Tom Kemp

RSA 2024 Takeaway: AI or Die 🥵 Met dozens of CISOs, execs & founders at RSA this week. Quick observations: 1️⃣ Every vendor is AI-fying their pitch. They're leveraging AI/LLMs for various use cases - threat intelligence, SOC automation & more. Impressed by Google Cloud, CrowdStrike & Microsoft Azure security offerings with lots of LLM-powered automation across their stack 🤖 2️⃣ The other side of AI adoption? Security / Compliance / Safety. Many pitches around securing AI systems & data. AI safety will be a hot topic for a while. Congrats to Reality Defender Ben Colman for winning the RSA Conference Innovation Sandbox 👏 3️⃣ Enterprises are shifting towards unified security stacks driven by cost, simplicity & agility needs - EDR + ASPM + CNAPP + SIEM +...all-in-one. This'll trigger a new wave of acquisitions by major players like CrowdStrike, Palo Alto Networks, Zscaler, Wiz, SentinelOne. While there are many innovative exciting startups, I'm afraid most exits may be below $500M. 4️⃣ Critical infrastructure security is gaining more attention due to rising geopolitical threats. This is an urgent national security matter. I'm super proud to be an early investor in Eclypsium, Inc.. They are the MOST innovative critical infrastructure security platform for enterprises. 💪 (cc Yuriy Bulygin Alex Bazhaniuk) 5️⃣ Identity is the new perimeter. Loads of innovation here. A non-human identity layer is emerging rapidly. Cerby showcased many exciting product updates to secure new vulnerabilities in the identity stack. Watch this space 👀 Share if I miss others. #RSAC2024 #cybersecurity #IAM #EDR #SIEM #CNAPP #ASPM #criticalinfrastructure #supplychainsecurity #ai #ml #llm #largelanguagemodels

79

10 Comments

"An extraordinary or unusual thing, person, or event; an exceptional example or instance..." THATS what a "Palooza" is. And we're about to have a POLICYpalooza. A plethora of amazing revelations of whats possible with policy, when you're a StrongDM user. First up? How can you add an MFA prompt to every single resource in your environment. Stop begging your resource vendors to support MFA - just use StrongDM to enforce an MFA prompt whenever anyone accesses that resource, or when they access that resource at a certain time, or when they access that resource from a certain region or.. or...or.. Get in on this people... It's going to be amazing.

11

1 Comment

🚨 Attention Roku Users: 2FA Now Mandatory After Account Breaches 🚨 Roku has made two-factor authentication (2FA) mandatory for all users following two separate incidents that compromised around 591,000 customer accounts. 🔒 The company believes the attacks were carried out using credential stuffing. 🗝️ #Roku #AccountSecurity #2FAUpdate While some users' accounts were used to make unauthorized purchases, Roku has assured customers that no sensitive financial information or personal data was accessed. 💳 Affected customers have been reimbursed for any fraudulent charges. 💸 #DataBreach #CustomerProtection #RokuSecurity 🤔 Are you a Roku user? Have you enabled 2FA on your account yet? If not, you'll be prompted to do so the next time you log in online. 🔐 Share your thoughts on this mandatory security measure in the comments below! 👇 #2FAMandatory #RokuCommunity #CyberAwareness Remember, using strong, unique passwords and enabling 2FA across all your accounts is crucial in today's digital landscape. 💪 Stay vigilant and protect your personal information! 🛡️ #CyberSecurity #PasswordSafety #StaySafeOnline — This summary was AI generated. If there are any issues with it, please call it out 😎 Thanks Ben. — https://lnkd.in/g-aG-uHs

2

CISOs - please don't squander your earned trust on dubious purchasing decisions. I cannot verify the veracity of this article, but even the mere premise of CISOs receiving kickbacks for their security product purchases is deeply disturbing. As a profession, we have worked too hard to earn trust and credibility, and can't have our decisions second-guessed. If you are doing this, then please stop. Say no to kickbacks and declare any conflict of interests / recuse yourself from any purchasing decisions 🙏🏼 https://lnkd.in/gXgfkvd3

