Latio Tech

This week we tackled the commonalities in successful new funding rounds for Vanta, Chainguard and Wiz. The primary goal of this piece was to address the idea that successful security products sell security. The reality is that security buying decisions lay at an intersection of different teams and risk decisions, where the easy button is the usual winner. https://lnkd.in/efa5JceK

Check out our response center for CVE-2024-6387, RegreSSHion https://lnkd.in/eqXwMG_E

Our new post is live, diving deep into CDR! While Forrester concluded CDR doesn't exist, we concluded that it's the future! Only time will tell 🤷♂️ Either way, we're hyped about it! https://lnkd.in/eS66Gn8n

This week in Latio content (6/9/24): 1. Video on how to find and fix privileged containers: https://lnkd.in/ew93ctYt 2. Blog on how to build an appsec program: https://lnkd.in/ePMx3C9p

Latest newsletter is live! RSA takeaways from the word on the street: https://lnkd.in/ecUkqwsw

Latest video and newsletter are live tackling "WTF is CNAPP?!" Post: https://lnkd.in/eauqi6Fj Video: https://lnkd.in/egK_ff6R

Latio Tech Pulse #5 is Live! In this one we cover CVE-2024-3094 as well as VulnCon - two related events happening in the same week. CVE-2024-3094 showed why CVEs both don't matter at all, as well as why they're absolutely critical. I also address how we fix things like this (it's not ASPM). Also some takeaways from VulnCon including the dreaded SBOM. Read it here! https://lnkd.in/eifgmumg

Updates from the week: 1. Latio List v1.7 - Akto.io to API security and DAST - Open Source next gen DAST - Tidelift to SCA and Boundary Breakers - Working with open source maintainers to uplift repo health and security. - devici to Boundary Breakers - Threat Modelling collaboration platform. This is going to be next big tool area. - InstaSecure to Cloud Identity - Very unique approach to securing identities by focusing on permissions boundaries rather than endless least privilege tweaking - Phylum to SCA - Great upstream malware detection View the changes: https://list.latio.tech/ 2. Newsletter - Are CVEs really the best we can do? - https://lnkd.in/eDvCuxvp 3. Video - Container Vulnerability Scanning Sucks - https://lnkd.in/g4krGSRv

Second newsletter is live! This time covering approaches to open source vulnerability scanning that go beyond the CVE scanning approach, and assessing their organizational utility. https://lnkd.in/eDvCuxvp

In case you missed it, we loved working with Endor Labs on getting to the bottom of what "Reachability Analysis" really means! https://lnkd.in/eZxxDZcD