Taher Elgamal

Download Pentera Labs Report - revealing three new critical injection points in the ingress-nginx controller, building on Wiz’s IngressNightmare CVE. These overlooked vulnerabilities could let attackers hijack traffic, spoof headers, or reach unauthorized backend services - They exist in one of the most widely used ingress controllers in Kubernetes, putting countless environments at risk. This research highlights how small misconfigurations can lead to major exposure in modern cloud-native architectures. What’s Inside: ✅ 3 new injection vulnerabilities in ingress-nginx ✅ How attackers find and exploit CVEs in open source ✅ Actionable tips to secure your Kubernetes environment https://lnkd.in/eHtX6EdP

6

1 Comment

Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?

4

I’ve tried to answer questions you might have about Shared Signals and CAEP, how is it being adopted, and where it’s going. Be sure to listen! It’s an amazing podcast, and Jeff Steadman and Jim McDonald do such an amazing job to keep the conversation interesting. I was glad to be on it. Check out caep.dev, if you want to dig deeper.

44

2 Comments

Secure-by-design agentic systems are built on practical patterns: least privilege, agent identity, scoped tools, guardrails, approval gates, secure retrieval, injection defenses, monitoring, audit logging, and kill-switch controls. #securebydesign #AItrust #agenticAI #AIsecurity #engineeringintelligence #EQengineered https://lnkd.in/gNABrVmm

28

7 Comments

Existing IAM concepts for agent identity and auth? Are you serious? Autonomous agents work with probabilistic intent and outcomes, shift roles rapidly, cross org boundaries, may exist ephemerally for a single task, but operate at machine speeds and scale. Your existing identity infrastructure was built for humans or machines, not agents that spawn, collaborate, and disappear in seconds. We built an Agent Identity Service powered by AGNTCY | A Linux Foundation Project that delivers: 🫆Cryptographic badge generation for MCP Servers and AI Agents using A2A / MCP / OASF specs 🫆Human-in-the-loop policy authorization for critical actions with real-time mobile approvals 🫆Native integrations with Duo Security, Okta, Ory Corp, plus AGNTCY's DID-based identity provider Tamper-proof badges that prove identity and capabilities. Plugs into whatever identity infrastructure you already run. Free SaaS built on a Linux Foundation project because agent identity standards cannot be vendor-controlled. Code on GitHub. We created a currency exchange demo showing the complete workflow. Financial assistant authenticates with exchange agent, both verify cryptographic badges, human approval required for transfers. Every action traceable to specific agent identity. No more wondering which agent transferred money or called that API. No more forensic investigations when something breaks. Read the blog by Julu Panat & Hervé Muyal for details https://lnkd.in/g_MnVuQ7 Try it. Tell me what works, what doesn't.

148

For as long as I’ve talked to CISOs, we’ve talked about “shift left.” Shift left was the promised land of security: proactive, early, and essential to the product development process, instead of reactive, late, and perceived as a burden. But “shift left” always felt aspirational, until I met Corridor. A huge thank you to Nancy Wang for the introduction and partnership here. Corridor is code review and management, reimagined for the code gen era. Where traditional code review bottlenecks, Corridor unleashes a new level of productivity for enterprises worried about managing security and consistency in their AI-generated code. It gives developers guardrails even as they switch between models and tools, without the speed bumps. You can read more about our Series A in Corridor and their exceptional founding team here: ordnl.link/ntWih1O

88

6 Comments

Thrilled to announce Crosspoint Capital Partners' investment in WideField Security! As part of the Crosspoint team, it’s always a special moment when we meet 10x founders tackling one of the most strategic markets in cybersecurity: Identity Security. Before ITDR emerged, PAM was the closest identity-adjacent segment with real cyber impact — IAM and IGA, by contrast, have always been more about access hygiene than security. But if the last few years have taught us anything from breaches like UnitedHealth and MGM, it’s that identity has become the preferred initial attack vector. After all — why break in when you can just log in? The WideField Security team is building an identity security platform that spans on-prem (AD), SaaS (Okta, Entra), and cloud environments (AWS, Azure) — unifying posture (context) and detection (SecOps alerts) into a single, coherent layer (here comes the identity graph). That’s not a feature — it’s the foundation of a platform play. It takes 10x founders to go after such an ambitious vision. Abhay Kulkarni and the Widefield team are exactly that, and I couldn’t be more excited to see our firm partner with them on this journey. Onward and forward! 🚀 #itdr #identity #identitysecuritu #secops https://lnkd.in/gEyR6mG7

39

1 Comment

Despite the many benefits of Data #CleanRooms they may turn participating parties into Data Brokers as per California’s DELETE Act if they happen to bring 3rd party data (no direct relationship) into the platform, triggering a registration and tech alignment requirement (and hefty fines if dates are missed). (Presentation by California Privacy Protection Agency and Ben Isaacson on the DELETE ACT and the new #DROP platform that integrates all data brokers for consumers to place a single request.) Privacy Law Section of the California Lawyers Association. #AdTech

