Text Scams:

  • What: Fake SMS messages mimicking state toll collection systems
  • Details: Targets multiple U.S. states; scammers collect money and personal info through fraudulent websites

Hillstone WAF Flaw:

  • What: Command injection vulnerability in web application firewall
  • Details: Allows attackers to execute malicious code; patch released

Chrome Zero-Days:

  • What: Tenth zero-day vulnerability exploited this year
  • Details: High-severity flaw in V8 JavaScript engine; patched in latest update

NSA Guide on LOTL Attacks:

  • What: Best practices for combating Living Off the Land attacks
  • Details: Focuses on event logging and threat detection across various environments

GenAI Adoption Trends:

  • What: Shift in enthusiasm among senior executives
  • Details: 67% of organizations increasing investment, but interest declining among top executives

#cybersecurity #informationsecurity #ciso

Aug 23 · linkedin

CISO Daily Update - August 23, 2024

Halliburton Cyberattack:

  • What: Oil industry giant confirms "issue" affecting certain systems.
  • Details: Attack disrupted networks, particularly at Houston headquarters.

Google Cloud Storage Leak:

  • What: Alice's Table exposed data of 83,000 customers.
  • Details: Misconfigured storage bucket leaked names, emails, addresses, and order details. Affected companies include BCG and Pfizer.

Financial Firm SEC Violation:

  • What: Equiniti Trust Company fined $850,000 for mishandling cybersecurity incidents.
  • Details: Two attacks in 2022 and 2023 resulted in millions stolen. Highlights threat of business email compromise attacks.

Karakurt Extortion Gang Member Charged:

  • What: U.S. charges Deniss Zolotarjovs for money laundering, wire fraud, and extortion.
  • Details: Latvian national arrested in Georgia, extradited to U.S. Linked to at least six extortion cases, including $1.3 million ransom payment.

University Phishing Test Backlash:

  • What: UC Santa Cruz criticized for using fake Ebola scare in phishing simulation.
  • Details: Test email caused panic and drew criticism for insensitivity. University plans to adjust future simulations.

SolarWinds Vulnerability:

  • What: Critical flaw in Web Help Desk software patched.
  • Details: Hardcoded credentials vulnerability allowed unauthorized access. CISA mandates federal agencies to patch by September 5.

Microsoft Update Breaks Linux Boot:

  • What: August 2024 Windows updates cause issues with dual-boot systems.
  • Details: Problem stems from Secure Boot Advanced Targeting update. Microsoft working with Linux partners to resolve.

Chrome Zero-Day Vulnerability:

  • What: Google addresses ninth actively exploited flaw in 2024.
  • Details: Type confusion issue in V8 JavaScript engine. Users urged to update immediately.

Slack AI Security Flaw:

  • What: Prompt injection vulnerability patched in Slack AI.
  • Details: Flaw allowed potential data theft from private channels and phishing attacks.

RFID Card Hardware Backdoor:

  • What: Vulnerability discovered in widely-used contactless cards.
  • Details: Affects MIFARE Classic FM11RF08S cards, allowing unauthorized access to hotel rooms and offices.

Cisco Patches High-Severity Flaw:

  • What: Vulnerability in Unified Communications Manager reported by NSA.
  • Details: Could allow remote attackers to trigger denial-of-service condition. No workarounds available.

Atlassian Security Updates:

  • What: Nine high-severity vulnerabilities patched in various products.
  • Details: Affects Bamboo, Confluence, Crowd, and Jira. Includes remote code execution and cross-site scripting flaws.

Ransomware Trends Report:

  • What: Critical industries heavily targeted, but overall attacks show slight decline.
  • Details: 34% of July attacks targeted industrial sector. Law enforcement takedowns may be having an effect.

#cybersecurity #informationsecurity #ciso

Related Questions

How did Marcos Christodonte develop his expertise in information security?
What unique strategies has Marcos implemented as the Global CISO at Unqork?
In what ways did Marcos's experiences at Bridgewater Associates shape his career in cybersecurity?
How has Marcos contributed to the education of future cybersecurity professionals during his time as an Adjunct Faculty?
What innovative approaches did Marcos employ at Gartner to strengthen cybersecurity initiatives?
M
Add to my network

Location

Greater New York City Area