Enterprise Security Weekly Episode #253 – December 09, 2021

Subscribe to all of our shows and mailing list by visiting: https://securityweekly.com/subscribe

1. Digging Into XDR – 03:00 PM-03:30 PM

Announcements

• Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!

Description

XDR is the buzzword practitioners can’t seem to escape. Or is it? Allie Mellen, Forrester Analyst, will cover her research on what XDR is and what it isn’t to help practitioners understand what it really means for them.

Segment Resources:
https://www.forrester.com/blogs/announcing-the-first-and-only-evaluative-research-on-xdr-the-forrester-new-wave-extended-detection-and-response-providers-q4-2021/ https://www.forrester.com/blogs/xdr-faq-frequently-asked-questions-on-extended-detection-and-response/ https://www.forrester.com/blogs/what-security-market-definitions-tell-practitioners/

Guest(s)

Allie Mellen – Industry Analyst at Forrester Research @hackerxbella Allie supports security and risk professionals, covering security infrastructure and operations to assist clients in building and maturing their threat detection and response strategies. Her coverage includes the people, processes, and tools of the security operations center.

Hosts

Adrian Sanabria @sawaba Senior Research Engineer at CyberRisk Alliance

Katie Teitler @Katherinert15 Sr. Product Marketing Manager at Axonius

Tyler Shields @txs CMO at JupiterOne

2. Securing the Invisible: Holes in Your Visibility Fabric & Where Hackers Hide – 03:30 PM-04:00 PM

Sponsored By

Visit https://securityweekly.com/riverbed for more information!

Announcements

• Throughout 2022, CRA’s Business Intelligence Unit will be releasing research reports on the top topics across the security industry. Our first report will be on Third-Party Risk and the Supply Chain. To participate in the survey, please visit https://securityweekly.com/thirdpartyrisk. The results will be shared at our Third-Party Risk eSummit in January.

Description

Riverbed’s Network Security Solutions provide the full-fidelity network visibility organizations need to see everything.
The rise of cloud and user mobility has increased the complexity and the reach of modern networks, expanding the risk perimeter for cyber-attacks. Riverbed enables organizations to address performance, visibility, and security holistically so they can overcome complexity and fully capitalize on their digital and cloud investments.

Segment Resources:
https://visibility.riverbed.com/ https://www.riverbed.com/solutions/security.html
https://www.riverbed.com/products/npm/netprofiler-advanced-security-module.html

This segment is sponsored by Riverbed Technology.

Visit https://securityweekly.com/riverbed to learn more about them!

Guest(s)

Vincent Berk – CTO and Chief Security Architect at Riverbed Vincent Berk is CTO and Chief Security Architect at Riverbed and is responsible for setting the vision and strategy for the network performance monitoring (NPM) business unit in the cyber security space. Berk joined Riverbed through the acquisition of FlowTraq, an enterprise security analytics company where he served as founder and CEO. Previously, Berk taught computer science at Dartmouth College. He has a Ph.D. in machine learning and large-scale data analytics from Leiden University and holds several patents in the application of large-scale data analytics in cyber security.

Hosts

Adrian Sanabria @sawaba Senior Research Engineer at CyberRisk Alliance

Katie Teitler @Katherinert15 Sr. Product Marketing Manager at Axonius

Tyler Shields @txs CMO at JupiterOne

3. Unicorns Galore, Selling Text Messages, Spicy Takes, & Treacherous Devs – 04:00 PM-04:30 PM

Announcements

• In an overabundance of caution, we have decided to flip this year’s SW Unlocked to a virtual format. The safety of our listeners and hosts is our number one priority. We will miss seeing you all in person, but we hope you can still join us at Security Weekly Unlocked Virtual! The event will now take place on Thursday, Dec 16 from 9am-6pm ET. You can still register for free at https://securityweekly.com/unlocked.

• Don’t forget to check out our library of on-demand webcasts & technical trainings at https://securityweekly.com/ondemand

Description

Finally, in the enterprise security news: At least a dozen cybersecurity companies announced raises totaling more than $900m – just in the past week!, Permira proposes to take Mimecast private for $5.8bn, The leader of a Swiss tech company is accused of selling access to text message data for surveillance, A former Ubiquiti developer was behind the big breach announced earlier this year – he unsuccessfully tried to extort his employer, SentinelOne tries to bring mobile security back?, Google and Trail of Bits team up to release a tool that scans for vulnerable Python packages, CISA has assembled a panel that will begin making cybersecurity recommendations, Make sure to stick around for, This week’s spicy take – Cloudflare recommends ditching your firewall, and This week’s squirrel story – a new streaming service from an unexpected source! All that and more, on this episode of Enterprise Security Weekly!

Hosts

Adrian Sanabria @sawaba Senior Research Engineer at CyberRisk Alliance

FUNDING: Claroty Advances Mission to Secure All Cyber-Physical Systems with $400 Million Funding and Acquisition of Medigate – FUNDING: Cloud security firm Panther Labs raises fresh funds at $1.4 bln valuation – FUNDING: Blockchain Security Firm CertiK Raises $80M at Nearly $1B Valuation – FUNDING: IRONSCALES Raises $64 Million in Series C Funding Round Led by PSG – FUNDING: Blockchain Intelligence Company TRM Labs Announces $60 million Series B Led by Tiger Global – FUNDING: Torq Raises $50M in Series B to Reinvent Security Automation for Modern Digital Enterprises – FUNDING: GitGuardian raises $44M to offer ‘comprehensive’ code security – FUNDING: Adlumin Secures $25 Million in Series B Funding – FUNDING: Kasada Raises $23M in Series C Funding – FUNDING: Grip Security raises $19M Series A for its SaaS security platform – TechCrunch – FUNDING: Truffle Security raises $14 million Series A led by a16z — Truffle Security – FUNDING: Chainguard lands $5M to help companies secure their software supply chains – TechCrunch – FUNDING: New VC firm, Ballistic Ventures – TAKE PRIVATE: Permira To Take Mimecast Private Approximately $5.8 Bln All-cash Deal – Quick Facts – TRENDS: Swiss tech company boss accused of selling mobile network access for spying – If you need yet another reason to justify moving away from SMS-based multi-factor authentication, this is just the latest situation where text messages have been compromised. This time, the compromise was allegedly intentional. TRENDS: Former Ubiquiti dev charged for trying to extort his employer – Insider threat meets supply chain threat. As customers, there’s not much we can do to avoid this kind of situation. NEW PRODUCT: Singularity Mobile – TOOLS: Pip-audit: Google-backed tool probes Python environments for vulnerable packages – REGULATION: CISA’s advisory panel is announced, set to make recommendations on major cyber topics – CyberScoop – SPICY: Cloudflare CEO: Ditch Palo Alto Networks, Win a Trip to Oahu – SQUIRREL: Salesforce+ – You’ve probably heard of Disney+. Maybe Discovery+? How about Paramount+? AMC+? Well, now there’s Salesforce+, and it’s exactly what it sounds like. A streaming service from Salesforce. Some of the content is original, some is licensed, and some is indistinguishable from what you might see on Discovery+. It’s a bit surreal.

Katie Teitler @Katherinert15 Sr. Product Marketing Manager at Axonius

Tyler Shields @txs CMO at JupiterOne