Yair Cohen

At Sentra, we believe in securing data where it lives, whether it's in multi-cloud, SaaS, or on-prem environments. No extraction. No added risk. Just smart, scalable protection. I recently sat down with Adrian Sanabria from SC Media to talk about how we’re rethinking Data Security Posture Management (DSPM) at its core - using LLMs, a cloud-native design, and context-rich classification to help enterprises reduce risk and unlock secure innovation.

155

7 Comments

Holy big acquisitions! Palo Alto Networks acquires CyberArk for a cool $25B. Nikesh Arora and Udi Mokady join Jim Cramer on Mad Money to discuss why he needed to make this move, Arora stated, "I've always paid attention to markets when they inflect, because inflection points create the opportunity for us to enter markets and provide our customers differentiated services. And I believe with the #AI wave we're seeing all around us, with 88% of all ransomware attacks driven by credential theft, identity is an unsolved problem" https://lnkd.in/gE3kbYXC Brenna Karr, Nicole Hockin, Ashley Vandiver, Mike R., Sharon Vaughan

97

1 Comment

Last year at AppWorld, we announced NGINX One, billing it as our “...biggest product leap in our history” No pressure, right? Since then, we’ve released many new features for NGINX One and are seeing strong adoption with many of our largest customers lighting up their console and tapping into the #SaaS tool to streamline management, reduce operational overhead, improve observability and boost security of their #NGINX fleets. This included a host of useful capabilities — automated configuration management and updates, global certificate management, integrated performance observability of NGINX open source and NGINX Plus instances in the same dashboard, and more. At #AppWorld2025 this February in Las Vegas, I'll be giving an update on a year’s progress and discussing what’s to come. NGINX One is going to hit full stride in 2025. We are already seeing interesting uses of NGINX One. And, with AI becoming more and more central to all applications while also adding complexity to both internal and external application management, we are seeing NGINX One becoming a critical enabler for AI infrastructure, too. If you are coming to AppWorld, stay tuned for some of the cool announcements that are coming and secure your spot to attend. Hope to see you there! https://go.f5.net/upip7o0b #Technology #AI #NGINXOne

74

I’m hearing more and more from peers about cloud security. In Episode 61 of our Silo Busting podcast, I joined Yinon and Aviv to unpack the key challenges CISOs and security teams face and shared some practical advice on how to tackle them. And here is a short summary: 𝗪𝗵𝘆 𝗰𝗹𝗼𝘂𝗱 != 𝗼𝗻-𝗽𝗿𝗲𝗺: - Agility & self-service -> decentralization and shadow ownership - Ephemerality of assets -> dynamic and transient by nature, much tougher inventory, baselining, and do forensics - Heterogeneous stacks (VMs, containers, serverless, PaaS, SaaS) -> identity/secret sprawl - Flattened networks-> much easier lateral movement vs. traditional routed tiers - Shared responsibility -> muddles lines between “your node” and “their service” 𝗖𝘂𝗿𝗿𝗲𝗻𝘁 𝗰𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲𝘀: - Compliance worries shift to exposure management and workload posture - “Lift-and-shift” widens the attack surface without meta context and cloud-native controls - Risk is four-dimensional (plus time): brief exposures still count - Alert floods demand deliberate/intentional prioritization (top 10 vs. 100k vulns) 𝗪𝗵𝗮𝘁 𝘄𝗼𝗿𝗸𝘀 - Visibility first: API/agentless discovery across clouds and K8s, how and who they talk to tells a lot - Prioritize by weighted combinations: external exposure + vuln + powerful identity + sensitive data - Democratize security to engineering with ownership-aligned queues and guardrails - Immutable, redeploy-to-fix patterns to cut MTTR; practice rapid patch pipelines, use relative immutability, and transient groups - Zero Trust & micro-segmentation to reduce blast radius and buy your response team time to react - Training as a program, not an event, and build the “response muscle” To listen to the full episode, use this url: https://lnkd.in/gQEtKb-Z #Security #CloudSecurity #CISO #CNAPP #ZeroTrust #DevSecOps EPAM Systems Sharon Nimirovski Seamus Riley Wiz

60

6 Comments

In pursuit of sustaining their success, MDR providers now offer a wild mix of services that sometimes make MDR better and other times just satisfy investors chasing growth. Jess Burn and I just released a new blog and report categorizing services based on whether they augmented, distracted, or destroyed the value of an MDR service. Read the blog here: https://lnkd.in/eMGCuiVm

59

7 Comments

Exciting news as Fortra announces the acquisition of Lookout’s Cloud Security business! “By bringing Lookout’s cloud security technology into our cybersecurity platform, we’ll be able to offer one of the industry’s most complete cloud security solutions to identify and stop threats from endpoint to the cloud.” — Matthew Reck, CEO of Fortra Welcome to the Fortra family! Read the news: https://lnkd.in/e2EGuYYm

