Alon Kollmann

Building something new.

Cybersecurity; Cloud; Innovation; Strategy.

Hebrew: @alonkol_heb

[Alon Kollmann @alonkol]

Average time to complete a #ransomware attack dropped from 2 months to less than 4 days in 2022! 😵

This should have been the headline of the IBM Security annual threat intelligence report.

Other interesting insights:
>>

[Alon Kollmann @alonkol]

Wiz raises $300M at a $10B valuation and becomes the world's largest cyber security unicorn.

https://t.co/0eEXhaU8b1

[Alon Kollmann @alonkol]

Read the full summary at Google's security blog:

https://t.co/N1nEOEcF1U

[Alon Kollmann @alonkol]

Google awarded over $12 million in bounty rewards in 2022, with over 2,900 security issues reported and fixed.

Breakdown:
Android: $4.8M
Android Chipset: $486K
Chrome Browser: $3.5M
Chrome OS: $500K
OSS: $110K
Other: ~$2M

>>

[Alon Kollmann @alonkol]

The highest reward for a single report: $605K.

Top performer: Aman Pandey, who submitted 200+ vulnerabilities to the Android VRP this year. Pandey remains one of the program’s top researchers, submitting 500+ vulnerabilities since 2019.

>>

[Alon Kollmann @alonkol]

@ProtectionJoe Yes, see the link to the full report at the end of the thread

[Alon Kollmann @alonkol]

Average time to complete a #ransomware attack dropped from 2 months to less than 4 days in 2022! 😵

This should have been the headline of the IBM Security annual threat intelligence report.

Other interesting insights:
>>

[Alon Kollmann @alonkol]

See the full report here:
https://t.co/8Ss6az6V30

[Alon Kollmann @alonkol]

3. 26% of vulnerabilities had known exploits.

This last one really questions the methods we use to protect our existing apps.

>>

[Alon Kollmann @alonkol]

@Gia_Vang I sense a business opportunity here:

Step 1: project static messages
Step 2: build a landing page, project dynamic user inputs
Step 3: add authentication and project user handle next to each message
Step 4: charge $8 and add a blue check next to the projected username
🥲

[Alon Kollmann @alonkol]

@thegrugq @campuscodi It's probably overhyped, but still better be safe than sorry 🤷‍♂️

[Alon Kollmann @alonkol]

@JasonGeffner Will MS take me back? Maybe.
Do I still have access? Maybe.
🤓

[Alon Kollmann @alonkol]

The OpenSSL vuln is just as a great reminder of the two distinct types of security vendors out there:

Type 0: "Crisis?? SCARY! Here is why WE are great!"
Type 1: "We understand you. How can we help?"

How come empathy has become so rare 🫣
#OpenSSL

[Alon Kollmann @alonkol]

@SafetyDesert @GossiTheDog They already answered that in the blog. Wiz claims that 75% of the organizations in their research have at least one impacted instance

[Alon Kollmann @alonkol]

Obviously, there are many other factors, but these are my top 4.
Can't wait to see where this statistic will get in the future... 🙂

#infosec #CyberSecurity #startups #unicorns

[Alon Kollmann @alonkol]

One out of every 3 cyber security unicorns was built by an Israeli founder.
So how has Israel become such a cyber security powerhouse?

If you think it's all about some infosec military experience, then I think you're wrong.

Let me explain:

[Alon Kollmann @alonkol]

4. PR of previous success in the cybersec space.

People see the crazy success others had in the cyber security space. They hear about the unicorns and the acquisitions. They are motivated to enter the cyber security space because they want to have a similar success story.