Will H.

@Traceable’s leadership in API security is undeniable, which is why we jumped at the chance to back @Jyoti Bansal and his team on their recent funding!  Traceable’s API security is transforming the way businesses operate. 

100

2 Comments

Utilities, pharmacies, other core components of the life we live are under attack daily and sustained predictable #MDR essential to keeping us safe and secure. CyberMaxx helping out clients here every day

4

Snowflake's data breach is escalating 🥵 Hackers exploited the lack of multi-factor authentication(MFA)/2FA, stale passwords, and open network access via Infostealer malware. Surprising that basic security controls were absent 😳 If you hold customer data: 💥 enforce MFA across all systems 💥 implement regular password changes 💥 maintain strict network access lists Investing in your company's security posture is critical. Such threats will only increase in the future. https://lnkd.in/e8hRQabU #cybersecurity #cloudsecurity #datasecurity #identity #IAM #MFA #databreach #securitybreach #snowflakebreach #password #startups

20

Read the customer story to learn how eSentire MDR delivered superior visibility, correlation, and protection from cloud-specific threats, 24/7 detection, and expert support that enabled Venerable to stay ahead of cyber threats. DM us to discuss how eSentire can help your organization achieve comprehensive threat response, visibility improvement and endpoint protection. @eSentire

1

And the news keeps coming for BreachRx... Welcome to the team, Joe Sullivan! https://lnkd.in/eSRpjE4z "Joining BreachRx is a natural extension of his work, he said, since the company automates the process of documenting organizations' incident responses in the first hours and days." "We're in a broken place," Sullivan said. "The people who are the most intelligent about how to navigate us out of this are handcuffed by fear because they think the regulators are going to come after them." "The way Sullivan sees it, security chiefs have become accustomed to a corporate reality that doesn't provide them with the funds or employees needed to properly secure their systems." Enter, BreachRx. "The growing regulatory pressure on all executives, not just security chiefs, to clean up poor internal practices could force companies to invest more in security and help CISOs in the long run." #incidentresponse

5

Security teams today are drowning in data, and the old tools don't fit the new paradigm. That's why we're thrilled to be investors in RunReveal, founded by two longtime expert security data practitioners, Evan J Johnson and Alan Braithwaite. SIEM sucks, but it doesn't need to. Evan and Alan are shipping at an extraordinary rate and early customers love what they're building. More on why we're excited here https://lnkd.in/gZD95V6m

31

#AIGovernance is the hot topic of our age. #data and #AI are powerful combination but it may become liability very quickly. Join us on May 30th in person or virtually. #AIgovernance #datagovernance #privacymatters #NIST #IAPP

6

If you dig in w/ major tech users today in financials you hear about everything from Silicon & power density through model selection, fine tuning, data curration, training and human Eq and more. You generally don’t hear about SaaS vendors w/ a few exceptions Saas vendors are now mostly silos that must be dealt w/ as opposed to sources of improved workflows that should be scaled.

7

8 Comments

🔐 Introducing Cutting-Edge Remote Code Execution (RCE) and Zero-Day Exploits for Sale 🔐 We are excited to announce that Cosmo Exploit Group LLC is now offering advanced remote code execution (RCE) exploits and zero-day exploits for sale. *(These exploits are for government, military, private sector use only)* Please read our Legality Guide on our page. Prices vary starting at 1 Million USD and up for RCE's and Prices vary for Zero-Days. Unlike Zerodium, which purchases these exploits, we take pride in creating and discovering them in-house. Our dedicated team of cybersecurity professionals ensures that each exploit is meticulously developed and securely maintained. Our RCE and zero-day exploits cover various devices and platforms, providing unparalleled opportunities for organizations looking to bolster their security testing capabilities. By keeping these exploits locked away, we guarantee exclusivity and superior quality for our clients. 💼 Why Choose Cosmo Exploit Group LLC? In-House Expertise: Our team of experts develop and discover all exploits internally, ensuring high standards and reliability. Exclusivity: Our exploits are kept secure and exclusive to our clients, offering a unique edge in cybersecurity defense. Comprehensive Coverage: We offer exploits for a wide range of devices and platforms, catering to diverse security needs. 📩 Get in Touch Interested parties can reach out to us directly for more information and to discuss their specific requirements. Together, we can enhance your cybersecurity posture with the latest advancements in RCE and zero-day exploits. 🔍 #CyberSecurity #ZeroDayExploits #RCEExploits #InHouseDevelopment #CyberDefense #CosmoExploitGroup #AdvancedSecurity #CyberThreats #InformationSecurity Contact: https://lnkd.in/gyvVeU8M

1

Have you experienced the 𝘱𝘰𝘸𝘦𝘳 of Entitle Just-In-Time access yet? ⏱ Revolutionize your security with Just-in-Time (JIT) access - in just 15 minutes! Join Ron Nissim, Entitle's CEO & Co-Founder, for these rapid-fire, 15 minute Entitle demo sessions. Ron will show you how JIT access can: ✔️ 𝗦𝘁𝗿𝗲𝗮𝗺𝗹𝗶𝗻𝗲 access control across your entire cloud estate ✔️ 𝗘𝗺𝗽𝗼𝘄𝗲𝗿 users with secure, temporary access when they need it ✔️ 𝗕𝗼𝗼𝘀𝘁 efficiency with automated workflows ✔️ 𝗘𝗻𝗵𝗮𝗻𝗰𝗲 security with least privilege principles ✔️ 𝗘𝗻𝘀𝘂𝗿𝗲 compliance with data privacy regulations Bring your questions to ask Ron live, and if there's time, you might even score a personalized demo! Check out the schedule via the link below. https://lnkd.in/eft9wW_W #JITAccess #LeastPrivilege #DataPrivacy #PrivilegedAccess

