Amir Grovais

In our latest Cybercory.com interview, we dive deep into #The_Dangers_of_Insecure_Cloud_Adoption: #Navigating_Risks_and_Building_Secure_Cloud_Strategies with #cybersecurity expert Armen Avagyan. With over eight years of experience in securing complex IT/OT environments and a focus on cloud security, compliance, and incident response, Armen shares invaluable insights on building a resilient and secure cloud infrastructure. As businesses accelerate their move to the cloud, the risks of insecure adoption are mounting—ranging from #data breaches and misconfigurations to compliance gaps. In this interview, Armen explores these risks and offers expert guidance on: 🔹 Protecting #critical assets in the #cloud 🔹 Avoiding common #security pitfalls 🔹 Implementing robust strategies for a secure #cloud adoption Whether you're in the cloud or planning to be, don’t miss this essential guide to safeguarding your digital assets! 👉 Read the full interview on Cybercory: https://lnkd.in/eiuQ7yDF

6

DeepCDR creates trust for uploaded files => Converts uploaded files to known-good files!

2

Breaking the Mold: 2025 Cyber Threats Outlook In 2024, we’ve seen familiar threats take on unexpected forms - from supply chain breaches and AI-driven vulnerabilities to the risks and costs caused by security complexity. As we head into 2025, understanding these shifts is essential.   Join Cato Networks’ Chief Security Strategist and Cato CTRL founding member, Etay Maor, for a Cybersecurity Masterclass unpacking key lessons from 2024’s most significant and unique breaches, and learn what organizations need to know to stay vigilant and protected in the year ahead.  https://lnkd.in/gQtJDTdr

7

‏1‏ ‏תגובה‏

Can XSIAM help to 100K users SOC? Some great insights from this use case, Hebrew slides #XSIAM #XDR #XSOAR #SOC

2

an introductory meeting with a senior manager in a leading organization in Israel. When I raised the issue of information security and the need to invest in protecting the organization, he smiled confidently and said: "Why would they want to hack into us? We are not a defense company or a bank. Everything will be fine." Familiar? 📌 The belief that organizations that do not operate in security or financial fields do not need cyber protection is wrong and dangerous. There are several possible reasons for hacking organizations, which may apply to any organization: ☑ Random and large-scale attacks, regardless of the specific target ☑ Attacks for economic gain ☑ Supply chain attacks ☑ Theft of sensitive data such as customer information, employee information, and business information ☑ Ideological and political motives Therefore, it is important for every organization to understand the importance of information security and protect its systems accordingly. Prudence and proper investment in protection can save significant future costs and damages. By the way, the same senior manager finally understood the importance of protecting the organization. Better to go through an hour and a half of understanding than never 🛡 Have you heard this phrase from directors before? What do you think of it? #cyber Israel National Cyber Directorate - מערך הסייבר הלאומי CyberIntelligence riskmanagement-insurance-training Bynet Data Communications Microsoft Azure

1

Cato Networks is coming to SharkFest'24 US to discuss IoT Security! Join us on June 19 at 11:45am for the session: “Passive Fingerprinting Methods for IoT Profiling”. Cato’s Data Science Team Lead, Asaf Fried, will discuss how to improve identity and network security for IoT with passive fingerprinting. He will share effective methods and practical examples and then show how to use them to enhance organizational security. More details here 👉 https://okt.to/ruJNQ0 #NetworkSecurity #SASE #Wireshark

7

Why use Cybersecurity Threat Intelligence Services? 🤔 Our CTO Assaf Hazan shared insights in a recent article at magazine The Israel Chamber of Information Technology - הלשכה לטכנולוגיות המידע בישראל About the crucial role of Cyber Threat Intelligence services in addressing challenges in the world CTI landscape. Interested to learning more about the added value they provide? contact me: Dear friends, you are invited to join reading the article and also give her your opinion or ask a question, we are here to answer any question and help 💫😎🌏 https://lnkd.in/d9Xb3pwH #Cybersecurity #ThreatIntelligence #cyberdefense #sales #marketing #CTI Assaf Hazan Kaspersky #professionalservices

17

‏6‏ ‏תגובות‏

Client Success: Bezeq International & Flowsec Bezeq International, a leading Israeli ISP, sought robust DDoS protection for its network and business clients. After evaluating several solutions, they chose Flowsec for its seamless, cost-effective approach: 🔥 Why Flowsec ✅ Zero disruption: No changes to network configuration or equipment. ✅ Lower costs: Quick setup, instant IP additions, and easy traffic management. ✅ Improved efficiency: Enhanced bandwidth utilization and attack handling. ✅ High demand: Became Bezeq International’s top-selling service of the year. Itzik Shliselberg, CTO, Bezeq International: “Flowsec effectively blocked every type of attack we tested. It’s efficient, seamless, and helped us create a high-demand service for our clients.” 💡 Ready to upgrade your DDoS protection? Let’s talk! #DDoSProtection #CyberSecurity #ClientSuccess #FlowSec #BezeqInternational

