Liran Hason

Cool article on how Fugaku, Japan’s fastest supercomputer, has gone virtual on AWS. “For these scientific outcomes to proliferate and create an actual impact on society, just building this 160,000-node machine is far from sufficient. The value of Fugaku is not only the hardware, but also the software solutions including the applications. We’ve injected this supercomputing environment directly into the cloud to extend applications and have much larger impact than in a single machine.” #Supercomputing #AWS #cloud Link to the article in the first comment.

23

3 Comments

Supply chain attacks have increased exponentially over the last couple of years. According to Gartner's recent supply chain risk survey, 60% of the respondents emphasized that they had at least one supply chain incident in the past year. I'll be speaking at #CloudNativeSecurityCon next month with my friend Mert C. to address how to identify and prevent supply chain attacks in CI/CD pipelines at runtime. We will explain the threat landscape and share how malicious actors poison infrastructures and artifacts. And also demonstrate our eBPF-based open-source tool (https://lnkd.in/dHgYyY6t) and show how to enforce OPA policies to prevent malicious activities at the run-time. Join us! 🗓️ Schedule: https://bit.ly/3JRH0A5 📢 Register: https://hubs.la/Q02gR6-Q0 #CNSCon #CloudNative #Kubernetes #K8s #CloudNativeComputingFoundation #CNCF #events #linux #software #security #OpenSource #OpenSourceSoftware #OpenSourceDevelopment #OpenSourceCommunity

29

RSA 2024 Takeaway: AI or Die 🥵 Met dozens of CISOs, execs & founders at RSA this week. Quick observations: 1️⃣ Every vendor is AI-fying their pitch. They're leveraging AI/LLMs for various use cases - threat intelligence, SOC automation & more. Impressed by Google Cloud, CrowdStrike & Microsoft Azure security offerings with lots of LLM-powered automation across their stack 🤖 2️⃣ The other side of AI adoption? Security / Compliance / Safety. Many pitches around securing AI systems & data. AI safety will be a hot topic for a while. Congrats to Reality Defender Ben Colman for winning the RSA Conference Innovation Sandbox 👏 3️⃣ Enterprises are shifting towards unified security stacks driven by cost, simplicity & agility needs - EDR + ASPM + CNAPP + SIEM +...all-in-one. This'll trigger a new wave of acquisitions by major players like CrowdStrike, Palo Alto Networks, Zscaler, Wiz, SentinelOne. While there are many innovative exciting startups, I'm afraid most exits may be below $500M. 4️⃣ Critical infrastructure security is gaining more attention due to rising geopolitical threats. This is an urgent national security matter. I'm super proud to be an early investor in Eclypsium, Inc.. They are the MOST innovative critical infrastructure security platform for enterprises. 💪 (cc Yuriy Bulygin Alex Bazhaniuk) 5️⃣ Identity is the new perimeter. Loads of innovation here. A non-human identity layer is emerging rapidly. Cerby showcased many exciting product updates to secure new vulnerabilities in the identity stack. Watch this space 👀 Share if I miss others. #RSAC2024 #cybersecurity #IAM #EDR #SIEM #CNAPP #ASPM #criticalinfrastructure #supplychainsecurity #ai #ml #llm #largelanguagemodels

79

10 Comments

18 months ago, a security startup's funding was a competitive advantage. However, the recent acquisition talks between Wiz and Lacework prove that the value of your product now trumps the size of your war-chest. Check out the details of this $150-200 million deal in TechCrunch's latest article. #startup #cybersecurity #funding #acquisition

10

A vulnerability has been identified, CVE-2024-27322, in the R programming language that permits arbitrary code execution by deserializing untrusted data. CERT Coordination Center (CERT/CC) has issued an advisory for CVE-2024-27322, cautioning against arbitrary code execution via malicious RDS or RDX files. What should you do? ⬆️ Update R to version 4.4.0 or later promptly. ⛔Until then, avoid interaction with untrusted RDS files or packages to mitigate risks. There is currently no public proof-of-concept or exploitation evidence available. https://bit.ly/44t7vFt

10

Good intelligence can and will come from a variety of sources, individual firms, technology companies, FINRA, and in this case the U.S. government. A good warning by CISA / FBI Cyber Division and then an emphasis by FINRA's Cyber & Analytics team to think ahead about how this may impact broker dealers. It is critical to be pro-active and anticipate the adversaries activities. #strongertogether

50

Worried that engineers in your organization copy production databases to their development environment? I'm excited to share the new Sentra 101 video! Check it out to learn how Sentra helps organizations institute security controls that stay with the data no matter where it goes.