4

Why IBM's Acquisition of HashiCorp is a Game-Changer for Investors IBM's $6.4 billion acquisition of HashiCorp significantly bolsters its hybrid and multi-cloud capabilities, positioning it as a leader in the AI era. HashiCorp’s expertise in cloud infrastructure, lifecycle management, and security automation complements IBM’s strengths, creating an end-to-end cloud platform. This strategic move enables IBM to offer enhanced solutions for managing complex cloud environments and generative AI workloads, providing investors with robust growth potential and a competitive edge in the evolving tech landscape. #IBM #HashiCorp #CloudComputing #AI #InvestmentOpportunity #PINCommunityAdvocate #IBMPartner

9

Who doesn't love Compliance? Any SOC2 fans out there? 😄 Luckily, tools like Vanta make it a lot easier. So it's been exciting to work on an integration between Border0 and Vanta. With this latest integration, you can now use your employees' compliance status to determine whether access to a database, server, container, or web app should be granted! This improvement ensures that only employees who have completed their security training, accepted all policies, and have the Vanta monitoring agent installed will have access to your company's infrastructure! Check out the full details + demo in the latest Border0 blog: https://lnkd.in/g2ETiFUS

11

The Gartner Security and Risk Management Conference is done and the new cyber CMO market handbook is out. Step #1: just add “AI-powered” to all marketing material. The CISOs I know are not out asking “Where can I add AI to my current technology stack?” Here’s what they are looking for: empowering their security teams, and their organization, to make smarter, faster decisions. CISOs have been using ML for some time, and it has been effective for sifting signal from noise. And they need more to manage the constant barrage of cyberattacks, making it difficult to prioritize and stay ahead of the curve. Some of the 15+ AI security agents, to actively incorporate AI into their own security operations, including from Microsoft, CrowdStrike, BlackBerry, and others. What is needed are new tools to enhance threat detection, incident response, and overall cybersecurity posture. What also is high on the priority list: CISOs are increasingly concerned about how adversaries may leverage AI for malicious purposes. The importance of staying vigilant and proactive in anticipating how threat actors might deploy AI in cyberattacks will be crucial, This involves constant threat intelligence gathering, adopting AI-driven threat modeling, and implementing advanced defenses that can counteract adversarial AI techniques. Perhaps most important need is how to enable employees to identify these every changing and more sophisticated AI-based threats. I am optimistic that the cybersecurity industry is on the edge of new breakthroughs that will provide meaningful impact to CISOs and their organizations. #cyber #cybersecurity #risk #AI

22

3 Comments

Microsoft’s #AIstudio hugs Nasuni’s file storage so their customers can natively unlock business insights from their global #unstructuredfile data. This is possible as Nasuni’s #cloud-native global file system inherently consolidates customer file data on near infinite #storage. This is just one of many #filesservices you can now activate. I love #investing in #extraordinary #founders!

6

The potential exposure of secrets due to these findings is very significant and long-term, and the implications for secure coding practices are clear - you should NEVER hard-code secrets in code, not even once, not even if you overwrite it immediately after comitting it. It might continue to lurk in the underlying filter where malicious actors will find it.

14

“I know for a fact that there are companies that look at SSOTax.org and avoid those vendors” Dave Anderson on Episode 1 of the Sailing CISO podcast. So if that's the case, why do we still see SaaS vendors overcharge for SSO? Why do SaaS vendors decide to ignore their customers security? Why do SaaS vendors use an essential feature to squeeze you for the last penny? Repeat after me "SSO is no longer an enterprise feature". Those days are over. Any company these days should use SSO just like nobody is ordering seatbelts as a fancy upgrade to their new Tesla. I get it. SaaS vendors need to make money. However, why can't you do this in a way that is economically reasonable?! i.e. charge a fixed fee for the implementation cost if your team has a higher volume of support requests because of it... If you've already built a security feature and then only add it to the enterprise-plan that's hidden behind layers of sales and a minimum-seats requirements - that's just the most blatant form of greed. So... what are your thoughts? Should SSO be free? Are SaaS vendors just greedy? #ssotax #startups

19

2 Comments

Software Bill of Materials: SBOM Studio Get transparency into your softwares reputation, nature and popularity with cybersecurity insights for the entire product lifecycle using SBOMs. ‍ Gartner estimates that 70 to 80 percent of modern software incorporates open source libraries (OSS) or components from third-party upstream suppliers into product design. These pre-made constructs increase productivity and shorten development time—but they also carry risk into the final product. Like any software module, these software ingredients can have vulnerabilities that emerge at any time, making the overall software product less secure over time. Product owners, managers, and security officers have an imperative responsibility to keep track of their software supply chains. Corporations need to leverage technologies to continually improve their secure-by-design processes. Product teams can use SBOMs to identify vulnerabilities early in the process and produce solutions that reduce corporate and customer risk. At every stage of the software development lifecycle (SDLC), Cybeats can extract the characteristics and attributes from software, even without access to source code, to deliver deep insights into the quality and security of software components. About Justin:  A results-focused leader with over 10 years of senior management experience in national/international business operations coupled with an MBA and executive roles in the military. Expertise in strategic planning, change/operational/resource management, quality & continuous improvement, communication, consulting and mentorship/training.    https://lnkd.in/gwKN2xyz LinkedIn:  https://lnkd.in/g9twBhaZ  

2

1 Comment

Copia just published its report: The State of Industrial DevOps 2024 It is the first survey of its kind on the application of IT DevOps principles and practices to the industrial sector and is full of manufacturing and distribution peer benchmark data from 200 US-based respondents. https://lnkd.in/gFgZax_K

7