Dan Freedman

SaaS DLP is important. Checkout the recent case at Disney. Metomic can help avoiding this risk. "Claims state that Nullbulge accessed Disney's Slack server and collected information about the company's upcoming projects, including concept art for Disney games. These reports also suggest that login details and personal details of workers were gathered." #SaaS #cybersecurity #dlp #slack

19

🚨 Colorado has passed an AI consumer protection bill (SB24-205). If signed by the Govenor, consumers would gain new AI rights (starting in 2026). The bill requires developers and deployers of high-risk systems to take reasonable care to avoid algorithmic discrimination. The bill sets up a "rebuttable presumption" that reasonable care was taken by a developer and deployer if they take certain actions, including performing impact assessments, providing notices, performing regular reviews of the system, and providing data subject rights (like the right to correct incorrect information) (amongst other requirements). https://lnkd.in/gYWwAHYc

11

Infostealers are all over your feed? might stay this way for a while, take a chance to learn about them with a super easy & fun webinar we did a while back

13

So many breaches in 2024 started with simple Infostealer credentials —  Brilliant overview about Infostealers, with real breach examples, totally fun to hear & easy to understand:

10

This massive AT&T hack raises serious questions about the timing of the security breach disclosure. Why was such a significant vulnerability, affecting countless customer phone numbers, not reported earlier? In an era where data breaches can have profound implications for personal privacy and corporate integrity, timely transparency is crucial. The delay in reporting undermines trust and hampers customers' ability to protect themselves promptly. Companies must adopt a more proactive approach to cybersecurity, ensuring vulnerabilities are addressed and communicated immediately. The implications of this breach will likely unfold over time, but the immediate concern should be to reassess and strengthen reporting protocols. What measures are being implemented to prevent such delays in the future? #ZeroTrust #PINCommunityAdvocate

6

1 Comment

Read the customer story to learn how eSentire MDR delivered superior visibility, correlation, and protection from cloud-specific threats, 24/7 detection, and expert support that enabled Venerable to stay ahead of cyber threats. DM us to discuss how eSentire can help your organization achieve comprehensive threat response, visibility improvement and endpoint protection. @eSentire

1

We are pleased to announce that TXOne has just completed a round of financing, raising a total of $51 million in this extension round of Series B, bringing the total Series B funding to $131.4 million. We are grateful for the investors' recognition of TXOne's vision and execution capabilities. TXOne believes that to excel in OT cybersecurity, it is crucial to protect the mission-critical assets there. Only by truly understanding and adapting to the unique constraints and requirements of OT operations in different vertical industries can we effectively address the pain points of users. Our strategy is to collaborate with industry leaders from various sectors to identify and formulate the best practices for OT cybersecurity, ensuring the success of our customers. In addition to serving manufacturing industries such as semiconductor, automotive, pharmaceuticals, and food and beverage, which we have been operating for several years, we have also successfully expanded into critical infrastructure sectors such as railway transportation, oil and gas, power utility, and shipping. OT cybersecurity is a vast and challenging field. There is no shortcut to lowering the difficulty level; it requires understanding the nature of the challenges, developing effective solutions for customers, and continuously refining them. Only through constant practice can we reduce the difficulty, replicate, and scale the industry. We will continue our efforts and hope to receive your support. https://lnkd.in/gqBrAXa8

434

51 Comments

Are you wondering how your application behaves in runtime — exactly which components are in use, how data moves within them, and what's truly vulnerable. Kodem provides an innovative way for Runtime intelligence letting you zero in on the right things, so you can improve performance, security, and compliance, minus the noise. This is a great discussion with Kodem’s own CEO and Founder Aviv Mussinger #podcast #cybersecurity #innovations

2

[THREAT UPDATE] "We care much more about a device that is connected to another device than one that's not connected to anything because that's when the data exfiltration threat becomes real."  In this week's snippet video, CTO Dr. Brett Walkenhorst covers massive multi-channel demodulation. Check out the short clip from Brett below. https://hubs.ly/Q02vSZ8Y0

13

TAG Infosphere interviews BreachLock Founder & CEO, Seemant Sehgal in the TAG 2024 2nd Quarterly. Learn more about: - How an offensive approach to identifying and mitigating potential vulnerabilities in an attack surface produces better results - Enterprise demand for Offensive Security as a more continuous approach to safeguarding against evolving and expanding attack surfaces - The benefits of proactively identifying and monitoring potential attacker entry points in an enterprise’s digital environment with an offensive approach to Attack Surface Discovery Read the full issue at https://hubs.ly/Q02vK1gk0. #offensivesecurity #Pentesting #Cybersecurity

