Jerome Chapolard

2025 will be a defining year for external threat intelligence. Having observed trends with CybelAngel for the past year, I’ve noticed: ☑️ Ransomware threats are on the up: CybelAngel detected a 42% rise in reported attacks. ☑️ AI is fueling cyber attacks: Since ChatGPT’s arrival, phishing emails have increased by 1,265%. ☑️ API exposure is rising: We’ve seen a 625% increase in API exposure losses since 2021. ☑️ APT groups are mobilizing: Nation-state sponsored threat actors are more active and creative than ever. In our 2025 report, I have unpacked key insights into cyber threats for 2025, along with best practices and recommendations for #CISOs to fight back. Read it here: https://bit.ly/3WSrXwW

53

2 commentaires

Big news: Sublime Security just launched NLU 3.0, our most advanced language model for stopping evolving email threats. 🔹 Synthetic training with GenAI: We generate realistic phishing & BEC variations to train against attacks that don’t even exist yet. 🔹 Multi-head architecture: One model powering intent, entity, and topic detection - faster, smarter, and more consistent. 🔹 Modular design: Add new detection capabilities quickly without retraining everything. This isn’t just an upgrade, it’s a step-change in how defenders stay ahead of attackers. Check out the deep dive here: sublime.security/blog https://lnkd.in/eYxsHSqF

35

🔐 The agentic arms race is on — and SentinelOne is leading the charge. Why is SentinelOne poised to win the next big shift in cybersecurity? According to a recent Seeking Alpha analysis 👇 ✅ Autonomous AI is the future cyber threats move at machine speed. Only agentic, autonomous AI can keep up — detecting, analyzing, and responding in real time. Human-augmented approaches are no longer enough. 🧠 Built-in AI, not bolted-on SentinelOne was born in AI. Our patented, on-device behavioral AI enables autonomous protection at the edge — no cloud dependency, no delay. 📈 Strong growth, clear path to profitability: +23% YoY revenue, improving margins, and still trading at attractive multiples — a rare combo of innovation and business fundamentals. 🚀 What sets SentinelOne apart? - Embedded agentic intelligence - Unified platform (EDR, CNAPP, AI SIEM) - Real-time autonomous response - Vision for fully autonomous SecOps 👉 The industry is shifting fast. Legacy players are adapting. We’re already there. #CyberSecurity #AI #SentinelOne #AgenticAI #AutonomousSecurity #SecOps #Innovation

44

🚀 Finding risks is easy. Fixing them is hard. That’s why Orca Security goes beyond detection with native ticketing integrations. ✅ Automatically open Jira/SNow tickets with full context & remediation steps ✅ Bi-directional sync—close in your ITSM, it closes in Orca ✅ Track, snooze, or dismiss alerts with audit-ready documentation ✅ Route tickets to the right owners based on tags or policies The result: less noise, faster remediation, and clear proof of risk reduction. With Orca, cloud findings don’t just sit in a dashboard—they turn into measurable action. #CloudSecurity #DevSecOps #Automation #OrcaSecurity

