NetRise provides a platform for analyzing and managing risks associated with extended Internet of Things (XIoT) and connected devices.

NetRise

The NetRise Platform is a next-generation product security solution for XIoT devices. Through ML-driven binary analysis, our platform generates industry-best Software Bills of Material (SBOMs), identifies and prioritizes vulnerabilities, and uncovers non-CVE risk that would otherwise go undetected.

NetRise is here to help you ship more secure products and simplify your product security strategy.

DNX Ventures

Miramar Digital Ventures

Sorenson Ventures

Squadra Ventures

🔒 New ICS Advisories 🔒

This week, CISA has released five new Industrial Control Systems (ICS) advisories that address critical vulnerabilities affecting various systems across different sectors. These vulnerabilities, if exploited, could lead to severe disruptions in critical infrastructure operations.

Key advisories include:

• Rockwell Automation Emulate3D: A DLL hijacking vulnerability that could allow remote code execution.
• MOBOTIX P3 and Mx6 Cameras: Vulnerabilities that could lead to unauthorized access and disruption.
• Avtec Outpost 0810: Issues that might impact communication systems used in public safety.
• Mitsubishi Electric MELSEC iQ-R Series: Multiple vulnerabilities including denial-of-service and privilege escalation.

For detailed technical information and guidance, check out the full CISA advisories below:

#CyberSecurity #CISA #ICS #CISA #VulnerabilityManagement #InfoSec #SCRM #SBOM #SupplyChainDetectionAndResponse #FirmwareSecurity #NetRise

NetRise CEO, Thomas Pace, provided insights in a recent Industrial Cyber article discussing the national security concerns surrounding Chinese-manufactured TP-Link Wi-Fi routers. U.S. lawmakers are calling for a thorough investigation into these devices, citing potential vulnerabilities that could be exploited for cyberattacks.

In the article, Thomas highlights the dangers associated with backdoors and firmware vulnerabilities in these routers, emphasizing the complexity and network accessibility that make them attractive targets for adversaries.

Click the link below to read the article in full.

#SCRM #SupplyChainDetectionAndResponse #FirmwareSecurity #SupplyChainSecurity #CyberSecurity #NetRise

🔍 Did You Know? Each Networking Device Contains Over 1,200 Software Components 🔍

Our "Supply Chain Visibility & Risk Study" has revealed a staggering statistic: the average enterprise networking device contains 1,267 software components.

This complexity underscores the importance of comprehensive visibility into every piece of software running on these devices.

Key Insight:

1,267 Components per Device: The sheer number of software components highlights the potential for hidden vulnerabilities and the need for detailed software inventories.

Why This Matters: Without a complete inventory of all software components, organizations cannot fully understand or manage the risks within their software supply chain. Detailed visibility is the first step toward mitigating these risks and ensuring the security of your networking infrastructure.

At NetRise, we are committed to providing the tools and insights needed to achieve this level of visibility. Stay tuned as we continue to share more findings from our research.

Download the full report below to dive deeper.

#Cybersecurity #SupplyChainDetectionAndResponse #SoftwareSupplyChain #NetRise #SecurityResearch #RiskManagement

It's never too late to write up a post about Black Hat and DEF CON, especially when you were out there for 8 days and are still working on follow ups from all of the activity.

NetRise had an incredible trip out to hacker summer camp having a booth at Black Hat, our first non startup city booth! We had a great location that brought a ton of organic traffic and allowed us to do a ton of demos for folks.

We had an unbelievable dinner at StripSteak with 30 customers, partners and prospects and friends that exceeded our expectations and even allowed for a number of folks to create new relationships among themselves which is always a nice added bonus.

We partnered with Eclypsium, Inc. on Thursday to host a happy hour at StripSteak also that had a line out the door and approximately 350 registrants. It was jam packed, but create an excellent environment to meet new people and catch up with folks we have not seen in some time.

Derek McCarthy and I spent the weekend at DEF CON also. Visiting all the villages, working our table and doing more demos than I care to admit. 

NetRise also made a splash that was recognized by various publications related to our announcements related to expansion of support for containers and Windows.

1️⃣ : Silicon Angle - https://lnkd.in/gs9rbprH
2️⃣ : MSSP Alert - https://lnkd.in/gCHPJyZx
3️⃣ : CSO Online - https://lnkd.in/gP3Wn_mv
4️⃣ : Solutions Review - https://lnkd.in/gT4ett4g

Huge thanks to the NetRise team that made it all possible - Mark Hauptman, Joe Galuszka, Derek McCarthy, Trevin Mowery, Adam Dawson and Tyler Slocum. 

It was amazing seeing so many friends that I have not seen since last year's Vegas trip, here is but a few of the folks I got to reconnect with, which barely scratches the surface.

