Elad Yoran

The rise of AI, with tools like Google’s NotebookLM, is driving an incredible shift in how companies create and execute strategies. AI is no longer just about efficiency; it’s reshaping creativity, automating processes, and pushing boundaries in content creation and distribution. Imagine a world where AI handles your entire marketing plan—this is the future unfolding today.

6

1 תגובה

Access management is far more than a technical task—it’s critical for preventing real-world threats. In my latest analysis for ITtime by Geektime, I break down how expired access permissions nearly led to a disaster and why even QR codes can become security risks. #Cybersecurity #AccessManagement #ITSecurity #TechInsights

5

⚠ CYBERSECURITY HIGHLIGHTS FOR THE WEEK ⚠ Threat Actor in Focus - Emerging Threat: Void Manticore’s Destructive Cyber Campaigns Targeting Israeli Organizations Threat Actors: Void Manticore Attack Type: Public-facing web server Objective: Espionage Target Technology: Windows Target Geographies: Israel Target Industries: Government & Critical Infrastructure Business Impact: Data Loss, Data exfiltration Summary: Void Manticore (aka Storm-842) is an Iranian state-sponsored threat actor known for conducting destructive attacks on Israeli organizations and leaking information through the online persona ‘Karma’ (sometimes written as KarMa). These operations often target sectors such as government, finance, and critical infrastructure, aligning with Iran’s broader offensive strategy. The group employs straightforward and efficient techniques aimed at causing rapid and significant damage. Their operations extend beyond Israel, with attacks also reported in Albania, where they use the persona ‘Homeland Justice’ to leak stolen data. In Israel, Void Manticore is notable for utilizing a custom wiper named BiBi, after Israeli Prime Minister Benjamin Netanyahu. One common method Void Manticore uses to gain access to target systems is through internet-facing web servers like CVE-2019-0604, where they deploy web shells like the custom “Karma Shell.” This tool, disguised as an error page, can list directories, create processes, upload files, and manage services, using simple encryption methods like base64 and one-byte XOR for obfuscation. They have also been observed uploading a custom executable, do.exe, which checks for Domain Admin credentials. Upon successful authentication, it installs another web shell, reGeorge, indicating valid credentials. This suggests the initial access might be facilitated by another entity, possibly Scarred Manticore, a more sophisticated threat actor. Continue reading here ➡ https://lnkd.in/gvR_-7wt #CyberSecurity #Cyfirma #ETLM #externalthreatlandscape #ThreatIntelligence #CyberIntelligence #CYFIRMAResearch #malware #ransomware #threatactor #cybersecurityawareness Kumar Ritesh Dr. Saurabh Lal, P.D. Michael Henry Anna Koh Amit Thakur Harry Lee Glaiza Pardilla Harsha Vardhan Sam Parmar Rahul Raghav Yusuke Tateno Chiaki Izena（伊是名千晶）Greg Baylis David Plummer Rakesh R V Nicko Navarrete Ruri A. Hyungchan Mike Cho Montai Saiaroon Huy. Nguyen Tuong Vinh Dudley Swanepoel Mouli Saha Greg Baylis Vincent Cheng Julius S.

13

Cyber tech in Israel continues to succeed despite the challenges. We have recently hosted Daniel Martin, Executive Director of Cyber7- Israel’s Cyber Innovation Community in a webinar for Israeli diplomats and economic officers abroad. Daniel spoke about the Cyber ecosystem in Israel, the importance of Cyber to the Israeli high-tech and possibilities for international cooperation

9

Great accomplishment to our cyber ecosystem, Eleven Israeli startups are featured in the Rising in Cyber list, which highlights the most promising cyber companies in the U.S. https://risingincyber.com/ The project was organized by the global venture capital fund Notable Capital, in cooperation with the NewYork Stock Exchange, Fenwick, and HSBC Innovation Banking. The list includes: Gomboc.ai , Oligo Security , and Wing Security among the 10 early-stage companies; Astrix Security, Descope , and Grip Security at the mid-stage; and Cyera , Drata , Island , Orca Security , and Wiz at the growth stage. The Rising in Cyber survey of more than 100 security leaders revealed three innovation drivers needed by security teams to adapt to a growing footprint of technologies, the rise of AI, and the evolving sophistication of cyber criminals. These themes provide a glimpse into the future buying patterns of CISOs. 1. Identity and Access Management The rise of non-human actors and identity-centric, malware-free attacks, which accounted for 75% of incidents in 2023, highlights the urgent need for robust identity and access management (IAM) solutions. Startups are stepping up with next-generation Identity Governance and Administration (IGA), new authentication platforms, and privileged access management tools. 2. Cloud Security With the transition to multi-cloud architectures, traditional security tools remain inadequate for cloud environments. Innovations in cloud detection and response, data security, automation, risk management, and AI threat detection are becoming essential. 3. Application and Code Security The widespread use of open-source code introduces new vulnerabilities, while AI supercharges product security teams. Startups enabling collaboration between developers and security teams are leading the way, with AI improving code remediation and testing.

