Yoni Leitersdorf

Michal Braverman-Blumenstyk, CTO Microsoft Security at BlueHat IL: “Cybercrime has an annual GDP of $8T. If it were a country, it would have the 3rd largest GDP in the world, and by far the fastest growing one”. It takes a village of very smart people to deter and counter these attackers. Blockchain security has a high impact on threat actors ability to operate freely. We need to improve prevention, shed more light on them, and block them more effectively. • If you’re building a blockchain project and not sure how to properly secure it, let’s talk. • If you’re protecting blockchain-based systems or enterprises and want to collaborate, let’s talk. • Also, if you’re not sure why blockchain can have a meaningful impact on this… let’s talk! Thanks Microsoft for sharing the insights, and for an amazing conference like always!

30

Pretty incredible story emerging wrt compensating CISO's for "product feedback". I know several people listed on their website personally, and each of them operates with incredibly high integrity, but it can be a slippery slope. Per the article, it sounds like a few slipped quickly down that slope and made questionable product purchases in exchange for earning "compensation credits" "The first sales come from the loyal CISOs who work with the fund." "I recruited a new CISO for a financial organization that I managed out of a desire to refresh the cyber defense system. I gave him a free hand because I trusted him and I see this position as a position of trust. Six months later, I noticed that, surprisingly, almost all of the new logos that the CISO introduced were portfolio companies of Cyberstarts," "After I confronted the CISO on the subject, he admitted that he is on the list of advisers of Cyberstarts and receives a percentage of the funds from them. Shortly after this, he left the company " "upon the appointment of a new CISO, I asked him to inform me if he was contacted by Cyberstarts. Within a few weeks, he had already received an email from them with a description of their kind of 'loyalty program' that details exactly what he will receive the more he works with the fund." https://lnkd.in/ga7VsAfu #infosec #cybersecurity

31

I'm excited to share with you the first episode of our new video series: Sentra 101! 📽 In this episode, learn how Sentra's technology leverages advanced algorithms to swiftly discover and accurately classify your data. Want to stay on top of all your changing data? Hear from data security expert (data team lead), Daniel Suissa. Watch the full video below 👇

54

1 Comment

Leveraging security peers at other companies can be an excellent way to learn and get things done. Rami shares some 🔥 tips, tactical advice, and concrete examples of reaching out effectively. If you're more junior in your career, you should absolutely read this. I wish I had read this when I was first starting out! Rami's post on being the first security hire also some some gems and 🌶 takes.

31

Wiz New Integration with Google Security Operations (Chronicle) We are excited to announce our evolving collaboration with Google, marked by the release of our new integration with Google Security Operations (Chronicle). This integration streamlines the flow of Wiz Issues into Google Security Operations, helping SecOps teams identify, investigate, and remediate critical cloud security issues efficiently using the Open Cybersecurity Schema Framework (OCSF). Key Benefits: 🛡️ Prevent cloud risks from becoming costly threats Identify and address exposure points before malicious actors exploit them. SOC analysts get prioritized security signals from Wiz, highlighting the most significant threats to your cloud environment. 🔗 Correlate cloud security signals with other IT security signals Integrate high-fidelity cloud signals with other IT security data in your SIEM to detect patterns and receive alerts for pressing issues. 🔍 Enable the SecOps team with clear cloud Issues and context. Equip SecOps teams with the context they need to understand and resolve critical alerts, ensuring effective remediation of cloud security risks. Huge thanks to amazing wizards Guy Mast Tsachi Shuval Elior Paz Itai Yosephi Shashank Golla for their incredible work. Special thanks to our partners at Google Vineet Bhan Adam Licata Melissa K. Smith  for their continued collaboration. 📖 Read more about our integration: https://lnkd.in/esZKuJuE Noa Yaar Brenden Worth #CloudSecurity #SecOps #Cybersecurity #GoogleSecurity #Wiz #Integration #OCSF #CloudProtection

