Oren Elimelech

DONE. 🔐 **Empowering SMBs, MSPs, and MSSPs in the Cybersecurity Arena!** 🔐 🌐 On the verge of reaching **10,000 professional connections**, I am eager to forge ties with specialists and aficionados in **Information Security, Business Management, Marketing, and Investment**. 📈 💼 Fueled by a zeal for **Science, Blockchain Technology, Cryptocurrencies** such as Bitcoin and Ethereum, and traditional investments like **Gold and Stocks**, I'm a staunch advocate for collective growth and wisdom exchange. 🤝 🛡️ Specifically, I have a strong commitment to supporting **Small and Medium-sized Businesses (SMBs)**, **Managed Service Providers (MSPs)**, and **Managed Security Service Providers (MSSPs)**. By sharing insights on risk management, tailored security strategies, and innovative business solutions, we can elevate our practices to new heights. 🚀 🤖 Whether you're an established expert or an inquisitive newcomer in these sectors, let's unite and unlock the full potential of our industries! Extend an invite and let's delve into **cutting-edge innovations, robust security measures, and the latest market dynamics**. 🌟 #Cybersecurity #BusinessGrowth #MarketingStrategy #InvestmentInsights #BlockchainEvolution #NetworkingGoals #10KConnections #SMB #MSP #MSSP

5

4 Comments

"With great power comes great responsibility." - Uncle Ben A few months ago, I received a call from a dedicated member of OTI - The Israeli Autism Association. They had noticed suspicious activity in their email system and had heard about OP Innovate's Digital Forensics and Incident Response (DFIR) services. Without hesitation, Omer Pinsker, Ben B., Mickey Alton, and I decided to help. In our free time, we thoroughly investigated the situation to ensure the organization's data was secure. We also conducted a penetration test to confirm that the attacker would not find another way in. It's infuriating to think someone would target a non-profit organization that supports autistic children. If I could, I would confront the attacker personally for attempting to harm such a noble cause. At OP Innovate, we always stand by those who need cyber protection the most. If you are a non-profit organization facing cybersecurity challenges, feel free to reach out to me on LinkedIn. #CyberSecurity #PenetrationTesting #DFIR #NonProfitSupport #OPInnovate

45

1 Comment

If you're interested in how a threat researcher from the Israeli NSA approaches SaaS Security, this is worth the short read. Nicely written, Tamar Cohen! #saassecurity #AIsecurity #Unit8200

11

Security and Network Reporting with Cato Networks In this video learn how to use Cato Networks' reporting capabilities to provide comprehensive insights into network performance, security, and usage. The platform offers real-time analytics and detailed reports on network traffic, security incidents, application usage, and user behavior. These reports are customizable and accessible through a user-friendly dashboard, enabling IT teams to monitor and optimize network operations efficiently. Key features include historical data analysis, alerting mechanisms, and compliance reporting, all designed to enhance network visibility and proactive management. https://lnkd.in/giU7Dq9g

14

𝗚𝗲𝘁 𝗮 𝗖𝗼𝗺𝗽𝗹𝗶𝗺𝗲𝗻𝘁𝗮𝗿𝘆 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗔𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗧𝗼𝗱𝗮𝘆! We are currently offering a no-obligation assessment, including 30 days of continuous monitoring against active abuse of privileges and paths to privileges. There are many already taking advantage of Identity Security Insights, and now is your chance to see it in action. With this complimentary assessment, you'll: 🚀 Get up and running in less than an hour 🔎 Gain actionable findings with rich context in 24 hours 🔒 Proactively harden identity security posture Users will uncover and understand all identities, entitlements, configurations, and paths to privileges that attackers could exploit across on-premises, cloud, #SaaS, and IdPs. Learn more in the video below, and request more information today. https://lnkd.in/eVZPqA9M #IdentitySecurityInsights #InsightsAssessment #IdentitySecurity #Cloud

5

Your Security Operations Center (SOC) may be facing challenges I know inside and out. As the former Deputy Director General of the Israeli National Cyber Directorate (INCD), I was until recently in charge of leading the national operational posture and the Israeli National CERT. Now on my way to RSA, I can’t wait to share our new platform with fellow attendees. It just launched. It was built for SOC teams and leadership by expert, senior SOC and IR analysts who experienced the challenges we solve firsthand. Our work at Cyngular Security is truly remarkable, and I am proud of all our team has done to achieve it. Let’s connect there if you’re curious about our team’s groundbreaking work. Visit our website and request a demo to learn what THIRDhub is, why it is unique, and how it's going to dramatically enhance your Security Operations Center. If you can't make RSA, read more about THIRDhub in this article: https://lnkd.in/e9RBAeh9 #Cybersecurity #CloudSecurity #cloud #Cyberattack #MSSP #CloudIR #CIRA #CloudThreatHunting #ClouDFIR #CloudIR #DFIR #RSA #RSA2024

