Andrew Rubin

We'll be on the ground for BSides SF and #RSAC. Look for the devici booths! (At #RSAC, we're at the Early Stage Expo.) Hit me up to talk all things #threatmodeling! Also, catch me in a workshop or a main stage talk at #RSAC: Speaking: Secure and Privacy by Design Converge with Threat Modeling (May 8, 14:25 Pacific) Learning Lab: Threat Modeling Championship: Breaker vs. Builder (May 8, 08:30 Pacific)

12

1 Comment

Enjoyed reading this post from CISA Director, Jen Easterly on the USDA's adoption of FIDO Protocols, referencing the CISA's publication from the 20th: "USDA’s success story should inspire all enterprises to migrate to FIDO authentication". Referencing the CISA publication: "Authentication technologies that do not involve FIDO or public key infrastructure (PKI)—a security framework based on public key cryptography—to support confidentiality and integrity will only continue to put organizations at risk by allowing malicious cyber actors initial access to their networks via credential phishing attacks."

1

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

172

9 Comments

The recent breach involving Cisco Duo's Multifactor Authentication Service has a clear message for us: Even the gatekeepers of our digital identities are vulnerable. A third-party telephony service provider crucial to Cisco Duo was compromised through a social engineering attack, leading to unauthorized access and download of sensitive metadata including phone numbers and carrier details from March 1 to March 31, 2024. In such cases, it becomes crucial to look beyond the immediate crisis in order to address systemic vulnerabilities. One thing I can take away from this incident is that it clearly underscores the importance of conducting regular security audits and enforcing rigorous access controls. What measures is your organization taking to enhance digital security in light of this breach? Source: https://lnkd.in/eN9EH9Qs #Siaraa #IAM #Cybersecurity #InfoSec #DataBreach #SecurityAudit #AccessControl #DigitalIdentity #CISCO #MFA

26

1 Comment

A potential homebuyer would not buy a piece of land if the home builder did not show them how the fully constructed house would look. Similarly, investors (and design partners) are more likely to sign when they can *see* your product and not just imagine it. Founders: Give us a week of your time and we will build a design prototype for you just like we did for Amplifier Security.

46

1 Comment

@Traceable’s leadership in API security is undeniable, which is why we jumped at the chance to back @Jyoti Bansal and his team on their recent funding!  Traceable’s API security is transforming the way businesses operate. 

100

2 Comments

CEO of Frame.io Emery Wells sold the company to Adobe in 2021 for nearly $1.3 billion. In our conversation, Emery shares his journey from NYC bartender to startup founder, including his work with Saturday Night Live that highlighted the pain points that led to Frame. We dive deep into his rejection of the lean startup concept, how he gets his team to obsess over design details, and the cultural reset at Frame that set the stage for its success. Some takeaways… → How to Get Your Team to Obsess Over Details In the early days, teams often presented unfinished work in demos, filled with caveats and incomplete elements. To address this, Emery introduced two types of weekly meetings: stakeholder reviews and build reviews. Stakeholder reviews allowed teams to present work in progress and gather feedback. Build reviews, on the other hand, required 100% finished, pixel-perfect work. Leadership pre-inspected presentations to ensure they met strict criteria, and if they didn’t, the meetings got canceled. While this process initially resulted in a lot of canceled meetings and friction, it ultimately established a culture of meticulousness, drastically improving product quality and polished demos. → Why Enterprise Software Sucks Enterprise software often lacks emphasis on brand, design, and quality of execution, traditionally leading to poor user experiences. However, with the consumerization of enterprise software, user expectations have shifted towards high-quality, intuitive experiences akin to consumer apps like Instagram. Today, end users within organizations can often influence purchasing decisions, making it more important for enterprise software to prioritize strong branding and user-friendly design. At Frame, building a strong user experience has greatly improved the brand and contributed to the company's success. → How to Get Your Team to 11/10 The hardest part about achieving 11/10 outcomes is pushing people beyond the point where they think they've done enough. The key is motivating the team to realize their full potential and surpass their perceived limits, but you must balance emotional boundaries and discomfort without causing burnout. If you do it right, the team will ultimately see they can achieve more than they initially thought possible. → How Emery Learned Culture Was Actually Important When 3 directors left and the VP of Engineering was replaced, Emery realized there was a cultural crisis at Frame. Previously, many different ideologies led to unhealthy internal debate, and they had no unified belief system. Emery then realized that culture is about shared decision-making approaches and a cohesive set of values, not just social norms. When Emery brought in new directors, they sat down to reset the culture and think hard about Frame’s cultural values, and it worked wonders. Full episode: https://lnkd.in/dVCx9S_Q