208

4 Comments

🚨 Attention Roku Users: 2FA Now Mandatory After Account Breaches 🚨 Roku has made two-factor authentication (2FA) mandatory for all users following two separate incidents that compromised around 591,000 customer accounts. 🔒 The company believes the attacks were carried out using credential stuffing. 🗝️ #Roku #AccountSecurity #2FAUpdate While some users' accounts were used to make unauthorized purchases, Roku has assured customers that no sensitive financial information or personal data was accessed. 💳 Affected customers have been reimbursed for any fraudulent charges. 💸 #DataBreach #CustomerProtection #RokuSecurity 🤔 Are you a Roku user? Have you enabled 2FA on your account yet? If not, you'll be prompted to do so the next time you log in online. 🔐 Share your thoughts on this mandatory security measure in the comments below! 👇 #2FAMandatory #RokuCommunity #CyberAwareness Remember, using strong, unique passwords and enabling 2FA across all your accounts is crucial in today's digital landscape. 💪 Stay vigilant and protect your personal information! 🛡️ #CyberSecurity #PasswordSafety #StaySafeOnline — This summary was AI generated. If there are any issues with it, please call it out 😎 Thanks Ben. — https://lnkd.in/g-aG-uHs

2

From my experience: if any organization is satisfied with its cybersecurity posture, that's a valid sign that this company will be hacked soon. And you can see it in publicly available cases: - Pavel Durov, CEO of Telegram, to Tucker Carlson: (free citation) "Cybersecurity is not that important, just ignore the threats". Same month - Remote Code Execution in Telegram client because of developer's typo.  - Mykhailo Fedorov, Minister of Digital Transformation in Ukraine: "The role of cybersecurity is slightly overrated". This was said publicly in Dec 2019. In around six months, in June 2020, the digital signing mechanism was broken ("Case of Ryaboshapka # 2"). Nuff said cyber breaches had mushroomed in Ukraine after Feb 2022. I'm proud of my clients who still stay strong. But, I digress.  - WhatsApp: "We are secure by design". How about RCEs in video calls, particularly CVE-2019-3568, which was actively exploited in the wild? WhatsApp probably tried to say that they are private by design, but privacy and security are completely different ideas. We can never be satisfied with the results in cybersecurity, because cybersecurity is always process-oriented in its nature. #cybersecurity #hacking #penetrationtesting #appsec #devops #cyber #infosec

13

4 Comments

TCP issue #44 is live! 🎉 The weeks leading up to RSA and BlackHat always feel like the trade deadline, draft season, and the playoffs all in one if you're building security products lol As a product builder, keeping a pulse on the latest product releases and emerging startups is crucial. It's a major reason why I write The Cybersecurity Pulse (TCP). That said, huge thanks to product and engineering teams working around the clock to build products that move the security industry forward and make society safer. I'm excited to see what's new at RSA next week! Before that though, let's take a look at all the product, funding, m&a, and industry activity that's taken place over the past couple of weeks including: 💠 Verizon 2024 DBIR is out. Shoutout to Kelly Shortridge for the tl;dr! 💠 Out of stealth ➡ Deep Instinct (Predictive protection), DeepKeep (security for AI), Prophet Security (AI for SecOps), Amplifier Security (data fabric for workforce security) Rony Ohayon, Kamal Shah, Lane Bess, Shreyas Sadalgi 💠 Binary Defense adds deception technology + AI-powered threat detection to its BDVision product 🔥 David Kennedy 💠 Dropzone AI raises $16.8m series A. Best SOC AI staff augmentation player, imo. Kudos Edward Wu! 💠 RunReveal releases correlated alerting + raises $2.5m seed. Kudos Evan J Johnson! 💠 Nagomi Security emerges from stealth w/ $30m through series A + with $1M/ARR 🤯 💠 Part II of Monad's Data Engineering for Cybersecurity blog series ⛽ 💠 BalkanID releases identity security copilot. Sameer Sait 👌 💠 More product news from JFrog, Aqua Security, Orca Security, GitLab, Snyk, Tenable, CrowdStrike and many more. 💠Traceable API Security raises $30M Tyler Shields + VulnCheck raises $8M seed Patrick Garrity 👾🛹💙 💠More funding news from Island, Corelight, ThreatLocker, Oasis Security, Sublime Security, Apptega and many more. Adrian Sanabria, Tyler Shields, and I will be covering much of this in-depth on tomorrow's Enterprise Security Weekly Productions episode so keep an eye out for that! 📰 Newsletter issue in the comments! Let me know if you have any feedback, questions or would like to discuss smthn I covered. Always happy to chat product, security, and startups!

