Teppei Fukuda

The 📈 fastest growing public cybersecurity companies, sorted by YoY growth rate 🚀  1. 41% SentinelOne  2. 37% Zscaler  3. 34% CrowdStrike  4. 30% CyberArk  5. 26% Datadog  6. 20% Palo Alto Networks  7. 15% Tenable  8. 14% --> market average per Gartner  9. 14% Fortinet 10. 12% Qualys 11. 7% Varonis 12. 5% Check Point Software 13. 1% Cisco Security 14. -7% Radware Global cybersecurity spend for 2024 is around $215B (2023: $188B) according to Gartner, with an annual growth of 14%. So if a cybersecurity company is growing faster than the market, they're either coming from a lower base (e.g. SentinelOne), or doing something right with their product and GTM, or both. Conversely, if you're growing slower than the market (looking at you, Cisco), you either are coming from a high base or your product portfolio needs some updating. SentinelOne is on a tear with 41% YoY growth, and not even that highly valued compared to its peers. 79% non-GAAP gross margins. Might be the bargain of the year below $21 with the pullback the market experienced in the past few days. What happens to Crowdstrike remains to be seen. At $222, the stock is 44% down from their 52-week high ($398). If you loved CRWD at $300 or even $350, you must probably love them now at $222. Cisco is only growing 1% YoY. From a market cap perspective, Cisco is as large as the next three companies (PANW, CRWD, FTNT) combined. Cisco is playing the acquisition game, adding cyber companies to their portfolio and carving out innovation to Outshift by Cisco so that smaller companies / ideas can grow without the burden of corporate overhead. I think Datadog has to make a call how they're going to double down on security, which they called out as a growth area in their annual investor event. While I do think that IT and security team are growing together more closely, they are still separate buyers, and Datadog doesn't have the CISO relationships the other companies have. PANW's platformization strategy has somewhat played out in the market narrative so far. Still far off though from the 52-week high at $380. PANW uses the metric "NGS ARR" (next-gen security ARR) to annualize revenue from active contracts from Prisma and Cortex. Goal is to reach $15B NGS ARR in FY30! Everyone is feeling the competition from Wiz, running at $350M in ARR in February, and a goal of $1B in ARR. They might be able to reach that goal within the next 24 months if they keep growing like they have. Back to the growth rate. To grow faster to the market, I think we're looking at more acquisitions of cybersecurity startups. Either tuck-in technology acquisitions, or fast-growing ARR ($20M+). This applies to all companies, since much of the innovation comes from the smaller companies, in particular in / with AI. Fun times!

21

6 Comments

Cloudflare - the DDoS buffer "Since early September, Cloudflare's DDoS protection systems have been combating a month-long campaign of hyper-volumetric L3/4 DDoS attacks. Cloudflare’s defenses mitigated over one hundred hyper-volumetric L3/4 DDoS attacks throughout the month, with many exceeding 2 billion packets per second (Bpps) and 3 terabits per second (Tbps). The largest attack peaked 3.8 Tbps — the largest ever disclosed publicly by any organization. Detection and mitigation was fully autonomous. The graphs below represent two separate attack events that targeted the same Cloudflare customer and were mitigated autonomously." https://buff.ly/4dwdeNJ

5

We love sustainabily. It can mean so many different things. Sustainable business operations through visibility and security, operation strength, and a byproduct being environmental sustainability through consolidation and easy reporting. Sustainabil.IT #sustainabilitytech #teampurple #mdr #singularity

3

AWS Payment Cryptography (affectionately referred to internally as "APC") is now available in four regions, two in APJ! Going from 0 to 4 in (almost) one go is pretty sweet! Typically, sensitive data in payments applications are protected using hardware HSMs on-premise. Managing keys and cryptographic operations in a payments HSM is an arcane art, known only by an initiated few (I've never had to do it). Your application calls cryptographic primitives, typically in a specific order, to achieve particular operations. APC replaces all that with a modern, hardened and well-documented API. Now, this of course means a few things, including refactoring your app to use an API rather than said primitives. The advantage is that - for evermore, even if (for example) key specs or algos change, you can still call an API (possibly even the same one, just with different parameters) and everything gets handled for you. The service is PCI DSS, PCI PIN, PCI P2PE and PCI 3DS (among others). So, there is some short term pain for longer term gain. I've already spoken with dozens of customers in this region about APC, hoping we'll continue to build on that momentum with this release. https://lnkd.in/gaQ9Qriw

