Kirill Efimov

🆕 CrowdStrike is acquiring Onum to supercharge autonomous cybersecurity with real-time data pipelines. If Falcon SIEM is the engine of the modern SOC, Onum is both the pipeline + filter — streaming high-quality, filtered fuel quickly into the engine to drive more efficient and superior performance. Onum delivers transformational advantages across three critical dimensions: ⚡ Speed: Delivers 5X more events per second than its nearest competitor and processes security and observability data in real-time versus legacy batch and store methods. ⚡ Cost: Smart filtering reduces data storage costs by 50% through intelligent optimization. ⚡ Superior Outcomes: Real-time pipeline detection starts before data enters the Falcon platform, delivering up to 70% faster incident response with 40% less ingestion overhead. The future of cybersecurity is here – built on real-time, high-fidelity data. 👉 Learn more: https://lnkd.in/gDGUWu_c

382

‏4‏ ‏תגובות‏

Exciting announcement today, SentinelOne together with Schwarz Digits, is delivering the *world’s first and only sovereign, AI-powered cybersecurity platform*—built in Europe, for Europe. The best security. The most stringent control.  🌍 Our Singularity Platform runs natively on STACKIT’s sovereign cloud under German jurisdiction, keeping customer data and telemetry in Europe while delivering real-time prevention and autonomous response across endpoint, cloud, identity, and data. For highly regulated industries, this means adopting AI security without compromise—aligned with GDPR today and ready for NIS2 and DORA tomorrow. Grateful for both teams for raising the bar on cyber resilience in Europe. Learn more: https://s1.ai/Schwrz-PR

570

‏15‏ ‏תגובות‏

"Security shouldn't slow you down" – that's been our core mission at Orca Security since day one. Just shared my thoughts with Safety Detectives on transforming cloud security from roadblock to competitive advantage. Six years in with my seven co-founders, we've stayed laser-focused on making security fast, effective, and accessible. Traditional cloud security forces teams to choose between speed and protection. We've proven that's a false choice. Our agentless approach delivers complete coverage in minutes, AI prioritizes genuine risks, and teams can collaborate seamlessly without deployment friction. The full interview explores our AI-driven approach and why security should be an enabler, not a barrier. Read it here: https://lnkd.in/d3_NrqmC

93

‏4‏ ‏תגובות‏

iPhone 17’s new security upgrade just set a new standard for mobile privacy, and cybersecurity experts are here for it. Apple’s latest release isn’t just about new colors {Orange?! }. The new Memory Integrity Enforcement (MIE) makes your device far more resilient against hackers and advanced spyware, turning iPhone 17 into the most secure smartphone Apple has ever made. Watch the video for a breakdown of what matters most. #Cybersecurity #iPhone17 #MobileSecurity #Apple #PrivacyMatters #TechNews #DigitalSafety

121

‏16‏ ‏תגובות‏

Few hours before getting on my ✈️ to #Hacker_Summer_Camp, I had the honor of moderating a powerhouse panel of IT & OT SecOps leaders diving deep into how AI & ML is actually being used in blue teams today! Here are 3 hard-earned truths straight from the experts:👇 1. 🧠Visibility, Enrichment, Correlation, Contextualization, then AI Mike Holcomb said get good visibility first. If you dont have the logs or events collect them before the shiny AI LLM.  Peter Morin said before the GenAI, build your data enrichment and your correlation use cases that can then be implemented with rules & ML.   Dylan Williams stressed the term Context Engineering as a way to give the LLM the correct retrieved data for each prompt. Knowing whats relevant to what it needs as otherwise it will “confidently hallucinate”.  Kate Johnson said use AI for generative use cases like generating summaries, reports, code and queries. 💡The panel’s consensus: Collect, Enrich, Correlate, Contextualize then GenAI. AI in any other usecase than generative will end up with unnecessarily expensive, and mediocre result, that can be better replaced with a ML model or Rules that are code generated by the same AI.   2. 🚨Unlike ML, AI will misguide you if you dont know how to call it out when it confidently hallucinates Cooper Wilson said you need to know how to call your tools out on your usecases. Like enrichment & correlation ML or rule logic still requires your team to audit it, review its confidence probabilities, and tune it.   Tom Morgan said when using an AI to generate code, queries or reports, ensure its properly guardrailed, structured, and gives you its plan first so you have a better chance to notice when it deviates and takes you down a bad path.  Tahmeed Khan said users and specifically juniors need to be aware of the risk and very well-trained to know when AI is misguiding them.  🔍Core takeaway: Know how to call AI out on your use cases or dont use it. It takes quite the trained eye to call it out as you only have the final answer to judge without much auditable logic or a true confidence probability like in ML. 3. 🛡️Keep Control: Don’t fall into the trap, AI SaaS is the biggest data transfer wave  George A. said ensuring AI is used security & privately means keep it inhouse, keep it segmented, and only share what you need to share with it.  Ahmed Al Saleh said keeping data on-prem means using the tiniest AI & ML that can accomplish the use cases defined by the stakeholders, for instance: IT & OT correlation.  🔥Bottom line: Choose your use cases and use tiny on-prem ML & AI expert models to do them. 🎥 Watch the full panel here: https://lnkd.in/eRf6RJE4 #AI #Cybersecurity #ML #BlueTeam #SecOps #OTSecurity #ITSecurity #GenAI #PanelDiscussion #BlackHat #Defcon

43

‏19‏ ‏תגובות‏

CVE-2025-23266, discovered by researchers at Wiz, is a critical container escape vulnerability (CVSS 9.0) in the NVIDIA Container Toolkit. The researchers found that it can be exploited with a simple three-line Dockerfile increasing its severity score. Edera’s hardened runtime technology would have completely prevented CVE-2025-23266 by eliminating the shared kernel state that makes this container escape possible. More on how we mitigate this potential attack vector on our blog 👇