55

4 Comments

I applaud the Federal Trade Commission for adopting a comprehensive ban on new non-competes. While the U.S. Chamber of Commerce challenged the regulation, Pure Storage offers a different perspective. Since 1941, California has made non-competes unenforceable, except in certain situations such as key executives in the sale of their company. A highly competitive labor environment is one important reason why this State remains the world's fifth-largest economy, which is significantly enabled by the absence of non-compete agreements. In our early days, Pure Storage faced a barrage of non-compete lawsuits from a large entrenched vendor, which did not want its people leaving for a competitor. Certainly, seeing trained personnel go to a competitor is uncomfortable, and employees certainly need to protect confidential information. But, competitive hiring works both ways and companies need to create attractive and competitive workplaces to retain their top talent. To create a competitive economy and world beating companies, our country needs to enable a mobile, competitive workforce. Eliminating non-compete agreements will enhance our country’s competitiveness, and encourage companies to focus on their work environments rather than their legal contracts. How do you feel about non-compete agreements? https://purefla.sh/3UwoLqa

528

34 Comments

Shadow IT is an especially big security concern in today's SaaS-based business environment. Hear from CEO of Polymer Data Security, Yasir Ali, about his approach to preventing data leakage and shadow IT as part of a proactive cyber risk management program. Catch Cyber Rants Podcast Episode 122 here or on your preferred podcast platform: https://lnkd.in/gywyScbw #cyberrants #cybersecurity #podcast #shadowIT #dataleakage

12

Investments and M&As are set on an upward trajectory at a time when many Venture Capitalist backed vendors are under re-valuation. Should a deal for Wiz come together, it would be one of the largest technology deals of late as antitrust scrutiny and high interest rates have kept would-be buyers on the sidelines. It’s interesting to note that where there have been deals, cybersecurity has been an area of focus. Cisco also recently closed a $28 billion takeover of cybersecurity and analytics company Splunk earlier this year.

16

The proliferation of foundation models is redefining what it means to be a technical founder. Satyam Sinha exemplifies the evolving skillset required to build AI-native companies. After recognizing AI's trajectory while VP of Engineering at Palo Alto Networks, he made a decisive move—resigning shortly after to tackle AI security head-on. Satyam's approach to founding Acuvity demonstrates key attributes for AI-native startups: → Swift problem identification: AI security and governance → Team assembly: leveraging 8+ years of shared experience → Novel technical approach: using AI models to monitor AI usage → Rapid execution: securing early customers within months of founding Satyam's edge comes from his transition from pure technologist to business-savvy founder. At his previous startup Aporeto, he pushed himself to move between engineering and GTM teams. This experience equipped him to address the full spectrum of challenges in building an AI company. Most talk about AI. A select few are building it. Leading Acuvity’s $9M Seed reflects our conviction in Satyam and cofounder Antoine Mercadal, their vision, and the urgent need for robust AI security solutions. Proud to lead this round! Foundation Capital

142

10 Comments

A shrewd move by Trinsic, and just in time. I predict huge success, kudos all around. IMO it takes them officially out of the SSI game, at least as a direct creator or driver of it. Riley Hughes has been clear, they’ve given every chance they could before needing to pivot to greener pastures, and this appears to be an excellent pivot. My POV: SSI will still happen, but indirectly as a result of other things gaining traction beforehand, such as organizational identity, GLEIF’s vLEI, EU ID, etc. As a platform of platforms, Trinsic will still be positioned well to provide verification services for those services as they come along, enabling Trinsic to still help facilitate true SSI when the world is finally ready for it, and thrive in the meantime. Shrewd indeed. Bravo, Riley, Michael, and the rest of the Trinsic team!

32

4 Comments

Super interesting move by Joe Levy and the team at Sophos. The managed services market is still fragmented and chaotic, and far too many customers are underserved/unserved. Excited to see where they take this acquisition of Secureworks and lead out in the market. #sophos #cybersecurity #cyber #M&A #secureworks.

