"Cloud Security: Evolution of Detection Engineering with Alex Hurtado"

 The "VirtualBox Escape" Flaw — A Step-by-Step Playbook for Hunting Host Compromise & Stolen Cloud Credentials Read the full report on - https://lnkd.in/eXiscUbd

SentinelOne’s new Wayfinder Threat Detection & Response suite combines AI-powered managed threat hunting, 24/7 managed detection and response (MDR) across endpoints, cloud workloads, and identities, enhanced with Google Threat Intelligence.⁣ ⁣⁣⁣⁣ 𝐑𝐞𝐚𝐝 𝐟𝐮𝐥𝐥 𝐁𝐥𝐨𝐠: https://lnkd.in/d5tsz22w Dolly Lakhani | Pooja Panjwani | Steve Stone

🌐 Open source security just took a BIG leap forward 🚀 👉 𝗟𝗜𝗩𝗘 from 𝗞𝘂𝗯𝗲𝗖𝗼𝗻 𝗡𝗔: Sysdig is advancing its vision for an open source cloud security platform, starting with deeper integration between OSS Falco and 𝗦𝘁𝗿𝗮𝘁𝗼𝘀𝗵𝗮𝗿𝗸 — AKA “𝘞𝘪𝘳𝘦𝘴𝘩𝘢𝘳𝘬 𝘧𝘰𝘳 𝘵𝘩𝘦 𝘤𝘭𝘰𝘶𝘥.” New updates to Falco and Stratoshark streamline the path from detection to investigation — uniting Falco’s runtime insights with Stratoshark’s deep cloud forensics in one seamless, open-source workflow. This development is a major step toward a unified, community-driven ecosystem for open source cloud defense. 🔗 Explore what this powerful integration can do: https://okt.to/8rlK0x 🤝 Join Sysdig's 𝗢𝗽𝗲𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝘆: https://okt.to/w4jPWN

In Freeriding and Cloud Security, the biggest risk is the one you don't see: The Cornice. ⛰️ Freeriders know a cornice (an overhanging ledge of snow) is invisible from the top, but deadly. It's the ultimate 'unknown threat.' In Cortex Cloud, our job is to map that hidden risk. This is the value of Cloud Detection and Response (CDR). It’s not enough to rely on static rules; we must use AI and continuous data analysis to spot the subtle behavioral anomalies (the snowpack shifting, the ice forming) before the structure collapses. We're turning 'unknown terrain' into actionable intel. How does your team currently perform threat hunting for those 'hidden cornices' in your cloud environments? 📸 DB #CloudDetection #CDR #ThreatHunting #AIinSecurity #DevSecOps #paloaltonetworks #CortexCloud

Skyhawk Security's Continuous Autonomous Purple Team simulates attacks based on the specific configuration of the cloud attack surface, crown jewels, and cloud architecture. These attacks are customized for each customer’s cloud environment. This is the only way to stay ahead of threat actors - read the blog for more. https://lnkd.in/gTusy_sy We will back it up with a free, 30 day trial: https://lnkd.in/g6nQuirw

🚨 MITRE ATT&CK v18 is out! A major update focused on improving detection engineering and threat visibility. Key highlights: ✅ New Detection Strategies & Analytics objects → more actionable, behavior-based detections ✅ Expanded coverage: cloud, Kubernetes, CI/CD, mobile linked-device abuse & ICS environments ✅ Better mapping between techniques, logs, and analytics ✅ Future split of “Defense Evasion” into Stealth & Impair Defenses for clearer threat modeling ✅ Launch of the ATT&CK Advisory Council to strengthen community input This release brings ATT&CK closer to how defenders actually hunt and respond to adversaries. ➡️ Full article: https://lnkd.in/eRRUYFkT ➡️ ATT&CK Matrix: https://attack.mitre.org/

🚀 New in Qlik Cloud: Strengthen Security with IP Allowlists! 🔒 We’re excited to announce a powerful new security feature in Qlik Cloud — IP Allowlists! You can now define trusted IPv4 ranges to control who can access your tenant, ensuring that only approved networks are permitted. This gives organizations in highly regulated industries — such as finance, defense, and aerospace — an additional layer of protection and peace of mind. What makes this release even more special is you — our customers. 🙌 This has been one of the most frequently requested capabilities, and your feedback directly shaped its delivery. It’s another great example of how we’re continuously evolving Qlik Cloud to meet your enterprise security and compliance needs. With IP Allowlists, your Qlik Cloud environment is now even more secure, controlled, and compliant — right out of the box. #QlikCloud #DataSecurity #Innovation #CustomerDriven #QlikCloudAnalytics

🔒 Strengthening Security in Qlik Cloud with IP Allowlists! 🚀 Big news from Qlik Cloud: you can now define trusted IPv4 ranges to control access to your tenant. This means only approved networks can connect — giving organizations in regulated industries like finance, defense, and aerospace an extra layer of protection. What makes this update special? Our customers! 🙌 Your feedback shaped this feature, making it one of the most requested enhancements. It’s another example of how Qlik Cloud keeps evolving to meet enterprise security and compliance needs. With IP Allowlists, your environment is now even more secure, controlled, and compliant — right out of the box. #QlikCloud #DataSecurity #Innovation #CustomerDriven #QlikCloudAnalytics

What makes Mandiant (part of Google Cloud) experts the best at tracking threats? They helped define how it's done. Introducing an 8-hour on-demand experience packed with real tools and real-world insights. This course teaches you how to turn threat intelligence into better detections, using tools like GreyNoise, Augury, and RITA. Whether you're new to network traffic analysis or looking to sharpen your skills, you'll walk away ready to put these methods into action. Watch the course preview and register: https://bit.ly/4otlPXn

Secure your cloud from the ground up. Misconfigured Terraform files can open doors to risk but with Snyk IaC, you can scan, fix, and deploy securely before vulnerabilities ever reach production.   Shift security left. Empower developers. Build safer, smarter infrastructure.    Read the full blog by Ashok Kumar Natarajan to explore how Snyk brings IaC security to your workflow. Link: https://lnkd.in/gAPtUYsY #Terraform #Snyk #CloudSecurity #DevSecOps #InfrastructureAsCode #Altimetrik #SecureCoding