17

2 תגובות

In a recent interview with Walla, I discussed the crucial topic of safeguarding business data, emphasizing the significant impact of even minor errors by employees on an entire organization. I highlighted key aspects of data security and drew parallels to the largest data breach in history, underscoring its profound implications. #DataSecurity #BusinessProtection #CyberSecurity

1

What if all the trending #buzzwords, when put together, actually made sense? 🧐 I spoke about global #election campaigns, and how #AI-generated #deepfake was used in trying to skew them. The talk is in Hebrew, but I'm sure there's an AI for that 😉 It was based on detailed research by CP<R>'s Yoav Arad Pinkas, which can be read here - https://lnkd.in/dGfkR4vE Wikimedia Israel Reichman University Check Point Software https://lnkd.in/dRpPKf3X

83

Transform Your Business: The Impact of AI on Modern Entrepreneurship Discover how AI is revolutionizing the business world in my latest article published on Walla. Learn how entrepreneurs can leverage AI tools to operate more efficiently, cost-effectively, and achieve remarkable results in today's technological landscape. #ai #artificialintelligence

9

OTORIO's new Head of R&D ‫ ‫Ben Dahan discusses the critical challenges of cybersecurity in today's fast-evolving landscape and how to overcome them at Ben-Gurion University of the Negev

32

1 תגובה

Data Breach Alert ☣  - Alleged data sale of Israeli Air Force Threat actor claims to be selling data related to the Israeli Air Force, including detailed information about active and inactive pilots and employees. The alleged data contains information such as ranks, positions, service records, and training qualifications. The leak reportedly includes information from several airbases, such as Haifa, Hatzor, Ovda, Nevatim, Ramat David, Ramón, Tel Nof, Sdot Micha, and the special forces group. - #data_breach #data_leak #infosec #dark_web #DataBreach  #DataLeak  #Services  #CyberThreat  #CyberAttack

26

The recent #CyberWeek was an excellent opportunity to reconnect with colleagues while making new and exciting connections. Despite ongoing concerns, the steady recovery and increased investments in Israel are very encouraging. In H1 2024, Israeli #Cyber startups raised an impressive $2.9B, marking a 53% increase from the same period in 2023. This surge, coupled with the highest number of #exits since 2021, underscores a positive trend in the #Cybersecurity industry. Adding to this is Gartner's Attack Surface Management (ASM) report: "By 2028, investments in proactive technologies that improve visibility and reduce exposure will grow twice as fast as investments in reactive technologies that detect and respond to incidents". According to the latest Morgan Stanley CIO survey, cloud computing remains a top priority, while #Gartner predicts a significant increase in spending on data privacy and vulnerability assessment in 2024. At KTrust, an Israeli cybersecurity company, we focus on #proactive technology, integrated security solutions, and ongoing threat exposure for the #Kubernetes ecosystem. These developments inspire me to move forward with even greater enthusiasm and dedication.

33

3 תגובות

Have you heard? Our partner, Sasa Software, has been invited to join some of the biggest names in the #cybersecurity industry as a new member of the Israel Cyber Security Consortium, led by Israel #Aerospace Industries. Congratulations to the Sasa Software Team! GateScanner by Sasa Software leverages the power of Content Disarm and Reconstruction (CDR) Technology. Deconstructing every #file & email (including #attachments) to its base elements scans each element individually. Then, it reconstructs the file or email to ensure that only sanitized, safe files enter your #network. Explore the entire GateScanner suite here:  https://lnkd.in/ggaeVa3 #informationtechnology #informationsecurity #compliance #datasecurity #documentsecurity #documentscanning