36

2 commentaires

Rubrik was quite the grand finale to this round of cybersecurity-related earnings reports. Don't get me wrong – I'm looking forward to SailPoint's report next week, but I don't know how you can top this. 38% subscription ARR growth. Net new ARR up 23% YoY. Improving profitability. Increased guidance. Raise your hand if you expected them to keep posting results like this after almost a year as a public company. Yeah, definitely not me. It's really too bad some people still don't want to claim them as a cybersecurity company... Cybersecurity or not, let's dig in on two key points: → These results are impressive beyond cybersecurity Rubrik's 49% top line revenue growth is among the best in the entire software industry, not just cybersecurity or infrastructure (however you want to group them). The average LTM revenue growth rate across the software industry is ~15%. Forecasts are looking even worse at ~12%. Rubrik is a glass of water in the middle of a desert for a software industry that's starving for growth this quarter. → Why identity resilience is a big deal Their new identity resilience was a big topic of discussion on the call. It's worth clarifying what the product does and why it matters while it's still new. First, what the product does: it backs up an restores identity infrastructure like Microsoft Entra (fka Active Directory). Oversimplified, but let's stick with that. What it *doesn't* do is important from a competitive standpoint: Rubrik identity resilience does not compete with workforce identity platforms like SailPoint, CyberArk, Microsoft Entra, Ping, etc. It helps make a company's operational identity infrastructure more resilient. Very, very important distinction. So, why does identity resilience matter? Because you're literally #%$~'ed if core identity systems go down. If a company's entire workforce can't log in to most apps, basically everything grinds to a halt. Backup and recovery for core infrastructure like directories (which are the back end for lots of authentication and authorization activity) has been surprisingly brittle (historically). LDAP is the foundation for directories, which is different than a regular relational database. Lots of operations teams just use scripts to run periodic backups. This works, but it's a pretty casual process for such an important function. Rubrik's product is like the Ferrari version of backing up and restoring identity infrastructure. They build and maintain the product, store the data along with all your other backups in the cloud, and give you all the other goodness of the full platform. I'd take that over scripts or a point product any day. Nobody cares how much money your script is saving the company when people can't log in. -- This was a near-perfect start to the new fiscal year for Rubrik. It seems like they could hold up for the rest of the year, too. Bipul Sinha and team have got it rolling as a public company.

259

16 commentaires

In SE Labs’ latest Ransomware Test Report, Cortex XDR delivered a perfect score — 100% prevention, 0 false positives — and earned their highest possible rating: AAA. Why this matters: ransomware is projected to cost organizations $275B a year by 2031, with a new attack every 2 seconds. These tests weren’t lab-only simulations — they used 556 real-world samples, including brand-new threats delivered via phishing and other common entry points Report Attached below

69

HYAS Highlights 📌 ✅ Advanced Threat Prevention Utilizes Machine Learning for intelligent threat detection Leverages Authoritative Attacker Infrastructure Knowledge Powered by Unrivaled Domain-based Intelligence Enables organizations to proactively prevent threats ✅ Effective Attack Disruption Eliminates attacker communications and renders attacks ineffective Blocks malicious domains and C2 infrastructure before they can cause harm ✅ Seamless Integration & Visibility Provides DNS visibility without requiring infrastructure replacement No need to replace existing tools or security stack Offers VPN network visibility for full traffic analysis ✅ Comprehensive Threat Intelligence Supports First Seen / Last Seen Domain checks to track domain risk over time Enables Proactive Threat Hunting with deep DNS intelligence ✅ Ease of Deployment & Operations Agent-less deployment — fast and easy to roll out One-click infected device detection for rapid response  #DNSProtect #DNSSight #DNSVisibility #SeamlessIntegration #NetworkSecurity #VPNVisibility #AgentlessDeployment #RapidResponse #CyberOps #SecurityOperations #C2Protection #CyberSecurity

22

While open source offers many benefits, the 2025 OSSRA report highlights the need to address vulnerabilities, license conflicts, and maintenance challenges. Check out these six key takeaways from the 2025 “Open Source Security and Risk Analysis” report ⤵️ : https://lnkd.in/egx2suXA

14

🔊 RSA Conference 2025 is in full swing… and one topic is dominating every conversation: the Secure Enterprise Browser. Across every industry, every region, and every kind of IT setup — from lean teams to complex global infrastructures — the interest is universal. 👥 Back-to-back meetings, nonstop demos, POC requests flooding in — the momentum is real. And here’s what the industry is saying: 👉“Secure enterprise browsers represent a compelling solution to consolidate security controls while improving user experience”, Gartner 👉“There’s a significant uptick in phishing, fraud and identity-based attacks occurring within the browser itself”, Information Security Media Group (ISMG) - https://lnkd.in/ePk8Jzwf 👉“Palo Alto Networks is bringing enterprise-grade protection directly into the browser, giving organizations a new level of control over AI usage, data exfiltration and user behavior — without adding friction”, CRN 👉“Consumer browsers were not designed for enterprise use or the challenging environments in which we now run them. If attackers take over a browser, then pretty much they have access to all our data”, Ofer Ben-Noon 🙏 Huge thanks to our customers for their trust and feedback — and to everyone showing strong interest in PAB. Curious why everyone’s talking about it? 💻 Try it for yourself: no architecture changes, silent deployment… and full visibility & control in just minutes. Elad Gavra, Glenn M., Justin Kapahi, Chris Gaba, Shlomi Zrahia, Guy Harpak - https://lnkd.in/emw6kdzp

