Shyam Raj

🚨 Vulnerabilities now linger 252 days on average — bridging the gap between security and dev is no longer optional.

1

💭 SOC platforms are evolving. 💡 What if triaging didn’t just follow rules — what if it became a cognitive process? 💡 What if alerts could explain themselves, and the system could recommend what the risk looks like? Having an L3 analyst on standby 24/7 may not be as expensive as we once thought. 💡 What if repetitive graph-based investigations were handled by specialized agents, while humans stay in the loop for critical decisions? 💡 What if platforms priced based on outcomes, not data volume? The #AutonomousSOC wave is here — and it’s coming faster than we think. Exciting times ahead! 🚀 #platformization #CyberSecurity #SOC #AI #Innovation #AgenticAI #SIEM #XDR Disclaimer: This post reflects general industry trends and ideas, and is not related to any future roadmap or capabilities of my current employer.

34

2 Comments

The UK Government has released guidance for a voluntary Software Security Code of Practice, with plans for offering a certification based on compliance. There are four themes: Secure design and development, Build environment security, Secure deployment and maintenance, and Communication with customers. The guidance consists of fourteen principles which are reasonable for vendors of all shapes and sizes to satisfy (at least to some degree). I typically dislike these generic guidance documents stating things like "Distribute software securely to customers," but not everyone is fortunate enough to have a team of internal security professionals. If it's any signal for software supply chain security, to see even the most fundamental guidance include software composition analysis and maintenance of third-party components is a huge win!

24

Spray-and-pray doesn’t work at enterprise level. Winning complex deals takes more than outreach, it takes orchestration. Seceon gets this. Their partner-first GTM has already unlocked: ✅ 650+ MSSP partners ✅ 9,000+ customers ✅ Trusted by security teams using Splunk & CrowdStrike And their 2025 plan is clear: → Expand the platform’s capabilities → Build mindshare in a crowded market → Help partners win bigger, faster And achieving those goals requires more than just partner scale. It takes narrative ownership, buyer group trust, and a brand presence that cuts through the market noise. That’s where Account-Based Podcasting (ABP) comes in. Because ABP isn’t just content. It’s a revenue engine that earns trust across the entire buying group, and aligns every episode with your Go-To-Market strategy. Here’s what ABP unlocks for Seceon: → Strategic Positioning Amplified: Their “Unified by Design” edge becomes the core story repeated across every partner, buyer group, and analyst interaction, building brand memory and competitive differentiation. → Multi-threaded Trust: Podcast guests = CISOs, SOC leaders, compliance officers, the buying group. Each episode = clips, sales assets, blogs, and FAQs that move deals forward. → Partner Co-marketing: Top MSSPs and vendors like CrowdStrike join as guests. Episodes double as co-branded content they share, expanding reach and credibility. → Category Leadership: The show educates the market and positions Seceon as the voice in unified threat management. → Executive Visibility: Their CEO, CTO, and internal experts become the faces of trust in a noisy, skeptical industry. And this is aligned with their 2025 roadmap too! Shout out to the Seceon Inc. team Tarun Chhetri Chandra Shekhar Pandey Shikha Pandey Aishwarya Pratap Singh Pushpendra Mishra 🇮🇳 Kriti Tripathi Jui Shah This is Episode 10 of my 10-part ABP series on how B2B tech companies can use podcasts to win accounts, grow pipeline, and own their niche 🥳 p.s. want to see the rest of the episodes? Tap “visit my website” under my name ☝️

41

1 Comment

Jitesh Sharma shares his journey from senior penetration tester to product manager and how an attacker mindset reshapes product thinking. You will get a candid look at the mindset shift and why communication matters as much as technical depth. https://lnkd.in/dJsamCxp

1

New blog from Jitesh Sharma on what happens when you move from breaking systems to building them. In this post, Jitesh shares his journey from senior penetration tester to product manager and how an attacker mindset reshapes product thinking. You will get a candid look at the mindset shift, why communication matters as much as technical depth, and how real-world security and AI testing experience leads to better product decisions from day one. A smart read for anyone building security products or thinking about making the same leap at Radware and beyond. https://lnkd.in/eC8uvjC7

1

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

9

1 Comment

Security teams deal with thousands of alerts every day, most never get investigated. That’s where Cortex XSOAR helps. But the real power comes from knowing how to build smart automation. Learn how to: 🔹 Build production-ready playbooks 🔹 Automate phishing, threat intel, and incident response 🔹 Write scripts and extend XSOAR with custom automation Delivered by Datacipher, an authorized Palo Alto Networks training partner. 📩 Want to reduce alert fatigue and modernize your SOC? Reach out at training@datacipher.net #CortexXSOAR #SOAR #SecurityAutomation #SOC

1

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

2

Pro tip for ensuring that port scans only need to be run once: sudo nmap -Pn -n --disable-arp-ping -T5 --max-retries=0 -p- -oX - <target IP> | xsltproc -o target.html - Piping nmap to xsltproc directly will always generate a readable scan report every time, which can be looked at and studied for easy target navigation.