26

1 Comment

Come to see Dr. Chase Cunningham and Alon Yaffe at MazeBolt ! How DDoS vulnerabilities are the path to a damaging DDoS attack. And how you identify them and get rid of them! Come watch this, should be very interesting! #Akamai #F5 #Radware #A10 #Netscout #Imperva #Dora #Sec #DDoS #DDoSProtection #DDoSMitigation #MazeBolt #Infosec2024 #DDoSVulnerabilites #DDoSVulnerabilityManagement #MazeBolt #MazeBoltRADAR #DDoSTesting #DORA #SEC #Compliance #Cybersecurity #OperationalResilience #cyberinsurance #cyberthreat #BusinessContinuity #VulnerabilityManagement

10

When Evan and I started RunReveal, we set out with the goal to make sure no breach goes undetected. A big part of that is making good detection easy. Today, we're excited to announce something that we've been looking forward to for a while: releasing Correlated Alerting! For a long time I felt that security would be easier if we could just make it easier for folks to see what's happening in their networks. While that's true, we found it's only half the equation. What's really important is to be able to make use of that data effectively, something existing SIEMs and other security tools miss the mark on. That's why we built Correlated Alerting, a method to separate your signals from your alerts, where alerts are a compilation of the signals representing a pattern of malicious behavior distinct from business as usual. Imagine you're an investigator on a case. You find clues and evidence suggesting suspicious activity, but in order to make a case to prove what happened you have to correlate the facts into a coherent story. With Correlated Alerting, the signals are the individual pieces of evidence and the alerts represent the collection of evidence that tells the story. We believe that by making it simple to build these kinds of alerts is going to drastically improve the way that security engineers implement detection and response. As always, we're building in public. Learn more about how and why we built it on the blog post: https://lnkd.in/gzuQ-5Qw What do you think? How does your organization think about distilling a stream of distinct events into actionable alerts? If this sounds like the right approach to detection and response, please share with your colleagues! If you think this is a terrible or fraught approach, please let us know why and share with your security friends to see what they think!

15

2 Comments

Great to see Cynomi supporting such events ! As security is in great need in (constantly leaking) cloud environment, therefore it's amazing that Cynomi kicks in, bringing support toward better cyber hygiene in this field. Definitely an event not to miss ! For sure, this will enable vCISO to support more organizations trapped in the cloud, hopefully, safeguarding some more data from leaks ! #cybersecurity #cloud #conference

3

1 Comment

I’ve seen it firsthand: data scattered across cloud platforms, on-prem servers, and SaaS apps, moving faster than most teams can track. Many organizations feel overwhelmed trying to secure and govern it all. Aviv Zisso, Director of Customer Success at Sentra, wrote a new article about these challenges, and explains how Sentra’s Data Security Platform (DSP) offers smart, scalable solutions to protect your data and ensure compliance. Check out the blog ⬇️ https://lnkd.in/e3tkTE4S

18

1 Comment

What defines value? After three years of effort, this week marks the start of the federal government's enforcement of new secure software development requirements. Starting with GSA and then shifting to all commercial vendors selling to all agencies, the Office of Management and Budget industry-changing mandate is now in action. For years, vendors commented that they thought this would never happen, but guess what? It did. Attacks on nations' software are skyrocketing, and as a nation, we need to take steps to produce more secure software by design. Before implementing tools such as application security testing (SCA/SAST/DAST), you must ensure your organization has a proper foundation. This is why the NIST 800-218 Secure Software Development Framework (#SSDF) starts with organizations preparing themselves to ensure that their people, processes, and technology are prepared to perform secure software development at the organization level. CodeLock, Inc. received a grant from VIPC | Virginia Innovation Partnership Corporation to develop a dashboard to provide companies across the country with the resources they need to get started and comply with these new requirements. Over the last month, we have uploaded templates for policies and procedures that your organizations need to have in order to meet specific practice areas. Rather than you having to create this from scratch, we did the work for you, saving thousands of hours and the finances associated with that work. You can get a CodeLock account today and access all of these resources for only $19/month. Do no wait to take action, get started with the compliance process today. If you made it this far into my post, congratulations! Send me a message, and I will give you a discount code to get started for free. #ZeroTrust, #CyberSecurity, #SoftwareDevelopment, #DepartmentOfDefense, #InfoSec, #NationalSecurity, #DefenseTech, #CyberDefense, #SecureSoftware, #MilitaryTechnology, #DevSecOps, #InformationSecurity, #CyberAwareness, #GovernmentTech, #CyberThreats, #TechInnovation, #DigitalTransformation, #CloudSecurity, #DataProtection, #NetworkSecurity, #SecurityArchitecture, #CyberResilience, #IdentityManagement, #Encryption, #Compliance, #SecureCoding, #CyberRiskManagement, #AIInCybersecurity, #ThreatIntelligence, #CriticalInfrastructure, #CyberLaw, #CyberEthics, #TechnologyLeadership, #PublicSectorInnovation, #TechGovernance, #SecureByDesign, #PrivacyByDesign, #MilitaryInnovation, #DefenseStrategies, #CyberWarfare, #CyberDiplomacy, #GovernmentContracting, #DefenseContractors, #MilitaryTec, #TechPolicy, #SecureInfrastructure, #NationalCybersecurity, #TechForDefense, #SecureDevelopment, #GovernmentIT

13

1 Comment

I agree with your post 100% Hoff. However, I do have a serious question. In a world where there are thousands (way too many) of cyber companies with even more (way way too many) products, how should a buyer find the few technologies that will make their security better? What are the metrics they could and should use to go from 3000->1000->100->10 products they need to actually buy and use? Not trying to be snarky. I'm honestly interesting in trying to figure out how that should occur most efficiently and in a way that the CISO can use to build their program? Is there a programmatic way or do we just rely on the CISO echo chamber in back channels and slacks like it appears everyone is doing today.

