Fable Security

No this is not a duplicate to my last post... Unfortunately emerging threats and bad actors are accelerating rapidly. This time its Healthcare Healthcare security teams are being asked to do something almost impossible: protect an organization where the people you most need to reach can't step away from patient care to sit through training. And attackers know it. We're seeing the same pattern show up again and again. Its someone calling into a hospital's service desk posing as a clinician, using urgency and a plausible story to get access they shouldn't have. It works because the person answering the phone is trying to help a colleague, not spot a threat. On top of that, a single HIPAA training module doesn't hold up across a workforce this varied. A nurse, a biomed tech, and a scheduler all face completely different risks, and lumping them together helps no one. We've been working closely with health systems like Mount Sinai and Dayton Children's on exactly this, and put together a short overview of how their teams are approaching it. Same as last post. Happy to share it, or just compare notes if this is something you're navigating right now. No pitch, just want to see healthcare security teams get some breathing room here. Fable Security https://lnkd.in/gbt8pSdT

Attackers are calling ahead to announce their phishing emails, so when the email arrives, nobody questions it. Our new NDA phishing briefing breaks down how attackers use a phone call to set up a malicious DocuSign request. A second briefing helps employees tell spam from phishing, so real attacks reach security instead of getting lost in the noise. See the comments for full details.

🚨 Attn: Big news for New York's cybersecurity scene We're excited to welcome Jacob Berry to the greatest city on earth, and we're throwing a party to celebrate! When: Thursday, Oct 8 4:00–7:00 PM Where: Conveniently in Midtown, Manhattan Come toast Jacob's arrival, meet fellow #NYC security folks, and talk shop over drinks and bites. (And explain the difference between 🟠 and 🔶) Need a ride? Uber vouchers available upon request. Spots are limited, RSVP now: 🔗 https://luma.com/5mf7ot5t

I posted a blog last week about how modern GRC programs require a modern approach for security awareness training. They don't just require a once a year checkbox. They are adapting to the modern AI era where as new attacks happen quickly, we, as Cyber leaders, have to respond quickly with the ability to educate on the new threats, accurately track completion, and monitor for compliance to be able to show risk reduction. PCI calls this out specifically in their latest updated version. Have a look at my blog and the mapping I did to map a modern risk management program to current PCI standards. https://lnkd.in/eipsXJCi Fable Security

Fable Security has launched Briefing Agent, an AI-powered tool designed to convert emerging cyber threats and company policies into targeted employee security briefings within minutes. https://lnkd.in/gmvCJ5ns

Fable drives down human errors and for October Cybersecurity Awareness Month we designed a game - and people love it. As a product builder, I love aha moments like this. If you're still brainstorming how to drive user engagement & coach your employees for October, Fable Security is here to help. - Fable Security's OCAM program: https://lnkd.in/gF58F2hM - Or play the game and find easter eggs: https://lnkd.in/ge86xSDz #humanrisk #socialengineering #october #OCAM #SAM

Fable Security launches Briefing Agent, an AI agent that turns emerging threats and new policies into targeted employee interventions in under 20 minutes. "The security team stays in control while the manual work in between largely disappears." – Sanny Liao, Co-Founder and Chief Product Officer at Fable Security For full story, see comments #FableSecurity #BriefingAgent #HumanRiskManagement #CyberSecurity #AI #TechIntelPro

PCI DSS 4.0.1 changed what Requirement 12.6 actually asks for, and it's a lot more than an annual video. The requirement now expects a documented, role-based program that reacts when new threats show up, not just once a year. Our AVP Cybersecurity, Tim Chase, breaks down what changed, the trigger most programs still miss, and why passing an audit and reducing risk turn out to be two different jobs. Read the full breakdown below, and drop your questions for Tim Chase in the comments.