57

5 Comments

California marks a significant step forward in consumer data rights. California has launched a first-of-its-kind, centralized platform that allows residents to submit a single deletion request to remove their personal information from hundreds of data brokers at once. The new Delete Request and Opt-Out Platform (DROP) is designed to simplify what has historically been an onerous and opaque process. Under this initiative from the California Privacy Protection Agency (CalPrivacy), data brokers must now register annually, process verified deletion requests, disclose the categories of data they collect and share, and are subject to compliance audits and penalties for non-compliance. This approach expands on existing privacy laws — like the CCPA — and sets a new precedent in how states can empower individuals to control and reduce their digital footprint. Read the full article from Engadget here: 👇 https://lnkd.in/ghsJDs9f

8

OpenAI just quietly unveiled an AI agent that finds source code vulnerabilities and prescribes patches. Let’s see how this impacts startups and bigger vendors doing the same. Or doesnt. 🤔

17

1 Comment

We're excited to introduce our latest investment, Oryo.io - the security layer for agentic AI. Prashanth R. and Swaroop S., veterans of Okta and Wiz, are building agentic visibility and a trust layer on the MCP protocol for enterprise autonomous agents. Like Waymo’s cars today, agentic AI across enterprises will soon ingest data, make decisions, and take action. As adoption rises, the problem shifts from capability to control. CISOs manage identity and access for humans today. Okta anchors that trust layer for non-humans tomorrow. After our Agentic AI conference in Feb 2025 led by Anand Rao, we came with prepared minds to our first call with Oryo. Michael Marmor led diligence and is working closely with the founders as they build their MVP. We wrote the first check into Oryo. Village Global (Reid Hoffman) and Seven Hill Ventures (Michael Coates) followed soon after. Perhaps Nikesh Arora should take notice :) Venkat Raju, JB Michel, Rahul Harikumar, Quentin Staes-Polet Josh Cunningham

117

9 Comments

We just built Highflame’s SOTA frontier guard model - a context-aware guard that tracks intent across conversation turns and detects multi-turn jailbreaks and prompt-injection attacks that stateless guardrails routinely miss. If you’re relying on built-in guardrails from cloud providers (Bedrock, Vertex, Azure) and assuming you’re covered, it’s worth taking a closer look. Most cloud guardrails today are single-turn and stateless by design. They evaluate each request in isolation. That means they’re blind to attacks that unfold gradually through: - intent drift - probing - escalation across turns This isn’t a vendor failure; it’s an architectural limitation. As agents become more autonomous, defending against these attacks requires context-aware controls with memory, not just filters on the last message. That’s exactly the gap our DeepContext Guard model is built to address. Multi-turn systems need multi-turn defense. 🔥 #aisecurity #promptinjection #multiturn #aiguardrails

7

A new California law says all operating systems, including Linux, need to have some form of age verification at account setup. I think this is good, but I do wonder how many issues we'll see with implementation next year... https://lnkd.in/gCiUxw6i

1

🔊Thrilled to welcome HiBeam to the Trifork family as a new US-based division, led by Casey Rosenthal as interim CEO HiBeam is focused on building resilient infrastructure for enterprises that can’t afford to go offline. This team has deep roots in telecom, fintech, and healthcare - and now, under Casey’s leadership, they’re bringing that expertise to a broader set of U.S. organizations navigating real-time data at scale. HiBeam represents exactly what we believe at Trifork: great software starts with systems you can trust. Learn more at hibeam.dev

56

2 Comments

It's not often that I hear a unique pitch from a cybersecurity startup; being in this field for 25+ years makes old people like me feel like 'we've seen and heard it all'. But when i met Ray Security I heard a unique pitch, behind which was a simple and poweful idea: Data storage experts will tell you that an organization with petabyes of data will only access a small fraction of it at any given time; they also can predict (with very high accuracy) which fraction that will be exactly (we usually call it "caching"). Why, then, not use this for data protection? put a high wall around the data that won't be used and give easier access to the data that is predicted to be used. So simple and yet so powerful. This can seriously change the way we do data protection in large organizations. Thank you Ariel and Eric for giving Noam Rathaus, Jake Kouns and I a seat on this fun ride!

23

2 Comments

For federal leaders, AGI isn’t a theory—it’s a question of security, scale, and specialization. For the first time since co-founding poolside, Jason Warner and Eiso Kant joined forces on a podcast to outline our vision: purpose-built AI models designed from the ground up to code—securely, efficiently, and at mission scale. They dive into: • Why AGI may emerge from models that specialize, not generalize • How reinforcement learning and synthetic data unlock a 1000x expansion of software • The evolving role of engineers as AI becomes a trusted “co-worker” • Why air-gapped, enterprise-grade AI is critical for high-consequence government systems • And the tradeoffs between flashy demos and real-world utility 🎧 Listen here: https://lnkd.in/df4f_n2k A must-listen for anyone thinking seriously about the role of AI in national security, software modernization, and the future of federal innovation. #AI #AGI #PublicSector #LLM #SoftwareEngineering #FederalTech #poolside #GenAI #devsecops #modernization

7

📈 Thrilled to share news of VulnCheck's Series B funding round led by Sorenson Capital, with participation from Ten Eleven Ventures, IQT, and National Grid Partners 🎉 The most pressing security gaps today aren't tooling gaps — they're timing gaps. The vulnerability data ecosystem typically moves at vendor speed, but risk moves at attacker speed. VulnCheck delivers real-time visibility, context, and validation that's normalized and integration-ready out of the box. See what the fuss is about 👇 https://lnkd.in/etGT3vbg

102

3 Comments