Sweet’s Cloud Runtime Security Suite delivers first-to-market capabilities for defending cloud workloads, shifting cloud security right. Founded by retired, elite IDF commanders with prodigious expertise in offensive and defensive cloud security, Sweet’s approach elevates the ability of security teams to shut down cloud attacks when they occur, where they occur, with maximum precision and minimal business disruption. Say hello here, or at: http://sweet.security


Sweet Security

🇺🇸 Next week! Meet Sweet's co-founder and CPO Eyal Fisher through the US.
🍭Apr 8-9 - Chicago, Illinois, Eyal will present at the IANS forum.
🍬Apr 10-11 - Austin and Dallas Texas.
Comment or DM if you'd like to meet Eyal to discuss your cloud runtime security strategy. #CloudSecurity #CloudRuntime #RuntimeSecurity #ItsRunTIME

Happy Easter Sunday from your Sweet friends! 🍭🍬
#Easter #EasterSunday #SweetSecurity #Runtime #CloudSecurity

⚠️Critical Vulnerability ⚠️
CVE-2024-3094 has emerged as a critical vulnerability within XZ Utils versions 5.6.0 and 5.6.1. It results from a supply chain compromise that introduces a backdoor.

✳️Risk Evaluation: Despite the severity of this security loophole, its impact is somewhat mitigated by the fact that major Linux distributions like Ubuntu 23.10 and all editions of RHEL remain unaffected, relying on older, more secure versions of XZ Utils.

💣Exploitation Method: The exploit linked to CVE-2024-3094 employs sophisticated obfuscation techniques within XZ Utils, impacting SSH authentication. The complex nature of the malicious code and its seamless integration into the software underscore the sophistication of the attack.

💪Recommended Steps: CISA strongly advises promptly reverting to a secure version predating 5.6.0 of XZ Utils to address the risks posed by this critical vulnerability. RedHat Enterprise users are urged to cease using Fedora 41 and Fedora Rawhide.

🍭Sweet users, ensuring the security of your systems is very straightforward:
1. Access the Vulnerabilities section within the Sweet Security platform.
2. Use the search functionality to locate the "xz" package and determine whether it is present or utilized in your environment.
3. Confirm the existence of vulnerable versions (5.6.0 or 5.6.1). If identified, evaluate whether they are Loaded or Executed.

This vulnerability underscores the importance of monitoring supply chain security and rapidly disseminating risks if they are not promptly addressed. 

Sweet Security remains steadfast in assisting our customers to promptly identify and mitigate such vulnerabilities to uphold a secure operational infrastructure.
For additional information, please consult the following resources:
CVE Details: https://hubs.li/Q02rdV7k0
Ubuntu Security Notices: https://hubs.li/Q02rdT4m0
RedHat Security Blog: https://hubs.li/Q02rdKCT0

#RuntimeInsights #CloudRuntime #Vulnerability #AppSec #RuntimePrioritization


משנכנס אדר מרבין בחריזה
Yochai Eisenrich, Adi Edri
#HappyPurim #SweetTeam

Netskope is a leading cloud access security broker (CASB) providing comprehensive cloud security solutions.

Netskope

Wiz is a cybersecurity company that specializes in cloud security solutions, offering advanced protection against cloud-based threats.

Atomicorp provides a cloud runtime security suite, offering security solutions for cloud workloads and infrastructure.

Atomicorp

Aviatrix is a cloud security solutions provider, offering advanced security services for cloud environments.

Aviatrix

Sweet Security provides a patent-pending, eBPF-based sensor to establish an organizational baseline for what's normal in cloud infrastructure, detecting runtime anomalies and zero-day cloud attacks in real-time.

news_impact_assignment_basic

key_people

network_dossier

public_peers

news_daily_refresh

news_processing_daily_refresh

news_impact_assignment_daily

news_processing_basic

legal

legal_dossier

bundesanzeiger

events_dossier

partnerships_market_presence_dossier

partnerships_market_presence

company_dossier

network

strategic_challenges

industry_trends

strategic_challenges_dossier

industry_trends_dossier

company_summary

events

network_mapping

transactions_dossier

swot_dossier

merger_acquisitions

signals

financial_statements

crunchbase_trigger

crunchbase_profile

li_profile

financials_download_nd

private_financials

swot_analysis

financial_legal_advisories

company_structure

industry_analysis

financial_analysis

funding_rounds_analysis

regulatory_analysis

competition_analysis

news_impact_assignment_advanced

news_processing_advanced

news_advanced

purchaser_profile

network_onboarding

translate_crunchbase_fundingrounds

peers

customer_profile

news_basic

valuation

news impact assignment basic	general	May 4, 2024 5:32 AM	39d8cc90
public peers	general	May 4, 2024 5:32 AM	e247ff9f
news daily refresh	general
news processing daily refresh	general
news impact assignment daily	general
news processing basic	general	May 4, 2024 5:32 AM	113ff288
company summary	general
signals	general
crunchbase trigger	general	Nov 4, 2024 10:53 AM	4a5491c5
crunchbase profile	general
li profile	general	May 4, 2024 5:32 AM	6c15c392
translate crunchbase fundingrounds	general
peers	general
news basic	general	May 4, 2024 5:32 AM	7472aacb
bundesanzeiger	filings
merger acquisitions	company_analysis
financials download nd	financials
private financials	financials

SECURITY:SWEET

Sweet Security