Interview with Hadar Krasner, Co-Founder and CPO of Bold Security
This week's interview with Hadar is a fascinating dive into the history of data security and why they chose to tackle endpoint-focused data security. We discuss why securing data is traditionally such a challenging task, making it clear why Bold is such a fitting name for the company. After 30 minutes, we barely scratched the surface and are hoping we can have them back soon for another interview!
Segment Resources:
This segment is sponsored by Bold Security. Visit https://securityweekly.com/bold-security to learn more about them!
Topic - Don't Let AI Ruin Your Talk
In this week's topic segment, we discuss the emerging epidemic of low-effort AI-generated slides. AI can definitely make slide creation less painful, but you still need to put some effort in to make a good looking deck that makes sense. If you don't, your audience WILL notice.
Enterprise Security News
Finally, in the enterprise security news,
- we discuss the Sawtooth problem
- cybersecurity is center stage in AI
- not everyone is a big fan of passkeys
- Ross Haleliuk is back with some interesting essays
- insider threats: sometimes the cybercriminal was inside your organization all along
- AI can now read your mind
- and as always, we’ll kick off with the vibes
All that and more, on this episode of Enterprise Security Weekly.
Hadar Krasner is Co-Founder & CPO of Bold Security, where he builds AI that protects sensitive data at the endpoint in real time. He previously led product at Varonis following its acquisition of Polyrize, where he was CPO, and held product leadership roles at IntSights (a Rapid7 company) and Verint. Hadar began his career in Israeli Military Intelligence’s Unit 8200, where he spent five years in cyber intelligence.
Quick reality check. Your environment isn't getting simpler. It's getting noisier.
More identities. More cloud services. More third parties. More AI. But your team? Probably not getting more headcount.
The challenge isn't collecting more telemetry or buying another tool. It's figuring out where your organization is actually exposed and what deserves your attention first.
If you're defending financial systems, join us October 14 for the FinSec Virtual Summit. You'll hear how enterprise security teams are prioritizing risk, strengthening resilience, and making smarter security decisions without adding unnecessary complexity.
Register for free at https://securityweekly.com/finsec using the discount code CSS26-SW!
InfoSec World is introducing a fresh experience for 2026, with new voices, a new venue, and new topics reflecting the challenges security teams are facing now. Join practitioners and leading professionals from across industries in Orlando, October 12–14. Listeners save 30% on their pass with code ISW26-SWSAVINGS at securityweekly.com/infosecworld2026.
Adrian Sanabria
- FUNDING/M&A courtesy of the Security, Funded newsletter, #264 – Armadin to the Teeth
VIBE CHECK
Which buys down the most security risk these days?
- 46% - Shrinking what's exposed
- 23% - Fixing what's already there
- 15% - Finding more vulnerabilities
- 8% - Proving controls actually work
- 8% - Other (tell me)
- 0% - Creating fewer security defects <-- ouch, got us right in the Secured by Design!
Mike's comments:
"Shrinking what is exposed and reducing the existing attack surface was the clear winner in last week’s vibe check. The results are funny to me, because “shrinking exposure” isn’t really an investable domain in the cyber world. I still agree with it being the right approach to take, however.
You can obviously enumerate and identify your exposure better, take steps to secure and patch what’s out there, but shrinking it is a different game altogether. It’s going to require businesses to do things differently from an architectural and go-to-market standpoint."
I disagree, I think shrinking exposure can and SHOULD be an investable domain! Where is the vendor that can identify and remove software from my employees laptops that hasn't been used in 180 days? Where's the software that can tell me a server is idle and no longer used, so should probably be shut down? Software does exist that can do this, but isn't labeled as security software.
FUNDING
- Armadin Security, a United States-based automated red-teaming and AI threat hunting platform, raised a $255.5M Series B from Andreessen Horowitz and Accel. (more) Unicorn Alert ????
- Reco, a United States-based SaaS security posture management platform, raised a $55.0M Series B from AT&T Ventures.
- doxx.net, a United States-based private networking and DNS threat protection platform, raised a $38.0M Series A from Andreessen Horowitz.
- Modulate, a United States-based AI audio monitoring platform for detecting audio deepfakes and fraud, raised a $25.0M Venture Round from Future Ventures.
- Rig Security, an Israel-based identity threat protection and posture management platform for cloud environments, raised a $12.0M Seed from Brightmind Partners and Ten Eleven Ventures.
- Osavul, a Luxembourg-based AI-generated disinformation threat detection platform, raised $10.0M in Series A funding from 33N Ventures.
LAYOFFS
- Snyk, a United States-based application security platform, laid off 203 employees, or 20% of its workforce, as part of a restructuring effort.
- ESSAYS: The Sawtooth Problem
An excellent and refreshing essay from Melanie Ensign where she suggests reframing how we look at breaches and security incidents in the enterprise.
- ESSAYS: Cybersecurity Is Center Stage in AI
The latest from Ayman!
- ESSAYS: Both AI skeptics and AI enthusiasts in cyber are wrong
Ross Haleliuk is back after a break from writing and has some spicy takes!
- ESSAYS: I don’t like passkeys
A great discussion on the pros and cons of passkeys. TL;DR - they're great for enterprises, but they suck for consumers.
- BREACHES: FBI Blames Contractor’s Missed Patch for ShinyHunters Breach – DataBreaches.Net
Ooooh boy, shots fired here - the FBI blames Accenture for failing to patch Peoplesoft, getting the agency hacked by ShinyHunters, who seem to be regretting doing the hack in the first place.
Everyone loses in this story.
- CYBERCRIME: Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients – DataBreaches.Net
Maybe it is coincidence, but we've got a few cases in the news this week where trusted third parties or insiders were the source of cybercrime and got busted for it. In this case it was a ransomware negotiator.
- CYBERCRIME: Engineer sentenced for locking over 3,000 devices on employer’s network – DataBreaches.Net
And in this case, it's a systems engineer!
- CYBERCRIME: Can you really make more than $200M in six months without encrypting victims? It seems Silent Ransom Group can. – DataBreaches.Net
Ransomware hasn't gone away, but stealing data to extort victims is more popular than ever. It's easier, less steps and requires less effort for the attacker.
- SQUIRREL: An AI “mind-reading” tool can reconstruct what you’re looking at from a brain scan
I do not like this.