2

Join Philip Kwan, Senior Principal Product Manager at Palo Alto Networks, and Marisol Cruz Cain, Director at the Government Accountability Office, on Dec 4 at 2 PM ET to gain insights on quantum-resistant encryption and the roadmap to post-quantum readiness. Tune in to hear the experts speak about some of the latest advancements in quantum-resistant technologies, including VPNs and algorithm discovery tools, as well as the importance of interoperability and crypto-agility in PQC solutions. #quantumcomputing #quantumresistantencryption #cybersecurityencryption Secure your spot: https://bit.ly/413eN2X

9

Non-compliance can cost millions in fines and damage your reputation. Are manual processes keeping you behind? IBM’s 200+ automated workflows tackle compliance challenges across industries: • Effortlessly classify sensitive data across hybrid cloud environments. • Automate workflows tailored to industry-specific standards like HIPAA, GDPR, and SOX. • Save time and reduce risk with custom reporting tools. Compliance isn’t optional—but it doesn’t have to be hard. IBM makes it simple. RSec Group helps you implement, contact us @ rsecgroup.com #ComplianceAutomation #RegTech #DataProtection #IBMpartners #IBMAmplify #RSec #IBM

9

I’m thrilled to share that UJET has raised a total of $76 Million Series D funding, led by Sapphire Ventures , with participation from new investors KeyBanc Capital Markets and IonPacific, LLC, and existing investors GV (Google Ventures), Kleiner Perkins , Citi Ventures, DCM Ventures, and Ericsson Ventures. This isn't just about capital—it's fuel for our vision of a world where AI and people work together so that every customer experience is effortless, intelligent, and personal. We've all been there: stuck in endless phone queues, repeating information to multiple agents, feeling like just another ticket number. That's the old way. At UJET, we're building the new way. Where every interaction is seamless, personalized, and intelligent, no matter the channel.  Where AI: -Elevates Customer Experiences -Supercharges Agent Efficiency -Optimizes Contact Center Operations -Offers Insights for Brand Growth Imagine a contact center where customers get the answers they need instantly, where agents have the tools to solve complex issues effortlessly, and where businesses unlock valuable insights to drive growth. That's the power of UJET. This funding accelerates our mission. We'll continue to push the boundaries of conversational and generative AI, making self-service smarter, agent guidance more intuitive, and contact center operations more efficient. I’m also excited to accept the role of Co-CEO, alongside our Founding CEO, Anand Janefalkar, as we work together to usher in this next phase of growth in the new AI-era. We're incredibly grateful to our investors, customers, partners, and the amazing team at UJET. Together, we're reimagining customer experience in the age of AI. Thank you to all of our new and existing supporters in this round: Karim Faris, GV Jai Das, Sapphire Ventures Cathy Gao, Sapphire Ventures Osuke Honda, DCM Ted Schlein, Kleiner Perkins Matt Carbonara, Citi Ventures Çağla Kaymaz, Citi Ventures Paul McNamara, Ericsson Ventures Raanan Bar-Cohen, Resolute Ventures Aaron Hill, KeyCorp Jason Krikorian, (Independent) https://lnkd.in/guKtyPRH #UJET #AI #CustomerExperience #ContactCenter #SeriesD

288

77 Comments

For far too long we’ve “one sized” access across multiple resource types - often granting far too much access to users to try to remove friction from our business. But we should be able to provide the RIGHT amount of access at the RIGHT time. Here Justin McCarthy - our co founder and CTO - explains how StrongDM can “right size” the authentication process to step up access when needed whilst introducing just enough friction for the task at hand. All within the confines of the industrys most open and powerful PAM infrastructure. Do things differently and get different results…

19

1 Comment

It's a fucking honor to build products for the 99% of businesses that fall below the Fortune 500 poverty line 💪 While the Fortune 500 said SIEM was tired, the Fortune 5,000,000 showed us how to mic-drop! 🫳🎤 🧠 Affordable, predictive pricing *is* possible if you only store what matters 💾 Retaining / hunting thru petabytes of daily data *won't* break the model 💵 You can protect more than just your critical servers *if* the price is right Can't tell you how dope it feels to work with MSP partners / Customers to completely disrupt these perceptions—currently ingesting logs from 500,000+ data sources! Massive thanks to those Product Lab believers that demanded a new way to SIEM https://lnkd.in/eXKgmEHP and the team at ClickHouse who helped us reimagine a different approach to storage and scalability 🙏 https://lnkd.in/eVSh2Yfx

393

23 Comments

Looking forward to this talk. #HPC, #AI, or any other sensitive workloads are not truly confidential without securing them AND verifying the integrity of that security. Both AMD and Invary are critical components of this, showcased through the NSA's maat project. Join us and use the code SPEAKER15 to get 15% off your pass. #CCSummit

11