Welcome to Issue 44 of the Cybersecurity Innovation Pulse! I'm Darwin Salazar, Product Manager at Monad and a former Detection Engineer. Each week, I distill the latest and most exciting developments in cybersecurity innovation into digestible, bite-sized updates. If youâre serious about staying at the forefront of the latest in security products, attacker techniques, and industry news make sure to hit the âSubscribeâ button below to get my insights delivered straight to your inbox every week đŠ đ
Weâre back with another issue of TCP! I always love the weeks leading up to RSA and BlackHat because its when we see a massive spike in product releases, startups coming out of stealth, tons of M&A activity etc. Itâs like the trade deadline in any major sports league. The dynamics in the industry can really change with just one move đ
That said, Iâll be at both BSides and RSAC, reach out if you wanna grab coffee â or get a lift in đđ˝ââď¸
Before we jump into this weekâs issue, check out Part II of the Data Engineering for Cybersecurity blog series Iâve been writing and last weekâs Enterprise Security Weekly episode. I also have something major coming out with Impart Security and DryRun Security tomorrow so keep your eyes peeled for that as well. *Hint:* It has to do with AppSec and LLMs!
Now, letâs jump into things!
Industryđ°
Verizon DBIR 2024 is Out
The Verizon Data Breach Investigations Report (DBIR) is one of our industryâs most reputable and longest running reports that shine a light on the threat landscape. This yearâs report was published this morning and while I havenât had the time to dig in, the high-level takeaways shown above are not that surprising.
Kelly Shortridgeâs write up on this yearâs report if you just want the tl;dr!
Source: Verizon
NSA Launches Guidance for Secure AI Deployment
The NSAâs Artificial Intelligence Security Center (AISC) recently released guidance and best practices on deploying secure and resilient AI systems. Though its pretty simple (e.g., Harden deployment env configs), its extremely practical and if followed correctly can defend against ~85% of risks and threats. It also covers more specific AI/ML risks such as model behavior and model weights.
Source: NSA
NIST Updates AI RMF as Mandated by the White House Executive Order on AI
NIST recently updated its AI Risk Management Framework (RMF) as was mandated by a White House Executive Order. This framework, which was last updated in Jan. 2023, is a voluntary framework (no legal bearing) designed to provide companies with guidance on developing safe, secure, and âtrustworthyâ AI. According to The National Law Review, this framework is one of the most frequently cited risk management frameworks in the US these past two years.
Source: National Law Review
Productđ¸
With over 20 product-related announcements, this weekâs product section wonât include as many deep dives. Iâll cover a few that Iâm most excited about and link the rest of the announcements!
Torq Launches HyperSOC
HyperSOC seems like a staff augmentation play to help analysts streamline key SOC activities like case management, investigations etc. To this day, this is one of the most practical uses of AI for security. Kudos to Torq on the launch!
Source: SiliconAngle
Dropzone AI Raises $16.85 Million Series A
Dropzone AI is another SOC staff augmentation contender that Iâm pretty keen on. Their solution leverages AI/ML to analyze logs + other security data to map the scope of incidents and generate detailed incident reports with remediation recommendations. While many startups in the same space have recently come out stealth, Dropzone has been at it for over a year. Looking forward to watching their pitch at the RSA Innovation Sandbox!
Source: SiliconANGLE
Prophet Security Emerges with $11 Million Funding
Prohpet Security, backed by Bain Capital Ventures. Another AI for SecOps play. This is the way.
Source: SecurityWeek
Binary Defense Adds New Features to BDVision
Updates include new deception technology (đĽ), AI-based threat detection, and EDR bypass detection. Productizing deception is a pretty huge accomplishment and I think the folks at Binary Defense (e.g., David Kennedy, Jason Vest) are well equipped to do so. More deception tech please!!!!
BDVisionâs new built-in deception technology generates diverse simulated environments and exposures to deceive threat actors in each phase of the attack. - HelpNet Security
RunReveal Debuts Correlated Alerting and Raises $2.5M Seed
RunReveal recently added correlated alerting capabilities that allow for stacking of detections to only alert when multiple anomalous conditions or activities are detected. Following this model compared to single-source detections can help reduce noise (e.g. false positives) and surface higher fidelity alerts.
RunReveal also announced in $2.5M seed funding today. Theyâre doing some pretty cool work in the detection and response + SIEM space. Excited to see their continued growth.
Source: RunReveal
Amplifier Security Raises $3.3 Million in Pre-Seed Funding
Amplifier Security is a security data fabric + AI Copilot for workforce security. What does this actually mean? What problem are they solving? Idk it was tough for me to make sense of the problem theyâre actually solving.
However, this is further confirmation that data fabrics are powering security copilots as I called out in this post.
Source: FinSMEs
Nagomi Security Emerges from Stealth w/ $30M in Funding
Nagomi Security is another solution that plugs into an enterpriseâs existing security solutions and aims to help security teamâs leverage their security investments better. âThe Proactive Defense Platform, as itâs called, can map out the online threats facing an organization. It then determines whether the organizationâs cybersecurity systems can effectively block those threats.â - Maria Deutscher, SiliconAngle
Zafran ($30 through series A) and Gutsy ($51M seed) are two other startups leveraging existing security tools to solve security challenges. However, theyâre tackling different problems.
I wonder what this category of security tools should be called lol đ¤
Also, one key thing to note about Nagomi is that they hit $1M ARR while in stealth which is pretty uncommon in our space.
Source: SiliconAngle
The Rest of Products News đ°
Amazon introduces new safety features for Bedrock with Guardrails
Deep Instinctâs Artificial Neural Network Assistant (DIANNA) for malware analysis
GRC startup LogicGate promises faster and safer AI deployments
Adaptive Shield's new SaaS security features to mitigate AI risk
JFrog unveils MLflow integration to enhance machine learning model management
Tenable Bolsters Its Cloud Security Arsenal with Malware Detection
BalkanID Copilot: Supercharge identity security and lifecycle management
CrowdStrike Enhances Identity Security to Thwart Cloud Attacks
AWS Security Hub announces the AWS Resource Tagging Standard
Funding + M&Ađ
Secure browser Island raises $175M, doubling valuation to $3B
Endpoint Security Firm ThreatLocker Raises $115 Million in Series D
Oasis Security reels in $35M more to secure nonhuman identities
Apptega secures $15M in funding to expand its cybersecurity compliance platform
French security startup BforeAI raises $15M for US expansion
DeepKeep Launches AI-Native Security Platform With $10 Million in Seed Funding
ExtrasđŹ
CISO Corner: Breaking Staff Burnout, GPT-4 Exploits, Rebalancing NIST
Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users
Bye For Now!
Iâll be back with a post after RSA capturing all the biggest innovation-related announcements. Looking forward to catching up with some of the TCP community there. Ping me if youâll be around! Nos vemos la prĂłxima semana! đ
Great coverage, Darwin!
Thanks for mentioning BforeAI's most recent funding cycle, Darwin.
Austin represent!