-
Identity sprawl poses major risks with non-human identities (NHIs) now outnumbering human identities by 25-50x, leading to 80% of identity-related breaches involving compromised service accounts, API keys and machine credentials.
-
Organizations face critical challenges including plain-text credentials in code, lack of rotation, over-privileged accounts, and inadequate monitoring, with only 15% confident in their ability to secure NHIs. The rise of GenAI and cloud services is accelerating these risks.
-
The NHI security market saw explosive growth in 2024 with ~$400M in VC funding and major acquisitions like CyberArk's $1.54B purchase of Venafi, as vendors rush to address gaps in lifecycle management and real-time threat prevention capabilities.
-
Organizations report cyber recovery (CR) requires distinct approaches from disaster recovery (DR), with 68% stating it involves different processes and technologies, while 58% note it needs different skill sets.
-
Survey reveals CR is significantly more challenging, with 4.6x more respondents rating CR technologies as more complex than DR, and 3.3x more reporting difficulty in finding staff with appropriate skills.
-
While 52% of organizations include CR within their DR programs, 91% emphasize that significant time is required for forensics to determine attack scope, and 85% stress the importance of establishing clean room environments before recovery.
Discover my collection of industry reports, guides and cheat sheets in Cyber Strategy OS.
-
New Digital Operational Resilience Act requires financial institutions to implement comprehensive ICT risk management frameworks, with implementation costs ranging from €5-15M for planning alone, and enforcement beginning January 2024.
-
Survey reveals 43% of UK financial firms won't achieve compliance for at least three months, citing insufficient organizational prioritization and skills shortage as main barriers, with potential fines up to 1% of worldwide daily turnover.
-
Smaller financial institutions face particular challenges in securing required expertise, leading to increased reliance on external service providers and managed services for compliance, though proportionality principle allows simplified implementation based on organization size.
-
Modern AppSec roles require candidates with software development backgrounds, with most employers seeking engineers who can write code and build scalable security automations rather than just perform manual security tasks.
-
Future AppSec engineers must demonstrate expertise across four key areas: traditional security skills, development capabilities, program management, and influence skills - including the ability to communicate effectively with different stakeholders.
-
Entry-level security positions are becoming rare, as organizations prioritize candidates who can be immediately productive and bring practical engineering experience, particularly in building and managing large-scale security tooling and bug bounty programs.
-
Candidate went through extensive 7-round interview process over 2 months for Senior Cybersecurity Analyst (CSIRT) role, initially advertised as remote/hybrid, including technical assessments and multiple 1:1 interviews.
-
After reaching final selection stage as top 3 candidate, company introduced new requirements including a 4 AM shift option and potential additional interviews, followed by delays attributed to new VP oversight.
-
Position ultimately transitioned to mandatory onsite requirement in Minnesota, contradicting initial remote work arrangement, leading to withdrawal of candidate who was unable to relocate.
-
Repository categorizes AI risks across seven domains and 23 subdomains, using systematic search strategy to analyze 56 different AI risk classifications and frameworks
-
Database employs dual classification system: a Causal Taxonomy explaining how/when/why risks occur, and a Domain Taxonomy organizing risks by impact areas like misinformation and privacy
-
Research team developed searchable database with source attribution, enabling professionals to explore risks through multiple lenses including pre-deployment concerns and specific threat vectors
-
Extensions, Functions, and Data Stores are introduced as primary tool types that enable Google AI models to interact with external systems and real-world data.
-
The tools are designed to bridge the gap between foundational models and external systems through an orchestration layer that uses reasoning frameworks like ReAct and Chain-of-Thought.
-
Agent architectures combine a language model core with these tools through a cyclical process of information gathering, reasoning, and action-taking to achieve specific goals autonomously.
-
High severity (CVSS 8.6) vulnerability in ChatGPT's crawler allows attackers to trigger DDoS attacks on target websites by exploiting an attribution API endpoint that lacks rate limiting and duplicate request checks.
-
The vulnerability enables significant attack amplification through OpenAI's Azure infrastructure, with a single malicious request capable of spawning thousands of simultaneous crawler connections to victim websites.
-
After failed responsible disclosure attempts through multiple channels, the vulnerability was publicly revealed, leading OpenAI to disable the vulnerable /backend-api/attributions endpoint.
-
Citrix's acquisition of Unicon brings the eLux operating system and Scout management platform, currently deployed across 2.5 million endpoints in 65+ countries, enhancing their ability to provide secure endpoint management without additional OS licensing costs.
-
The integration enables organizations to repurpose existing hardware beyond Windows 10 end-of-support, supporting sustainability initiatives while maintaining secure access to Citrix Virtual Apps, Desktops, and Enterprise Browser.
-
This strategic move follows Citrix's recent acquisitions of deviceTRUST and Strong Network, strengthening their zero-trust security portfolio and expanding their capabilities in the finance, public sector, and healthcare industries.
-
Hungarian-founded startup developed a vendor-agnostic platform that automates security data curation, promising over 50% reduction in data volume and elimination of manual data wrangling.
-
Platform features automated discovery of security data sources (syslog, OpenTelemetry, Windows), with capabilities for data classification, normalization, and enrichment in both SaaS and air-gapped environments.
-
Funding led by EBRD Venture Capital will accelerate development for general availability by August 2024, with total company funding now reaching $10M.
-
DryRun's platform combines static analysis and AI to provide real-time vulnerability insights, integrating directly with GitHub for immediate security feedback during development.
-
Company launched new Natural Language Code Policies feature allowing teams to create security rules using conversational language, eliminating need for custom scripting in security policy enforcement.
-
Investment led by LiveOak Venture Partners and Work-Bench will support expansion of go-to-market operations for their Contextual Security Analysis (CSA) platform, which identifies code vulnerabilities before deployment.
From Security Expert to Strategic Leader
Stop drowning in operational details. Get the strategic insights, frameworks, and leadership guidance you need to confidently step into your next security leadership role - all in just 10 minutes a week.
I will never spam or sell your information.
DIANNA is an AI-powered cybersecurity companion from Deep Instinct that analyzes and explains unknown threats, offering malware analysis and translating code intent into natural language.
SentinelOne Purple AI is an AI-powered security analyst solution that simplifies threat hunting and investigations, empowers analysts, accelerates security operations, and safeguards data.
Sense Defence is a next-generation web security suite that leverages AI to provide real-time threat detection and blocking.
Before you go
If you found this newsletter useful, I'd really appreciate if you could forward it to your community and share your feedback below!
For more frequent cybersecurity leadership insights and tips, follow me on LinkedIn, BlueSky and Mastodon.
Best,
Nikoloz
