Tomer Rouah

 𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 - Frontend Security  https://lnkd.in/dKFzMsxV A healthcare app with robust backend security—JWT tokens, API rate limiting, database encryption. At 3 AM, alerts screamed: patient records compromised through  client-side attacks. The issue? Frontend used dangerouslySetInnerHTML to render user comments without sanitization. An attacker crafted malicious JavaScript that stole   authentication tokens from other users' browsers. The breach looked legitimate in server logs because requests used valid credentials. The fortress had frontend blind   spots.  𝗧𝗮𝗯𝗹𝗲 𝗼𝗳 𝗰𝗼𝗻𝘁𝗲𝗻𝘁:  🔴 XSS Prevention Framework Unsafe innerHTML rendering → DOM-based payload execution → DOMPurify sanitization → React secure components.  🔴 CSP Hardening Strategy Script injection bypasses → nonce-based violations → strict CSP policies → unsafe-inline elimination.  🔴 CSRF Protection Framework State-changing requests → token validation bypass → double-submit cookies → SameSite enforcement.  🔴 Secure Storage Patterns Local storage token theft → XSS token extraction → httpOnly cookies → secure flag implementation.  🔴 DOM Clobbering Prevention Property injection attacks → namespace pollution → input validation → prototype pollution guards.  🔴 Framework Security Patterns Template injection vectors → component boundary bypass → framework-specific sanitizers → secure-by-default rendering.  🔴 Supply Chain Security Third-party script hijacking → CDN compromise → subresource integrity → dependency scanning.  🔴 Client-Side Monitoring Silent payload execution → undetected data exfiltration → real-time CSP reporting → anomaly detection.  🚛 Other Series 👇 𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 - 𝗔𝗰𝗰𝗲𝘀𝘀 𝗖𝗼𝗻𝘁𝗿𝗼𝗹 𝗠𝗶𝗱𝗱𝗹𝗲𝘄𝗮𝗿𝗲 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸 : https://lnkd.in/dZUTCevV  🔹 𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 - 𝗪𝗲𝗯 𝗦𝗲𝗿𝘃𝗶𝗰𝗲 & 𝗔𝗣𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆: https://lnkd.in/d5ckHwMk  -s768?utm_source=share&utm_medium=member_desktop&rcm=ACoAACTYzJYBJughndlYliTqaHTvii5h0y9ztcs  🔹 𝗦𝗲𝗰𝘂𝗿𝗲 𝗯𝘆 𝗗𝗲𝘀𝗶𝗴𝗻 - 𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻: https://lnkd.in/dr8Pt7sm  ce=share&utm_medium=member_desktop&rcm=ACoAACTYzJYBJughndlYliTqaHTvii5h0y9ztcs  🔹 Secure Coding Labs: https://lnkd.in/dfvDFFWD  #frontendsecurity #xss #csrf #angularjs #csp #react #angular #vue #sanitization #dompurify #securebydesign #appsec #websecurity #javascript #devsecops #cybersecurity

179

🛡️ Security Exposure Management adds two new data connectors ✔️ Wiz - https://lnkd.in/dBjj6ruj ✔️ Palo Alto Prisma Cloud - https://lnkd.in/dhppxK_A 👉 These connectors enable seamless integration of vulnerability and asset data, providing enhanced visibility and context for your environments. #CTEM #XSPM

