Adam Hall

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

Netography Fusion now supports Azure VNet flow logs--get the scoop on how we make your life easier if you're trying to monitor activity in a multi-cloud network.

6

If you are a user of Network Security Group flow logs in Azure Network Watcher, you should have received the email: "On 30 September 2027, network security group (NSG) flow logs in Azure Network Watcher will be retired." You’ll no longer be able to create new NSG flow logs starting 30 June 2025. What's your plan for uninterrupted monitoring? We've got your back. Netography® Fusion can monitor VNet flow logs in Network Watcher today. It also monitors NSG flow logs, ensuring a smooth migration. Fusion also monitors: - AWS VPC flow logs, AWS Transit Gateway flow logs - Google Cloud Platform (GCP) VPC flow logs - Oracle Cloud (OCI) VCN flow logs - IBM Cloud VPC flow logs - NetFlow v5, NetFlow v9, NetFlow v10 (IPFIX), sFlow Want to see how Fusion delivers a holistic view of all network activity? Check out our new free trial! https://netography.com/ #azure #nsg #vnet #gcp #flow

10

Enjoyed reading this post from CISA Director, Jen Easterly on the USDA's adoption of FIDO Protocols, referencing the CISA's publication from the 20th: "USDA’s success story should inspire all enterprises to migrate to FIDO authentication". Referencing the CISA publication: "Authentication technologies that do not involve FIDO or public key infrastructure (PKI)—a security framework based on public key cryptography—to support confidentiality and integrity will only continue to put organizations at risk by allowing malicious cyber actors initial access to their networks via credential phishing attacks."

1

🔎 Being open source-based, Sysdig takes transparency seriously. I see this in the product and our leadership! This is why I wasn't surprised today to see a blog on how Sysdig Sage was designed. 🤔 Multi-step correlation 🤔 Contextual awareness 🤔 Guided response 𝗛𝗼𝘄 𝗶𝘀 𝗶𝘁 𝗽𝗼𝘀𝘀𝗶𝗯𝗹𝗲 ⁉️ Dive into this great blog from the engineering team to find out! 🔗: https://okt.to/Dcj39y

9

Utilities, pharmacies, other core components of the life we live are under attack daily and sustained predictable #MDR essential to keeping us safe and secure. CyberMaxx helping out clients here every day

4

For far too long we’ve “one sized” access across multiple resource types - often granting far too much access to users to try to remove friction from our business. But we should be able to provide the RIGHT amount of access at the RIGHT time. Here Justin McCarthy - our co founder and CTO - explains how StrongDM can “right size” the authentication process to step up access when needed whilst introducing just enough friction for the task at hand. All within the confines of the industrys most open and powerful PAM infrastructure. Do things differently and get different results…

19

1 Comment

Unveiling the 2024 Software Supply Chain State of the Union: From Innovation to Infiltration In the realm of rapid digital transformation, the importance of robust software supply chain security has never been more evident. At JFrog, we've delved deep into today's software ecosystems with our 2024 State of the Union report. Download the full report for critical insights: https://jfrog.co/3TzsVNg Key Takeaways: - The Surge of Open Source: In 2023, the open source supply chain experienced significant growth, introducing hundreds of thousands of new packages. - Revisiting CVE Severity: JFrog Security Research team found that 85% of Critical and 73% of High CVEs were overstated in severity, reshaping organizations' remediation strategies. - The Dominance of Established Technologies: Maven, PyPI, NPM, and Docker remain vital in producing production-ready software despite technological advancements. - Security in the Limelight: Adoption of security frameworks like OpenSSF or SLSA is mainstream, but fragmented security tools are consuming a quarter of development teams' time monthly. - Underexplored Risks in AI/ML: Organizations are focusing on minimizing risks in AI-driven environments, rigorously reviewing the security compliance of open-source ML models. As software supply chains grow more intricate, a strategic approach to security is crucial. Organizations must streamline security tools and prioritize context-aware threat remediation to protect their operations. Let's tackle these challenges together, optimizing defenses for a secure software supply future. #JFrog #SoftwareSupplyChain #Cybersecurity #AI #MachineLearning #DevOps #DevSecOps #SecurityFirst #MLOps

17

Are you coming to RSA Conference? If so, join us at SCW Coffee Shop! Bluestone Lane SOMA Coffee Shop 55 2nd St, San Francisco, CA 94103 On May 6th | 12:30PM PST. Join Secure Code Warrior CTO & Co-Founder, Dr. Matias Madou, Jeffrey Martin from Mendio, John B. Dickson from Lasithi Security, and Viswanath S Chirravuri from Thales Digital Identity and Security to learn about: Incredible techniques for winning over developers and helping them prioritize security The challenges in measuring security skill development, and how to overcome them Why a developer-centric ‘Trust Score’ could be the missing piece of the compliance puzzle for every top organization and can unlock the benchmarks needed to reach new levels of risk reduction in code. https://lnkd.in/gMzG2WuJ

12

We have to get smarter about what we do with our data. This is a great article explaining why and existing ways that service providers and resellers can be instrumental in helping companies be more efficient and avoid unnecessary carbon while exceeding backup security.

