Full Segment Notes
This week in the Enterprise News: Is the art of VC valuations a lie?, Noname Security hits unicorn status, Dazz sounds like an 80's cartoon character and is the latest to join the CSPM category with a mega Series A, LogMeIn spins out Lastpass, We'll talk about Log4Shell for a little bit, but not too much, Everyone forgot that AWS had an outage last week, at least, until they had an outage this week, 83% of IT professionals can't guarantee infrastructure is safe from ex-employees, & Senate approves cyber-loaded defense bill but stripped out incident reporting! All that and more, on this episode of Enterprise Security Weekly!
Hosts
Announcements
- We're always looking for great guests for all of the Security Weekly shows! Submit your suggestions by visiting https://securityweekly.com/guests and completing the form!
List of Articles
Adrian Sanabria
- TRENDS: The ‘art’ of VC startup valuations is a forgery – TechCrunchhttps://techcrunch.com/2021/12/10/the-art-of-vc-startup-valuations-is-a-forgery/
- FUNDING: Noname Security achieves unicorn status, one year after exiting stealth, with $135 million Series C
- FUNDING: Ermetic raises $70M for ‘identity-first’ cloud security
- FUNDING: Dazz, from ex-Microsoft team, gets $60M to automate cloud security$50m Series A + $10m Seed. Sounds like a CSPM play, and who can blame them with all the money getting raised there? Founding team includes former general manager of Microsoft's cloud business and a few other ex-Microsoft folks with backgrounds in IoT security (Armis and Claroty). Founding crew looks to be mostly Israeli and funding comes from Insight Partners, Greylock Partners, Index Ventures, and Cyberstarts.
- SPIN-OUT: LogMeIn spins LastPass out as an independent company once morehttps://blog.lastpass.com/2021/12/lastpass-investing-even-more-in-your-password-security-in-2022/
- VULNS: Log4Shell: RCE 0-day exploit found in log4j, a popular Java logging package
- POST-MORTEM: Summary of the AWS Service Event in the Northern Virginia (US-EAST-1) Region
- REPORTS: Cisco Secure Outcomes Study Report 2021Part 2 of an excellent series funded by Cisco and put together by the excellent Cyentia Labs. It studies security outcomes - I highly recommend reading both!
- TRENDS: Report: 83% of IT professionals can’t guarantee infrastructure is safe from ex-employees
- STANDARDS: SP 800-160 Vol. 2 Rev. 1, Developing Cyber-Resilient Systems: SSE ApproachEven NIST is ready to admit the security team can't do all the lifting.
- REGULATIONS: Democrats accuse GOP of scuttling incident reporting in massive defense billhttps://therecord.media/democrats-accused-gop-of-scuttling-incident-reporting-in-massive-defense-bill/
- REGULATIONS: Senate approves cyber-loaded defense bill loadedhttps://therecord.media/senate-approves-cyber-loaded-defense-bill-loaded/
- SQUIRREL: What’s the jankiest piece of tech you’ve seen a company depend on?Brandon Rohrer asks on Twitter: War stories please. What’s the jankiest piece of tech you’ve seen a company depend on?