131

‏2‏ ‏תגובות‏

Day 10/30 – Azure 30 Days Challenge: Storage Queue & Storage Table Today, we explored two powerful and cost-effective components of Azure Storage: Azure Storage Queue : Used to decouple application components and reliably handle background tasks using messages. Perfect for order processing, background email jobs, or async workflows. Azure Storage Table A NoSQL key-value store ideal for storing massive semi-structured datasets like logs, telemetry, and metadata with super-fast access using PartitionKey and RowKey. When to use: 1. Use Queues when you want scalable message processing 2. Use Tables when you need cheap, scalable NoSQL data storage without relational overhead Lightweight, scalable, and designed for modern distributed apps. Whether you're building microservices, IoT platforms, or data processing systems, these tools are must-haves! Follow Sai Reddy for more such hands-on #Azure insights. It’s Day 10 of my 30 Days Azure Learning Challenge – stay tuned for more! Drop a comment if this was helpful. 🔁 Like • 💬 Comment • 🔄 Repost Reach me here for questions or collaboration. https://lnkd.in/g3xnx-vh or https://lnkd.in/gsrnePyD or https://lnkd.in/gswwEDZh #Azure #CloudComputing #AzureStorage #AzureQueue #AzureTable #NoSQL #MessageQueue #Serverless #Microservices #DotNetCore #FullStackDeveloper #30DaysChallenge #SaiReddyTech #AzureLearning #LinkedInLearning

82

‏6‏ ‏תגובות‏

𝐂𝐥𝐨𝐮𝐝 𝐃𝐚𝐭𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐩𝐞𝐜𝐭𝐫𝐮𝐦: 𝐔𝐧𝐝𝐞𝐫𝐬𝐭𝐚𝐧𝐝 𝐓𝐡𝐞 𝐓𝐨𝐩 𝐏𝐢𝐥𝐥𝐚𝐫𝐬 🔰 𝐃𝐨𝐰𝐧𝐥𝐨𝐚𝐝 𝐩𝐝𝐟 𝐁𝐫𝐨𝐜𝐡𝐮𝐫𝐞 : https://lnkd.in/dWmCH6Cd   Cloud Data Security Market is projected to grow from USD 4.4 billion in 2022 to USD 9.1 billion by 2027 at a Compound Annual Growth Rate (CAGR) of 15.5%.   🔹 Top Cloud Security Applications   ➼Data Protection: Ensuring secure storage and transfer of sensitive data using encryption, access controls, and robust backup solutions. ➼Threat Detection and Response: Leveraging real-time monitoring tools to identify and mitigate potential threats, such as malware, ransomware, and insider breaches. ➼Identity and Access Management (IAM): Implementing policies and technologies to manage user access and ensure only authorized individuals have access to critical resources. ➼Compliance Management: Supporting organizations in meeting regulatory standards like GDPR, HIPAA, and CCPA with tools for audit trails and reporting. ➼Application Security: Protecting cloud-based applications through vulnerability assessments, secure coding practices, and runtime protection. ➼Disaster Recovery and Business Continuity: Enabling seamless recovery from cyberattacks or data breaches with fail-safe backup systems and cloud-based disaster recovery solutions.   Cloud security market size is projected to grow from USD 40.7 billion in 2023 to USD 62.9 billion by 2028 at a CAGR of 9.1%. ➼𝐃𝐫𝐢𝐯𝐞𝐫: Growth of DevSecOps ➼𝐎𝐩𝐩𝐨𝐫𝐭𝐮𝐧𝐢𝐭𝐲: Securing the IoT landscape   🔹 Top Technologies Driving Cloud Security   ➼Artificial Intelligence (AI) and Machine Learning (ML): Enabling intelligent threat detection, automated response mechanisms, and anomaly detection to enhance security operations. ➼Zero Trust Security: Adopting "never trust, always verify" principles to minimize the risk of unauthorized access by continuously validating users and devices. ➼Cloud Access Security Brokers (CASBs): Acting as intermediaries between users and cloud services to ensure compliance, visibility, and data security. ➼Secure Access Service Edge (SASE): Converging networking and security functions into a unified cloud-delivered platform for improved security in distributed environments. ➼Encryption Technologies: Protecting data at rest, in transit, and in use with advanced encryption standards and key management systems. ➼DevSecOps ➼Multi-Factor Authentication (MFA) ➼Behavioral Analytics ➼Automated Security Orchestration   #cybersecurity #cloudsecurity #apisecurity #perimetersecurity #informationsecurity #hacking #DataSecurity #CyberSec #networksecurity #cybersecurityawareness #securityanalyst #securityawareness #cybercrime #cybersecuritynews #cyber #cyberattack

