Gerhard Eschelbeck

Join Wiz and HashiCorp to learn how to use #Terraform run tasks to help reduce risk by: -- Applying Wiz runtime security learnings earlier into the pipeline for a consistent security approach -- Developers and cloud teams can integrate security checks within their existing workflows -- Known misconfigurations and policies in Wiz are applied to block the release of infrastructure at risk Register for the webinar here: https://bit.ly/45R3Zpa

87

1 Comment

🔍 Critical ML Vulnerabilities Uncovered by JFrog! JFrog has identified 22 vulnerabilities in open-source ML projects, exposing risks like remote model hijacking and unauthorized privilege escalation. As AI adoption rises, the need for stronger security has never been clearer. 🔗Learn more: https://lnkd.in/ghvUxY9Q #AI #Cybersecurity #ISBNews

16

Something to be aware of.. JFrog research team has uncovered a critical access token leak in a #Docker container and the implications are alarming.. Itzik Swissa Harit Iplani Jay Daniel Pais Read on to learn more.. TOM SHAW

2

JFrog announced the addition of JFrog Runtime to its suite of security capabilities, empowering enterprises to seamlessly integrate security into every step of the development process, from writing source code to deploying binaries into production. #CyberSecurity #DevSecOps #JFrogRuntime

3

Industry research shows 1 in 5 applications contain runtime exposure, with 20% of apps having high, critical, or apocalyptic issues during the execution stage. By automating #security for fast-moving, dynamic apps like those that run in #containers, JFrog Runtime addresses the unique visibility and insight needs of cloud-native environments: https://jfrog.co/3THB7Lp

95

🚀 𝐁𝐮𝐢𝐥𝐝𝐢𝐧𝐠 𝐏𝐫𝐨𝐝𝐮𝐜𝐭𝐬 𝐂𝐮𝐬𝐭𝐨𝐦𝐞𝐫𝐬 𝐋𝐨𝐯𝐞: 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐫𝐨𝐦 𝐀𝐲𝐚𝐥 𝐂𝐨𝐡𝐞𝐧 🚀 In this episode, Ayal Cohen, previous Senior Director of Product at Micro Focus shares two decades of experience in automation and product evolution. He dives into functional testing, meeting customer expectations, and creating products that truly engage users. 𝐊𝐞𝐲 𝐭𝐚𝐤𝐞𝐚𝐰𝐚𝐲𝐬: ☑️ Leverage Automation + Customer Data for scalable, efficient solutions. ☑️ Listen to Your Customers: Be patient in meetings and gather diverse feedback. ☑️ Go Beyond Usability: Build products customers love, not just use. Tune in for Ayal’s expert tips on creating products that deliver real value. 🎧👇 https://lnkd.in/dMuV4KDX #ProductManagement #Automation #CustomerEngagement #TechLeadership #MicroFocus #DigitalTransformation

5

🔑 Paul Davis, JFrog’s Field CISO, explains why collaboration is essential for reducing vulnerabilities. Bridging the gap between developers + security is key to protecting your #SoftwareSupplyChain. Learn how the JFrog Platform unites teams for better security & efficiency: https://jfrog.co/pl4tfm

27

Clint Huffaker and Jimmy Xu join together to discuss a new operating model of application security on October 9th's ASPM Nation presented by Cycode. 🙌 Tune in to hear about: - Finding the right balance on "Shift Left" - The difficulties with designing in security with engineering teams - What needs to change in the Application Security methodology Register now ➡ https://lnkd.in/gE7i63zf #aspm #developersecurity #appsec #applicationsecurity #speakerfeature #virtualevent

14

My keynote from the CloudNative SecurityCon has been posted -- I talk about storytelling and how we are applying this to the Security Education program at Okta. https://lnkd.in/gyVgxSbd

52

Novel technology like #eBPF is a game-changer for cloud stacks, making it easier to deploy and safe by design, from kernel-level functions to runtime application call stacks. Watch Guy Kaplan and Avi Lumelsky in their #BSides session as they explore how eBPF-driven runtime security is leveraged to break down applications into individual library components for scaled monitoring. Learn how this approach detects deviations in real time and provides kernel-level tracing across the entire host. 🍿 https://lnkd.in/d6Jvhe4N

53

1 Comment

Splunk delivers digital resilience like no one else can. The Splunk unified platform empowers your SecOps, ITOps, and engineering teams to achieve their goals and collaborate at any scale. Keep your digital systems secure and reliable to become more resilient than ever. #Silicon21 #Splunk #SIEM #Observability #WhySplunk?

11

Why settle for an MDR that lacks the context of your specific environment? The Blumira SIEM+XDR gives SMBs real-time, tailored threat detection and response, avoiding the typical delays and limitations of an MDR solution. Learn more about the advantages of SIEM+XDR from Blumira CTO Matthew Warner in the full video here: https://okt.to/aN4Uhj #Cybersecurity #SIEM #XDR #SMB

20

ICYMI, Matthew Warner, indefatigable CTO of Blumira, on why SMBs do not have to settle for an MDR that lacks the context of their specific environment and can't really drive success without it. Check out his wise words and all of the company’s new features and platform updates designed to make life easier for SMBs and MSPs, including: ✅ Blumira Free SIEM — top-notch security instantly and without begging for budget ✅ Blumira Investigate — an intuitive dashboard that IT staff can use to track threats, assess incidents, and respond swiftly Also, the platform now integrates with over 250 applications to provide seamless, comprehensive security coverage. 🔗 Full video here: https://okt.to/aN4Uhj #Blumira #CyberSecurity #TechInnovation #SMB #MSP #ThreatDetection #SecurityUpdates

11

In this clip, Alex Palcuie explains the "Rule of Five Errors" used by the Google Compute Engine SRE team for measuring reliability, which adjusts alarm thresholds based on request volume to ensure accurate and fair SLOs for all users, not just large-scale ones. #observability #reliability #SRE #engineering

20

1 Comment

Join Sebastian Brandes and Scott Helme as they delve into the world of application security, dispelling myths, offering practical advice, and stressing the importance of organizational commitment. Watch the video for actionable insights to enhance your security strategy! https://lnkd.in/dhCD_CV4

6

1 Comment

Great upcoming webinar to celebrate Cybersecurity Awareness Month! Join the experts from Elastic Security Labs to learn more about the 2024 Global Threat Report and understand Elastic's unique telemetry and the threats and trends you should prepare for. Register here: https://gag.gl/mXQHnl

8

1 Comment

Using a CASB for DLP? Just ignore: - Steep learning curves that frustrate your entire team - Proxy deployments that break half your apps - Cloud-only focus that leaves on-prem data exposed - SaaS apps that slip through your coverage net - Latency that turns every task into a waiting game - Rigid policies that can't keep up with business needs - Outdated ML that doesn't learn or grow with you - Complex policy configurations that demand constant fine-tuning - False positives that flood your inbox daily - Compliance reports that miss crucial context - Budget overruns from hidden operational costs Sounds seamless, right? 🫠 #CASB #DLP #cybersecurity #datasecurity

10