John Lima

MCP servers are integral to agentic architectures, enabling AI agents to integrate seamlessly with external tools and data sources. However, this integration requires special attention to key security challenges:​ 🔒Authentication and Authorization: Verify identities and control access to ensure only authorized entities interact with MCP servers.​ 💡Real-time Context Validation: Ensure interactions are appropriate and authorized in real-time.​ 🛡️API-Level Introspection: Monitor and analyze API calls for anomalies.​ 🚨Threat Detection for Autonomous Behaviors: Identify and mitigate risks associated with AI-driven operations.​ Long live secure MCP servers. #AgenticArchitecture #AISecurity #MCPServers #Centerofexcellence #evolutionportfolio

29

4 Comments

🚨 New GroWrk Visionaries Episode 🚨 Eddie Borrero on AI, Cyber Resilience & the Future of IT Lifecycle Management We sat down with Eddie Borrero, SVP & CIO at Stellarus and former CISO at Blue Shield of California — a $23B nonprofit healthcare plan with 7,500+ employees — to unpack what it takes to secure complex global enterprises in the AI era. In this candid interview, Eddie shares hard-earned lessons on: 🔐 Why IT asset lifecycle management is critical to enterprise security 🤖 How leading orgs are embracing AI without compromising compliance 🏥 What healthcare teaches us about risk, control, and transformation 📊 And why IT ops is shifting from a cost center to strategic core At GroWrk, we help enterprises do just that — managing IT assets across 150+ countries with automation, security, and scale in mind. Huge thanks to Eddie for keeping it real and dropping knowledge. This one’s a must-watch for CIOs, CISOs, and anyone building secure IT at scale. 🎥 Watch the full interview here → https://lnkd.in/gNYyA--F #CIO #CISO #AI #Cybersecurity #ITAssetManagement #EnterpriseIT #GroWrkVisionaries #HealthcareTech #GroWrk

1,498

26 Comments

Meet Keygraph from our PearX S25 cohort 🚀 Founder Varun Sivamani saw too many security teams juggling too many tools, from identity management and device management to application security and compliance. This result is complexity and busywork instead of real security.  Keygraph is simplifying all of it. It’s an AI-native security and compliance platform that unifies the security stack around the identity and device graph. Excited to see Varun build the single platform for compliance, identity, device management, and compliance.

44

6 Comments

🚨 New on Mysa: MSME Vendor Tagging 🚨 You can now tag MSME vendors directly in Mysa, helping ensure stronger compliance. Mysa will auto fetch the MSME validity and category when you add the Udyam number. We’re excited to roll out a powerful new feature to help businesses stay compliant and responsible: 🏷️ With this update, you can now easily tag your MSME vendors, check validity and bracket on Mysa — enabling better tracking, timely payments, and smoother compliance. Why this matters: 💡 As per law, companies are required to pay MSME vendors within 45 days (or the agreed terms, whichever is shorter). ⏱️ Delays can attract interest penalties 🧾 Non-disclosure of MSME dues can even result in audit report qualifications. It’s a small step with big compliance impact. 👉 Mysa is here to help you do business better — responsibly, transparently, and in full control. #MysaUpdates #MSME #Compliance #FinanceOps #B2BPayments #StartupIndia #MSMEIndia #FintechForGood