59

8 Comments

Curious about WAF as a Service? Learn how it can act as a critical protection for corporate web applications and APIs, protecting them against exploitation and potential misuse: https://lnkd.in/gypPapac #cloudsecurity

1

Are you confident in your network's defenses? Our latest guide walks you through a detailed checklist for network penetration testing, ensuring you leave no stone unturned in identifying vulnerabilities. From pre-testing preparations to post-exploitation analysis, this checklist is your roadmap to a secure network. How do you ensure your network remains secure against evolving threats? 👉https://lnkd.in/gEDW3hJ3

3

Alright, we have significant update over VXCON topics which includes Web3 and Mobile Security in Banking. I will update Mobile security research by Thanh Nguyen from Verichains later, this is another amazing technical one. These are main dish for technical engineers and Infosec people. TOPIC: REDEFINE REVERSE ENGINEERING IN WEB3 by KaiJern Lau Certik, Redefine Reverse Engineering In Web3 Reverse engineering has long been an established discipline in the computer science realm, with a rich history of exceptional frameworks and tools crafted by some of the most talented individuals in the field. Yet, as we venture into the era of Web3, the foundational technologies of the Ethereum Virtual Machine (EVM) and Web Assembly (WASM) have revealed a stark gap in the utility of existing tools. While current available emulators for EVM and WASM excel for development purposes, they fall short in the realm of reverse engineering, posing a significant challenge and deterring seasoned reverse engineers from entering the Web3 domain. In this presentation, we are excited to unveil a groundbreaking framework designed to transcend these limitations. Our innovative framework is engineered to support an array of virtual machines, seamlessly integrating the robustness of traditional x86 reverse engineering techniques with the dynamic needs of Web3 environments. We will showcase the full potential of this framework, highlighting its versatility and the ways in which it revolutionizes the reverse engineering process for blockchain-based architectures. Furthermore, we will demonstrate a suite of sophisticated tools developed atop this framework. These tools not only facilitate a deeper and more intuitive analysis of smart contracts and decentralized applications but also mark a significant leap forward in bridging the gap between traditional reverse engineering expertise and the burgeoning Web3 landscape. Join us as we embark on a journey to redefine the boundaries of reverse engineering in the age of blockchain, and open up new avenues for innovation and security in Web3. Main conference agenda is here, hopefully we can get your support, simply clicking the top-right corner menu -> Ticket https://vxcon.hk/ VX Research Limited

3

uprobes vs kprobes; A high-level overview of the internals: context-switches, performance overhead, application context and cost. Not all eBPF programs are equal! Oligo Security

43

3 Comments

I wrote about the various rule combinations I’ve been testing in this post to block known bad and reduce load on the firewall. ~~ Are Your pfSense Filters Really Working? ~~ Too many rules and logs (?) makes them randomly fail ~~ To spot this you need to be monitoring your logs. I have been testing various combinations of rules and noticed this issue in certain scenarios. https://lnkd.in/eknrE6zG

3

Wazuh: Practical Hunt and Detection Use Cases! Implementing threat detection use cases with Wazuh involves configuring various components to address specific security threats or compliance requirements. Here is a list of 15 practical use cases that describe a specific scenario aimed at identifying and responding a several attacks listed below: • Blocking a known malicious actor • File integrity monitoring • Detecting a brute-force attack • Monitoring Docker events • Monitoring AWS infrastructure • Detecting unauthorized processes • Network IDS integration • Detecting an SQL injection attack • Detecting suspicious binaries • Detecting and removing malware using VirusTotal integration • Vulnerability detection • Detecting malware using YARA integration • Detecting hidden processes • Monitoring execution of malicious commands • Detecting a Shellshock attack Source: https://lnkd.in/gkntxVxS By working through use cases, threat hunters can identify gaps in their current security tools and processes. This feedback is crucial for improving threat detection capabilities. Explore over 70 other tools, techniques, and resources explained in my Cyber Threat Hunt 101 Series on YouTube, where you can delve into the fundamentals of threat hunting: https://lnkd.in/gw96tqBQ Please share and subscribe if you enjoy the content! #cybersecurity #threathunting #threatdetection #blueteam #soc #socanalyst #skillsdevelopment #careergrowth  