19

Your Security Operations Center (SOC) may be facing challenges I know inside and out. As the former Deputy Director General of the Israeli National Cyber Directorate (INCD), I was until recently in charge of leading the national operational posture and the Israeli National CERT. Now on my way to RSA, I can’t wait to share our new platform with fellow attendees. It just launched. It was built for SOC teams and leadership by expert, senior SOC and IR analysts who experienced the challenges we solve firsthand. Our work at Cyngular Security is truly remarkable, and I am proud of all our team has done to achieve it. Let’s connect there if you’re curious about our team’s groundbreaking work. Visit our website and request a demo to learn what THIRDhub is, why it is unique, and how it's going to dramatically enhance your Security Operations Center. If you can't make RSA, read more about THIRDhub in this article: https://lnkd.in/e9RBAeh9 #Cybersecurity #CloudSecurity #cloud #Cyberattack #MSSP #CloudIR #CIRA #CloudThreatHunting #ClouDFIR #CloudIR #DFIR #RSA #RSA2024

57

‏5‏ ‏תגובות‏

𝗛𝗮𝘃𝗲 𝘆𝗼𝘂 𝗲𝘃𝗲𝗿 𝘄𝗼𝗻𝗱𝗲𝗿𝗲𝗱 𝗶𝗳 𝘁𝗵𝗲𝗿𝗲'𝘀 𝘁𝗿𝘂𝗹𝘆 𝗮 𝘀𝗮𝗳𝗲 𝗮𝗻𝗱 𝘀𝗲𝗰𝘂𝗿𝗲 𝘄𝗮𝘆 𝘁𝗼 𝗽𝗿𝗼𝘃𝗶𝗱𝗲 𝗮𝗰𝗰𝗲𝘀𝘀 𝘁𝗼 𝘆𝗼𝘂𝗿 𝗢𝗧 𝗱𝗲𝘃𝗶𝗰𝗲𝘀 𝗳𝗿𝗼𝗺 𝘁𝗵𝗲 𝗶𝗻𝘁𝗲𝗿𝗻𝗲𝘁? Imagine having the confidence that your critical infrastructure is protected from cyber threats, while still enabling remote access for essential operations. In a world where security is paramount, discovering the best practices and technologies to achieve this balance is more crucial than ever. Curious to learn more? Let my friend Ran Shenhar guide you through the innovative solutions that ensure both security and efficiency. Your journey to a safer, more connected OT environment starts here. Cyolo

3

As attack surfaces widen, organizations must be ready to recalibrate their #cybersecurity approach around three main elements: securing their corporate networks and data centers, securing cloud environments, and securing employees. In this CPX 2024 keynote, Check Point VP Eyal Manor explains how our product roadmap turns this vision into reality. Tune in!

2

Cyber Attack Market Research 🔎 Understanding Modern Threats - How Cyber 2.0 Tackles New Security Challenges An analysis of the major threats in the market and how we enhance protection levels. 📽️ https://lnkd.in/dsXjNX74 Hertzel Ozer Victor Ruiz Guy Tessler Tatyana Sarel Tatiana Yamin Iana Hefer Asaf Almog Galit Abramov Sapir Sason Guy Dahan srikanth sai Tal Meister #ThreatAnalysis #CyberResearch #Cyber2point0

13

‏2‏ ‏תגובות‏

Are you ready for ICE London 2024?! 🕺 If you are around and would like to chat about how Cynet Security is revolutionizing the cybersecurity protection for SMEs, let me know 👨‍💻 International Cyber Expo #All_In_One #Cybersecurity Autodata

90

‏2‏ ‏תגובות‏

🛡️GYTPOL 2.0 Live Event is coming, Sunday June 16th! GYTPOL, one of Israel 🇮🇱 leading cyber companies, and a world leader in Endpoints Misconfiguration Security technology, is bringing together users and information security leaders from across Israel for an incredible day of learning and networking. Enjoy expert lectures, cyber success stories, a GYTPOL 2.0 walkthrough, professional panel, entertainment, and giveaways. I'll be moderating the event, as well as CISOs panel on "Balancing Business Continuity and Security," diving into the key components of scalable security across various sectors like healthcare, manufacturing, finance, and public. We'll explore how to weigh threat risks against operational disruption and resource constraints.  Our esteemed panelists include: Haim Inger - Clal Insurance & Finance- כלל ביטוח ופיננסים Avivit Kotler, - Clalit Health Services Alberto (Deto) Hasson - ICL Group Roy Avrahami - Ashdod Port Company Chen Amram - EL AL Israel Airlines 👉Register here: https://lnkd.in/djnns3UW Don't miss this opportunity to level up your cybersecurity game. See you there, cybersecurity champions! Don't Hesitate, Accelerate!!!🚀🚀🚀  Tal Catran Startups & Accelerators GURU Tal Kollender Gilad Raz Yakov Kogan Snir Cohen Ilan Mintz Orya Shemer Mor Bikovsky #cybersecurity #cyberthreats #businesscontinuity

