Atom Security (Acquired by Mend.io)

Many organizations scrambled today to address the newly discovered "XZ Backdoor" (CVE-2024-3094), which was maliciously inserted into an open-source library commonly used in many environments. This incident highlights the critical need for true software analysis – understanding exactly what's in your software, how it's used, and why. The good news? Mend.io's container reachability goes beyond simple dependency scanning. It reveals whether a library is actively used and shows the precise execution path within the filesystem. This granular insight empowers you to assess your true risk and prioritize vulnerabilities with laser focus. #DevSecOps #appsec #codeanalysis Mend.io | Atom Security (Acquired by Mend.io)

🚨 Critical Backdoor Found in Widely Used Compression Tool (XZ Utils) - Patch Now! Did you know a critical backdoor has been hiding in a common compression tool? This vulnerability (CVE-2024-3094) exposes systems to remote code execution, potentially compromising your SSH servers! Don't wait to be targeted! Our latest blog post written by Dor Hayun and Tom Abai dives deep into the details and provides actionable steps to keep your systems safe: https://lnkd.in/dNaSahi8

𝐖𝐡𝐨 𝐞𝐥𝐬𝐞 𝐤𝐧𝐨𝐰𝐬 𝐭𝐡𝐞 𝐟𝐞𝐞𝐥𝐢𝐧𝐠? #meme #coders #nightowl #code #humor #programming #tired #sleep #nosleep

Exciting news! Just in time for #kubecon2024 Mend.io redefine #containersecurity with #agentless container-reachability analysis. Stop by(H27) to see it live and start reducing your team's fatigue Omer Dahan Keren Neumann Nicholas Shamsfard Luis Bretones Aidan Kestin Courtney Orzechowski Amit Chita Bar-El Tayouri Chen Cohen

Atom Security is now fully integrated into Mend Container 📦 We are glad to be first vendor ever to provide reachability analysis in a Container Scan 💪 👩💻 Supported in 8 programming languages ⏩ Extremely fast 🤖 Fully automated / no setup required 👈 Shift-left If you're interested in working on the most advanced container scanning solution in the market, we're hiring 👩💻 Atom Security (Acquired by Mend.io) | Mend.io

Ever feel like you're chasing ghosts in your containers? Introducing Mend Container, the Superhero of Container Security! The Threat: With 90% of orgs projected to use containers by 2026 according to Gartner, enterprises need to expand their open source security solution to their container images and cloud-native environment. How can Mend Container help? 𝐏𝐫𝐢𝐨𝐫𝐢𝐭𝐢𝐳𝐞 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐢𝐬𝐬𝐮𝐞𝐬: Prioritize based on reachability analysis, without installing runtime agents. This analysis identifies which vulnerable files and methods are being called at runtime. 𝐅𝐮𝐥𝐥 𝐜𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐟𝐫𝐨𝐦 𝐝𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 𝐭𝐨 𝐝𝐞𝐩𝐥𝐨𝐲𝐦𝐞𝐧𝐭:  Comprehensive container security starts with scanning static images in your pipeline. 𝐑𝐮𝐧𝐭𝐢𝐦𝐞 𝐛𝐞𝐡𝐚𝐯𝐢𝐨𝐫 𝐚𝐧𝐚𝐥𝐲𝐬𝐢𝐬: We continuously monitor deployed containers for emerging security risks. 𝐒𝐞𝐜𝐫𝐞𝐭𝐬 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧: identify credentials, passwords, keys, and certificates being exposed or handled inappropriately in images. 𝐊𝐮𝐛𝐞𝐫𝐧𝐞𝐭𝐞𝐬 𝐂𝐥𝐮𝐬𝐭𝐞𝐫 𝐒𝐜𝐚𝐧𝐧𝐢𝐧𝐠: scans all of your running container images within your Kubernetes clusters, letting you easily find and label containers that are actually in use and deployed. Don't wait for a security breach to be your wake-up call. Secure your cloud-native future with Mend Container.  Contact us today! #containersecurity #cloudsecurity #devsecops #vulnerabilitymanagement https://lnkd.in/gsEQiinP

🗺️ Glad to share our Map of Container Scanning Solutions 🗺️ The landscape is crowded, essentially a highly commoditized market. However, we've likely only scratched the surface of its potential. This map highlights the critical need for innovative solutions that not only compete but also redefine industry standards. Over the past year, our team has dedicated itself to crafting a product that stands out as a genuine industry disruptor. I'm sure we've missed many companies here, but hopefully, you'll find it useful 🤟📈 Mend.io | Atom Security (Acquired by Mend.io) | #containerization

We’re #hiring a new Senior Security Software Engineer in Tel Aviv District. Apply today 🤗

We are Hiring 👩💻👨💻🚀 Following the Mend.io's acquisition of our Company, we are scaling our technology to scan Millions of code projects and artifacts on a daily basis! Open Position: Senior Software Engineer What We Need: 🔐 Cybersecurity Wizardry: In-depth expertise in cyber-security or vulnerability research, armed with knowledge of attacks, vulnerabilities, and countermeasures. 🕹️ Tech Savvy: Strong proficiency in C, C , Rust, or Go and adeptness in two of the following: Python, JavaScript, Java, C#, PHP, Ruby, Scala, D. 💻 Linux Guru: Solid background in Linux, including system calls, file systems, and kernel. 📦 Architecture Acumen: Experience with containerization and microservices architecture is crucial. Talk with me for more details | Atom Security (Acquired by Mend.io) | Mend.io | Bar-El Tayouri | Chen Cohen | Yaron Avisror |

Bar-El Tayouri wrote an excellent post about #reachability and the importance of having the needed context when prioritizing #CVEs in application code. #AppSec #DevSecOps and Engineers require this context as the amount of CVEs and their severity increases on a yearly basis. Stay tuned... Atom Security (Acquired by Mend.io) Mend.io