⚠️ Are You Aware of the Hidden Software Risks in Your Networking Equipment? ⚠️

Our latest research has uncovered a startling reality: vulnerability risks in networking equipment are 200 times greater than what traditional network-based vulnerability scanners reveal.

This finding is a wake-up call for enterprise cybersecurity and operations teams. The complexity of software components in networking devices means that traditional scanning methods often fail to present all critical vulnerabilities.

Our inside out detailed software analysis sheds light on these hidden dangers, providing the visibility needed to protect your organization.

🔍 Key Insight:

200 Times Greater Risks: Traditional scans only scratch the surface. Our research shows the true extent of vulnerabilities lurking in your networking equipment.

Why Software Visibility Matters: Without comprehensive visibility into all the software components, you can't fully understand, prioritize, or mitigate the risks within your software supply chain. This visibility is essential for making informed, data driven decisions and safeguarding your enterprise from potential attacks.

Stay tuned as we continue to share more insights from our "Supply Chain Visibility & Risk Study." Together, we can address these hidden risks and strengthen defenses.

Download the full report below to learn more.

#Cybersecurity #SupplyChainDetectionAndResponse #SoftwareSupplyChain #NetRise #SecurityResearch #RiskManagement

In our latest blog post, we dive into a critical topic: "Why CVSS Alone is a Poor Metric for Prioritizing Vulnerability Patching and Remediation Efforts."

We cover:

• Understanding CVSS: How CVSS scores are calculated and their limitations. 

• Key Insights: Findings from our NetRise study show that relying solely on CVSS scores can mis-prioritize vulnerabilities. 

• A Smarter Approach: Why considering exploitability, network accessibility, and detailed software analysis is crucial for effective risk management.

Why It Matters: Not all "Critical" vulnerabilities are the biggest threats. A comprehensive approach ensures the most dangerous vulnerabilities are prioritized.

👉 Read the full post to learn more.

#NetRise #CyberSecurity #VulnerabilityManagement #SupplyChainSecurity #RiskManagement

Exciting News! NetRise has been featured in CSO Online's "The Top New Cybersecurity Products at BlackHat USA 2024"! 

We're thrilled to have the NetRise platform recognized, showcasing our continued commitment to enhancing visibility and security across the software supply chain. Our latest advancements include:

🔍 Expanded Support: Now including analysis of containers and Windows software assets. 

🤖 Advanced Features: Machine learning-based software composition analysis, enhanced extraction, and dependency mapping.

At NetRise, we're dedicated to providing the tools security teams need to manage and mitigate risks effectively in the ever-evolving threat landscape.

Read the full article to learn more:

#NetRise #BlackHat2024 #CyberSecurity #XIoT #SupplyChainSecurity #RiskManagement

Come by the NetRise table in the vendor area at DEF CON to see the latest and greatest from Derek McCarthy and I. We will be there until they ask us to leave around 6PM.

#supplychaindetectionandresponse #sbom

🚀  Breaking New Ground in Software Security!
 
NetRise is thrilled to announce a major expansion to our cutting-edge capabilities! 🎉 We are extending our industry-leading firmware and SBOM scanning and analysis to include containers and Windows assets. This means even more comprehensive security and risk management across your entire software stack! 🔒 

🔎  Why is this important? Because visibility software matters! Our platform identifies all software components and dependencies, and vulnerabilities and misconfiguration risks, giving you the power to protect your organization from potential threats like never before. 🌐 

🏆  Why NetRise? NetRise generates the most comprehensive SBOM/software inventory in the industry. We are the technology leader in software supply chain detection and response and committed to delivering easy-to-use solutions that enhance software security and operational resilience for both developers and enterprise users.

Ready to take your software security to the next level? Dive into our latest press release to learn more! 

#SoftwareSupplyChain #Cybersecurity #NetRise #VisibilityAndSecurity #SupplyChainDetectionAndResponse #SCDR #SBOM #Innovation #TechLeaders

The NetRise team has arrived at BlackHat 2024! We're here to discuss all things supply chain security. Come say hello to:

Thomas Pace, CEO & Co-Founder
Derek McCarthy, Sr. Director, Field Engineering
Joe Galuszka, Sales Director
Trevin Mowery, Strategic Accounts Director
Mark Hauptman, Sales Director
Adam Dawson, VP, Product Management
Tyler Slocum, Marketing Manager

We'll be at booth #3019 on Wednesday and Thursday, and we’re also available to meet any day between Tuesday and Sunday.

Click the link below to learn more about our events this week or to schedule a meeting with a member of our team.

#BlackHat #DefCon #SupplyChainSecurity #SCRM #SCDR #SBOM #CyberSecurity #NetRise

IO:NETRISE

NetRise

Analysis Not Available