8

Despite the challenging times we are currently facing, or perhaps because of them, as a country dealing with unique security challenges, leading innovation in the field of homeland security is not just an opportunity - it’s a necessity. South-Up Technological Incubator in collaboration with Tech7 Venture Studio, powered by Ofir-SouthUp Ventures, HamitbaH, Israel Innovation Authority רשות החדשנות and the HLS.IL community are joining forces to strengthen our national security by launching our critical homeland security accelerator - PROtecht. Innovators, registration is now open for our 60 Days Homeland Security (HLS) accelerator ,focused on border protection, cyber defense, and critical infrastructure for Pre-Seed to Seed startups.  no equity required Gain expert guidance, connect with industry leaders, and compete for a grant to boost your startup’s growth. Application and details ➡️ https://lnkd.in/dqjWDwpD  📅 Key Dates: • Registration Closes: October 1st • Selection Day: October 9th • Program Kickoff: October 28th The program is designed to deliver substantial value over two-month journey: 🔹 Custom Workshops: Bi-weekly sessions with hands-on, one-on-one mentoring for each startup. 🔹 Expert Mentorship: Regular advisory board meetings led by top professionals specializing in robotics and engineering, business development and go-to-market strategy, early-stage fundraising and investor relations, along with legal and intellectual property guidance. 🔹 Comprehensive Expert Support: Access to a broad network of legal advisors, financial consultants, accountants, and more, providing tailored guidance to navigate complex challenges. 💡 Additionally, one participating startup may receive a special grant at the end of the program to further accelerate their development. Don’t miss out on this unique opportunity to grow, connect, and lead in the Homeland Security sector. Application and details ➡️ https://lnkd.in/dqjWDwpD Gil Shwarsman Avi Yariv Omri Yitro Dai

23

2 תגובות

In light of escalating threats from Hezbollah and Iran, and with intelligence indicating potential hostile actions on April 9th, we must prepare for a possible surge in cyberattacks, both within Israel and among our global partners. All employees are urged to exercise extreme caution and remain vigilant for any suspicious activities. Report any anomalies or unusual events immediately. Adhering strictly to the organization's established procedures is vital, even during times of conflict. This information has been shared with our community, clients, and colleagues worldwide, who may also face heightened risks. Stay safe and stay alert! #CyberSecurity #DataProtection #IncidentResponse #RiskManagement #BusinessContinuity #CyberThreats #RSecurity

4

11 Israeli Companies Selected to Rising in Cyber 2024 List Rising in Cyber 2024, an independent list launched by Notable Capital to recognize the innovative and the most promising cyber companies in the United States market, included 11 Israeli companies. Israeli companies make up 1/3 of the companies selected. It is proof of the Israeli cyber market’s maturation. These companies were founded in the Startup Nation Central: - Astrix Security;  - Cyera;  - Drata,  - Descope;  - Gomboc.ai;  - Island;  - Grip Security;  - Oligo Security;  - Orca Security;  - Wing Security;  - Wiz. 100 executives from top-tier companies like Amazon and Netflix contributed to the selection process from about 200 nominated companies. Source: https://lnkd.in/dji3VuPw Photo: Cyera’s team in Tel Aviv

18

moments before long weeks As the CEO of Code Blue, I've had the privilege of leading our team through some of the known high-profile cyber crises in the past two months. Each situation presented its unique challenges, from a worldwide cybersecurity company facing a major breach, to an Israeli startup announcing its Unicorn Exit just as it was hit by a cyber attack. We also assisted a London Stock Exchange Energy Company, whose investors were concerned about liabilities during a critical loan process, and cargo aviation companies seeking cyber solutions. this is just the tip of the iceberg. What these diverse incidents taught us is a universal truth: reputation is everything. In each case, while our deep Incident Response (IR) investigation was essential, it was our global PR and Business Continuity Planning (BCP) teams that made the difference. They provided not just solutions but also reassurance to our clients, their customers, and their investors. We made sure they felt confident that they were in the best hands possible. At Code Blue, our commitment to our clients is unwavering. We understand that amid chaos, trust, and reputation are what sustain organizations. And that's why we are dedicated to protecting both with the full weight of our expertise and resources. In the increase of worldwide Cyber-Attacken choose your cyber combat team- choose code blue. #crisismanagment #ciso #ceo #cio #legal #cybersecurity Code Blue Cyber Code Blue by Dussmann

24

1 תגובה

Attacks on Israeli orgs ‘more than doubled’ since October 7, cyber researcher says. Key takeaways: 1. Cyberattacks on Israeli organizations, particularly those tied to defense, have surged dramatically since October 7. With an average Israeli organization experiencing more than 2,200 attacks each week, this points to a shift in geopolitical and cyber warfare strategies. 2. The majority of these cyberattacks are politically motivated, with involvement suspected from Iranian state-sponsored groups and Hezbollah, marking an evolution in these groups' tactics and a significant threat to nations' security infrastructure. 3. The scope of these attacks extends beyond Israel, with countries including the U.S., Canada, and the U.K. also targeted. This highlights the global nature of cybersecurity threats and the need for collective international actions to counter these advanced persistent threats. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/eKUYWJCq

2

Check out CYJAX's latest cyber intelligence weekly round-up! This week's video explores cyberattacks linked to the Israel-Palestine conflict, global DNS probing by a Chinese threat actor, and a major data leak involving the New York Times. For the written version - subscribe to our newsletter here: https://lnkd.in/dFgKdKPU #DataBreach #CyberSecurityNews #ThreatIntelligence

7