73

1 Comment

The buzz around containerization and microservices architectures is well-deserved. As highlighted in my recent interview with John Verry of The Virtual CISO Podcast: https://lnkd.in/eRjq-mtc, these approaches are fundamentally changing how we build and deploy applications. By breaking down monolithic applications into smaller, independent services, containerization ushers in an era of unprecedented scalability, agility, and resilience. But what does this mean for the future of application development? Here's my take: ➡ Rise of the Microservices Architect: The ability to design and manage these distributed systems will become a critical skill for developers. We'll see a surge in demand for microservices architects who can orchestrate these intricate service interactions. ➡ DevOps Transformation: The siloed approach of development and operations will continue to crumble. DevOps engineers who understand both sides of the coin will be highly sought-after to ensure seamless development, deployment, and management of containerized applications. ➡ Focus on Automation: Automation will be key to managing the complexities of containerized deployments. Proficiency in tools like Kubernetes and container orchestration platforms will become a must-have for DevOps teams. By embracing these trends and fostering the right skillsets within our teams, we can unlock the true potential of this transformative technology. #Kubernetes #KubernetesSecurity #DevSecOps #Containers

51

1 Comment

CBS' 60 Minutes had a great piece about Scattered Spider last weekend but neglected to share insights on preparing for such attacks. Breaches are inevitable but organizations are often unaware of the tools available for effective incident response - like out-of-band communication (and no not all options are created equal...more on that later) In its statements on how to deal with Scattered Spider in the wake of the very same MGM hack covered in the piece, Microsoft clearly stated -- "Using out-of-band communication channels is strongly encouraged when dealing with this threat actor." Why? Because it's hard to be sure the adversary is truly out, when they're listening in on all of your remediation discussions and staying a step ahead as you rebuild your systems. Taking secure comms out-of-band on an enterprise-grade solution is indispensable. https://lnkd.in/eDzHhTGw

24

3 Comments

In advance of the RSA Conference next week, today we launched Snyk AppRisk Pro, providing holistic, dev-first ASPM to AppSec teams worldwide, empowering them to prioritize critical issues and fix vulnerabilities faster. As highlighted in DevOps.com’s launch coverage, this new solution can trace insecure portions of deployed applications back to the specific code components to be addressed to fix the issue. Critically, Snyk AppRisk Pro combines this unique level of prioritization with proven dev-first tools for vulnerability prevention and remediation, all underpinned and enabled by AI. As Manoj Nair, our Chief Product Officer, stated: "Snyk AppRisk Pro provides AppSec teams with the birds-eye view they need to proactively drive remediation and prevention." Take a moment to read the full article from Michael Vizard, linked below. https://bit.ly/44lyD9r

230

2 Comments

Are you wondering how your application behaves in runtime — exactly which components are in use, how data moves within them, and what's truly vulnerable. Kodem provides an innovative way for Runtime intelligence letting you zero in on the right things, so you can improve performance, security, and compliance, minus the noise. This is a great discussion with Kodem’s own CEO and Founder Aviv Mussinger #podcast #cybersecurity #innovations

2

As a result of the recent AI hype, the internet has been flooded with a huge amount of content, and a lot of it is too high-level and lacks practical information. (Of course, there is also plenty of great content too) This video by Mark Russinovich from Microsoft Azure is a notable exception, providing down-to-earth insights into the latest AI threat landscape and many practical details on possible attacks. If you work in security or are involved in any AI-related activities, this video is a must! :) #AI #Security

24

No real surprise in this news, it was either a great bit of hype played by both companies or once Wiz looked under the bonnet of Lacework it figured out what the rest of us know. For more information on open positions, we are working on globally with our Portfolio Clients then contact Andrew Robinson FREC, louise robinson or Rebecca Beauchamp call us on +44 (0)1923 312435. Why not follow Paradigm Recruitment on: https://lnkd.in/gssS9BWN #paradigmrecruitment #hiring #careers #startup #recruitment #IPO #cybersecurity #cybercareers #cyberjobs #startupjobs #cloud #cloudsecurity #security #cloudsecurity #AI #Boiometrics #Analytics #MachineLearning #ThreatIntelligence #DarkWeb #IAM #PAM #CIAM