92

‏4‏ ‏תגובות‏

Palo Alto + CyberArk: What This Mega-Acquisition Means for Israeli Tech & Cybersecurity Today we witnessed another Israeli cybersecurity powerhouse, CyberArk, at the center of a monumental acquisition. Palo Alto Networks' estimated $25 billion acquisition of CyberArk is not just a testament to CyberArk's innovation and impact, but also a powerful showcase of the vibrant strength and global significance of the Israeli tech ecosystem. This deal reaffirms Israel's crucial role in shaping the future of cybersecurity on the world stage. This acquisition also underscores Palo Alto Networks' relentless and aggressive pursuit of a full-stack, platform-centric security offering. This strategic move into identity security, complementing their existing Prisma, Cortex, and Strata platforms, highlights a clear vision for end-to-end protection across all identity types, including the burgeoning realm of AI identities. This platform consolidation strategy directly addresses the prevalent challenge of security vendor sprawl, a core focus for us at Microsoft as well. Palo Alto Networks' recent acquisitions, like Dig Security, Talon Cyber Security, and the integration of IBM QRadar SaaS assets, along with Protect AI, demonstrate a clear ambition to deliver a unified security architecture. This mirrors Microsoft's own holistic approach to security, where we strive to provide comprehensive, integrated solutions that simplify operations and enhance resilience for our customers. While Palo Alto Networks is increasingly competing with Microsoft's holistic-platform security approach, it's important to acknowledge that we also partner on multiple fronts, including deep tech stack integrations and Azure integration of Palo Alto's solutions. This robust competition and partnership will undoubtedly drive continuous innovation, foster the development of even better market solutions, and ultimately, promote the best interests of our shared customers. I salute to our friends CyberArk and the entire Israeli tech ecosystem to its resiliency, innovation and continued breakthroughs! #Cybersecurity #PaloAltoNetworks #CyberArk #IsraeliTech #SecurityPlatform #InnovationIsrael Alon Haimovich, Avi Hasson, Alon Bilorovsky, Itzik Tzalaf, Itai Aharonov, Adi Crystal, Dana Maryanchik Shaul, Erel N. Margalit, Omer Grossman, Matt Cohen

69

‏1‏ ‏תגובה‏

Introducing Electra Cyber: Next-Generation Cyber Security Electra Megason recently signed a strategic cooperation agreement with RubyComm, which specializes in developing custom cybersecurity solutions. Under this agreement, the new Electra Cyber division has been established to bring Israeli companies the world’s most advanced protection for operational technology (OT) and critical infrastructure. Electra Cyber manager Akashya Elgan commented: “These OT systems and infrastructure are the beating heart of Israel, including hospitals, public institutions, industrial facilities, data centers, transportation, and power plants. Protecting them is not only a technological necessity, but a national responsibility of the highest order.” The innovative concept behind Electra Cyber involves integrating cybersecurity solutions within each facility’s command and control systems at every stage, from planning and construction to ongoing operations and maintenance. Based on groundbreaking technology, these smart solutions can identify and monitor threats in real time, providing comprehensive protection without compromising operational continuity. Crucially, Electra Cyber’s solutions are not limited to new buildings and in fact provide even greater added value to established facilities. The Electra Cyber team is able to effectively integrate solutions with existing systems, allowing companies to benefit from significant security upgrades, without requiring substantial changes to their current infrastructure. “This collaboration with RubyComm is a major strategic step,” said Nissim Palomo, Electra Megason CEO. “Electra Cyber reinforces our position as a technological pioneer and enables us to provide customers with a comprehensive solution to one of today’s most critical challenges: OT cybersecurity. We’re moving into a new era, where cybersecurity is an integral part of all facilities and infrastructure, throughout planning, construction, and operation.” #cybersecurity