58

5 Comments

Discover Cutting-Edge Israeli SIEM/SOC Solutions Israel's Security Information and Event Management (SIEM) and Security Operations Center (SOC) solutions are at the forefront of cybersecurity innovation. Known for their advanced capabilities, these solutions are pivotal for organizations aiming to bolster their security measures. Israeli SIEM solutions excel in real-time security alert analysis, offering comprehensive visibility into IT environments to swiftly detect and respond to threats. Why Israel? Israel stands as a global cybersecurity hub, hosting over 400 R&D centers of major international companies and boasting more than 300 active cybersecurity firms. With annual exports totaling $3.5 billion and a 5% share of the global market, Israel is second only to the U.S. in this field. The nation's unique culture of entrepreneurship and innovation propels its leadership in cybersecurity advancements. Read more: https://lnkd.in/dz5B9C3h Foreign Trade Administration - Ministry of Economy & Industry #soc solutions #SIEM #Cybersecurity

3

2 Comments

Great to know to protect! Threat Actor in Focus - Emerging Threat: Void Manticore’s Destructive Cyber Campaigns Targeting Israeli Organizations Threat Actors: Void Manticore Attack Type: Public-facing web server Objective: Espionage Target Technology: Windows Target Geographies: Israel Target Industries: Government & Critical Infrastructure Business Impact: Data Loss, Data exfiltration

1

🛡️GYTPOL 2.0 Live Event is coming, Sunday June 16th! GYTPOL, one of Israel 🇮🇱 leading cyber companies, and a world leader in Endpoints Misconfiguration Security technology, is bringing together users and information security leaders from across Israel for an incredible day of learning and networking. Enjoy expert lectures, cyber success stories, a GYTPOL 2.0 walkthrough, professional panel, entertainment, and giveaways. I'll be moderating the event, as well as CISOs panel on "Balancing Business Continuity and Security," diving into the key components of scalable security across various sectors like healthcare, manufacturing, finance, and public. We'll explore how to weigh threat risks against operational disruption and resource constraints.  Our esteemed panelists include: Haim Inger - Clal Insurance & Finance- כלל ביטוח ופיננסים Avivit Kotler, - Clalit Health Services Alberto (Deto) Hasson - ICL Group Roy Avrahami - Ashdod Port Company Chen Amram - EL AL Israel Airlines 👉Register here: https://lnkd.in/djnns3UW Don't miss this opportunity to level up your cybersecurity game. See you there, cybersecurity champions! Don't Hesitate, Accelerate!!!🚀🚀🚀  Tal Catran Startups & Accelerators GURU Tal Kollender Gilad Raz Yakov Kogan Snir Cohen Ilan Mintz Orya Shemer Mor Bikovsky #cybersecurity #cyberthreats #businesscontinuity

32

2 Comments

What are the three main ways that companies typically get infected with a ransomware operation? If an organization has not yet had to deal with a ransomware campaign, it’s likely a question of when, not if. Hear from Keren Elazari, Global Cybersecurity Expert and Friendly Hacker and watch the full conversation here: https://bit.ly/4a956kx

5

Cato CTRL, the CTI group in Cato Networks, just released its “Cato CTRL SASE Threat Report for Q1 2024” showing how: ✔️ Enterprises are too trusting within their networks. ✔️ AI takes the enterprise by storm. Look at who places third!   ✔️ Zero days are not the biggest security problem. ✔️ Many cyber threats are industry specific. Here’s what it means for you 👉 https://okt.to/KhZrQB #Cybersecurity #SASE #AI

7

Redefining your SOC 💡? Upgrading your platform ?👨‍🔧 Heimdal® version 4.2.0 contains a number of key changes to our platform that will allow you to scale your ms(s)p with us or scale your own business within the Heimdal platform Why is that important: - more economy of scale - less internal and overhead - more billable hours Not every time platform changes your business effectiveness. This one does.

