James Beeson’s Post

Defenders are finally getting there dues .. AI is powering the filtering of noise, while compliance and analytics are important .. it is imperative to separate them from security logs, so that analyst can figure out trails to breaches fast and respond. Abstract security and Colby DeRodeff are solving that problem by integrating AI at platform level so that the signals which can alert the analyst can reach to him faster .. So that he can defend better … #aws #securityanalytics #genai

As 2023 comes to an end, the NodeZero stats for the year are quite amazing... For context: - First payroll was January 2020 - NodeZero product launched September 2020 - NodeZero has been in the market for ~3 years now In 2023... - over 21,000 pentests run (65% internal, 35% external) - over 440,000 "critical impacts", including 2.2k+ Domain Admin compromises - Over 1.5 Billion "attack events" were generated and added to our training data - 0 humans involved. These were completely autonomous - Primary user: IT Operations and Blue Teams These were pentests, not vulnerability scans pretending to be pentests... - ~15 hours average duration (> 4 weeks was the longest test) - Average scope was ~2000 hosts (max was > 200k hosts) - All against production systems spanning financial services, healthcare, manufacturing, education, Government, etc... not labs If NodeZero were a billable consultant, it would have billed over $42M in consulting fees (21,000 pentests * 15 hours per test * $200 per hour)... but that's an underestimation because it's very difficult for a human to thoroughly pentest 2,000 hosts in 15 hours the 2024 stats will be crazy #infosec #cybersecurity #pentesting #founders #startups Horizon3.ai #genai #ai

Anvilogic, a pioneer in multi-data platform SIEM, has successfully closed a $45 million Series C funding round, elevating its total funding to $85 million since its inception in 2019. Led by Evolution Equity Partners with contributions from Foundation Capital, Cervin Ventures, and other key investors, this funding will fuel Anvilogic's expansion and the enhancement of its AI capabilities across the entire Security Operations Center (SOC) lifecycle. As Anvilogic strides towards transforming SOC efficiencies with innovative AI features, the company is poised to redefine security analytics by making it more scalable and integrated within diverse data environments. https://lnkd.in/eEKEe3VU #Anvilogic #Cybersecurity #SeriesCFunding #AI #DataSecurity #SOC

With more vendors offering tools that go beyond a simple point solution there comes the skepticism of "having all your eggs in one basket". Every security practitioner is aware of the 3 pillars PPT (People, Process, Technology) With Technology recently becoming more of a "stack of tools" instead of 1 or 2 "moats around the castle". As the amount of tools acquired has sky rocketed so has the push to consolidate vendors and optimize where we invest. So how do we ensure that we aren't just acquiring "more tools" but building out a security stack that works for you while also not acquiring more risk? Darktrace saw this vision and began laying the framework for our platform approach as early as 2019, with it really coming into itself in the last few years. Skeptical of putting too many of your eggs into one basket? Fair. Check out this blog post by our analyst Zoe Tilsiter mapping out how Darktrace was able to detect attacks across Email, SaaS, and Network Environments with our AI based platform; in real time and at machine speed! https://lnkd.in/dk3Y7Y6k

I'll be chatting about AppSec Engineers' Role in Software Development (with some thoughts about #securitychampions too of course) as part of #LeanAppSec Winter tomorrow. Grab your seat and I'll see you there! #appsec #applicationsecurity #softwaresecurity #securityculture

This week's issue of The Cybersecurity Pulse (TCP) is live! With RSA around the corner, activity in the security industry is heating up w/ startups emerging from stealth, funding, M&A, products announcements, partnerships, you name it. This past week was no exception. In this issue, I cover: 💠 Change Healthcare breach to cost UnitedHealth an est. $1.5bn by EoY. 💠 The importance of MLBOMs and practical guidance from Diana Kelley 🔥 💠 PCI DSS v4 Deep Dive from Jeff Man, Paul Asadoorian, and Joshua Marpet 💠 Datadog's State of DevSecOps 2024 report Christophe Tafani-Dereeper Eslam Salem 💠 Building a winning security platform strategy Ross Haleliuk 💠 Simbian emerges from stealth to build fully autonomous security.. The team is stacked! Definitely one to watch moving fwd. Ambuj Kumar 💠 Knostic emerges from stealth to tackle access control for enterprise genAI apps Gadi Evron Sounil Yu 💠 Miggo Security emerges from stealth w/ first Application Detection & Response (ADR) solution 💠 NightVision emerges from stealth to redefine Web + API security testing Kinnaird McQuade 🙌🏽 💠 More product announcements from Wiz, Cado Security, Google, and Descope 💠 Anvilogic $45M Series C Omer Singer 👌🏽 Link in comments!