23

Introducing SentinelOne as the Distinguished Gold Sponsor of caisec '24! 🥇 SentinelOne leads the pack with its unparalleled cybersecurity solution that integrates AI-driven features for prevention, detection, response, and hunting across endpoints, containers, cloud workloads, and IoT devices within a unified autonomous XDR platform. With SentinelOne's innovative technology, organizations can effectively combat every attack at every phase of the threat lifecycle. SentinelOne Singularity - Elevating Enterprise Security from Edge to Edge. Experience a revolutionary platform designed to prevent, detect, respond, and hunt threats within the context of all enterprise assets. Uncover unprecedented insights, take command of the unknown, and accomplish it all at the speed of machine intelligence. Embark on an immersive journey into the cybersecurity domain at caisec '24, where the opportunity to foster strategic alliances with SentinelOne and industry luminaries awaits. Dive into the latest technological advancements, engage with thought leaders, and seize the chance to collaborate with the visionary minds shaping the cybersecurity landscape. Stay tuned for an upcoming stream of engaging updates - save the date and get ready for an exceptional event on 3-4 June 2024. Secure your participation at caisec '24 now: Register Now... https://lnkd.in/eYht6nyA #SentinelOne #Payments #Cybersecurity #Technology #caisec #InformationSecurity #DigitalTransformation #Africa #MiddleEast #Networking #DataSecurity #Ransomware #Phishing #EthicalHacking #CybersecurityAwareness #Malware #CloudSecurity #IoT #caisec24

6

Today, we announced our Series C funding and unveiled Zero Trust PAM to the world. Founded in Zero Trust principles and engineered to evaluate and govern every action—no matter how minor—PAM has been remade. Each command, query, or configuration change is evaluated in real time against dynamic policies that adapt to the context of the user, the sensitivity of the action, and the prevailing threat landscape. And that, my friends, is the future of PAM. It's a future we feel extremely bullish about. And we're not the only ones. With the support of our partners, StrongDM is taking Zero Trust PAM to a global scale with massive expansions in EMEA and APAC in 2024. First, thank you to our powerhouse investment partners Anchor Capital GP, Capital One Ventures, Cisco Investments, Frontline Ventures, Singtel Innov8, GV (Google Ventures), Sequoia Capital, and True Ventures. Now, let's get to work. May the best PAM win. Read about our Series C funding, global expansion plans, and Zero Trust PAM: https://bit.ly/4a813oy #ZeroTrust #PAM #identity #infosec #startups StrongDM

210

35 Comments

Falling in love with your own idea 💡💔 Brian Vallelunga joins Manoj Tandon on this week's episode of #SecurityConfidential. Brian is the Founder and CEO of Doppler, which is the first secrets management platform for developers. Doppler empowers tens of thousands of engineering and DevOps teams to seamlessly orchestrate, govern, and manage their secrets across environments at scale. Brian has been featured in Forbes 30 Under 30, worked at improving overall Safety at Uber, and has won multiple state-level science fairs. In this episode, they discuss: 🗣️ Building a successful company 🗣️ Killing Bad Startups 🗣️ Closing the gap 🗣️ Machine Learning and Quantum Computing See the comments for the 🔗's to this episode 👇 https://lnkd.in/geWb-WaH #CyberSecurity #InformationSecurity #CEO #DarkRhiinoSecurity

22

3 Comments

How is Tidal Cyber different from BAS tools? Read James Juran’s first blog on his thoughts on why BAS tools and Tidal both play a critical role in a mature Threat-Informed Defense program.

15

Simply patching isn't enough. Thorough remediation provides total control and elevates your security to a higher level. Register for the joint webinar by SecPod and Sonata Software, ''Remediation 2.0-Going beyond the temporary "Patch" band-aids,'' on July 10th at 3 PM IST. Gain insights into why advanced patch management is crucial for Enterprise IT teams to protect themselves from cyberattacks! Register here and secure your spot - https://lnkd.in/gzZzkayV Jagsir Singh Praveen Richard Sarala K Sharath Gowda Bise Gowda V #patchmanagement #secpod #sonatasoftware #itadmin

12

MyPOV: post cyber attack resiliency is the moat important strategy. Find out more from ⁦‪Chirag Mehta ⁦‪Constellation Research, Inc. With Pen and Paper in Hand, Car Dealers Improvise as Cyber Outage Persists

3

Venerable security analyst Jon Oltsik is back with a look at the massive changes in security operations happening in a feature at CSO Online. "Continuous detection engineering/detections as code are critically important. This process should be tightly coupled to ongoing red teaming with the goal of establishing a threat-informed defense guided by things like the MITRE ATT&CK framework." Sage advice that "CISOs should push back on closed vendor ecosystems or one-off vendor-to-vendor integration. This type of historical industry lock-in is at odds with current and future dynamic security operations systems." A few Black Swans taking flight that do exactly this right now.

5

1 Comment