13

🚨Introducing the industry’s first Runtime security solution enabling enterprises to seamlessly integrate security into every step of the development process, from writing source code to deploying binaries into production. JFrog Runtime enables Security, R&D and DevOps teams to effectively monitor Kubernetes clusters, quickly identify and remediate vulnerabilities, and ensure the integrity of images running in production. It tackles the critical challenge of securing applications in production by focusing on what matters most: real-time visibility into runtime vulnerabilities, and addressing risks that are critical, applicable, and running. Enterprises can shiftleft & right simultaneously, helping developers save time with quick threat detection and risk remediation. Learn more: https://jfrog.co/4dVFudB #Jfrog #Devops #DevSecops #Runtimesecurity #Cybersecurity #SSC

12

Power up log searching in SolarWinds Observability with new features for reverse tail, API & permalinks. #observability #logmanagement

3

I'm not technical but I know I'm using more and more apps and other 'stuff' on my phone all the time, so imagine how much technology is being used incrementally at work. More databases, systems, apps, equipment etc that all need looking after so that they don't cause you problems and someone from the outside world doesn't get in. #AI's a hot topic but even that at base level is another piece of software that needs protecting, monitoring, feeding and watering on a day to day perspective, so what do we do? These new solutions are not going to slow down any time soon. My advice - take a serious look at Splunk Observability Cloud as this will allow you to cut through the complexity of modern applications etc and see everything in one place. The solution to bring all solutions together so that you can see everything, silos or otherwise. Have a look at this short video which will provide a visual explanation, then call me: #splunk #observability #customerfirst #futureofwork #ai #togetherness https://lnkd.in/eDiyBzJv

6

⚡ Cybersecurity threats are evolving fast! To stay ahead, organizations must embrace new security approaches involving fresh strategies, technologies, and a cloud-ready mindset. 🌐 Enter MITRE ATT&CK — the ultimate guide for security practitioners packed with invaluable insights into attacker techniques and behavior. Pretty handy, right? 💡 Sysdig's eBook show you how to identify and defend against common threats to #AWS environments using open-source Falco rules mapped to the ATT&CK framework. Boost your #AWScloud security and tackle any threat head-on by giving it a read today:

3

If it’s true that Thoma Bravo is once again exploring a SailPoint IPO, a few things need to happen for the exit to succeed. On the surface, this move seems like it's defying the odds for a normal four-to-seven year private equity holding period. It's defying the odds of the current IPO window, too. There hasn't been a traditional IPO for a pure cybersecurity company for over 1,000 days (and counting). Current market conditions are anything but favorable, at least for anyone other than the crème de la crème of the IPO pipeline. SailPoint is anything but typical, though. I'm not convinced they even needed to go private in the first place, but here we are. News of an impending IPO is exciting to anyone who (a) likes SailPoint, and (b) wants this IPO drought for our industry to end. This is far from a done deal, but it's credible enough to do some educated speculation about what it might take for SailPoint to go public again and stay there this time. My latest article is about the metrics, narrative, and alternatives that could lead to a second SailPoint IPO. You can read more by following the link on my profile.

37

4 Comments

A San Jose night full of good stories, laughs, and all things data security. Go beyond visibility, get the security, governance, and privacy outcomes you need with Varonis! Bo Lambert Cody Normyle Catherine Johnson Brian Vecci Inessa Rozenberg Alex Weber #varonis #datasecurity #dspm #datasecurityplatform

89

"At Google, we take these risks seriously, and we’re taking steps on multiple fronts to address quantum computing risks. We began testing PQC in Google Chrome in 2016, we’ve been using PQC to protect internal communications since 2022, and we’ve taken additional quantum computing protective measures in Google Chrome, Google servers, and in experiments for connections between ChromeOS & Chrome Enterprise and Google products (such as Gmail and Cloud Console.)" https://lnkd.in/gtd7yEnt

34