6

Israeli company CyberArk has announced that they will be acquiring U.S. company Venafi in what is set to be a strategic acquisition for many reasons. The deal has been valued at $1.54 billion and is a significant milestone, not just for CyberArk, but for the entire cybersecurity landscape. CyberArk's strategic acquisition of Venafi, a leader in machine identity protection, highlights the critical need to secure machine-to-machine communications in our rapidly evolving digital world. With AI and cloud services transforming how we operate, the explosion of machine identities has created new vulnerabilities. CyberArk's decision to expand its security solutions to address these challenges is timely and necessary. They are also focusing on enhancing security against sophisticated cyber threats, expanding their market potential by $10 billion, and combining the two companies’ capabilities to help set new standards in the industry. From my perspective, this acquisition highlights a pivotal shift in how we need to approach cybersecurity. The focus is no longer solely on human identities but also on the vast number of machine identities that are now part of our networks. I see this as a catalyst for further innovation and collaboration. It’s an inspiring example of how strategic acquisitions can drive technological advancement and address emerging cybersecurity threats. In what other ways do you think Israeli startups can leverage strategic acquisitions to bolster their technological capabilities and market reach? Let me know below! Read about the acquisition here > https://lnkd.in/eZxtqJTw #Cybersecurity #IsraeliStartups #TechInnovation #MachineIdentity #AI

30

We're bringing Endpoint Inspector SaaS to Amazon Web Services (AWS) Marketplace, helping businesses collect and analyze #data faster to best protect their organizations.    Cellebrite’s role in the Amazon Partner Network helps customers reduce risk, boost collaboration and lower costs. Offering this solution from our Case-to-Closure platform to millions of active AWS customers worldwide is critical to allow more people to deploy it simply and quickly.       Using AWS #cloud infrastructure, Endpoint Inspector SaaS will empower secure, real-time data access from a range of remote devices – without compromising on consent and #security. Read more from Cellebrite Enterprise Solutions: https://lnkd.in/d9Cc7Tfd

127

4 Comments

Blumira's unique SIEM-driven XDR approach focuses holistically on your data, treating it as vital for meeting security and compliance needs. 🔒📈 While many providers provide threat detection, Blumira keeps your compliance regulation at the forefront! Check out this clip from Blumira CTO, Matt Warner, discussing how Blumira's data-centric strategy strengthens security and streamlines compliance. #XDR #SIEM #Compliance #ThreatDetection Follow this link to watch the full on-demand webinar: https://okt.to/eYwu90

7

🔥 Join us at the OWASP Orange County #meetup where Mike Larkin, CTO and co-founder of Deepfactor, will lead the 90-minute hands-on live #workshop "Vulnerability Reachability Analysis Using OSS Tools” and will dive into: ✅ What vulnerability reachability is and why it is important ✅ Two main ways of understanding reachability (static call graphs and runtime analysis) ✅ Two short exercises for the attendees to gain hands-on experience using both types of tools against real applications with real vulnerabilities We look forward to seeing you there. Check the link in the comments for sign-ups! #AppSec #Security #Deepfactor

14

1 Comment

This SentinelOne ExecBrief highlights the convergence of AI and foreign malign influence efforts on the 2024 year of global elections: #Sentinelone #SentinelLabs #cybersecurity #security #datasecurity #internetsecurity #networksecurity #identitysecurity #cloudsecurity #containersecurity #securityawareness #cybercrime #malware #cyberattacks #cyberdefence #ethicalhacking #EDR #NDR #XDR #AI #digitalsafe #cybersafe #Cloud #containers #kubernetes #infosec #hacking #privacy #cyberdeception #deceptiontechnology 

2

really liked the takeaways SeeMetrics distilled from this, esp about consensus security metrics still being unsettled as the technology, threats, and understanding levels are changing very quickly. https://lnkd.in/gZrxbsWQ

20

1 Comment

Game changer. Finally something that takes basic threat data and turns it into control testing within minutes. Not basic scenario testing. Control testing. Tell me if my EDR has a policy that is mitigating a vulnerability. Then tell me what policy to enable or change. Simple, effective risk mitigation. Why? Because patching hasn't worked for the past 20 years and certainly won't continue to work over the next 20.

23

📣 Announcing Whiterabbit: A Cybersecurity Venture Studio Building the Future of Security I've partnered with Nir Polak (former founder & CEO of Exabeam) to create https://whiterabbit.vc. ## Who We Are 🚀 Whiterabbit is a venture studio assisting dreamers in turning ideas into industry-leading companies ## Why We Created Whiterabbit Because we believe in being more than just investors. While traditional VCs invest money and offer advice, we're founders and operators at heart. Our mission is to actively create and build cybersecurity companies from the ground up, not just invest in them. We're here to transform ideas into industry-leading companies by rolling up our sleeves and doing the work alongside passionate founders. We believe the best companies solve the most annoying and seemingly benign problems. We love starting from the smallest idea and pulling the string to create something amazing - that's how greatness is born. ## Who We're Not ❌ A VC investing in existing teams and companies ❌ An accelerator for an existing company ## What We Do ✅ Partner with passionate founders to build next-generation cybersecurity companies ✅ Identify and validate the right problems to solve in the cybersecurity industry ✅ Accelerate the process from ideation to acquiring customers ✅ Leverage our extensive network and reputation to help startups rise above the noise ✅ Assemble exceptional founding teams by attracting the best talent ✅ Work closely with founders, immersing ourselves in the challenges they face ✅ Write a $5m+ first check into the company ## We're Looking For 🔍 Passionate people who love cybersecurity and want to create companies to solve real problems 🔍 Advisors who deal with problems everyday and wished there was a solution to it no matter how big or small #Whiterabbit #Cybersecurity #VentureStudio #StartupInnovation #TechEntrepreneurship

