Danny Allan

Given the new reality of today’s growing #threatlandscape and #complexity of #applications, the #pointproduct tool approach is ineffective. To optimize the performance of security architectures, increase the effectiveness of #cybersecurity teams, and, ultimately, advance defenses, #platformization is essential: a recent study by #IDC shows that, with a cybersecurity #platform, teams are 55% faster to address #cyberattacks and 58% quicker to #remediate security events – while organizations are in line with their business objectives, with a three-year #ROI of 203%.   More insights on our #platformization approach by Palo Alto Networks founder and CTO Nir Z. Helmut Reisinger Florian Hartwig Sergej Epp Marc Mueller Damaris Soellner Angelika Kempf Martin Zeitler Andy Weiss Wojciech Golebiowski

21

I’m so excited to be available to small and medium businesses looking to implement #privacybydesign and #securitybydesign as one of many SMEs who can be leveraged through Zatik Security's fractional security model. But #SMBs won’t be able to shift the insecure tech landscape *all* of us are operating in on their own. As this year’s #DBIR (available at verizon.com/dbir) stated in its introduction of the #supplychain #interconnection metric on page 13, “calculated a supply chain interconnection influence in 15% of the breaches [they] saw... [representing a] 68% year-over-year growth.” Then on page 14, just as Cybersecurity and Infrastructure Security Agency, 👑 Kymberlee Price, Joshua Corman, and countless others, including myself, have said: “As much as we can argue that the software developers are also victims when vulnerabilities are disclosed in their software and sure, they are), the incentives might not be aligned properly for those developers to handle this seemingly interminable task [of remediating every vulnerability]. These quality control failures can disproportionately affect the customers who use this software... This metric ultimately represents a failure of community resilience and a recognition of how organizations depend on each other.” The writers go on to say, “We recommend that organizations start looking at ways of making better choices so as not to reward the weakest links in the chain... we believe the only way through is to find ways to hold repeat offenders accountable and reward resilient software and services with our business.” The fact of the matter is, the only organizations capable of doing this across the supply chain are the Big Players (with BIG contracts) in highly regulated industries—especially Finance and TeleCom—who can *both*  1) hire the talent required to really dig in to the evidence of their vendors’ security posture, and   2) then throw the weight of those BIG contracts around to incentivize substantive improvement. Demand to see vulnerability scans. Demand to see FULL #pentest and #BCDR results, not whatever watered down summary they’re going to offer you. You’re the only ones who can. I sat on one side of that table (I wrote those summaries), and I’d *love* to sit on the other. If your company is serious about #supplychainsecurity, #securesoftwaredevelopment, and exceeding the minimum that is “compliant,” let’s talk. I believe in building better I know how to architect, implement, and communicate systems deserving of trust (and how to evaluate and determine systems undeserving of trust). The only way we can turn the tables on bad actors is together, by shifting all three points of the Technology Ecosystem Triangle—Supply, Demand, and Regulation/Oversight-- together. So in the wise words of Bender, let's gooo alreaddayyyy. 😎

18

DTEX Systems and Mandiant (part of Google Cloud) have teamed up to deliver a webinar discussing the industry’s approach to support #zerotrust for the federal agencies and the mandates required to deliver #insiderrisk within the ZT framework. #zerotrust #insiderrisk #insiderthreat #cybersecurity #dtexsystems #google #mandiant #federalgovernment

18

Make using your product easier! 👏 Simple advice from Ofer Gayer, VP Product at Hunters. Simplify the problem and focus on making problem solving easy for your users. Catch this throwback episode wherever you get your podcasts! 🎙️ #cybersecurity #productmanagement

12

Amplify detection capabilities with Recorded Future's Validated Sigma Rules, crafted by our research team to minimize false positives. Watch to see how to easily search, implement, and configure Sigma Rules without ever leaving Splunk.

