Pinned post
Tal Be'ery
Verified account eToro Builders@TalBeerySec
Security Research Manager. 10 times @BlackHatEvents speaker.
Co-Founder @ZenGo acq by @etoro
Advisor @ZeroNetworks.
x-VP Research Aorato, acq by @Microsoft.
Co-Founder @ZenGo acq by @etoro
Advisor @ZeroNetworks.
x-VP Research Aorato, acq by @Microsoft.
2.1K Following 11K Followers 17K Posts
Latest posts 5
1/ In other words, the Vulnerability Management market, estimated at $16B in 2025, is achieving nothing.
(see next tweet for why)
Take these $16B and do some real security instead!
ml.globenewswire.com/Resource/Downl…
(see next tweet for why)
Take these $16B and do some real security instead!
ml.globenewswire.com/Resource/Downl…
If you're only working on vulnerability management, then you're only focusing on 1/3 of the problem.View quoted post on X
If you prioritize breaking the attack paths around lateral movement and abuse of authorized access, then you're addressing all of the major attack vectors at once (vulnerabilities, phishing, stolen credentials, social engineering, software supply-chain, etc).
People love to focus on finding and fixing vulnerabilities because it feels good in the same way that running laps around a circular track feels good. You're moving fast and having predictable, repeatable tasks, but not actually getting anywhere.
Truth bomb by @dinodaizovi
If you're only working on vulnerability management, then you're only focusing on 1/3 of the problem.View quoted post on X
If you prioritize breaking the attack paths around lateral movement and abuse of authorized access, then you're addressing all of the major attack vectors at once (vulnerabilities, phishing, stolen credentials, social engineering, software supply-chain, etc).
People love to focus on finding and fixing vulnerabilities because it feels good in the same way that running laps around a circular track feels good. You're moving fast and having predictable, repeatable tasks, but not actually getting anywhere.
I believe it’s highlighted in the post itself, but maybe not enough in the thread.
When I make these rather provocative claims, I’m standing on the shoulders of giants: Dan Geer, Bruce Schneier @schneierblog, Eric Rescorla @ekr___ and Jonathan “Jono” Spring.
When I make these rather provocative claims, I’m standing on the shoulders of giants: Dan Geer, Bruce Schneier @schneierblog, Eric Rescorla @ekr___ and Jonathan “Jono” Spring.
1/ We are doing it totally wrong with vulns.View quoted post on X
In my new post I dig into @googlechrome’s vuln data to show that the AI-driven Vulnpocalypse settled a 20-year-old debate: vulnerabilities are dense. Our defenses are still built as if they were sparse.
medium.com/@TalBeerySec/d…
AI vuln scanners are a new microscope. The germs were always there; we just couldn’t see them.
We cannot make a vaccine for each one. We will need to keep our hygiene to avoid infection, vaccinate against the deadliest, and use medicine once infected.
We cannot make a vaccine for each one. We will need to keep our hygiene to avoid infection, vaccinate against the deadliest, and use medicine once infected.
1/ We are doing it totally wrong with vulns.View quoted post on X
In my new post I dig into @googlechrome’s vuln data to show that the AI-driven Vulnpocalypse settled a 20-year-old debate: vulnerabilities are dense. Our defenses are still built as if they were sparse.
medium.com/@TalBeerySec/d…