Ed Sim

Are you wondering how your application behaves in runtime — exactly which components are in use, how data moves within them, and what's truly vulnerable. Kodem provides an innovative way for Runtime intelligence letting you zero in on the right things, so you can improve performance, security, and compliance, minus the noise. This is a great discussion with Kodem’s own CEO and Founder Aviv Mussinger #podcast #cybersecurity #innovations

2

🚀 Dive into GKE compliance with our latest blog post! Learn how to keep your GKE clusters secure and compliant with industry best practices. #GKE #Compliance #Kubernetes #CloudSecurity Link to the blog post: https://lnkd.in/gH5w_dEz

28

Microsoft’s #AIstudio hugs Nasuni’s file storage so their customers can natively unlock business insights from their global #unstructuredfile data. This is possible as Nasuni’s #cloud-native global file system inherently consolidates customer file data on near infinite #storage. This is just one of many #filesservices you can now activate. I love #investing in #extraordinary #founders!

6

Why IBM's Acquisition of HashiCorp is a Game-Changer for Investors IBM's $6.4 billion acquisition of HashiCorp significantly bolsters its hybrid and multi-cloud capabilities, positioning it as a leader in the AI era. HashiCorp’s expertise in cloud infrastructure, lifecycle management, and security automation complements IBM’s strengths, creating an end-to-end cloud platform. This strategic move enables IBM to offer enhanced solutions for managing complex cloud environments and generative AI workloads, providing investors with robust growth potential and a competitive edge in the evolving tech landscape. #IBM #HashiCorp #CloudComputing #AI #InvestmentOpportunity #PINCommunityAdvocate #IBMPartner

9

@Traceable’s leadership in API security is undeniable, which is why we jumped at the chance to back @Jyoti Bansal and his team on their recent funding!  Traceable’s API security is transforming the way businesses operate. 

100

2 Comments

Snowflake's data breach is escalating 🥵 Hackers exploited the lack of multi-factor authentication(MFA)/2FA, stale passwords, and open network access via Infostealer malware. Surprising that basic security controls were absent 😳 If you hold customer data: 💥 enforce MFA across all systems 💥 implement regular password changes 💥 maintain strict network access lists Investing in your company's security posture is critical. Such threats will only increase in the future. https://lnkd.in/e8hRQabU #cybersecurity #cloudsecurity #datasecurity #identity #IAM #MFA #databreach #securitybreach #snowflakebreach #password #startups

20

The potential exposure of secrets due to these findings is very significant and long-term, and the implications for secure coding practices are clear - you should NEVER hard-code secrets in code, not even once, not even if you overwrite it immediately after comitting it. It might continue to lurk in the underlying filter where malicious actors will find it.

14

Security teams today are drowning in data, and the old tools don't fit the new paradigm. That's why we're thrilled to be investors in RunReveal, founded by two longtime expert security data practitioners, Evan J Johnson and Alan Braithwaite. SIEM sucks, but it doesn't need to. Evan and Alan are shipping at an extraordinary rate and early customers love what they're building. More on why we're excited here https://lnkd.in/gZD95V6m

31

CyberArk buying Venafi for $1.54B, a 1.3x return over what Thoma Bravo paid back in 2020, proving value in consolidation within Identity Security and how Identity Security companies will trend towards building out horizontal platforms as more enterprises move to the cloud, and cloud-native companies are formed. Enterprises spend billions on managing and protecting human identities, and there's comparatively much less being spent on machine-to-machine connections. This gap has to close eventually, and CyberArk acquiring Venafi is an early indication that public companies are moving to fill that need. If you're in the early stages of thinking or building in the broader cybersecurity space from, John Cowgill and I would love to meet at Costanoa Ventures! #cybersecurity