63

Most enterprise breaches today start with compromised identity. Attackers no longer break in — they log in. In today’s threat landscape, identity has become the primary attack surface. Gartner has warned that by 2026, 30% of enterprises will no longer consider traditional identity verification and multi-factor authentication sufficient on their own. AI-driven impersonation and social engineering are outpacing legacy defenses. This isn’t a future concern. It’s an operating reality, now. Deepfakes have moved beyond novelty. They’re being used to impersonate executives, authorize transactions, and gain access to systems — faster and more convincingly than many defenses can reliably detect. For governments and regulated industries, the risk is even higher. At home, I see how early our digital trust models are formed. When my kids want something online, they don’t think about accounts or authentication — a familiar voice is enough. Identity and trust are assumed. That model works… until it doesn’t. In the enterprise and public sector, we’re watching the same assumption fail at scale. AI has fundamentally changed authentication: • Voices can be cloned • Faces can be generated • Even biometric signals once considered strong can be replicated Deepfakes aren’t just fooling people — they’re increasingly bypassing systems designed to verify identity. This feels less like a traditional security issue and more like a foundational risk. If identity can’t be reliably proven, everything built on trust begins to crack. Digital identity has to move beyond convenience. It must be provable, resilient, and designed for an AI-native world — not one where seeing and hearing were enough. (Link to Newsweek article on this topic in comments below) #DigitalIdentity #Trust #Cybersecurity #AI #Authentication #FutureOfSecurity

57

4 Comments

Welcome to Vanta, Riskey! Vendor risk remains one of the harder problems in security: more vendors, more surface area, and traditional reviews that just can’t keep up. Riskey took a smarter approach: real-time, AI-powered monitoring to help security teams stay ahead of third- and fourth-party risk. We're announcing the acquisition today, *and* we've already integrated Riskey's technology into Vanta VRM. For customers, this means: 🔎 Continuous monitoring for vendor vulnerabilities, breaches, misconfigurations, and leaked credentials ⚡️ Real-time alerts to catch risk as it evolves 📊 AI-powered scoring to help teams focus on what matters 📁 Auto-collected vendor docs to speed up reviews 🌐 Visibility across your the vendor ecosystem, including fourth parties Welcome to Vanta, Koren Molcho, Yoav Dagan, Eldar David and the rest of the Riskey team! Excited for what's ahead –

415

15 Comments

I’m thrilled to announce that Dataminr has signed a definitive agreement to acquire ThreatConnect, a leading intelligence management platform for contextualizing and prioritizing threats across internal client data environments. With the acquisition of ThreatConnect and our recent Agentic AI advancements, Dataminr has embarked on its next chapter of innovation—expanding beyond real-time alerting to deliver Client-Tailored real-time event, threat, and risk intelligence. By fusing Dataminr signals from the public data landscape with our client’s rich internal data environments, we’ll provide greater depth, precision and relevance to our customers. We’ve now entered a future where Dataminr’s real-time intelligence will be adaptive, predictive, and more actionable than ever before. Very excited to be joining forces with Balaji Yelamanchili and ThreatConnect’s exceptional 170-person, mission-driven team and to welcome Threatconnect’s 250+ customers. To learn more, read my blog about the announcement! https://lnkd.in/ePcyda6g

530

21 Comments

DictaLabs empowers organizations with PKI consulting that goes beyond certificates and helping you build resilient digital identity frameworks that scale with your business. With solutions like vScrawl for secure document signing and CLM (Certificate Lifecycle Management), managing certificates and identities becomes effortless, automated, and auditable. 🔹 Ensure every digital transaction is trusted 🔹 Automate certificate issuance and renewal 🔹 Protect your business from cyber risks PKI isn’t just security but it’s a foundation for innovation. #PKI #DigitalIdentity #IdentityManagement #vScrawl #CLM #Dictalabs #DigitalTrust

23

3 Comments

We’ve added two powerful new features inside CoPilot to help SOC teams move faster all leveraging Wazuh: 🔎 SCA Overview – Get a centralized view of your Security Configuration Assessments across all clients. Instantly see which endpoints are most compliant (and which need attention), with filters to zero in on specific customers or score ranges. 🛡 Vulnerability Overview – Surface vulnerabilities collected by the Wazuh Manager, ranked by EPSS score. This means you can prioritize what matters most—sometimes a “High” is more urgent than a “Critical.” The goal? To make CoPilot your one-stop shop for open-source security operations by giving you both the big picture and the details in real time. https://lnkd.in/gXJjGF5Q