53

1 commentaire

#QuantumComputers aren’t just a futuristic concept anymore. They’re advancing fast — and with them comes the risk of shattering current #encryption standards. Worse yet, attackers are already engaging in “Harvest now, decrypt later” tactics, collecting encrypted data today to break it with quantum power tomorrow. 🔐 Start thinking of transitioning to post-quantum cryptography. #pqc 📉 Delaying this shift isn’t a technical inconvenience — it’s a business, operational and security risk. What I like about this article: it doesn’t just explain the threat, it illustrates it— in a clear, simplified and animated way that cuts through the technical fog. Speak with your IBM #Guardium SMEs to learn more about #quantumsafe and #cryptoagility. https://lnkd.in/gB-ixm9W #CryptographyRelevantQuantumComputer #CRQC #CyberSecurity #PostQuantumCryptography #Encryption #RiskManagement #IBM

53

1 commentaire

ToolShell is being actively exploited — here’s what you need to know. On July 19th, Microsoft disclosed critical vulnerabilities in on-premise SharePoint Servers — CVE-2025-53770, CVE-2025-53771, and earlier ToolShell-related variants. Senior Threat Intel Researcher Mohammad Kazem Hassan Nejad has observed active exploitation as early as July 7th. So this is not a theoretical risk. Attackers are leveraging these bugs for unauthenticated remote code execution, gaining access to content, configs, deploying webshells and moving laterally. ⚠️ This does not affect SharePoint Online — only on-premise SharePoint Server deployments. If your org runs on-prem: ✔️ Patch immediately ✔️ Investigate for compromise ✔️ Monitor for post-exploitation activity WithSecure published a detailed technical report, including TTPs, IOCs, and remediation guidance. If you're in security, ops, or leadership, it’s worth your time. 👉 Read the full report here: https://lnkd.in/dP4Tw44n #CyberSecurity #ToolShell #ThreatIntel #WithSecure #SharePoint #IncidentResponse #Microsoft #RCE #PatchNow

13

🔔 Cyber Market Monday Update - Headlines from last week 👇 ▪️Last week Rubrik announced plans to acquire Predibase a startup focused on training open sourced AI models, while the terms of the deal was not public, CNBC, TechCrunch and others report the deal was between $100-$500M. ▪️Snyk also announced the acquisition of Invariant Labs a leader in AI security research to add to their AI Trust Platform to secure applications from emergent AI threats. Valuation was not public. ▪️Channel Futures also released their MSP 501 report listing the top 501 MSPs in 2025. The number one spot is held by Ensono an Illinois based firm with over 3,500+ employees. ▪️Multiple airlines have reported cyber attacks in the last week including Canadian Airline WestJet and US based Hawaiian Airlines. #publicmarkets #cybersecurity #investing #stocks  —————————————————————— ♻️ Repost to share with other cybersecurity industry professionals 🔔 Follow Konnor Andersen for more tips on cybersecurity GTM ——————————————————————

18

AI is listening, and attackers know exactly what to say. ☠ Prompt injection is the new language of exploitation — subtle, fast, and dangerous. At Cato Networks, we’re not just watching it happen, we’re preventing it. Discover how network-layer AI driven security stops these threats at the source 👉https://bit.ly/3Vj9mZJ #SASE #GenAI

14

1 commentaire