47

2 Comments

Today we’re announcing two major milestones. Command Zero received a $10 million strategic investment from three incredible partners - Okta Ventures, SE Ventures, and Crosspoint Capital. This investment validates our vision: bridging the cybersecurity skills gap while keeping human intelligence at the center of Security Operations. What really sets Command Zero apart is the problem we are solving. The cybersecurity industry isn’t lacking detections or data - but rather facing a critical shortage of expert analysts who can investigate complex threats. Our AI-powered platform democratizes cyber investigations, enabling every analyst to perform at their best.Command Zero also achieved SOC 2 Type 2 compliance, proving our commitment to the highest security standards for our customers. The future of cyber investigations is autonomous, intelligent, and scalable. And Command Zero is delivering that future today. Please read our press release for details: https://lnkd.in/gzZAdHVt

785

245 Comments

🚀 The Wiz Integration Network (#WIN) is leveling up once again — and we’re thrilled to welcome nine new partners who are pushing the boundaries of what’s possible in cloud security, compliance, and data visibility. Here’s what’s new: 🔐 Clutch Security Security – Integrate with Wiz to pull findings on resources containing sensitive information. Correlate that with non-human identity (NHI) context to prioritize risks based on sensitive access — closing a key blind spot for many orgs. 🧩 Collibra – Aggregate data findings from Wiz with other sources to build a unified view of your data assets, enabling smarter risk assessment and mitigation. 🛡️ CYFOX OmniSec – Ingest Issues, vulnerabilities, configs, and resources to power comprehensive compliance monitoring and gap detection across cloud environments. 🧬 Intezer – Push Detections from Wiz into Intezer to automate triage and response, speeding up incident resolution across your integrated security stack. 📍 Precize Inc – Enrich your asset inventory by combining Wiz Issues, vulnerabilities, and external exposure with other insights for better prioritization. ⚡ Torq (Updated) – Push Wiz Defend Detections into Torq to trigger real-time automated remediation — revoke permissions, notify teams, and update tickets without manual effort. 🔐 AKITRA Andromeda – Pull Issues, vulnerabilities, configs, resources, and users into Akitra for compliance tracking, Issue monitoring, and continuous reporting. 🔍 Bedrock Security – Enrich Wiz with classified Data Findings from Bedrock's scans, providing sharper insight into risks tied to sensitive data. 📊 @VisionX – Pull Wiz Issue data into VisionX for continuous visibility and trend monitoring, so your team can stay ahead of changes and act faster. Each of these integrations reflects our commitment to open, connected, and actionable security ecosystems — the Wiz Way. Massive thanks to the #WIN team for driving this work forward: Daphna Dayan Annam Iyer Roi Kessler Hen Perez Katerina Greenstein Eyal Golombek 👉 Follow me to stay in the loop as we continue expanding #WIN with partners who make a difference. #CloudSecurity #WIN #Wiz #Compliance #IdentitySecurity #DataSecurity #SecurityOperations #Partnerships

194

11 Comments

API security is (like so much else!) a key part of cloud security. My colleagues Dionisio Zumerle, Felix Gaehtgens, and Mark O'Neill have published guidance on managing API security in all it's multiple manifestations, and you can find this note at https://lnkd.in/gpxtUfQY (Gartner subscription required).

50

Pentera bought DevOcean - an Israeli startup led by former CyberArk head of security research Doron Naim - to operationalize the remediation of attack findings: https://lnkd.in/eDGqV7xb "One of the areas where we felt like we have a gap was everything that happens like operationalizing the results of the #Pentera attack findings so that people can actually resolve the problem. #DevOcean was introduced to us by a friend in the industry, and it looks like a match made in heaven," co-founder and CEO Amitai Ratzon told Information Security Media Group (ISMG). #ISMGnews

36

2 Comments

🚨 Security Alert for Kubernetes Users! Kubernetes disclosed four critical vulnerabilities in ingress-nginx on Monday. The most severe, CVE-2025-1974 (CVSS 9.8 - Critical), allows unauthenticated remote code execution, potentially leading to a full cluster takeover and Potential exposure of all Kubernetes secrets. Users should update immediately to 1.12.1 and v1.11.5 and restrict external access to the admission webhook. Affected Versions: • CVE-2025-1974 (Critical): Ingress-NGINX versions prior to 1.11.0 and 1.11.0 - 1.11.4 • Other Vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514): Rated High (CVSS 8.8) For more details and mitigation strategies, please take a look at the official https://lnkd.in/eeb-Q4tg.

35

Accops #VDI #whatswrongwithztna What's wrong with ZTNA! Interesting take on the limitations of ZTNA. While it’s great for securing access, it has gaps—compromised endpoints can still move laterally, cloud-based enforcement raises data residency concerns, and it doesn’t fully protect against insider threats or advanced data exfiltration attacks. The blog argues that ZTNA isn’t a silver bullet and needs to be combined with other security layers like VDI, EDR, firewalls, and IDS/IPS. Worth a read! https://lnkd.in/djP8q5_w

19

Okta + Harmonic Security As we continue to add more integrations, I’m excited to announce our latest with Okta! Once enabled, customers get additional context on alerts, such as the user’s department and office location. This will also mean even better controls and policies can be built from within Harmonic.

85

6 Comments

How can a server or app detect phishing attacks in real-time? The 'Evilginx guy' Kuba gives away some of the secrets to fight back against phishing. Listen to the podcast at https://entra.chat

49

1 Comment