Victor Desteucq

2025 will be a defining year for external threat intelligence. Having observed trends with CybelAngel for the past year, I’ve noticed: ☑️ Ransomware threats are on the up: CybelAngel detected a 42% rise in reported attacks. ☑️ AI is fueling cyber attacks: Since ChatGPT’s arrival, phishing emails have increased by 1,265%. ☑️ API exposure is rising: We’ve seen a 625% increase in API exposure losses since 2021. ☑️ APT groups are mobilizing: Nation-state sponsored threat actors are more active and creative than ever. In our 2025 report, I have unpacked key insights into cyber threats for 2025, along with best practices and recommendations for #CISOs to fight back. Read it here: https://bit.ly/3WSrXwW

53

2 commentaires

At VULNCON, I had the opportunity to moderate a panel discussion on “Security Left, Right, and Center: How Modern Security Teams Bake It In”. We tried to keep it practical, to the point, and rooted in what teams are actually dealing with. Thanks to: 🔹 Shashank . – Co-founder & CEO at CredShields 🔹 Abhinav Chourasia – Director, Security Engineering at Tekion 🔹 Mohan Sekar – Sr. Director, Product Security at Cloud Software Group We dove into areas that often get hand-waved in meetings: - Are developers truly owning security? And should they? - Is Shift Left enough, or is post-prod visibility just as critical? - How do you prioritize thousands of open vulnerabilities? - Why are organizations still getting breached, despite all sorts of internal tooling? - Is cosmetic security useful? Or orgs should focus on deep scans and true visibility. - And yes, Developer velocity vs Security. #CyberSecurity #AppSec #EASM #ProductSecurity #SecurityLeadership RedHunt Labs

129

2 commentaires

I’m pleased to announce the release of my new guide ‘Rethinking Secure Remote Access for Industrial and OT Networks’. This guide explores today’s evolving threat landscape and breaks down the strengths and weaknesses of different kinds of remote access technologies. The eBook is designed to help people understand which solutions truly protect critical operations, and which leave those operations unacceptably exposed. Get your free copy here and I look forward to hearing your thoughts ➡️ https://bit.ly/3JKfBTR

66

3 commentaires

Many Security Operations Centers (SOCs) today are equipped with powerful tools. But complex infrastructures create siloed data sources and operational inefficiencies that hinder quick and effective threat response. Without automation at the core of SecOps, security teams can suffer from: ––Analyst fatigue due to a high number of alerts and false positives ––Elevated mean time to detect (MTTD) due to multiple disjointed detection and investigation technologies ––Increased total cost of ownership (TCO) for security monitoring and defense response ––Inefficient remediation and high mean time to respond (MTTR) Read this research study and discover how to overcome SOC complexities and inefficiencies: https://lnkd.in/exeJsGPG #SOC #CyberResilience #Cybersecurity Wipro + Palo Alto Networks

50

🔊 RSA Conference 2025 is in full swing… and one topic is dominating every conversation: the Secure Enterprise Browser. Across every industry, every region, and every kind of IT setup — from lean teams to complex global infrastructures — the interest is universal. 👥 Back-to-back meetings, nonstop demos, POC requests flooding in — the momentum is real. And here’s what the industry is saying: 👉“Secure enterprise browsers represent a compelling solution to consolidate security controls while improving user experience”, Gartner 👉“There’s a significant uptick in phishing, fraud and identity-based attacks occurring within the browser itself”, Information Security Media Group (ISMG) - https://lnkd.in/ePk8Jzwf 👉“Palo Alto Networks is bringing enterprise-grade protection directly into the browser, giving organizations a new level of control over AI usage, data exfiltration and user behavior — without adding friction”, CRN 👉“Consumer browsers were not designed for enterprise use or the challenging environments in which we now run them. If attackers take over a browser, then pretty much they have access to all our data”, Ofer Ben-Noon 🙏 Huge thanks to our customers for their trust and feedback — and to everyone showing strong interest in PAB. Curious why everyone’s talking about it? 💻 Try it for yourself: no architecture changes, silent deployment… and full visibility & control in just minutes. Elad Gavra, Glenn M., Justin Kapahi, Chris Gaba, Shlomi Zrahia, Guy Harpak - https://lnkd.in/emw6kdzp

53

1 commentaire

Our Global Threat Report is out now. Packed with insights from the front lines, it’s your ultimate guide to what’s shaping cybersecurity this year and beyond. Inside you’ll find: 1️⃣  Top Threats — The most intense AND most persistent risks 2️⃣ Real-World Intrusions — Deep-dive IR case studies (yes, including data theft via JIRA) 3️⃣ Strategic Outlook — What CISOs must prioritize to stay ahead Get the full report and stay one step ahead: https://s1.ai/ThrtRt-25

