📡 TCP #60: Get out of my kernel!?
📡 TCP #60: Get out of my kernel!?
Security Product News | Sept. 11th - Sept. 18th, 2024
Welcome to Issue 60 of The Cybersecurity Pulse! I'm Darwin Salazar, Product Manager at Monad and a former Detection Engineer. Each week, I distill the latest and most exciting developments in cybersecurity innovation into digestible, bite-sized updates. If you’re serious about staying at the forefront of the latest in security products and industry news make sure to hit the “Subscribe” button below to get my insights delivered straight to your inbox every week 📩 🚀
Picks of the Week🎯
Microsoft considering moving security vendors out of the kernel?
The Crowdstrike BSOD incident that took down 8.5M Windows devices has rightfully cause Microsoft to rethink resiliency and security of their OS. This includes adding security capabilities outside of the kernel which they have seemed to get support on from vendors like Crowdstrike, Sophos, TrendMicro etc.
This would be a massive shift and given that Microsoft is also an endpoint security vendor, it’ll be very interesting to see how they approach this to be fair to the rest of security vendors. Erik Prince, CEO of Cloudflare and Nico Popp, fmr. CPO at Tenable have some doubts.
![Nico Popp • 1st
Executive, Investor and Advisor in CyberSecurity
16h •O
https://lnkd.in/gakFhFJ5
If all EDR vendors are forced to operate solely in user mode (si
based approaches) while Microsoft Defender retains the abilit)
mode, wouldn't this create a significant and unfair competitive
Defender? I always thought that running in user mode only wo
solutions far more vulnerable to tampering, disabling, or remo\
the deep system-level access and protection that
benefit from. Defender's continued kernel-level operation wou
edge in terms of security, resilience, and performance. Joe Ch
SO!](https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F68671518-3abf-41c3-9463-bbe2ef2d4aa9_548x446.png "Nico Popp • 1st
Executive, Investor and Advisor in CyberSecurity
16h •O
https://lnkd.in/gakFhFJ5
If all EDR vendors are forced to operate solely in user mode (si
based approaches) while Microsoft Defender retains the abilit)
mode, wouldn't this create a significant and unfair competitive
Defender? I always thought that running in user mode only wo
solutions far more vulnerable to tampering, disabling, or remo\
the deep system-level access and protection that
benefit from. Defender's continued kernel-level operation wou
edge in terms of security, resilience, and performance. Joe Ch
SO!")
A deep dive into the history and marketplace of the CNAPP (Report)
In this report, and do a fantastic job of walking us through the past, present, and future of CNAPPs including deep dives into how different vendors are approaching cloud + app sec.
If you’re a security leader, investor, product builder, or anything in between, you should 100% take the time to dissect this report.
Speaking of CloudSec, the premier cloud security conference just had their first EU edition and the great Christophe Tafani-Dereeper, has written up a summary of all talks including slides and the livestream video.
If you touch any cloud and are responsible for securing things there, check out the recap and fwd:cloudsec YouTube channel as they have many goodies there.
Enterprise Security Weekly Ep. 375
Star-studded ESW episode last week as we had , , myself and in the house. We discussed:
Wiz Code and potential implications for the rest of the AppSec market
Cribl’s $319.5M Series E and what justifies their $3.5B valuation
Zafran’s $40M Series A, explosion in CTEM solutions and more!
Security Testing Market Worth $43.9B by 2029
Today, the ‘security testing’ market is worth $14.5B and is expected to grow to $43.9B at a Compound Annual Growth Rate (CAGR) of 24.7% 🚀
Product News 📰
Application security
Stytch unveils device fingerprinting features to enhance application security
Stytch, an AuthN startup, has a launched a device fingerprinting feature that will help provide more security and protection against bots and unauthorized access. In the press release, they highlight how this solution will help secure application that rely upon CAPTCHAs within their AuthN workflows.
Cool to see more security being brought to consumer’s front-steps.
Rest of AppSec product news ⬇️
Cloud security
Mitiga launches their MDR for SaaS and Cloud Environments
I’ve seen many MDR services announced in the past 12-18 months but I think this is the first that hyper-focuses on cloud and SaaS only. This is a great approach considering that both environments are extremely complex and unless you have dedicated teams to each, it’s impossible to proactively secure the things.
Rest of CloudSec product news ⬇️
Data Security
Trellix enhances their email security solution
Trellix has added DLP capabilities to their email security solution, Trellix Email Security Cloud.
Identity Security
No major product announcements in the identity security space this past week but we did have a nearly $30M invested in the space:
Aembit raises $25M Series A - Non-human Identities
Hydden raises $4.4M Seed - Single data layer across IGA, PAM, ITDR
IoT/OT Security
No major product announcements in the identity security space this past week, but we did have some fundraising activity:
RunSafe Security Raises $12M Series B - Critical infrastructure security
Personal Security
$17M Series B for VIP security
BlackCloak has raised $17M Series B for their platform which protects executives and other high-profile individuals.
SaaS Security
Reco launches SaaS and identity security knowledge layer
SaaS and identity security are closely intertwined and yet highly complex to solve for on their own. Reco has built a knowledge graph that tie both of these domains together leveraging ClickHouse and AI.
This post peels back the onion layers as to how they built this powerful capability which, in my opinion, helps them stand out amongst the sea of SaaS security vendors.
Security Operations
Intezer Raises $33M Series C for Autonomous SOC Platform
Intezer, which is one of the first to market with an AI for SecOps solution, has raised a $33M Series C. This is their first full round since 2020 when they raised a $15M Series B.
Rest of SecOps product news ⬇️
Realm.Security emerges from stealth with $5M Seed - Security Data Fabric
Element Security emerges from stealth with $5M Seed - Continuous Threat Exposure Management (CTEM)
Bye For Now!
That’s all for this week… ¡Nos vemos la próxima semana! 👋🏽