24

2 Comments

Enterprises spend more on security but aren’t benefitting from the extra spend. Palo Alto Networks’ customers who buy security across 3 platforms spend more than 40x those that secure just one. Despite those dollars… “Adding incremental point products is not necessarily driving a better security outcome for them.” - Nikesh Arora, CEO of Palo Alto Networks The average enterprise uses upwards of 70 security products. Many of these products produce alerts identifying phishing emails or network access issues or odd device behavior. The security operations center (SOC) reviews these alerts. Estimates suggest the typical team receives between 5,000 & 11,000 alerts per day - every day. Worse still, every SOC team is short-staffed. No wonder these teams can’t keep up with the deluge. Fewer than 10% of alerts are ever reviewed. Many security breaches could have been detected earlier with broader coverage. Dropzone provides AI SOC analysts that never sleep. Leveraging the power of LLMs, Dropzone’s analysts collect alerts, fetch relevant information from other systems, and then triage alerts. These agents also inform copilots that empower security analysts to ask questions of their environment leveraging the insight of the AI analysts. RSA selected Dropzone a top 10 Finalist in the Innovation Sandbox. We’re thrilled to support Edward & the Dropzone team in fulfilling their mission. As Senior Principal Scientist, Edward architected the AI systems at ExtraHop, a network security company acquired for $900M. Our partner Andy wrote in greater depth about our vision for the company here : https://lnkd.in/dyUy6M_3. And if you’re curious to test it on your own, you can test drive it here : https://lnkd.in/djzXcwjs.

43

5 Comments

Discipline. Focus. Obsessive attention to delivering value to customers by getting them into production at light speed. Solving their business problems at massive scale. The list of reasons that gold standard investors want to be a part of Traceable’s story is long. A lot of companies in security solutions are struggling to score a financial lifeline or find a viable exit path - it is rough out here. But, Traceable is clearly here for the long haul. Results always bear out the truth - and our results are truly speaking for themselves. Proud and humbled to be a part of this incredible management team and company.

30

1 Comment

Pulling data from the last 7 years for a compliance audit can be frustrating…if you’re not using Incerto’s #observability stack for your #brokerage platform. ❌ The biggest problem? ↳ Analytical queries are slow with transactional (and unoptimized OLAP) databases and systems, especially for generating contract notes, tradebooks, P&L ✅ The Incerto edge? ↳ Effective storage using OLAP S3 backed database ↳ Reduce query time from hours to sub-seconds ↳ Leverage custom data pattern ↳ Storage reduced 30x We’ve already helped 2 leading brokerage firms in India and are in conversations with a couple more. Would love to learn more about the problems that you are facing as a brokerage leader. DM me to talk more or a quick product runthrough! #SEBI #monitoring #compliance

18

2 Comments

💭 Imagine reading about a new cyber campaign affecting all Snowflake tenants. 💭 Now imagine receiving this notification in your cloud security operations platform before you even had time to ask: "𝗠𝗶𝘁𝗶𝗴𝗮 𝗱𝗶𝗱 𝗻𝗼𝘁 𝗶𝗱𝗲𝗻𝘁𝗶𝗳𝘆 𝗮𝗻𝘆 𝘀𝘂𝘀𝗽𝗶𝗰𝗶𝗼𝘂𝘀 𝗼𝗿 𝗺𝗮𝗹𝗶𝗰𝗶𝗼𝘂𝘀 𝗮𝗰𝘁𝗶𝘃𝗶𝘁𝘆 𝘄𝗶𝘁𝗵𝗶𝗻 𝘆𝗼𝘂𝗿 𝗦𝗻𝗼𝘄𝗳𝗹𝗮𝗸𝗲 𝗲𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁 𝗱𝘂𝗿𝗶𝗻𝗴 𝘁𝗵𝗲 𝗮𝗻𝗮𝗹𝘆𝘇𝗲𝗱 𝘁𝗶𝗺𝗲 𝗳𝗿𝗮𝗺𝗲. 𝗠𝗶𝘁𝗶𝗴𝗮 𝗱𝗶𝗱 𝗻𝗼𝘁 𝗶𝗱𝗲𝗻𝘁𝗶𝗳𝘆 𝗮𝗻𝘆 𝘃𝗶𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝘆 𝗴𝗮𝗽𝘀 𝗶𝗻 𝘁𝗵𝗲 𝗿𝗲𝗹𝗲𝘃𝗮𝗻𝘁 𝗹𝗼𝗴𝘀." This is what our solution does. We're closely monitoring this situation and helping our customers investigate and determine if they have been compromised. 👉 Stay ahead of the threats! Visit our blog for the latest updates and expert insights.