11

6 Comments

It was a pleasure presenting today at the Israel Academia Under Attack - IUCC Cyber Conference, sharing the real, hands-on experiences of our OP Innovate team in incident responses and penetration testing with academic institutions. The unique challenges in academia require more than just theory—it’s about confronting real threats with actionable solutions. A big thanks to everyone who made it an insightful exchange. Together, we’re helping secure the spaces that drive research and learning. #Cybersecurity #IncidentResponse #PenetrationTesting

21

2 Comments

Big Shoutout to Bar Azouri! One of our own from OX Security just got published! Bar’s insightful article on Medium, titled "Modernizing Secret Management in Development: Transitioning from .env Files to a Secret Manager," is a must-read. In this piece, Bar explores the shift from .env files to advanced secret management systems, detailing how this transition can boost security, optimize workflows, and ensure scalability in your development processes. If you're ready to elevate your secret management strategy, check it out here:https://lnkd.in/gg_pBrpH #SoftwareDevelopment #CyberSecurity #DevOps #NodeJS #AWS #SecretManagement #MediumArticle #Innovation #Security

8

UNC4393 goes gently into the SILENTNIGHT "In mid-2022, Mandiant's Managed Defense detected multiple intrusions involving QAKBOT, leading to the deployment of BEACON coupled with other pre-ransomware indicators. This marked Mandiant's initial identification of UNC4393, the primary user of BASTA ransomware. Mandiant has responded to over 40 separate UNC4393 intrusions across 20 different industry verticals. While healthcare organizations have not traditionally been a focus for UNC4393, several breaches in the industry this year indicate a possible expansion of their interests. However, this represents only a fraction of the cluster's victims, with the Black Basta data leak site purporting over 500 victims since inception. Over the course of this blog post, Mandiant will detail the evolution of UNC4393's operational tactics and malware usage throughout its active lifespan, with a focus on the period following the QAKBOT botnet takedown. We will highlight the cluster's transition from readily available tools to custom malware development as well as its evolving reliance on access brokers and diversification of initial access techniques."

3

For those waiting for the FAR update regarding #ssdf attestations... The latest Open FAR Cases report shows on May 30th Case Number 2023-002, Supply Chain Software Security, that OMB identified draft proposed FAR rule issues. OFPP, FAR and DAR staff are now working to resolve those issues. It is my understanding that this work remains opaque, and that there was no public disclosure of precisely what issues OMB identified with the proposed FAR rules relating to supply chain software security. Regardless of the status of Case 2023-002, the GSA is now requiring #ssdf attestations for anything it buys that contains software as of this past Monday morning when the government opened for business. GSA quietly updated GSA Form 7700 last month to take advantage of the CISA standard form's disclosure that "Agency-specific instructions may be provided to the software producer outside of this common form." GSA Form 7700 form has two checkboxes on page 3: Option 1: Submit the attestation online at the Cybersecurity and Infrastructure Security Agency Repository for Software Attestations and Artifacts (RSAA) portal. Option 2: Only use GSA Form 7700 submit it to a GSA specific email account. What this means to me is that if Option 1 is checked then Form 7700 is effectively a trigger mechanism for GSA to go lookup an existing attestation in RSAA. However, if Option 2 is checked, it would be interesting to know if GSA is taking that PDF and entering it into RSAA on behalf of the vendor. Option 2 also implies that a vendor may not have to attest multiple times for the same software product/version, but seemingly will have to submit multiple disparate forms to each part of the government. As we continue to see discussion about harmonizing #cybersecurity regulations, this is a great example where the government could have simply mandated using CISA RSAA. Instead, vendors will find themselves having to report using GSA Form 7700 for something through a GSA contract vehicle, and speculatively, a different form through NASA SEWP, and a different form for Dept of State, and different form for.... https://lnkd.in/eEDA-S8F If you haven't started to get serious about #software provenance ahead of the all-of-government mandate coming in September, now is a great time to start evaluating your #devsecops policies and procedures!

30

1 Comment

It’s not surprising that the EC’s poorly considered DMA requirements around interoperability are facilitating a tug-of-war between the largest tech firms. But does the EC possess the technical capacity to determine which side is being reasonable here?

8

1 Comment