240

10 Comments

Encryption at rest; Encryption on the wire; but what happens in between? If we review a common data processing diagram we realize that data is consistently decrypted between different network segments. From the database to the application, from the api to the TLS certificate. Our next guest on Secure Talk is Purandar Das, CEO and Founder of Sotero. Purandar and his team have developed a solution to handle encryption holistically across the network segmentation. Join us on June 11th for a Secure Talk episode We cover everything from his early inspirations to his latest innovations in data protection and encryption technologies. This episode is packed with expert insights into how encryption algorithms are faring today, the realities of data breaches like the recent LastPass incident, and the future of cybersecurity in the age of quantum computing. We are grateful to Purandar for joining us and providing such a deep expertise into the relationship between security and encryption. Thanks for your support and please consider subscribing to Secure Talk. Apple: https://lnkd.in/gKK-ivJv Spotify: https://lnkd.in/eebs_gGv Website: https://lnkd.in/gSuKgQWE #encryption #datasecurity #quantumencryption

12

Interested in learning more about API security in a live class? Join us for the Traceable API Security Masterclass a free interactive webinar-base class, in episode 1 we cover the basics, what are APIs, the different types of APIs, and answer the question, why are they so vulnerable anyway??

93

3 Comments

Today's Adobe security update has patched the in-the-wild zero-day PoC that EXPMON Public (https://pub.expmon.com) detected couple months ago (https://lnkd.in/ghQYYzXR). https://lnkd.in/gqxHHCfe Note: not want to cause confusion - this is not a working exploit, but a good PoC. Users are recommended to update their Adobe Reader ASAP, as we're going to point to the public sample with all the details soon in the next few days.

12

** There's New Development about this case ** We tested the (exactly the same) sample on the "patched" Adobe Reader version, it displayed additional dialogs, but if the user clicked/closed those dialogs, the app still crashed! Same UAF bug! We're contacting Adobe to find out what's going on and will update here. For now, we have to postpone the release of the details because the bug seems not properly fixed. [Update on Monday] Adobe has confirmed to us that the bug is not properly patched. "I can confirm our Acrobat product team has identified a secondary fix that is required to fully address this issue. We are actively reviewing and working to prioritize the fix in an upcoming patch. I will be sure to follow up with you once we have a clear release timeframe." Guess we have to hold our blog posts until the new patch becomes available to users. Sigh.. https://lnkd.in/gbBDuDHC #expmon #adobe #pdf #zeroday #0day #detection

8

Another vulnerability for a VPN service which is legacy architecture. To reduce the impact of such vulnerabilities is to implement a modern Zero Trust architecture.

49

1 Comment

Happy Reading. Quote: "This Regulation lays down the technical and the methodological requirements of the measures referred to in NIS2 with regard to DNS service providers, TLD name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, providers of online market places, of online search engines and of social networking services platforms, and trust service providers (the relevant entities)." https://lnkd.in/dpQs75Rm

9

2 Comments

Zoom has come a long way, from originally using AES-ECB mode to encrypt video (hint: that's very bad) to implementing PQC algos: https://lnkd.in/g88-FbTg

8

Some key notes from David Koh #BHAsia. > No need to reinvent the wheel, we copy same playbooks. >Size is disadvantage but in digital domain we are all facing same challenges. > Strengthen the protection of Information Infrastructure (CII) (security by design) > Recognize information sharing to thwart cyberthreats > Sportsmanship in Cybersecurity whichever role you are in the field. > Imperative to maintain interoperability standards but at the same time secure the supply chain. > If firms don't prioritize cybersecurity, it is a generation issue. Build on instinct and capabilities.

12