Ofir Cohen’s Post

Totally agree, Dan Lorenc I've also noticed SBOMs are still seen more as a compliance requirement than a security tool. CSPMs are filling the gap for cloud environments, but there's still untapped potential with SBOMs if we streamline the process. Would love to see more practical use cases where they’re actually making a difference in security.

“CSPMs have mostly solved asset inventory for the purposes of vulnerability management (no one has actually solved vulnerability management itself).” Have been missing strong takes from Dan Lorenc recently. Maybe it was the LinkedIn algo that hid them, or perhaps Dan has just been mostly liking posts from the Chainguard team recently. A couple of interesting links in the comments worth checking out. #informationsecurity #vulnerabilityassessment #vulnerabilitymanagement #sbom

Where are all the SBOMs? We're still seeing little to no adoption of them across all of our customers and industries we work in. It's been a few years now into the effort, and I'm just not seeing them anywhere in cloud/SaaS companies. The companies that are using them already were, and it's almost exclusively licensing-driven for OSS components rather than security. CSPMs have mostly solved asset inventory for the purposes of vulnerability management (no one has actually solved vulnerability management itself), and they do it at a much more useful and relevant level than generating and managing massive JSON documents for every workload. Justin Pagano's "SBOM Hall of Fame" repository is still empty (link in comments). If you're using SBOMs and are getting value from them, please write up a case study somewhere! #sbom #cspm #vulnerabilitymanagement

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR). Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. Nigel Gibbons and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud. Read the blog👉 https://bit.ly/3AREbyg https://bit.ly/40QH3G9

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR). Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. Nigel Gibbons and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud. Read the blog👉 https://bit.ly/3AREbyg https://bit.ly/4hWFr3H

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR). Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. Nigel Gibbons and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud. Read the blog👉 https://bit.ly/3AREbyg https://bit.ly/3CVFfSn

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR). Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. Nigel Gibbons and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud. Read the blog👉 https://bit.ly/3AREbyg https://bit.ly/3B6Q9E9

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR). Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. Nigel Gibbons and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud. Read the blog👉 https://bit.ly/3AREbyg https://bit.ly/41tVakQ

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR). Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. Nigel Gibbons and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud. Read the blog👉 https://bit.ly/3AREbyg https://bit.ly/3YXLFb0

The shift to cloud environments brings significant benefits but also presents unique challenges for Digital Forensics and Incident Response (DFIR). Unlike traditional on-premise practices, processes and systems where security teams have greater control, cloud environments have shared infrastructure, decentralized data and reliance on third-party providers. Nigel Gibbons and Ben Fountain highlight important tools and strategies to effectively navigate these challenges and strengthen #DFIR management in the cloud. Read the blog👉 https://bit.ly/3AREbyg https://bit.ly/4eIPXZE