1,001

125 Comments

🔥 Tomorrow night at 6 pm PDT, join us at the OWASP Orange County #meetup where Mike Larkin, CTO and co-founder of Deepfactor will lead the 90-minute hands-on live #workshop "Vulnerability Reachability Analysis Using OSS Tools” and will dive into: ✅ What vulnerability reachability is and why it is important ✅ Two main ways of understanding reachability (static call graphs and runtime analysis) ✅ Two short exercises for the attendees to gain hands-on experience using both types of tools against real applications with real vulnerabilities We look forward to seeing you there. Check the link in the comments for sign-ups! #AppSec #Security #Deepfactor

13

2 Comments

I agree with your post 100% Hoff. However, I do have a serious question. In a world where there are thousands (way too many) of cyber companies with even more (way way too many) products, how should a buyer find the few technologies that will make their security better? What are the metrics they could and should use to go from 3000->1000->100->10 products they need to actually buy and use? Not trying to be snarky. I'm honestly interesting in trying to figure out how that should occur most efficiently and in a way that the CISO can use to build their program? Is there a programmatic way or do we just rely on the CISO echo chamber in back channels and slacks like it appears everyone is doing today.

11

6 Comments

Return on Security is such a valuable resource, it's what triggers me to start working on the news segment for my weekly podcast Enterprise Security Weekly (Security Weekly Productions)! As soon as Mike drops it, I start investigating all the startups coming out of stealth with Seed or Series A funding. Do they fit into current categories? Are we seeing the beginnings of a new security trend or a new product category? For me, it all starts with this newsletter.

9

1 Comment

Armis CTO and Co-Founder, Nadir Izrael, sat down with Michael Novinson of Information Security Media Group (ISMG) to discuss Armis' recent acquisition of Silk Security. Armis will integrate Silk Security's best-in-class security prioritization and remediation into the AI-powered Armis Centrix™ platform to address all facets of cyber threat exposure management. "Every enterprise is quickly realizing that there are way too many issues and vulnerabilities and problems to manage if you're not doing it intelligently and from a perspective of your exposure and attack surface. And that's really what we're all about." Read more: https://ow.ly/jJoN50RjgxN #Armis #Cybersecurity #Security #AI #Acquisition #ISMG

58

2 Comments

💡 Anomali's VP of Threat Research, Steve Benton, shares insights on the recent Change Healthcare ransomware attack and provides important lessons for tech professionals. Read the latest coverage from Dice, including guidance that can help improve defense, incorporate zero trust, leverage threat intelligence, focus on resilience, and strengthen collaboration against cyber threats in the healthcare industry. Read the full article here: https://ow.ly/lXgs30sBvxb #Anomali #CybersecurityIndustryExperts #ChangeHealthcare #RansomwareAttack

6

S2Ep14 of the MLSecOps Podcast is now available 🎉 🎙️"MLSecOps Culture: Considerations for AI Development and Security Teams" Proudly featuring: Chris Van Pelt, Co-Founder and CISO at Weights & Biases: The AI Developer Platform. Find the episode and transcript here: https://bit.ly/4eMcndH Chris joined show hosts from Protect AI, Badar Ahmed (Co-Founder and CTO) and Diana Kelley (CISO), to talk about an array of topics that include: - The story of how Weights & Biases was formed - Building a culture of security & knowledge sharing across teams within an organization - Real-world machine learning (ML) and generative AI security concerns - Data lineage and tracking - Upcoming features in the Weights & Biases platform for enhancing security Check out the transcript for links to the Weights & Biases resources mentioned throughout the episode! Thanks again to Chris for joining us on the show, as well as to the hosts of this informative discussion, Badar and Diana. #MLSecOps #aisecurity #airisk #machinelearning #ai #artificialintelligence #genai #llm #ciso #MLOps #cybersecurity #ProtectAI

19