46

𝐅𝐨𝐫𝐠𝐞𝐭𝐭𝐢𝐧𝐠 𝐜𝐨𝐬𝐭𝐬 𝐝𝐚𝐲𝐬 𝐚𝐧𝐝 𝐝𝐨𝐥𝐥𝐚𝐫𝐬. Memory-powered site agents win bids and protect margins. Projects shift daily. 𝑾𝒊𝒕𝒉𝒐𝒖𝒕 𝒎𝒆𝒎𝒐𝒓𝒚, 𝒅𝒆𝒕𝒂𝒊𝒍𝒔 𝒗𝒂𝒏𝒊𝒔𝒉. 𝐖𝐢𝐭𝐡 𝐦𝐞𝐦𝐨𝐫𝐲, 𝐚𝐠𝐞𝐧𝐭𝐬 𝐩𝐫𝐞𝐬𝐞𝐫𝐯𝐞 𝐜𝐨𝐧𝐭𝐞𝐱𝐭 𝐚𝐜𝐫𝐨𝐬𝐬 𝐑𝐅𝐈𝐬, 𝐛𝐢𝐝𝐬, 𝐚𝐧𝐝 𝐜𝐡𝐚𝐧𝐠𝐞 𝐨𝐫𝐝𝐞𝐫𝐬. Episodic → Photos, plans, weather, notes tied to locations Semantic → Codes, specs, install requirements Procedural → Safety steps enforced daily Preference → Tracks subs, crew limits, past performance Bid case: Estimators lost margin when assumptions varied across packages. Agents retrieved semantic spec libraries and attached code clauses consistently. Preference memory tracked subcontractor capacity and past performance. Bid variance dropped. Approval cycles shortened. Margins held. Change orders also speed up with episodic anchors. Owners trusted records. Schedules stayed intact because every decision linked to verifiable evidence. Start with one bid. Capture and structure memory. Run for a sprint. ♻️ Repost to your #LinkedIn empower your network & follow #Timothy Goebel for expert insights #ConstructionTech #AIAgents #ProjectManagement #Bidding #DigitalTransformation

151

‏110‏ ‏תגובות‏

Case of the Week: CVE-2025-53770 🗃️ 📍 Location: Microsoft SharePoint Server, on-prem only 🤖 Actively exploited in the wild The vulnerability involves deserialization of untrusted data and enables unauthenticated attackers to execute arbitrary code remotely, providing full access to SharePoint content, file systems, and internal configurations. Microsoft has released security updates that fully protect customers. If you cannot apply them, proceed to scripting 🔗 https://lnkd.in/g8vX_YJm Key details: 1. Per Microsoft Security Response Center recommendation, this script solely enables AMSI integration in SharePoint, it is recommended to also enable Full Mode for optimal protection and Deploy Defender antivirus. 2. AMSI integration was already enabled by default in the September 2023 security update for SharePoint Server 2016/2019 and the Version 23H2 feature update for SharePoint Server Subscription Edition, so not all systems with SharePoint are compromised. 3. After installing the latest security update it is recommended to rotate keys, which cannot be done via scripting. --- Reporting from Vicarius Detective Agency. July 24, 2025.

41

Logicom Greece joins forces with Palo Alto Networks as an Official Distribution Partner. We’re excited to announce that Logicom Greece is now an official distribution partner of Palo Alto Networks, one of the global cybersecurity leaders. This strategic collaboration strengthens our commitment to delivering cutting-edge cybersecurity solutions, enabling businesses across Greece to stay protected, resilient, and prepared for the future. 🔗 Read the full press release: https://lnkd.in/dyqKhWxg #LogicomDisti #PaloAltoNetworks #Cybersecurity #Partnership #LogicomGreece

114

‏4‏ ‏תגובות‏