Sweet Security

?? New Insights on GitHub Actions supply chain compromise: CVE-2025-30066 ?? On Friday, a malicious backdoor was discovered in tj-actions, a widely used GitHub Actions repository, enabling attackers to exfiltrate secrets and manipulate CI/CD pipelines. This incident underscores the growing risk of software supply chain attacks, where trust can be exploited at the source, and runtime is key for security. ?? In our latest blog, we break down: ? How the attack was executed ? Who was impacted and the scope of the breach ? Steps to protect your CI/CD pipelines from similar threats Read the full analysis here: https://hubs.li/Q03b_LKQ0 Tomer Filiba #CyberSecurity #SupplyChainSecurity #DevSecOps #CICD #ThreatDetection #CloudSecurity

?When it comes to real-world threats, runtime security isn't optional—it’s essential. James Berthoty put Sweet Security to the test against the recent GitHub actions supply chain compromise, and his findings speak for themselves: "Sweet really impressed me with how it accurately captured everything that happened. I was especially happy with how it called it out as a memory dump attack." Once again, this validates what we’ve been saying: patching is reactive—runtime is resilient. ?? Check out James’ deep dive here: https://hubs.li/Q03b_g1J0 Latio Tech #CloudSecurity #RuntimeSecurity #SupplyChain #DetectionandResponse

Nothing like beer, pizza, and brilliant cyber minds! ???? Sweet Security was thrilled to host the reunion of the IDF Intelligence Corps' "Geffen" program — with 40 alumni of the program's 5th batch, coming together for an evening of great conversations and even better company. As proud home to 6 incredible Geffen graduates (and hopefully many more in the future ??), we know firsthand the impact and excellence this program fosters. Here’s to continued connections, innovation, and a whole lot of Sweet moments ahead! ?? Orel Ben Ishay Naor Haziz Ron Enoch Lior Pollak Barak Kolnik Omer Rivlin Ofek Shaltiel #Networking #TechCommunity #SweetSecurity #IDF #Geffen #Cybersecurity #CloudSecurity

?? We're excited to share that Sweet's Runtime CNAPP has been named the Best Cloud Runtime Security Solution in the 2025 Cybersecurity Excellence Awards! ?? This recognition isn’t just sweet, it’s a testament to our dedication to redefining cloud security. A huge shoutout to our team, customers, and partners who make this possible. We’re just getting started! Check out our award profile here: https://hubs.li/Q039JH720 Want to see what makes us an award-winning solution? Book a demo here: https://hubs.li/Q039JQfS0 #SweetSecurity #CloudNativeDetectionandResponse #CNAPP #CloudSecurity

APIs are the backbone of modern cloud apps—and attackers know it. In fact, 27% of all API attacks in 2023 targeted business logic flaws. Unfortunately, many security teams lack visibility into how their APIs truly behave, leaving gaps that adversaries can exploit. That’s where Sweet’s API Security comes into play —providing deep Layer 7 visibility and a structured view of all API activity, so you can: ? Track API usage by endpoint or resource ? Detect anomalies & runtime misconfigurations before they become breaches ? Spot malicious activity in real time Want to see how it works? Dive into the details and real-world use cases in our latest blog: https://hubs.li/Q039nzsG0

Sweet Security just had an awesome chat with Anton Chuvakin on the Cloud Security Podcast by Google — and we went deep. ??? Yigael Berger got real about LLMs: where they’re going, why they matter, and how we’re using them to level up our cloud findings and storytelling. No fluff, just the good stuff. ?? If you’re into AI and cloud security, you’re gonna want to hear this one. ?? Big thanks to Anton Chuvakin and Timothy Peacock for having us — it was a pleasure! ?? Catch the episode here: https://hubs.ly/Q0391FLr0 #CloudSecurity #AI #LLM #Cybersecurity #DetectionAndResponse #SweetSecurity

The Glilot Capital Partners Nexus Roadshow keeps getting better! Chicago brought powerful sessions on rapid response, collaboration, and proactive security in today’s evolving threat landscape—plus some deep-dish pizza, of course. Now in New York, we’re gearing up for tomorrow’s tabletop cyber simulation event with Glilot and Evolution Equity Partners Looking forward to more great discussions, insights, and sharpening our cloud resilience strategies! #SweetSecurity #Cloudnativedetectionandresponse #roadshow #CNAPP #CloudSecurity

BOOM!! ANNOUNCING OUR INTEGRATION WITH Sweet Security!! Open source security alerts are notoriously noisy — there could be huge volumes of CVEs in your stack, but most are probably not even exploitable. ?? ?? Our friends at Sweet make it fast and easy to determine which CVEs are loaded into the memory of your applications in runtime, so you can quickly understand which are reachable and exploitable. ?? With our new integration, you can now quickly determine which Jit-detected CVEs are exploitable, making it easy to prioritize the CVEs that introduce real risk. ??? Combined with Jit’s runtime context — like which CVEs are internet-facing and impact the security of sensitive data — our mutual customers with Sweet Security get deep visibility into the runtime context of every CVE. VP of Security at a Global Tech Company, summarizes the benefits of the integration nicely: “Understanding which vulnerabilities are truly exploitable in a live environment is a game-changer for security teams. By integrating Sweet Security’s runtime insights with Jit’s automated code vulnerability detection and triage, we’re empowering teams to cut through the noise and focus on the risks that matter most." Learn more about our integration in our blog, which is linked in the comments ?? Dror Kashti?Eyal Fisher?Orel Ben Ishay?Noa Glumcher?Lea Edelstein Olkinizki?Bryan Whorton Shai Horovitz Gilad Barzilay David Melamed, PhD Rob DiNuzzo Aviram Shmueli Charlie Klein Annette Leja?Jeff Grimes?Taly Rubinstein?Olga Bermant?Lutz Liermann?Eliran Ben-David

????Sweet + Jit: Identify which CVEs are actively loaded in an application’s memory, so you can stop wasting time on redundant issues. We're thrilled to announce a partnership between Sweet and Jit combining our strengths to enhance application security. This collaboration bridges the gap between static code analysis and runtime insights, ensuring vulnerabilities aren’t just detected but prioritized and remediated efficiently. With Jit’s precise code scanning and Sweet Security’s real-time exploitability analysis, security teams can focus on what truly matters—stopping real threats before they become breaches. Prioritize exploitable CVEs with the Sweet Security and Jit partnership. Read more here: https://hubs.li/Q038bVGv0 Aviram Shmueli David Melamed, PhD Shai Horovitz Gilad Barzilay #SweetSecurity #Jit #ApplicationSecurity #CloudSecurity #CloudNativeDetectionandResponse #CNAPP #CVEs #Vulnerabilities

??It’s story time—but this one’s for uncovering attacks, not fairy tales. Sweet's new LLM-powered storytelling, can turn complex attack activity into clear, step-by-step narratives. Instead of raw logs and disjointed alerts, get a cohesive attack storyline detailing every action an adversary took, their intent, and key timestamps. The result? 2-5 minute investigations, smarter decision-making, and rapid response. Learn more here: https://hubs.li/Q037YDLN0 #SweetSecurity #CNAPP #CloudSecurity #IncidentResponse #LLM #Cybersecurity #CloudNativeDetectionandResponse