Ed Sim

Join Wiz and HashiCorp to learn how to use #Terraform run tasks to help reduce risk by: -- Applying Wiz runtime security learnings earlier into the pipeline for a consistent security approach -- Developers and cloud teams can integrate security checks within their existing workflows -- Known misconfigurations and policies in Wiz are applied to block the release of infrastructure at risk Register for the webinar here: https://bit.ly/45R3Zpa

87

1 Comment

Industry research shows 1 in 5 applications contain runtime exposure, with 20% of apps having high, critical, or apocalyptic issues during the execution stage. By automating #security for fast-moving, dynamic apps like those that run in #containers, JFrog Runtime addresses the unique visibility and insight needs of cloud-native environments: https://jfrog.co/3THB7Lp

95

Jai Vijayan, Contributing Writer to #DarkReading reported today that, "the recent attacks on customer accounts hosted on the #Snowflake data warehousing platform could signal a broader shift among threat actors to targeting software-as-a-service (SaaS) application environments." He goes on to highlight a new #Mandiant report highlighting "another large threat actor that has begun going after enterprise data in #SaaS applications in a broadening of its usual focus on #Microsoft cloud environments and on-premises infrastructure." The threat landscape is changing. The combination of stolen credential abuse and most enterprises' lack of visibility into their SaaS and #cloud environments is opening new pathways for bad actors to steal data. Reach out if you would like to talk to an expert about Reveal Security's unsupervised ML-based threat detection solution for SaaS and cloud. Read the full article here: https://lnkd.in/eWTrDUrf

7

CISO Spotlight: Uri Fleyder-Kotler 💡 Uri uses Myrror within his organizations to not only prioritize and fix vulnerabilities but also to protect against CVE-less supply chain attacks. Get in touch to learn more about our detection, prioritization, and remediation technologies 📥

37

1 Comment

NAVER Corp' NAVER Cloud launches NAVIX, a free enterprise Linux OS built on OpenELA. It powers 15% of NAVER's infrastructure and targets enterprise stability concerns. #OpenSource #Cloud #TechNews Link: https://lnkd.in/gFnHzfbp

3

Okta has issued a warning that its Customer Identity Cloud (CIC) feature is being targeted in credential stuffing attacks. These attacks, identified starting on April 15, 2024, are specifically aimed at endpoints utilizing CIC's cross-origin authentication feature. 🚨 Okta's Cross-Origin Resource Sharing (CORS) feature allows customers to integrate JavaScript into their websites and applications to send authentication requests to the Okta API. To enable this, customers must grant access to specific URLs for cross-origin requests. However, Okta has found that these URLs are now being targeted in credential stuffing attacks and recommends disabling them if they are not in active use. ⚠️ The company has proactively notified affected customers, providing guidance on how to secure their accounts. Okta advises administrators to check logs for 'fcoa,' 'scoa,' and 'pwd_leak' events, which indicate cross-origin authentication attempts and potential login attempts using leaked credentials. Given that the suspicious activity began on April 15, Okta urges customers to review their logs from that date onwards. 🔐 Read more 🔎>> Link in the comments  #CyberSecurity #Okta #CredentialStuffing #Infosec #CyberThreats 

5

1 Comment

#ObservCrew, Anil just stumbled upon Ross Lazerowitz's post on emerging trends. In it Ross envisions an ELK-like stack built on open-source data warehouses. It's a thought-provoking idea, combining ELK's familiarity with modern warehouses' scalability but could our shard friends handle it. While it seems like reinventing the wheel, I wonder if there's untapped potential. What's your take, revolutionary or redundant? 🤔 Would you like to hear Ross's perspective on our podcast? https://lnkd.in/e_Qr9g8p #observability #opensource #innovation

3

When dealing with identity security - nothing is easy.

11

Upgrading to Okta #Identity #Engine (#OIE) continues! In Episode 2 of our "Demystifying Upgrading to OIE" series, we dive into The #Appendixes. Learn about essential resources, detailed guides, and appendixes that provide the supporting framework for a smooth upgrade. This episode covers the must-know technical insights and documentation that can be game-changers for your OIE journey! Check out Episode 2 here: https://bit.ly/48pBiRq

