Zafran Security ads

Zafran CEO Sanaz Yashar joined CNBC Squawk Box yesterday to talk about this week's fundraise and why vulnerability management needs a new approach. The average US enterprise has 72 different tools. The economics of major security platforms push them to isolate signals rather than unify them. The result is cracks in defenses. Zafran is the AI-native, vendor-agnostic solution that gives teams a single view of their real attack surface, reveals the true exploitables, and mobilizes action to fix what matters most. Proud moment for the team. More to come. #CTEM #ExposureManagement #VulnerabilityManagement #HiMom!

A five-stage maturity model for banks, insurers and payment processors that need to move fast and prove every risk call to auditors. Download CTEM Guide

Introducing 𝗖𝗧𝗘𝗠 𝗳𝗼𝗿 𝗙𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝘀: 𝗔 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗚𝘂𝗶𝗱𝗲 𝗳𝗼𝗿 𝗣𝗼𝘀𝘁-𝗠𝘆𝘁𝗵𝗼𝘀 𝗗𝗲𝗳𝗲𝗻𝘀𝗲, written by our CISO, Nathan Rollings. FS-ISAC has told it's members that traditional vulnerability management assumptions no longer hold, and examiners are already issuing MRAs to banks that can't show a risk-based approach. The institutions getting ahead of their next audit are building CTEM programs now, and this practical guide shows you how. Inside, you'll find: ✅ A five-stage Exposure Management Maturity Model to benchmark your program against your peers and give a clear roadmap ✅ Stage-by-stage steps to align your program with FS-ISAC guidance and CISA's BOD 26-04, the directive auditors are expected to use as their new yardstick ✅ A playbook for building the evidence examiners ask for, from documented prioritization logic to compensating controls that satisfy compressed remediation timelines 👉 𝗗𝗼𝘄𝗻𝗹𝗼𝗮𝗱 𝘁𝗵𝗲 𝗴𝘂𝗶𝗱𝗲: https://lnkd.in/gec5YHyd #CTEM #ExposureManagement #VulnerabilityManagement

𝗦𝗮𝗹𝗹𝗶𝗲 𝗠𝗮𝗲 𝘄𝗲𝗻𝘁 𝗳𝗿𝗼𝗺 𝗮 "𝗵𝗲𝗹𝗹 𝘄𝗲𝗲𝗸" 𝗼𝗳 𝘀𝗽𝗿𝗲𝗮𝗱𝘀𝗵𝗲𝗲𝘁𝘀 𝘁𝗼 𝗲𝘅𝗽𝗼𝘀𝘂𝗿𝗲 𝗮𝗻𝘀𝘄𝗲𝗿𝘀 𝗶𝗻 𝗺𝗶𝗻𝘂𝘁𝗲𝘀. As a financial services company, Sallie Mae reports every vulnerability SLA to regulators, so there's no room for guesswork. Proving compliance used to cost the team a full week every month of scanner exports, spreadsheets, and pivot charts. Now with Zafran Security, the team takes a risk-based approach that accounts for the millions of dollars already invested in security controls. What that looks like in practice: 🔷 𝗧𝗶𝗺𝗲 𝘀𝗮𝘃𝗲𝗱 𝘄𝗶𝘁𝗵 𝗔𝗜: Zafran's AI agent cut the time to answer vulnerability questions from days to minutes, saving hours of manual digging. 🔷 𝗥𝗲𝗱𝘂𝗰𝗲𝗱 𝗿𝗶𝘀𝗸 𝘁𝗵𝗿𝗼𝘂𝗴𝗵 𝗺𝗶𝘁𝗶𝗴𝗮𝘁𝗶𝗼𝗻𝘀: Zafran adjusts vulnerability risk based on reachability, runtime context, active exploitation, and how controls like firewalls, EDR, and WAF are configured on each device. 🔷 𝗧𝗿𝘂𝘀𝘁 𝘄𝗶𝘁𝗵 𝗿𝗲𝗺𝗲𝗱𝗶𝗮𝘁𝗶𝗼𝗻 𝘁𝗲𝗮𝗺𝘀: With real-time proof of how well mitigating controls are working, remediation teams act on the security team's priorities with confidence. See how Zafran helps financial services teams prioritize the exposures that matter most www.zafran.io #CTEM #ExposureManagement #VulnerabilityManagement

How a Fortune 500 Financial Institution Stopped “Panic Patching"

Douglas Leone: 𝗧𝗵𝗲 𝗖𝗜𝗦𝗢 𝗪𝗵𝗼 𝗥𝗲𝘀𝗶𝘀𝘁𝘀 𝗔𝗜 𝗪𝗶𝗹𝗹 𝗕𝗲𝗰𝗼𝗺𝗲 𝗜𝗿𝗿𝗲𝗹𝗲𝘃𝗮𝗻𝘁 In our first episode of Responsible Disclosure, legendary investor and Sequoia Capital Partner Doug Leone sits down to unpack over three decades of venture capital investing, building category-defining enterprise giants, and identifying world-class startup founders. From arriving in the U.S. at age 11 without speaking English to helping scale Sequoia Capital into a global powerhouse, Doug shares rare insider stories, including: - How he blocked a $2.5B buyout of ServiceNow to help it reach a peak $180B valuation - Why Israeli cybersecurity startups revolutionized the enterprise market, and - The exact psychological drive he looks for in outlier founders. He also breaks down where enterprise value will accrue in the AI stack, why he fears robotics more than AI software, and the one investment regret that still bugs him today. 🎤 𝗙𝘂𝗹𝗹 𝗽𝗼𝗱𝗰𝗮𝘀𝘁 𝗹𝗶𝗻𝗸: https://lnkd.in/g4c2m9Xu Hosted by Nathan Rollings and Steve Cobb #ResponsibleDisclosure #Podcast #Zafran