3

Of course GenAI boosts productivity - its one of the coolest things about it! But how are security leaders *actually* using it in their day-to-day? In an expert panel, our Field CTO and VP of Incident Response and Cloud Ops at Varonis discussed the different aspects of securing generative AI — from inception to executing a successful rollout, the how-tos of using gen AI internally, using AI for security purposes, and even how to secure data for training LLMs. Catch the full panel interview here: https://hubs.ly/Q02zSBT50

5

🚀 We're thrilled to welcome our newest partners to the Wiz Integration WIN platform! Illumio - Facilitates proactive mapping of misconfigurations and vulnerabilities to cloud object metadata, application deployments, and traffic flow telemetry data. This enables Zero Trust Segmentation policies, minimizing the attack surface and automatically containing potential breaches. Learn more: [JSB](https://lnkd.in/dNzCrZMQ) Harness - The first certify CI/CD platform to integrate with Wiz CLI, enabling developers/DevOps teams to prioritize and remediate vulnerabilities within the pipeline. Traceable - Provides a bidirectional flow of information where Wiz Issues are pulled into Traceable, and Traceable runtime events are pushed to Wiz cloud events. This empowers Infosec teams to assess and prioritize combined risks for applications and APIs in the cloud. DevOcean - Pulls Wiz Issues and vulnerabilities into DevOcean to automatically identify owners and streamline cross-tool, cross-team workflows for frictionless remediation, reducing costs and risk exposure. FireTail.io - Integrates Wiz inventory to run real-time checks on API Gateway resources in Firetail, combining infrastructure information with application-layer context for enhanced API security posture management. Panaseer - Uses data from Wiz and other tools to continuously monitor your security posture, prioritizing and actioning high-risk vulnerabilities to improve organizational security. Polarity - Connects to internal and external datasets to provide quick access to critical information from Wiz, helping analysts triage vulnerabilities, assets, and issues across platforms for better context. Tarsal - Sends Wiz audit logs to your chosen analytics destination in one click, providing visibility on Wiz activity in your SIEM, XDR, or storage locations to detect anomalous behavior. shockwave.cloud - Populates Shockwave with exposed resources discovered by Wiz's agentless scanning and inventory, focusing on DNS-related records to pair with DNS scans for comprehensive protection. Wabbi - Pulls the Wiz vulnerabilities findings into Wabbi and tracks them within the SDLC, associating incoming vulnerabilities with Wiz Projects to align with Wabbi Projects for continuous security. Welcome to the WIN! Together, we are enhancing cloud security and simplifying risk management. Let's win together! 🌐 💫 Special thanks to Daphna Dayan Annam Iyer and Shashank Golla for their exceptional contributions! #CloudSecurity #Wiz

420

26 Comments

Andrew Ng’s take on California's proposed law SB-1047 is spot on: “There are many things wrong with this bill, but I’d like to focus here on just one: It defines an unreasonable “hazardous capability” designation that may make builders of large AI models potentially liable if someone uses their models to do something that exceeds the bill’s definition of harm (such as causing $500 million in damage). That is practically impossible for any AI builder to ensure. If the bill is passed in its present form, it will stifle AI model builders, especially open source developers. Some AI applications, for example in healthcare, are risky. But as I wrote previously, regulators should regulate applications rather than technology. Technology refers to tools that can be applied in many ways to solve various problems.Applications are specific implementations of technologies designed to meet particular customer needs. Safety is a property of applications, not a property of technologies (or models), as Arvind Narayanan and Sayash Kapoor have pointed out. Whether a blender is a safe one can’t be determined by examining the electric motor. A similar argument holds for AI.” #publicpolicy #policy #ai #machinelearning #ml #compliance #technology #society #sb1047 #opensourcesoftware #oss

4

Trigger warning. This post is about usage-based pricing for security operations. Omer on Security is a safe space to discuss sensitive topics like this one. … … … ... Fears around the “pay for what you use” model are one reason more SOC use cases aren’t being migrated from Splunk to Snowflake. They also drive Anvilogic customers to use a managed Snowflake security data lake instead of bringing their own. This post puts those fears to rest and gives you the confidence to move from ingest-based to usage-based SOC data platforms. #securitydatalake

49

10 Comments