32

‏2‏ ‏תגובות‏

Infostealer - A Threat on the Rise: Last year, an employee of the Israeli National Cyber Directorate learned a harsh lesson. His private workstation was mysteriously infected, and his details leaked to the internet, including screenshots of his desktop and other details. The researcher was hit by "Stealer malware" (aka Infostealer) called Redline. This is THE most trending kind of malware currently – even more prevalent than ransomware – so allow me to elaborate: Stealer malware is designed to steal information from a PC. The attack vectors are numerous – including phishing, software bundles, browser plugins, and more. Once the victim downloads the rogue software, the virus steals all sorts of data: browser cookies, passwords, crypto wallets, files, and more. As the software doesn't need to encrypt files, the attack fingerprint is minimal, and the malware is hard to detect. According to Specops, hundreds of millions of passwords have already leaked online, and it is estimated that millions of devices are infected worldwide. The journey of the stolen files is fascinating. First-hand – the OGs – they skim the cream after evaluating the data and gain access to large wallets, lucrative bank accounts, etc. They then sell the dump with all the data on the dark web or Telegram. The buyers are usually cybercriminals who use this bulk of stolen usernames and passwords to gain access to organizations' networks (this practice is called Credential Stuffing). This is how Uber was breached. We're not done yet because eventually, the data typically leaks onto the web, where strategic players lurk for diamonds. This is presumably how the details of the Israeli gov employee got out. The data changes hands and is exploited multiple times; you've got to admire the scavenging. Two weeks ago, law enforcement agencies from 6 countries managed to take down the infrastructure of Redline – the most notorious stealer malware gang. This is great news, but you know, there is no checkmate in cyber defense. The game is on. So, what can individuals and organizations do to avoid stealer malware? • It is wise to protect employees' personal assets as well – as they are the weakest link in the network. However, privacy issues must be considered. • Strict access management is critical, under Zero-Trust assumptions. No BOYD should be allowed in. • Two-factor authentication across all sensitive assets is always wise, also as protection for this kind of attack. ·     Make sure SSO is implemented in every SaaS and on-prem. ·     Avoid dual users accounts in any cost, leave no generic users such as “support” or similar used by multiple people and teams. ·     Make sure to implemented credential breach monitoring. If you have any thoughts or battle-earned experience with this kind of threat – you're invited to comment and share your knowledge for the benefit of all parties. Be Breach Ready!

50

‏9‏ ‏תגובות‏

In the first quarter of 2024, Flowsec responded to a massive DDoS attack on a major Israeli industrial company. Over 2,000 attack vectors flooded the company’s IP addresses with an unprecedented 1Tbps of malicious traffic. For more than 14 hours, the attack constantly evolved, making it an incredibly complex threat. But FlowSec’s advanced defense system quickly detected the attack, created 2,000+ unique signatures, and sent them to the CSP routers. As the attack morphed, our expert team manually analyzed and added custom signatures to ensure the client’s networks stayed protected. Thanks to this swift, proactive approach, the client experienced zero downtime and kept operations running smoothly. Once the attack subsided, the signatures were safely removed, but monitoring continued to ensure ongoing security. At Flowsec, we don’t just respond to threats—we prevent them, keeping your business secure in even the most challenging situations. #CyberSecurity #DDoS #FlowSec #DigitalDefense #TechSolutions #BusinessContinuity #NetworkSecurity #DDoSProtection #FlowSecProtects #SecurityExcellence

20

Great to know to protect! Threat Actor in Focus - Emerging Threat: Void Manticore’s Destructive Cyber Campaigns Targeting Israeli Organizations Threat Actors: Void Manticore Attack Type: Public-facing web server Objective: Espionage Target Technology: Windows Target Geographies: Israel Target Industries: Government & Critical Infrastructure Business Impact: Data Loss, Data exfiltration

1

Congratulations to Soledad Antelada Toledano, the Deputy CISO at Harris for President Campaign. Looking over her career and experience, she is a bright individual who sets a clear example for those on this career path worldwide. With cyber skills in demand, high-level positions with political importance like this attract the best in the business. While this may be inconsequential to the average voter, those in the industry will look at both candidates’ plans with great interest. Setting politics aside for a moment, we can gain much insight into the future of national cybersecurity by examining the proposed cyber policies of both the Harris and Trump campaigns. As cybersecurity secures more national importance, this role becomes even more pivotal for setting global standards of cyber resilience. #CISO #Strategy #SecurityLeadership

2