2

🔍 How IBM’s Purchase of HashiCorp Could Change Your Approach to Secrets Management. With HashiCorp Vault now under IBM’s wing, it’s a good time to rethink the tools you use for managing your secrets. Suresh Sathymurthy from Akeyless Security breaks it all down in our latest blog post. Read his insights on what this big move might mean for you. https://okt.to/bpVaTm #IBM #HashiCorp

14

I agree with everyting, except the name 😉non-human identity (#NHI) is misguided and based on the wrong assumption this type of identity is an exception, a minority when compared to human IDs. But, today there are 10 times more machine identities in the cloud than humans. Should we humans be called non-machines??? No. There are (human) identities 👩🏻, and machine identities 🤖. Non-human also sounds like something so negative, and when the machines rise they will remember who profiled them that way 😅 #machineid #machineidentity #machineidentitymanagement #iga #saviynt

68

27 Comments

CISOs are concerned with the amount of personal liability they may be taking on in their roles. Does this resonate with you? Download Devo's new guide, “The Modern CISO: An Essential Guide for CISO Success,” to learn what actions CISOs like you are taking to protect themselves and how they are using new rules, such as the cybersecurity rules from the SEC, to advocate for what they need to do their jobs effectively. #CISO #CybersecurityLeadership

3

🥽 Dive into the groundbreaking world of #AI and its role in fortifying API defenses! Don't miss Erez Yalon, our VP of Security Research, at #apidaysNewYork as he delves into AI-driven security strategies. Discover the potential, promises, and pitfalls, including ethical dilemmas and risks of misuse. Join the conversation! #CheckmarxSecurity #DevSecOps #ArtificialIntelligence #ApplicationSecurity apidays

42

The modern IR guide looks more and more like this: Step 1: Find out where MFA is not enabled Step 2: Find out why logs were only partially enabled Step 3: Find out if an existing leak on BreachForums is present Step 4: Find out if which user clicked on a fake Google Ad that make them install an infostealer Step 5: Fill in your 8-K Form

6

Sysdig's latest launch just changed the game! 🚀 Relying on traditional EDR tools to secure complex environments can cloud your judgment. Instead, your security platform should be equipped to make judgments with your cloud in mind. ☁️ By leveraging real-time insights, automated correlation, and cross-cloud context, Sysdig is accelerating incident investigations down to just 𝟱 𝗺𝗶𝗻𝘂𝘁𝗲𝘀 with three exciting new #CDR capabilities, including: 🔀 Attack Chain Visualization 🆔 Real-Time Identity Correlation ✅ Investigation Workflow Optimization See how it works and learn why EDR just won't cut it in the cloud! 👉 https://okt.to/YlwRzp

11

Sysdig's latest launch just changed the game! 🚀 Relying on traditional EDR tools to secure complex environments can cloud your judgment. Instead, your security platform should be equipped to make judgments with your cloud in mind. ☁️ By leveraging real-time insights, automated correlation, and cross-cloud context, Sysdig is accelerating incident investigations down to just 𝟱 𝗺𝗶𝗻𝘂𝘁𝗲𝘀 with three exciting new #CDR capabilities, including: 🔀 Attack Chain Visualization 🆔 Real-Time Identity Correlation ✅ Investigation Workflow Optimization See how it works and learn why EDR just won't cut it in the cloud! 👉 https://okt.to/pfiRsm

17

Sometimes, you open up your news feed for the day, and there's nothing going on in the world. On other days, there is a 1.3 MILLION user data breach! Popular online shopping site Pandabuy suffered a huge breach recently from a group known as Sanggiero. The threat actors gained access by exploiting critical API vulnerabilities and stole user data containing user IDs, full names, phone numbers, emails, home addresses, login IPs, order data, and other IDs. Pandabuy even tried to cover up the breach - not a good look! This has definitely affected their reputation for managing customer data and potentially caused a lot of damage to their users. If you're worried about your organization's data, connect with me or click the link below. https://lnkd.in/g8vnUKrt #Data #Cybersecurity #Proofpoint

20

DigiCert shows how you can automate and simplify software development security in just 4 steps! NIST’s Secure Software Development Framework outlines practices you can implement to reduce vulnerabilities. Because these best practices can impact the efficiency of the software development lifecycle, automation is key to successful implementation.

4

The latest critical PAN-OS vulnerability could expose your organization to lateral movement and other exploits. Join our webinar with Zscaler CSO Deepen Desai, SVP Product Management & General Manager, Dhawal Sharma, and Zeus Kerravala, Founder of ZK Research, as they dive into CVE-2024-3400 and the biggest risks of legacy #firewalls and #VPNs. Register now: https://lnkd.in/gTk4B2ES

1

The latest critical PAN-OS vulnerability could expose your organization to lateral movement and other exploits. Join our webinar with Zscaler CSO Deepen Desai, SVP Product Management & General Manager, Dhawal Sharma, and Zeus Kerravala, Founder of ZK Research, as they dive into CVE-2024-3400 and the biggest risks of legacy #firewalls and #VPNs. Register now: https://lnkd.in/gTk4B2ES

3