Last week, I had the pleasure of speaking with Fahmida Y Rashid about Abstract’s emergence from stealth and $8.5M Seed round investment led by Crosslink Capital, Rally Venturesand Liquid 2 Ventures. Thanks Tom Reilly and Matt Bigge for contributing their perspective to the conversation. Every day I wake up feeling grateful to work on solving a problem that I saw developing in the market in 2002, but this conversation especially reignited my purpose, and I look forward to continuing to work closely with our talented team and beta-customers as we refine Abstract’s security analytics platform. Our mission is simple: to deliver on the promise that current offerings fall short of, while lowering costs. By giving security analysts access to the tools they need to correlate data in real-time between streams, separate compliance, and security data to increase detection effectiveness, analysts can focus on the threats that matter. Read the full piece in Dark Reading here: https://bit.ly/4afUVf6 

“Ideas are worth nothing, but execution is worth something.” So says Christopher Ahlberg, CEO and cofounder of cybersecurity company Recorded Future. Founded in 2009, Recorded Future is now used by 30 governments globally and more than half of Fortune 100 companies. “Our mission matters a lot to the 1,000 people who work here. They stick around because we give them interesting problems to solve, they get to work with other great people, and because we work to secure the world with intelligence.” In 2019, Insight bought the company for $780M. Since the deal, the business has grown revenues fivefold. “It’s been a pleasure to have a front-row seat to their success,” says Thomas Krane, managing director at Insight. “For three years, [Christopher] gave us his vision for the market and how Recorded Future would fare, and he always lived up to his promises.” What’s next for Recorded Future? “More revenue. More people. More AI,” says Ahlberg. Learn more about Recorded Future’s mission for global safety and security: https://lnkd.in/eZFcZ9_B #venturecapital #founder #startup #ScaleUp

We're just days away from LeanAppSec Winter! Grab your seat >>> https://hubs.ly/Q02gZgFD0 For our 3rd LeanAppSec live event, we’re focusing on that topic on everyone’s minds: Generative AI. You'll learn about securing AI initiatives and how AppSec teams and CISOs alike are responding to the fast-paced world of AI. 1️⃣ Using AI: Safety vs. Innovation How AI and LLMs are impacting AppSec in general, and specifically open source security. 🎤 Caleb Sima, Chair of AI Security Alliance @ Cloud Security Alliance 🎤 Chris H., Chief Security Advisor @ Endor Labs and President @ Aquia 🎤 Matt Brown, Solution Architect @ Endor Labs 2️⃣ LLM Basics for Security Professionals Understand how LLMs work so you can factor them into open source security programs. 🎤 Dimitri Stiliadis, Co-Founder and CTO @ Endor Labs 🎤 George Apostolopoulos, Founding Engineer @ Endor Labs 3️⃣ Using LLMs as a Security Tool A practical demonstration of LLMs' strengths and limitations. 🎤 James Berthoty, Security Engineer @ PagerDuty and Founder @ Latio Tech 🎤 Darren Meyer, Lead Solutions Architect @ Endor Labs 4️⃣ AppSec Engineers' Role in Software Development Building security programs that foster collaboration and understanding between AppSec and Developer teams. 🎤 Dale Paul, Application Security Architect @ AbbVie 🎤 Dustin Lehr, Sr Dir Platform Security / Deputy CISO @ Fivetran, Co-Founder and Chief Strategy Officer @ Katilyst Security 5️⃣ How LLMs are Changing AI and Application Security Research and case studies exploring the ways LLMs can expose organizations to risk or be used to accelerate security. 🎤 Rob van der Veer, Senior Director @ Software Improvement Group 🎤 Henrik Plate, Security Researcher @ Endor Labs #cybersecurity #security #appsecurity #appsec #productsecurity #opensource #oss #ai #aisecurity #leanappsec

Prophet Security emerges from stealth and raises $11 million: Prophet Security emerged from stealth with $11 million in seed financing led by Bain Capital Ventures (BCV) with participation from several security leaders and angel investors. At the core of the company’s unveiling is Prophet AI for Security Operations, an AI-powered platform that triages, investigates, and responds to alerts in seconds, slashing mean time to response (MTTR) by 10x. By eliminating manual, repetitive tasks, Prophet Security improves analysts’ productivity and empowers them to focus on … More → The post Prophet Security emerges from stealth and raises $11 million appeared first on Help Net Security.