23

🚨 Active Directory is less like a castle—and more like the spine in your body. Break it, and nothing moves. We’re in 2025. Ransomware actors are evolving. Supply chain attackers are thinking months ahead. And yet… the most critical identity system in the enterprise—Active Directory (AD)—is still treated like old plumbing. 🔐 Here’s the uncomfortable truth: AD isn’t legacy tech. It’s your central nervous system—controlling every login, every system, every trust. And attackers now know how to sever it with surgical precision. 🧠 When AD is compromised, it’s not a typical breach. It’s full-system paralysis. No access. No controls. No recovery—until they say so. ⸻ 🧨 Just this year: • In April 2025, Marks & Spencer was hit hard. Attackers stole AD secrets (the NTDS.dit file), used them to deploy ransomware across 1,000+ stores, and brought operations to a halt. • Microsoft’s own Windows Server 2025 introduced BadSuccessor, a now-public flaw in delegated Managed Service Accounts (dMSA) that allows silent privilege escalation to any user—including domain admins—through default configurations. ⸻ 💸 But what’s the real cost when AD goes dark? Most teams don’t know. Until they’re living it. 📊 Verified data shows: • For large enterprises: 💰 $14,056 per minute → $20.2 million per day (Source: BigPanda via Gartner) • For industrial sectors (e.g. automotive): 💰 $2.3 million per hour → $55.2 million per day (Source: Siemens, 2024) • For SMBs: 💰 Up to $55,000 per day in lost revenue, recovery costs, and reputational damage (Source: EN Computers) These aren’t inflated numbers. They include: • Lost transactions and sales • SLA and compliance penalties • Recovery staffing and IR costs • Long-term trust erosion And almost all of them stem from a single point of failure: identity. ⸻ 🔥 AD isn’t infrastructure. It’s your digital spine. Bend it, and your company might survive. Break it, and you’re flatlined. ⏳ If you haven’t assessed AD attack paths, hardened your trust relationships, or validated recovery—this is your warning. 💬 Ready to rethink your identity security strategy? Let’s talk. #IdentitySecurity #ActiveDirectory #Semperis #CyberSecurity #ZeroTrust #IncidentResponse #Ransomware #ADSecurity #CyberResilience #CISO

26

A10 Networks, Inc announces new AI firewall capabilities that can be deployed in front of APIs or URLs that expose large language models – either as a custom LLM or developed on top of a commercial solution like OpenAI or Anthropic. Built on edge-optimized architecture with GPU-enabled hardware, these capabilities protect AI LLMs at high performance and can be deployed in any infrastructure as an incremental security capability. #softwareengineering #innovation #informationsecurity #cloud #technology #ai

27

HYAS Highlights 📌 ✅ Advanced Threat Prevention Utilizes Machine Learning for intelligent threat detection Leverages Authoritative Attacker Infrastructure Knowledge Powered by Unrivaled Domain-based Intelligence Enables organizations to proactively prevent threats ✅ Effective Attack Disruption Eliminates attacker communications and renders attacks ineffective Blocks malicious domains and C2 infrastructure before they can cause harm ✅ Seamless Integration & Visibility Provides DNS visibility without requiring infrastructure replacement No need to replace existing tools or security stack Offers VPN network visibility for full traffic analysis ✅ Comprehensive Threat Intelligence Supports First Seen / Last Seen Domain checks to track domain risk over time Enables Proactive Threat Hunting with deep DNS intelligence ✅ Ease of Deployment & Operations Agent-less deployment — fast and easy to roll out One-click infected device detection for rapid response  #DNSProtect #DNSSight #DNSVisibility #SeamlessIntegration #NetworkSecurity #VPNVisibility #AgentlessDeployment #RapidResponse #CyberOps #SecurityOperations #C2Protection #CyberSecurity

22

EDR - XDR - SIEM - AI Security acronyms aren’t just buzzwords — they’re signposts of evolution. Many security leaders ask themselves this question: “When is it time to converge?” The answer: It already is. Gartner, Forrester, and IDC have all pointed to the need for platformization — converging siloed security tools into integrated platforms that unify data, accelerate response, and reduce operational fatigue. It’s not just about visibility. It’s about outcomes: better risk posture, faster decision-making, and tighter alignment between security and business. The most secure, agile organizations are already moving this way — integrating XDR, SIEM, SOAR, and AI under one intelligent architecture. They’re not patching complexity — they’re replacing it. This is Cyber Platform Thinking — and it’s the foundation of Trend Micro’s Vision One platform. Because when you unify your defense stack and let intelligence flow freely, you don’t just detect more. You lead more. #CyberInsights #XDR #AI #SecurityPlatform #TrendMicro #PlatformStrategy #CISO #CyberLeadership #AnalystPerspectives #RiskManagement https://lnkd.in/gavVriaM

22

🆕 CrowdStrike is acquiring Onum to supercharge autonomous cybersecurity with real-time data pipelines. If Falcon SIEM is the engine of the modern SOC, Onum is both the pipeline + filter — streaming high-quality, filtered fuel quickly into the engine to drive more efficient and superior performance. Onum delivers transformational advantages across three critical dimensions: ⚡ Speed: Delivers 5X more events per second than its nearest competitor and processes security and observability data in real-time versus legacy batch and store methods. ⚡ Cost: Smart filtering reduces data storage costs by 50% through intelligent optimization. ⚡ Superior Outcomes: Real-time pipeline detection starts before data enters the Falcon platform, delivering up to 70% faster incident response with 40% less ingestion overhead. The future of cybersecurity is here – built on real-time, high-fidelity data. 👉 Learn more: https://lnkd.in/dWqhJXQK

237

2 commentaires

A Zero-Trust Architecture (ZTA) enables secure authorized access to assets — machines, applications and services running on them, and associated data and resources — whether located on-premises or in the cloud, for a hybrid workforce and partners based on an organization’s defined access policy

14

2 commentaires