FloData’s Post

Sysdig continues to explore innovative approaches to enhance the Falco community! ⤵️ 🦅 𝗙𝗮𝗹𝗰𝗼 𝗙𝗲𝗲𝗱𝘀 𝗯𝘆 𝗦𝘆𝘀𝗱𝗶𝗴 offers Falco users expertly-crafted, regularly refreshed detection rules sourced from Sysdig’s Threat Research Team, helping your defenses adapt as new threats emerge. ✅ Meet compliance requirements with pre-tagged rules for PCI DSS, HIPAA, and more, while enjoying flexibility and scalability. 🔥 With Falco Feeds, experience the perfect blend: the adaptability of #OpenSource Falco paired with 𝗲𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲-𝗹𝗲𝘃𝗲𝗹 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗿𝘂𝗹𝗲𝘀 — all without needing a major infrastructure change! 🚀 Are you ready to move beyond conventional point solutions? Discover how Falco Feeds can elevate your runtime security approach: https://okt.to/ywev5a

Data is gold ✨, and Tetragon has it in troves. Read the top 8 use cases for eBPF runtime security at scale. 📚 Link: https://lnkd.in/gEFJ3ZUM

CISOs: Are you looking to find the gaps in your existing security tools and improve your overall security posture by simply optimizing the current tools you already have? Let me help you get a walkthrough of Nagomi Security! #cybersecurity #ciso #proactivedefense #crowdstrike #sentinelone #okta #cortex #servicenow #rapid7 #microsoftdefender #google

Firs the easy to read story from Bleeping Computer on the new NIST guidelines https://lnkd.in/gwJcz5Qx Then a more detailed one from Specops https://lnkd.in/g6KZiwCs

Great news ahead! According to Sysdig's 2024 #CloudNative Security and Usage Report, security teams are making remarkable progress in reducing high-risk vulnerability debt quickly, all thanks to targeted remediation efforts. Real customer data revealed workloads with in‑use packages containing fixable critical or high vulnerabilities have been reduced by nearly 𝗛𝗔𝗟𝗙, down from 15% to 8.2% over the last year. This is just one of many fascinating data points from Sysdig's annual report. Click the image below to download the full report — or better yet, attend Sysdig's virtual 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀 𝗙𝗼𝗿𝘂𝗺 this Thursday, Feb 29th to listen in as experts from Sysdig, SANS Institute, and Hacker Valley Media analyze more key report findings! 📅 Register here: https://okt.to/iut5OU

I'm super excited about being a speaker at APIsec University's APISEC|CON. It is an exciting time in both #secops and #devsecops, and #apisecurity is forcing SecOps to look at and think differently about security. #codetoruntime is the how companies and regulators are looking at security now. #wwt

🚨Happening Today– The API Security Problem No One is Talking About 🚨 There are many challenges that AppSec teams face, but no one is addressing them effectively! As APIs are developed faster than ever, relying solely on production monitoring is no longer sufficient for AppSec teams to stay ahead. Without effective API discovery and a shift-left security approach, many APIs remain hidden within an organization’s attack surface. Join StackHawk’s CEO Joni Klippert and CSO Scott Gerlach today at 10 AM MT to address these challenges and learn how shifting API security left can protect your attack surface. Reserve your spot now: 🔗https://hubs.ly/Q02Vzv-x0 (P.S. By registering, you’ll also receive a recording of the webinar!) #APISecurityProblem #AppSec #Webinar #StackHawk

🔎 Important Cybersecurity News and Interesting APT Research of the Week 🆔 Criminals are using spearphishing techniques in mass email campaigns. New tools, including LLM, enable high-quality personalization of emails, and numerous PII leaks provide the necessary information for customization. https://lnkd.in/eHqJ_dct The CRYSTALRAY group, which exploits servers using a large arsenal of n-day vulnerabilities, has dramatically expanded its operations. Infected systems are implanted with the SSH-snake malware, an open-source worm that allows automatic takeover of additional servers within an organization. The end goal is credential theft and cryptomining. https://lnkd.in/d9pG78hw ✏️ Interesting figures from the Cloudflare's appsec report: organizations have, on average, 33% more public API endpoints than they are aware of. Naturally, these are neither accounted for nor protected. Additionally, a corporate web application typically calls 47 third-party scripts, significantly increasing the attack surface through supply chain vectors, similar to the recent polyfill incident. https://lnkd.in/ezrNMHhC 👀 Speaking of supply chains, it's not just npm and PyPi under attack — in a new campaign, malicious .NET libraries were published on the NuGet repository. https://lnkd.in/d3fyjdWB 🔓 The FIN7 group, after a period of quiet, appears to have shifted its focus — it is now attributed with a large-scale spearphishing campaign and malware distribution. They still target large enterprises. https://lnkd.in/esUA_h9h 🔎 A two-part analysis of Dodgebox and Moonwalk malware, attributed to APT41/Earth Baku/Winnti. Dodgebox is a new version of the Stealthvector loader, which subsequently installs the MoonWalk backdoor on victims' systems. https://lnkd.in/dVt9M6KU https://lnkd.in/dNa9ET4W 🤡 After a wave of outrageous leaks, Snowflake quickly offered clients a way to enforce mandatory MFA activation for all employees. https://lnkd.in/gnhsfgnP 👮♀️ Analysis of recent tactics and tools used by ransomware groups: Akira (https://lnkd.in/eJq87UX4), Bianlian (https://lnkd.in/d4h9X4FF), Estate (https://lnkd.in/gxbM7bUE), Hardbit (https://lnkd.in/ePw7M8n3). 💬 A serious vulnerability in Exim allows malicious emails to bypass mail filters. CVE-2024-39929 needs to be patched promptly. https://lnkd.in/dpi8VR5g

Nagomi uses read-only API's to integrate your existing security stack in order to understand your existing coverage, policy gaps, and the rationalization of your tool set. Learn more https://lnkd.in/eAxdBxr9

At LogRhythm, we're not just stopping breaches, we're setting the standard. Discover the advanced capabilities of LogRhythm Axon in our latest quarterly release. https://lnkd.in/gskkwk5n