24

1 Comment

Down in One "Rapid7’s vulnerability research team analyzed CVE-2024-4040 and determined that it is fully unauthenticated and trivially exploitable; successful exploitation allows for not only arbitrary file read as root, but also authentication bypass for administrator account access and full remote code execution. Successful exploitation allows a remote, unauthenticated attacker to access and potentially exfiltrate all files stored on the CrushFTP instance. See Rapid7's full technical analysis of CVE-2024-4040 in AttackerKB for additional details. Code that triggers the vulnerability is publicly available as of April 23. CVE-2024-4040 was added to the U.S. Cybersecurity and Infrastructure Agency's (CISA) Known Exploited Vulnerabilities (KEV) list on April 24. Although the vulnerability has been formally described as an arbitrary file read, Rapid7 believes that it can be more accurately categorized as a server-side template injection (SSTI). CVE-2024-4040 was exploited in the wild as a zero-day vulnerability, per private customer communications from the vendor and a public Reddit post from security firm CrowdStrike. Using a query that looks for a specific JavaScript file in the web interface, there appear to be roughly 5,200 instances of CrushFTP exposed to the public internet." Like this? Subscribe to Cyberwarfare, Espionage & Extortion for more: https://buff.ly/3tXXx16

1

For those waiting for the FAR update regarding #ssdf attestations... The latest Open FAR Cases report shows on May 30th Case Number 2023-002, Supply Chain Software Security, that OMB identified draft proposed FAR rule issues. OFPP, FAR and DAR staff are now working to resolve those issues. It is my understanding that this work remains opaque, and that there was no public disclosure of precisely what issues OMB identified with the proposed FAR rules relating to supply chain software security. Regardless of the status of Case 2023-002, the GSA is now requiring #ssdf attestations for anything it buys that contains software as of this past Monday morning when the government opened for business. GSA quietly updated GSA Form 7700 last month to take advantage of the CISA standard form's disclosure that "Agency-specific instructions may be provided to the software producer outside of this common form." GSA Form 7700 form has two checkboxes on page 3: Option 1: Submit the attestation online at the Cybersecurity and Infrastructure Security Agency Repository for Software Attestations and Artifacts (RSAA) portal. Option 2: Only use GSA Form 7700 submit it to a GSA specific email account. What this means to me is that if Option 1 is checked then Form 7700 is effectively a trigger mechanism for GSA to go lookup an existing attestation in RSAA. However, if Option 2 is checked, it would be interesting to know if GSA is taking that PDF and entering it into RSAA on behalf of the vendor. Option 2 also implies that a vendor may not have to attest multiple times for the same software product/version, but seemingly will have to submit multiple disparate forms to each part of the government. As we continue to see discussion about harmonizing #cybersecurity regulations, this is a great example where the government could have simply mandated using CISA RSAA. Instead, vendors will find themselves having to report using GSA Form 7700 for something through a GSA contract vehicle, and speculatively, a different form through NASA SEWP, and a different form for Dept of State, and different form for.... https://lnkd.in/eEDA-S8F If you haven't started to get serious about #software provenance ahead of the all-of-government mandate coming in September, now is a great time to start evaluating your #devsecops policies and procedures!

31

1 Comment

⚡ Cybersecurity threats are evolving fast! To stay ahead, organizations must embrace new security approaches involving fresh strategies, technologies, and a cloud-ready mindset. 🌐 Enter MITRE ATT&CK — the ultimate guide for security practitioners packed with invaluable insights into attacker techniques and behavior. Pretty handy, right? 💡 Sysdig's eBook show you how to identify and defend against common threats to #AWS environments using open-source Falco rules mapped to the ATT&CK framework. Boost your #AWScloud security and tackle any threat head-on by giving it a read today:

3

Meet with us during RSA Conference and learn how AI-Powered Deception can help with early detection cyber attacks with precision. No false positives!!! 🔒 With traditional cyber defense, You, the Defender, must get it right all the time, but the threat actor needs to be right only once to compromise your critical assets. 🔑 Deception turns this asymmetry on its head to your benefit – with deception, the bad guy must be wrong only once to get caught. ✅ There are many use cases for Deception Technology. Our customers are using it for Advanced Threat Defense, Zero Days, Ransomware Protection, OT Security, Active Directory Protection and Identity Threat Detection and Response (ITDR). They are using it to accelerate their Zero Trust deployment. Suresh (Surra) Yanamadala Raj Gopalakrishna Suril Desai Chad Scrupps #CyberDeception #IdentityProtection #Honeytokens #Ransomware #InsiderThreats #APTs #ITDR

20