49

‏7‏ ‏תגובות‏

Code execution vulnerability in Unity runtime - and why your car manufacturer should care. 🚙🕹️😈💣🚨 A security engineer from Japan, known by the nickname RyotaK, published a vulnerability in Unity yesterday - the real-time engine for interactive 3D experiences. If you open your favorite cybersecurity news aggregator, you’ll find headlines about it. But Unity is used not only on mobile phones and PCs for gaming. In the automotive industry, Unity has been used for several years for vehicle design, personnel training, and all kinds of simulations. It’s also used for in-car HMIs (Human-Machine Interfaces) - the graphics on the screens you see in a car. All versions of Unity are affected - both supported and no longer supported ones. The only way to fix the vulnerability is to apply the patch. The fact that this code is present in a car doesn’t mean a specific vendor is affected or that the bug is exploitable. What we know for sure is that: 1️⃣ Unity Runtime can be found in cars. 1️⃣ Under certain conditions, Unity Runtime can lead to Remote Code Execution (RCE) triggered via a browser. Enjoy the research below - it’s very interesting. Please share it. Thanks! More details: CVE-2025-59489: Arbitrary Code Execution in Unity Runtime [Blog]: https://lnkd.in/dc42rnj9 Unity Security Update Advisory: https://lnkd.in/dkyepSK7 #automotive #unity #vulnerability #android #windows #infosec #cybersecurity #MacOS #Linux #technology #hacking #research

91

‏1‏ ‏תגובה‏

⚠️ 𝗣𝗮𝗹𝗼 𝗔𝗹𝘁𝗼 𝗡𝗲𝘁𝘄𝗼𝗿𝗸𝘀 𝗖𝗼𝗻𝗳𝗶𝗿𝗺𝘀 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 – Hackers Stole Customer Data from Salesforce | Read more: https://lnkd.in/ddDWhzyt 🚨 𝗦𝘂𝗽𝗽𝗹𝘆 𝗖𝗵𝗮𝗶𝗻 𝗔𝘁𝘁𝗮𝗰𝗸: Palo Alto Networks confirmed a supply chain attack that compromised customer data through the third-party application, Salesloft’s Drift. 🔓 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗗𝗲𝘁𝗮𝗶𝗹𝘀: The breach, which occurred between August 8 and August 18, 2025, involved the unauthorized access and theft of business contact info, account details, and customer case data. ⏱️ 𝗥𝗮𝗽𝗶𝗱 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲: Upon discovering the incident, Palo Alto Networks quickly disconnected the vendor and initiated a full investigation with their Unit 42 security team. 🌐 𝗕𝗿𝗼𝗮𝗱𝗲𝗿 𝗜𝗺𝗽𝗮𝗰𝘁: The attack not only affected Palo Alto Networks but also impacted other major firms like Zscaler and Google, with compromised OAuth tokens leading to mass data exfiltration. 🔒 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗥𝗲𝗰𝗼𝗺𝗺𝗲𝗻𝗱𝗮𝘁𝗶𝗼𝗻𝘀: Unit 42 advised organizations using the Drift integration to review logs for suspicious activity, rotate credentials, and strengthen security measures, emphasizing vigilance against potential social engineering attacks.

97

‏7‏ ‏תגובות‏

“Google drive has never caused me a problem” - The person who doesnt know about the 2.5 billion user breach “We are very careful with our files, we don’t need backups“ - Says the one who is constantly shuffling files into folders. “I will just use a USB drive” - Leaves company with the personal USB drive with them. “Dropbox are a massive company, they won’t get hacked” - 68 million passwords leaked in 2016 “All our data is backed up through RAID” - RAID is NOT backup. RAID is NOT backup. RAID is NOT backup. “We have a NAS on-site that does all our backups” - Never logged into said NAS since it was setup, lost password and not monitored. “I don’t trust any cloud service, if it’s not saved on my Desktop then i’m not working on it” - Says bob who is still holding onto his Windows XP install CD and keys … I can go on forever, but the reality is some organisations still don’t value their data, and this needs to change. There has to be a balance between understanding the risks of using a cloud service and adopting safety measures. === synaas.uk === SynaaS is an Education focussed private cloud backup solution #Backup #Data #edtech #education #Microsoft365 #googleWorkspace

74

‏34‏ ‏תגובות‏

🚨 CVE‑2025‑54309: Critical Vulnerability in CrushFTP A high-severity vulnerability, CVE‑2025‑54309, has been identified in CrushFTP (versions prior to 10.8.5 and 11.3.4_23). When the DMZ proxy feature is not enabled, improper AS2 validation allows remote attackers to gain administrator access via HTTPS, and this flaw has been actively exploited in the wild. 💡 Why it matters: Exploiting this vulnerability could result in: * Full administrative takeover of CrushFTP servers. * Rapid lateral movement in environments with exposed file transfer infrastructure. 🛡️ Recommended actions: * Update CrushFTP immediately: Upgrade to version 10.8.5 (or 11.3.4_23 and above) to apply the security fix. * Enable DMZ proxy as a stopgap mitigation: If patching isn't yet feasible, placing CrushFTP behind a DMZ proxy reduces exposure to this vulnerability. We got your back! Use these scripts from the Vicarius research team: 🔍 Detection script: https://lnkd.in/ekmawXUs 🩹 Remediation script: https://lnkd.in/ekgx-Hiv Remediate CVE-2025‑54309 with #vRx by Vicarius: https://lnkd.in/dXedBin6

82