15

2 Comments

🔥🔥IAM Learning Series 📖📖📖🙇‍♂️🙇‍♂️🙇‍♂️ 💥 Myth Buster Alert! 💥 Many believe static access is enough for companies — but that’s a myth! 🚫 Static access = outdated permissions & higher risk. ✅ Dynamic access = context-aware, time-bound, and secure. It’s not “overkilling” — it’s evolving access for modern threats 🔐 #MythBuster #CyberSecurity #IAM #AccessControl #ZeroTrust #DynamicAccess #IdentitySecurity #JITAccess #ZeroTrust #AccessManagement #cybersecurity #cyberawareness

5

#SecurityAlert n&n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions The issue impacts the following versions - >= 0.123.0 < 1.121.3 The disclosure comes as n8n has addressed a steady stream of critical flaws in the platform (CVE-2025-68613 and CVE-2025-68668, CVSS scores: 9.9) that could lead to code execution under specific conditions. https://lnkd.in/euMzs2ty #TheHackerNews #n8n #CVE #RCE #Cybersecurity #LLM #Agentic #MCP #InfoSec #Vulnerability #ThreatIntel #CloudSecurity #ThreatIntel #CyberRisk #CloudSecurity

4

Still chasing false positives and stuck in slow manual work remediation cycles? 🔥🔥Great insight here SecOps,🔥🔥 Enjoy this read on learning how Enterprise security teams accelerate best practices in detection and remediation- utilising powerful continuous fully Automated Active Testing, without ANY disruption! 🐢 (#SecurityOperations #SecOps #DevSecOps #securityteam #securitymanager #socmanager #infosecmanager #CISO #CSO)

3

The noise around SailPoint's FY'27 ARR guidance was an unfortunate distraction from what was otherwise a very interesting Q4'26 report. This is another case where the market reaction felt very different than my own view of their performance and strategy. Investors and equity analysts have a job to do, so it's totally fair for them to dig in on things like guidance. For the rest of us, the "don’t make a mountain out of a molehill" idiom seems relevant here. Don't turn the conservative guidance into more than what it is. SailPoint just delivered a very strong year overall. They're in a good spot heading into FY'27. Several thoughts: → The AI identity revenue disclosures are among the most material in public cybersecurity. Mark McClain called AI "the single greatest market expansion driver we have ever seen," but the numbers they disclosed are what caught my attention. NHI accounted for 25% of identity growth in the SaaS product during Q4. They're now 11% of the total identities SailPoint manages. AI identity solutions drove 17% of net new ARR in Q4, doubling quarter over quarter. There were 500+ transactions tied to these new product releases. Customers adopting SailPoint's expanded solutions grew ARR 50%+ year over year. These are concrete numbers on agent revenue. Not many public cybersecurity companies are disclosing this level of detail yet. The adoption signal is real already, and it's still very early. → SailPoint's privilege expansion strategy builds on their strengths. SailPoint is going after dynamic privilege across all identities. That's *not* the traditional PAM market. They've been very clear about that. The starting point advantage they discussed on the call matters. Competitors coming from access management have breadth but will likely struggle with depth of permissions. Competitors from PAM have depth but narrow coverage (typically 3 to 5% of identities in an enterprise). SailPoint's starting point is ~100% coverage (of identities, not necessarily apps – although that's a major strategic shift, too). They're not expanding from a shallow base or deepening from a narrow one. They already have both breadth and depth. That's a good position to be in. → Navigators flex pricing removes friction from legacy migrations. SailPoint's new flex pricing model is already showing how much of a difference it can make for their customers. Enterprise identity migrations are expensive (millions, usually). Cost and licensing flexibility are super important. The practical effect: customers migrating from legacy IGA systems (Oracle, IBM) or upgrading from on-prem to SaaS get a cleaner economic path. The model simplifies year one economics and removes a common friction point in migration decisions. --- SailPoint had a strong first year as a born again public company: 28% ARR growth, 18% margin, Rule of 46. The market fixated on guidance, but that shouldn't overshadow what they built or where they're headed in FY'27.

205

10 Comments