Enterprise Security WeeklySubscribe
Network Security, AI/ML, Acquisition

Cybersecurity has too many distractions and can the White House fix BGP? – ESW #375

This week, in the enterprise security news,

  1. Cribl, Zafran, and US states raise funding
  2. Cisco, Check Point, Salesforce, and Absolute Software acquire cybersecurity startups
  3. AI Security products are picking up steam
  4. You probably shouldn’t be too worried about Yubikey cloning
  5. Instead, you should be more worried about malicious npm packages!
  6. The White House wants to fix BGP
  7. SolarWinds has shady stuff in its source code, AGAIN
  8. The challenge of bringing security to small business
  9. Scams are getting quicker and more effective
  10. how not to run a phishing test
  11. and AI assistants rickroll paying customers!
Full episode and show notes

Hosts

Principal Researcher at The Defenders Initiative
  1. 1. FUNDINGS: Cribl, Zafran, and US States (wut?) raise funding

    This week's fundings:

  2. 2. ACQUISITIONS: Cisco/Robust Intelligence, Check Point/Cyberint, Salesforce/Own, Absolute/Syxsense

    This week's acquisitions:

  3. 3. NEW PRODUCTS: Prompt Security helps organizations monitor data shared with Microsoft 365 Copilot – Help Net Security
  4. 4. NEW PRODUCTS: Wiz moves into securing CI/CD pipelines

    As mentioned by Tyler on the show

  5. 5. ATTACKS: YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

    The attacks require about $11,000 worth of equipment and a sophisticated understanding of electrical and cryptographic engineering. The difficulty of the attack means it would likely be carried out only by nation-states or other entities with comparable resources and then only in highly targeted scenarios. The likelihood of such an attack being used widely in the wild is extremely low. Roche said that two-factor-authentication and one-time password functionalities aren't affected: because they don't use the vulnerable part of the library.

  6. 6. ATTACKS: Malicious npm Packages Mimicking ‘noblox.js’ Compromise Roblox Developers’ Systems
  7. 7. INTERNET WORLD POLICE: White House publishes roadmap to secure internet routing
  8. 8. VULNS: SolarWinds left hardcoded credentials in helpdesk product
  9. 9. REPORTS: TL;DR: Every AI Talk from BSidesLV, Black Hat, and DEF CON 2024
  10. 10. ESSAYS: Lifting the world out of the cybersecurity poverty

    As Darwin mentioned during the podcast - Bitdefender's Security for Content Creators

  11. 11. TRENDS: Online scam cycles are getting shorter and more effective, Chainalysis finds
  12. 12. WHOOPSIES: Uni phishing test based on fake Ebola scare prompts apology
  13. 13. SQUIRREL: Lindy, a commercial AI assistant, rickrolls its customers
Lead Product Manager at Monad
Product Marketer and Content Strategist at OX Security
VP Traceable.ai, Cyber Angel Investor and Advisor at 90 Degree Ventures

Related

Advisory Boards: When and How to Build Them – Benny Lakunishok – FS #3

Benny Lakunishok, CEO of Zero Networks, shares his experiences and insights as a founder in the cybersecurity space. He discusses the unpredictable challenges of founding a startup, the importance of hiring the right people, and the harsh realities of the entrepreneurial journey. Benny emphasizes the need for adaptability in leadership roles and th...
Exploring Unified SASE as a Service – Renuka Nadkarni – ESW #380

Implementing SASE can be tricky and onerous, but it doesn't have to be. Today, we discuss Unified SASE as a Service with Renuka Nadkarni, Chief Product Officer at Aryaka. Particularly, how can Unified SASE make both networking and security more flexible and agile? IT and security professionals need to ensure secure and performant applications and ...