Sweet’s Cloud Runtime Security Suite delivers first-to-market capabilities for defending cloud workloads, shifting cloud security right. Founded by retired, elite IDF commanders with prodigious expertise in offensive and defensive cloud security, Sweet’s approach elevates the ability of security teams to shut down cloud attacks when they occur, where they occur, with maximum precision and minimal business disruption. Say hello here, or at: http://sweet.security


Sweet Security

🇺🇸 Next week! Meet Sweet's co-founder and CPO Eyal Fisher through the US.
🍭Apr 8-9 - Chicago, Illinois, Eyal will present at the IANS forum.
🍬Apr 10-11 - Austin and Dallas Texas.
Comment or DM if you'd like to meet Eyal to discuss your cloud runtime security strategy. #CloudSecurity #CloudRuntime #RuntimeSecurity #ItsRunTIME

Happy Easter Sunday from your Sweet friends! 🍭🍬
#Easter #EasterSunday #SweetSecurity #Runtime #CloudSecurity

⚠️Critical Vulnerability ⚠️
CVE-2024-3094 has emerged as a critical vulnerability within XZ Utils versions 5.6.0 and 5.6.1. It results from a supply chain compromise that introduces a backdoor.

✳️Risk Evaluation: Despite the severity of this security loophole, its impact is somewhat mitigated by the fact that major Linux distributions like Ubuntu 23.10 and all editions of RHEL remain unaffected, relying on older, more secure versions of XZ Utils.

💣Exploitation Method: The exploit linked to CVE-2024-3094 employs sophisticated obfuscation techniques within XZ Utils, impacting SSH authentication. The complex nature of the malicious code and its seamless integration into the software underscore the sophistication of the attack.

💪Recommended Steps: CISA strongly advises promptly reverting to a secure version predating 5.6.0 of XZ Utils to address the risks posed by this critical vulnerability. RedHat Enterprise users are urged to cease using Fedora 41 and Fedora Rawhide.

🍭Sweet users, ensuring the security of your systems is very straightforward:
1. Access the Vulnerabilities section within the Sweet Security platform.
2. Use the search functionality to locate the "xz" package and determine whether it is present or utilized in your environment.
3. Confirm the existence of vulnerable versions (5.6.0 or 5.6.1). If identified, evaluate whether they are Loaded or Executed.

This vulnerability underscores the importance of monitoring supply chain security and rapidly disseminating risks if they are not promptly addressed. 

Sweet Security remains steadfast in assisting our customers to promptly identify and mitigate such vulnerabilities to uphold a secure operational infrastructure.
For additional information, please consult the following resources:
CVE Details: https://hubs.li/Q02rdV7k0
Ubuntu Security Notices: https://hubs.li/Q02rdT4m0
RedHat Security Blog: https://hubs.li/Q02rdKCT0

#RuntimeInsights #CloudRuntime #Vulnerability #AppSec #RuntimePrioritization


משנכנס אדר מרבין בחריזה
Yochai Eisenrich, Adi Edri
#HappyPurim #SweetTeam

Viewport Meta

IPhone / Mobile Compatible

Domain Not Resolving

SSL by Default

Apple Mobile Web Clips Icon

HSTS

DNSSEC

LetsEncrypt

Cloudflare CDN

IPv6

Operations Manager

Gali Burin

Tom Fridman

Product Designer

Adi Edri

Cyber Security Risk Consultant

Frans Mans

Full Stack Engineer

Lior Pollak

Senior Software Developer

Naor Haziz

Marketing and Product

Noa Glumcher

Software Developer

Ofek Shaltiel

Chief Technology Officer

Tomer Filiba

Research

Yochai Eisenrich

Shira Kaplan

Seed Investor

Middle East and North Africa (MENA) Early Stage Companies With Less Than $50M in Revenue

City of Tel Aviv Companies With Fewer Than 100 Employees

City of Tel Aviv Companies With Fewer Than 50 Employees

Europe, Middle East, and Africa (EMEA) Companies (Top 10K)

Sweet’s Cloud Runtime Security Suite delivers capabilities for defending cloud workloads, shifting cloud security right. Founded by retired, IDF commanders with prodigious expertise in offensive and defensive cloud security, Sweet’s approach elevates the ability of security teams to shut down cloud attacks when they occur, where they occur, with maximum precision and minimal business disruption.

Evolution Equity Partners

Series A - Sweet Security

Glilot Capital Partners

Seed Round - Sweet Security

Tel Aviv

Israel

Asia

Sweet Security Announces Availability of its Cloud Native Detection & Response Platform on the AWS Marketplace

Home » Sweet Security Announces Availability of its Cloud Native Detection & Response Platform on the AWS Marketplace

Sweet Security Adds Generative AI to Its Cloud Runtime Security Suite

Leveraging AI For Better Cloud Runtime Security

Former Israeli Cybersecurity Leaders Raise $33 Million for Sweet Security

Sweet Security Raises $33 Million Series A, Upgrades Its Runtime Security Suite to Usher in a New Era for Cloud ...

Israeli startup Sweet Security raises $33M to strengthen cloud security operations

Sweet Security secures $33m in Series A to revolutionise cloud runtime security

Sweet Security Raises $33 Million Series A, Upgrades Its Runtime Security Suite to Usher in a New Era for Cloud Security

Installs in under 5 minutes to identify cloud risks in runtime without significant performance or cost drawbacks.

Enables security teams to understand normal behaviors and identify anomalies, focusing on active cloud risks.

Detects critical anomalies and assembles full attack stories, offering damage assessment and remediation recommendations.

Provides insights on loaded files and external communication paths for effective vulnerability management.

Uses runtime insights to fix critical misconfigurations and harden the cloud environment.

Reveals the machine origin of actions and their purposes through behavioral analysis.

United States

North America

France

Europe

Cyprus

Greece

Netskope is a leading cloud access security broker (CASB) providing comprehensive cloud security solutions.

Netskope

Wiz is a cybersecurity company that specializes in cloud security solutions, offering advanced protection against cloud-based threats.

Atomicorp provides a cloud runtime security suite, offering security solutions for cloud workloads and infrastructure.

Atomicorp

Aviatrix is a cloud security solutions provider, offering advanced security services for cloud environments.

Aviatrix

Sweet Security provides a patent-pending, eBPF-based sensor to establish an organizational baseline for what's normal in cloud infrastructure, detecting runtime anomalies and zero-day cloud attacks in real-time.

news impact assignment basic	general	May 4, 2024 5:32 AM	39d8cc90
public peers	general	May 4, 2024 5:32 AM	e247ff9f
news daily refresh	general
news processing daily refresh	general
news impact assignment daily	general
news processing basic	general	May 4, 2024 5:32 AM	113ff288
company summary	general
signals	general
crunchbase trigger	general	Nov 25, 2024 9:09 AM	17e2712b
crunchbase profile	general	Nov 25, 2024 9:49 AM	649363aa
li profile	general	May 4, 2024 5:32 AM	6c15c392
translate crunchbase fundingrounds	general	Nov 25, 2024 2:05 PM	1e8204b9
peers	general
news basic	general	May 4, 2024 5:32 AM	7472aacb
bundesanzeiger	filings
financials download nd	financials
private financials	financials

SECURITY:SWEET

Sweet Security