50

1 Comment

Great to conversation with Amit Elazari, Dr. J.S.D, CEO & Co-Founder of OpenPolicy at the Billington CyberSecurity Summit. In today’s fast-shifting landscape, if you don’t speak policy, you miss half the reason your customers buy. From #AI to #ZeroTrust, policy drives demand — and staying ahead is essential. 🔴 FULL episode here 👇👇👇👇 https://lnkd.in/eq9tqi2k #GovTech #CyberSecurity #PolicyAI #CloudSecurity #DataProtection #FedRAMP #AIAdoption Irina Denisenko Knox Systems, Inc. The Cybersphere Group Shira Rubinoff✔

71

14 Comments

Israeli M&A is running at an unprecedented pace in 2026 and the underlaying reason is really interesting. Wiz and CyberArk both cleared regulatory approval on deals announced last year. That's two megadeals closing on the same day. Beyond the massive headlines, the baseline activity in 2026 caught my attention. The numbers so far (as of Feb 11): → 13 disclosed acquisitions in 42 days → $4.2B of M&A capital → 2.2 deals per week This amounts to $100M of #liquidity returning to investors every day! What other ecosystem provides $100M of liquidity per day on average since the beginning of 2026? If this pace holds, we're looking at ~113 M&As by year-end and close to $37B in disclosed value. This is excluding the just approved megadeals and excluding the unannounced rounds (which probably add $3-20m each). What's driving this? AI is the obvious answer. 10 of 13 deals are AI-centric companies. But I think there's something deeper happening: - Acquirers are paying premium multiples to compress time-to-AI-capability rather than build internally. - Israeli startups are shipping production-level AI, not demos. That's the arbitrage. - Speed > cost in this market cycle. Meanwhile, startup creation is on the rise (we predicted this in our stealth report ~12-months ago). It seems the industry will continue producing sellable companies at an increasing rate. This year is poised to be very interesting 😇

20

1 Comment

The echo chamber of the Bay Area can make it hard to know what's real about AI tool adoption and challenges. So it was a delight to join Raul Carbajal of SailPoint, Daniel A Casellas Abdala of Crunchyroll, and a packed house in Mexico City on Tuesday to get some broader perspective. My takeaway from the roundtable discussions was that it's very much *not* isolated and things are moving fast everywhere. From startups to large enterprises, across many different industries, adoption of AI in the software development process was near universal in this crowd. And the questions and challenges were all very familiar. At my table on "best practices", people shared thoughts on:  📈 Better context for better results in fewer attempts to truly see DevEx improvement 🪜 How platform teams can provide support when the landscape is changing so fast 🔒 Data isolation and privacy at the application level ✨ How to adapt (or not) the hiring process to account for skills with AI tooling 📋 and much more… Thanks to everyone who joined and made it such a fantastic conversation!

86

1 Comment

I'm thrilled to share the exciting launch of Checkmarx One Developer Assist, the inaugural agent within our agentic-AI lineup, signaling a significant advancement in application security. With AI now taking the lead in generating code across enterprise settings, a transformative change in application development and security practices is evident. The imperative is clear: combatting AI-driven threats demands AI-fortified defenses. Developer Assist offers real-time, context-sensitive security integrated directly into AI-native IDEs such as Windsurf, Cursor, and GitHub Copilot, ensuring security commences at the root. Our early adopters are already reaping the benefits of accelerated threat identification and enhanced remediation. This isn't merely about keeping pace with development; it's about pre-empting evolving threats. We are ushering in a new epoch of proactive AI-infused application security where it's not just a choice but a necessity. Developer Assist represents the initial phase, with Policy Assist and Insights Assist agents slated for later release this year to cater to AppSec teams and CISOs. The era of secure development is evolving, underpinned by intelligent agents collaborating with developers. #AppSec #AISecurity https://lnkd.in/g93Vtbnb

224

3 Comments