Dazz’s Post

“The most effective way for AppSec to demonstrate the value to the business is by taking a significant risk and eliminating it from the codebase. This is the true essence of how AppSec enhances the security posture of applications. As in, we don’t want any of the following: secrets in the code, public S3 buckets, IDORs on APIs, XSS on web applications, overly permissive SaaS API keys, and so on. Therefore, it’s crucial to target and eliminate these vulnerabilities. ASPM should assist teams in accomplishing this repeatedly. We’re witnessing platforms like Dazz that excel in this area, where remediation is a fundamental aspect of their approach, and ASPM grew organically out of that.” Thank you for the shout out James Chiappetta!😎 🙏 https://lnkd.in/eB4Gp7-k #ASPM #AppSec

Interesting take from CSO Online on what's hot and not in cyber right now—including DevSecOps and shift left trends, cybersecurity skills shortages, and using AI for good/evil. https://lnkd.in/gcJWsyyf

How long does it take your security and engineering teams to remediate cloud risks? ⏳ See how to simplify cloud security remediation by integrating Google Cloud services with your development and security tooling — and of course Dazz — and trace issues in runtime to root causes without breaking a sweat! Ben Hill Vince Bryant Yael Rivkind Mark Lieberman PMP #GCP #CloudSecurity #UnifiedRemediation

It’s Chiefs v. Ravens on September 5th, but first, we’ve got an opportunity for some pre-gaming fun—including a VIP guest. 🏈 Join Team Dazz and Team Cyera for a virtual kickoff the day before the season opener, featuring a huddle on upping your cybersecurity game, prizes throughout the event, and a special Q&A with former NFL guard and two-time Superbowl champion Adam Timmerman! Register today and be entered to win one of 50 NFL Store gift cards to rep your team right during the season! 🎁 https://lnkd.in/gxvBzn-8 Shane Coleman Noah Simon Nicholas Arthur

According to a recent ThreatQuotient survey, 75% of security leaders agree that automation is important and needs to be part of their strategy to remain competitive and productive. What should you keep in mind as you assess your environment, workloads, resources, and use cases for automation? 🤔 Hear what iCapital CISO Gary Owen has to say in this week's Wednesday Wisdom virtual showcase with Dazz CMO Julie O'Brien! Register here: https://lnkd.in/dYD-Dp7k BONUS: One lucky attendee will win a DoorDash gift card for lunch on us! 🥪 🥤

Hot-off-the-press news from Cyber Defense Magazine—Dazz is a Finalist in the Top InfoSec Innovators Awards for 2024 for our innovation in unified remediation! 😃 🎉 We owe it all to our amazing design partners — our customers — and our dazzling R&D and product teams!

This month we've got software engineer Toot Avrech in the Dazzler spotlight! Let's get to know her! 👋 ⭐ What you do at Dazz: Software engineer 💻 Favorite thing about your job: The people, the challenges and the learning opportunities. 💡 The moment you knew you wanted to be a software engineer: The first computer science class in the 10th grade. Strangest/funniest job you’ve ever had: I worked in a meat sandwich restaurant as a vegetarian (it didn't last long...) 👃 Favorite smell: The sea 🌴 Best and worst vacation moment: There were many great moments, but the worst was in Italy. While waiting for security, part of the ceiling collapsed, and a flood of sewage poured down. I escaped, but my bag was drenched. Even after over 10 washes, the smell lingers whenever I see the bag. 🍓 Food you hate that most people love OR food you love that most people hate: Despite my name's meaning (strawberry in Hebrew), I'm not a huge fan of strawberries

Building a remediation platform might seem like a good idea on the surface, especially for large organizations with plentiful development resources. But where do businesses that take this route fall short? 🤔 Take a look at the points to ponder while making the build vs. buy decision, including working with and analyzing data, automating remediation actions, visualization and reporting, time to value, and more. #UnifiedRemediation

Did you know that in rowing, even one small head tilt from a crew member can send the entire boat off course? 🚣♂️ The same can happen when IT and security teams aren’t rowing in the same direction. Get cybersecurity pro John Boyle's top 6 tips on how teams can work in tandem more effectively. (Sneak peek at one of his tips below!) https://lnkd.in/gBGwvr9s Noah Simon #DevSecOps

🛑 ALERT! 🛑 Microsoft’s latest Patch Tuesday released an advisory about CVE-2024-38063, a TCP/IP vulnerability in the Windows operating system. If your organization is running any Windows Servers and end-user devices (who isn’t?), then you should quickly assess your environment for affected OS versions detailed in the advisory. Read more about how to stay safe and reduce your risk here: https://lnkd.in/gfX7KPd9