Tim McAdam

Enterprises spend more on security but aren’t benefitting from the extra spend. Palo Alto Networks’ customers who buy security across 3 platforms spend more than 40x those that secure just one. Despite those dollars… “Adding incremental point products is not necessarily driving a better security outcome for them.” - Nikesh Arora, CEO of Palo Alto Networks The average enterprise uses upwards of 70 security products. Many of these products produce alerts identifying phishing emails or network access issues or odd device behavior. The security operations center (SOC) reviews these alerts. Estimates suggest the typical team receives between 5,000 & 11,000 alerts per day - every day. Worse still, every SOC team is short-staffed. No wonder these teams can’t keep up with the deluge. Fewer than 10% of alerts are ever reviewed. Many security breaches could have been detected earlier with broader coverage. Dropzone provides AI SOC analysts that never sleep. Leveraging the power of LLMs, Dropzone’s analysts collect alerts, fetch relevant information from other systems, and then triage alerts. These agents also inform copilots that empower security analysts to ask questions of their environment leveraging the insight of the AI analysts. RSA selected Dropzone a top 10 Finalist in the Innovation Sandbox. We’re thrilled to support Edward & the Dropzone team in fulfilling their mission. As Senior Principal Scientist, Edward architected the AI systems at ExtraHop, a network security company acquired for $900M. Our partner Andy wrote in greater depth about our vision for the company here : https://lnkd.in/dyUy6M_3. And if you’re curious to test it on your own, you can test drive it here : https://lnkd.in/djzXcwjs.

43

5 Comments

Are you wondering how your application behaves in runtime — exactly which components are in use, how data moves within them, and what's truly vulnerable. Kodem provides an innovative way for Runtime intelligence letting you zero in on the right things, so you can improve performance, security, and compliance, minus the noise. This is a great discussion with Kodem’s own CEO and Founder Aviv Mussinger #podcast #cybersecurity #innovations

2

Pretty incredible story emerging wrt compensating CISO's for "product feedback". I know several people listed on their website personally, and each of them operates with incredibly high integrity, but it can be a slippery slope. Per the article, it sounds like a few slipped quickly down that slope and made questionable product purchases in exchange for earning "compensation credits" "The first sales come from the loyal CISOs who work with the fund." "I recruited a new CISO for a financial organization that I managed out of a desire to refresh the cyber defense system. I gave him a free hand because I trusted him and I see this position as a position of trust. Six months later, I noticed that, surprisingly, almost all of the new logos that the CISO introduced were portfolio companies of Cyberstarts," "After I confronted the CISO on the subject, he admitted that he is on the list of advisers of Cyberstarts and receives a percentage of the funds from them. Shortly after this, he left the company " "upon the appointment of a new CISO, I asked him to inform me if he was contacted by Cyberstarts. Within a few weeks, he had already received an email from them with a description of their kind of 'loyalty program' that details exactly what he will receive the more he works with the fund." https://lnkd.in/ga7VsAfu #infosec #cybersecurity

33

Platformization of cybersecurity solutions have allowed organization to rationalize tooling from 20-30+ cybersecurity point solutions, to a smaller number of vendors. Solutions that do a bunch of things well and integrate the results help contextualization and prioritization, and reduces effort on securit and developer teams. As I shared recently in a private forum, though, that doesn't mean that you should reduce to just _one_ vendor doing _everything_ in your stack. There is no obvious reason or benefit from having one vendor for network security, XDR/SIEM, cloud security, appsec/dev tooling, and IAM, and actually quite a few drawbacks. By all means, pick platforms. But pick them for segments, and select which are best suitable for your landscape and best integrate with others. So, I appreciated seeing Avi Shua 's article that makes pretty much exactly that point.

16

1 Comment

As many as 165 companies ‘potentially exposed’ in Snowflake-related attacks, Mandiant says: The impact of the operation targeting customers of the cloud storage giant continues to grow.  The post As many as 165 companies ‘potentially exposed’ in Snowflake-related attacks, Mandiant says appeared first on CyberScoop. #cyber #cybersecurity #cybersecurityjobs #Technology #management #cloud #Innovation #cyberjobs

1

DTEX Systems and Mandiant (part of Google Cloud) have teamed up to deliver a webinar discussing the industry’s approach to support #zerotrust for the federal agencies and the mandates required to deliver #insiderrisk within the ZT framework. #zerotrust #insiderrisk #insiderthreat #cybersecurity #dtexsystems #google #mandiant #federalgovernment

18

Given the new reality of today’s growing #threatlandscape and #complexity of #applications, the #pointproduct tool approach is ineffective. To optimize the performance of security architectures, increase the effectiveness of #cybersecurity teams, and, ultimately, advance defenses, #platformization is essential: a recent study by #IDC shows that, with a cybersecurity #platform, teams are 55% faster to address #cyberattacks and 58% quicker to #remediate security events – while organizations are in line with their business objectives, with a three-year #ROI of 203%.   More insights on our #platformization approach by Palo Alto Networks founder and CTO Nir Z. Helmut Reisinger Florian Hartwig Sergej Epp Marc Mueller Damaris Soellner Angelika Kempf Martin Zeitler Andy Weiss Wojciech Golebiowski