6

All-in-one cloud security platform Wiz just raised a billion dollars at a $12B valuation. While the company clocked $350M in annual revenue last year along with a 69% YoY growth in headcount, it might have to start looking outside via strategic acquisitions to fuel the next phase of growth. And Wiz has already kicked it off with some big moves – it acquired Gem Security (acquired by Wiz) for reportedly $350M and was aiming to buy Lacework, although the deal eventually fell through. We at Crustdata have a database of thousands of cybersecurity companies and we tracked down the fastest growing companies in the space. We also used the data to predict Wiz’s next few acquisitions: 1. HiddenLayer: Co-founded by Chris Sestito, James Ballard & Tanner Burns, HiddenLayer is a provider of security solutions for machine learning algorithms and models for enterprises.   2. Timus Networks: Founded by Tugrul Tekbulut, Timus is a platform that secures the workspace by connecting employees, devices and applications and protects against ransomware/malware and web-based threats. 3. BluSapphire: Founded by Kiran Vangaveti, BluSapphire is an unified cyber defence platform powered by Machine Learning and analytics. It comes with intelligent response automation to detect any malicious activity well in advance. 4. SecurityPal: Founded by Pukar C. Hamal, SecurityPal is a platform for completing the security review so that companies can put the focus back on revenue and product building. 5. Securden: Co-founded by Bala Venkatramani & Kumaran Balan, Securden is a windows privilege management software that helps organisations prevent malware, insider threats, and cyberattacks using ML & AI. 6. Spec: Co-founded by Bryce Verdier, Nate Kharrl & Patrick Chen, Spec is a no-code orchestration platform that helps brands collect and activate real-time customer data to provide better online experiences. 7. SpecterOps: Co-founded by David McGuire, Jason Frank & Raphael Mudge, SpecterOps is a cybersecurity company that provides services and training solutions to help enterprises defend against advanced cyber attacks. 8. Wallarm: Co-founded by Ivan Novikov & Stepan Ilyin, Wallarm is a provider of end-to-end security for APIs, microservices, and serverless workloads running in cloud-native environments. 9. Bemo: Co-founded by Bruno Lecoq & Joel Lachance, BeMo helps small or medium-sized organisations to securely conduct business digitally. 10. Elastio: Co-founded by Najaf Husain & Adam Nelson, A data protection platform reduces operational risks in the cloud caused by ransomware, application failures and mistakes. If you want to read about how Wiz’s recent fundraise will affect the cybersecurity industry, find the link to our detailed newsletter in the comments covering the industry as well as Wiz’s next acquisition targets. #cybersecurity #fundraise #acquisitions

103

7 Comments

💡Separating authentication and authorization to eliminate standing entitlements and privileges associated with logins 💡   Identity and credential-based attacks would be less effective if those credentials don’t inherently have permissions attached to them.   Great insight and further reading:

2

The latest release of qashqade is live, giving more power to GPs, LPs and fund admins: ✅ Introducing GP Proceeds to the GP Carry module ✅ Accelerate realized waterfall config ✅ Even faster data prep ✅ OKTA single sign-on now available Plus the usual host of security and performance upgrades. All the details ➡️ https://lnkd.in/gikeYXfB Book a demo with our team today. Better outputs, better outcomes. #privatemarkets #privateequity #saas #privatecapital #waterfallcalculation #privatedebt #privatecredit #alternativeinvestments #carriedinterest

12

☁ As organizations shift to cloud-native environments, robust secrets management becomes critical. In a recent episode of "Taking Stock," Trinity Chavez, Lead Anchor of NYSE TV, interviews Oded Hareven, co-founder and CEO of Akeyless Security. Oded discusses how machines, now more numerous than employees, hold secrets that need protection. He explains how Akeyless Distributed Fragments Cryptography (DFC) secures these secrets without ever combining encryption key fragments. Akeyless offers an all-in-one, unified secrets and machine identity platform that addresses current and future needs, providing immediate value with low infrastructure footprint. Discover how Akeyless is a game-changer in machine identity management. 👉 https://www.akeyless.io/ #Cybersecurity #CloudSecurity #SecretsManagement #MachineIdentity #Akeyless

32

1 Comment

One of of Material’s power users, Aaron Clukey, Director of Information Security & IT at Alto, said it perfectly, “Material Security + FIDO2 Step-up authentication = Fort Knox Inbox” 🔐 In our latest case study interview with Aaron, we dive into how their team: ⚡ Ditched the SEG for API-based empowerment 🛡️ Seamlessly added MFA protection for sensitive financial and customer data 🧘🏻‍♂️ Achieved peace of mind with less dashboard fatigue Watch the full video here ➡️ https://lnkd.in/g6PFTTQA

62

2 Comments

MetaDefender Software Supply Chain v2.2.0 now integrates with JFrog Artifactory, empowering businesses to secure their CI/CD pipelines as software development stacks become more complex. Learn more: https://lnkd.in/eTcVVuMQ

18