6

With my work reviewing portfolio companies for the multiple VCs I work with, I have come across some innovative security companies solving real-world issues. One of those companies is Sweet Security. Last week, Snowflake, the data cloud company, was implicated in an account hack campaign that resulted in data leaks for customers like Santander Bank and Ticketmaster. The breach occurred when a threat actor accessed Snowflake’s database by impersonating an employee, bypassing the secure authentication protocol. Snowflake stated that the breach was not due to a product vulnerability or misconfiguration but resulted from the theft of login credentials from customers who had not enabled two-factor authentication. This incident highlights the inherent vulnerabilities in managed services and the persistent threat of impersonation attacks, which can occur despite stringent security measures. While the mentioned attack used an endpoint, similar risks are posed by vulnerabilities in the SaaS ID provider or the compute layer. These types of attacks can lead to significant breaches, as seen in other cases involving credential theft and lateral movement within systems. Impersonation attacks are particularly dangerous for cloud environments because they appear legitimate, making detection difficult. Traditional security tools often fail to identify these anomalies, which adhere to established policies. To combat this, behavioral analysis can detect deviations from normal activities, providing a more effective way to identify and respond to such threats. Companies like Sweet Security offer solutions that establish behavioral baselines, flagging anomalies in real-time and enabling swift action against potential threats. #cybersecurity #paas #vc #threatdetection #cyberdefense

21

7 Comments

It was great to discuss Okta's latest innovation for #developers, Fine-Grained Authorization (#FGA), with Heather Engel! Check out this episode of the Identity Belongs to You podcast on Cybercrime Radio, where we discuss the challenges developers have with traditional authorization models and how FGA helps overcome them by giving a simple, centralized way to create an authorization model for all their #apps and #resources while increasing #security and #efficiency. Pardon my voice as I was battling the allergy season 😊 https://lnkd.in/eZev5kKY #okta #identitymanagement #authorization #security

281

4 Comments

Who doesn't love Compliance? Any SOC2 fans out there? 😄 Luckily, tools like Vanta make it a lot easier. So it's been exciting to work on an integration between Border0 and Vanta. With this latest integration, you can now use your employees' compliance status to determine whether access to a database, server, container, or web app should be granted! This improvement ensures that only employees who have completed their security training, accepted all policies, and have the Vanta monitoring agent installed will have access to your company's infrastructure! Check out the full details + demo in the latest Border0 blog: https://lnkd.in/g2ETiFUS

11

🔒 Israel's Cybersecurity Boom in 2024 2024 is shaping up to be a landmark year for Israeli cybersecurity. With deals like Noname Security's expected acquisition by Akamai for around $500 million and Cyera's fundraising round of $300 million at a valuation of $1.4 billion, Israel continues to lead as a global cybersecurity hub. At Tachles VC, we're excited to support innovative startups in this thriving ecosystem. The recent increase in investments and acquisitions shows the high confidence in Israeli cybersecurity innovations, demonstrated by record-breaking exits totaling $985 million in just the first quarter of 2024. This follows an impressive 2023, where exits exceeded $7.1 billion, marking a 65% increase from 2022. As the industry evolves with AI and new challenges, the potential for groundbreaking developments is high! #CyberSecurity #IsraeliTech #Innovation #TachlesVC David Marek, Karel Tušek, Sivan Kanev, Boris Chovnik, Robin Bienfait Tachles VC 🚀 https://lnkd.in/eQCE6kDD 

31

1 Comment

Our second acquisition in the Dispersion Capital Portfolio in a short period! Cloudflare has acquired BastionZero, a firm rooted in blockchain security. This team of cryptographers and blockchain engineers brings a unique perspective to zero-trust security, aligning well with Cloudflare's security ethos. Their blockchain expertise has naturally transitioned to robust zero-trust solutions, emphasizing continuous verification and minimal trust. The principles of blockchain—decentralization, transparency, and ledger immutability—lend themselves well to zero-trust fundamentals, where verification is continuous and trust is never assumed. This profound understanding of secure environments led BastionZero to develop cutting-edge solutions that ensure secure remote access and credential management, making them an ideal complement to Cloudflare's existing suite of security tools. This acquisition enhances Cloudflare's ability to secure remote access and manage credentials effectively, marking a significant step in advancing IT infrastructure security. #decentralizedinfrastructure

60

2 Comments