21

If you are thinking about AI, you need to have secure identity figured out

15

Discover why partnering with Sysdig for #Kubernetes security and compliance was a game-changer for apree health! 🙌 By leveraging Sysdig's powerful #CloudSecurity platform, Apree Health reduced time to remediation by 80% and saved over 10 hours monthly on security and compliance tasks. 🔥 Dig deeper into their success story ⤵️ https://okt.to/zxuFG8

9

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

171

9 Comments

🚨 New Episode Alert on The Security Podcast of Silicon Valley 🎙️ A huge thank you to the visionary Michael Moore, Chief Privacy Officer at Lacework (formerly CP Deputy General Counsel at Pure Storage), for sharing deep privacy and security insights on this latest episode produced by YSecurity. 🛡️🌐 💡Episode Highlights: 🛠️ Michael's unique journey from engineer to cybersecurity + privacy expert. 📜 Insights into the critical overlap of technology, law, and privacy. 🛡️ An exclusive look into Lacework's cutting-edge strategies for digital security and privacy. Why You Should Listen: Whether you're deeply embedded in the tech world or just keen on the latest in digital privacy, this episode offers rare insights from a leader shaping cybersecurity's future. Dive into Michael's expert analysis on safeguarding against digital threats and the proactive approach at Lacework. 🔗 Grab The Episode: https://lnkd.in/gdMfHHRQ (or wherever you listen to podcasts) 🔗 Related Reads from the show: Don't Let Your Company Reputation Be Held Ransom - By Michael Moore, Lea Kissner, Merritt Baer, 05 March, 2024 - https://lnkd.in/gK9T6Wi7 Product Privacy Done Right By Michael Moore, Lea Kissner, Alan James Mulvaney, 04 March, 2024 - https://lnkd.in/g5yXCbR9 Join the conversation and let us know your takeaways from the episode! 🗨️ #CyberSecurity #PrivacyProtection #TechInnovation #Lacework #DigitalFrontier #YSecurity #Podcast #InfoSec #DataProtection #CyberAware #CyberDefense #TechnologyNews #DigitalSecurity #PrivacyMatters #SecurityAwareness #LegalTech #SiliconValleyTech #TechLeadership #security #rsa2024

8

4 Comments

I agree with everyting, except the name 😉non-human identity (#NHI) is misguided and based on the wrong assumption this type of identity is an exception, a minority when compared to human IDs. But, today there are 10 times more machine identities in the cloud than humans. Should we humans be called non-machines??? No. There are (human) identities 👩🏻, and machine identities 🤖. Non-human also sounds like something so negative, and when the machines rise they will remember who profiled them that way 😅 #machineid #machineidentity #machineidentitymanagement #iga #saviynt

68

27 Comments

Amplify detection capabilities with Recorded Future's Validated Sigma Rules, crafted by our research team to minimize false positives. Watch to see how to easily search, implement, and configure Sigma Rules without ever leaving Splunk.

2

Are you heading to #RSAC2024 in San Francisco? Mark your calendars for Tuesday, 5/7/24, from 1:40 PM to 2:00 PM as Erez Tadmor, Tufin's Field CTO, discusses collaboration and resilience via automation. Discover how integrating network security insights with change automation can unite teams and strengthen security. Reserve your spot now: https://okt.to/4PNqEX #RSAC2024 #RSAC #Cybersecurity #FirewallManagement

34

1 Comment

Cybercriminals are changing their offense strategy from attacking systems to attacking the people who operate them. In an interview with The Futurum Group’s Shira Rubinoff, Veritas expert Tim Burlowski discusses what organizations must do to adapt.

1

18 months ago, a security startup's funding was a competitive advantage. However, the recent acquisition talks between Wiz and Lacework prove that the value of your product now trumps the size of your war-chest. Check out the details of this $150-200 million deal in TechCrunch's latest article. #startup #cybersecurity #funding #acquisition

10

Our second acquisition in the Dispersion Capital Portfolio in a short period! Cloudflare has acquired BastionZero, a firm rooted in blockchain security. This team of cryptographers and blockchain engineers brings a unique perspective to zero-trust security, aligning well with Cloudflare's security ethos. Their blockchain expertise has naturally transitioned to robust zero-trust solutions, emphasizing continuous verification and minimal trust. The principles of blockchain—decentralization, transparency, and ledger immutability—lend themselves well to zero-trust fundamentals, where verification is continuous and trust is never assumed. This profound understanding of secure environments led BastionZero to develop cutting-edge solutions that ensure secure remote access and credential management, making them an ideal complement to Cloudflare's existing suite of security tools. This acquisition enhances Cloudflare's ability to secure remote access and manage credentials effectively, marking a significant step in advancing IT infrastructure security. #decentralizedinfrastructure

60

2 Comments

Surround yourself with high achievers – the ones who deliver exceptional results, set high expectations, and push others to excel. These passionate, sometimes controversial leaders make a real impact. Echoing the wisdom of former Google CEO: 'Hire the divas.' #Leadership #Innovation #Success"

15

1 Comment