Suggestions
Yaron Tal
Founder of Reposify
Yaron Tal is the Founder and Chief Technology Officer (CTO) of Reposify, a cybersecurity company that was acquired by CrowdStrike.3 He is a highly driven tech entrepreneur and cybersecurity expert with nearly two decades of experience in developing software solutions for cybersecurity.1
Professional Background
Yaron founded Reposify in 2017.3 The company specializes in external attack surface management (EASM), developing a platform that scans the internet for exposed assets of an organization to detect and eliminate risks from vulnerable and unknown assets.3
Prior to founding Reposify, Yaron held various managerial roles at startups, where he gained extensive experience in leading R&D teams and developing successful solutions from the ground up.1 He is also an alumnus of the Israeli Cybersecurity Center, where he served for over four years as an embedded system developer, researcher, and team leader.1
Expertise and Skills
Yaron is known for his ability to:
- Turn ideas into products
- Bridge technology and business
- Grow and lead teams
- Set product and go-to-market strategies
His hands-on experience includes working with scalable web applications, embedded systems, and reverse engineering.2
Reposify Acquisition
In September 2022, CrowdStrike acquired Reposify in a deal estimated at several tens of millions of dollars.3 Following the acquisition, Reposify became "Reposify, a CrowdStrike company," with Yaron continuing his role as Founder and CTO.2
Online Presence
Yaron maintains a professional presence on various platforms:
- LinkedIn: His profile can be found under the username "yarontal"2
- Twitter: He uses the handle @yaronta4
Yaron Tal's expertise in cybersecurity and his entrepreneurial success with Reposify have established him as a notable figure in the tech industry, particularly in the field of external attack surface management.
Highlights
📢Exciting news!📢 CrowdStrike Israel is expanding and currently hiring for 20 roles! 🦅
If you're looking for a new opportunity, this might be the perfect chance to become a CrowdStriker. Check out the link below for more information and to apply.
👉 https://lnkd.in/dzqFRQkY
PS: Feel free to reach out for more information and send your CVs if you find something relevant.
𝗛𝗮𝗰𝗸𝗲𝗿𝘀’ 𝗖𝗵𝗿𝗶𝘀𝘁𝗺𝗮𝘀 𝗰𝗮𝗺𝗲 𝗲𝗮𝗿𝗹𝘆 𝘁𝗵𝗶𝘀 𝘆𝗲𝗮𝗿 - 𝗟𝗼𝗴𝟰𝗦𝗵𝗲𝗹𝗹 𝗶𝘀 𝗼𝗻 𝘁𝗵𝗲 𝗿𝗶𝘀𝗲
Reposify offers a free log4j vulnerability scan to help companies find out where they may be exposed, and what steps they can take to mitigate this risk.
Security teams across the globe are spending their weekend on mapping and mitigating the CVE-2021-4428 vulnerability. In short - a single request by an attacker to an affected service might allow him to gain remote access or perform an action without any authentication. The huge number of affected programs which are not directly Apache is the reason this vulnerability gained a score of 10/10 on the CVSS metrics.
Alibaba Cloud Security Team started this cybersecurity frenzy with a tweet on December 9th about a remote code execution vulnerability in apache Log4j. This set the alarm and caused the entire open source community to open its war rooms and try to understand the best methodology to discover affected services and mitigate exploitation until patches will be applied.
Reposify data shows, apache httpd is the most exposed and used web server in the world - hundreds of millions. That’s only half the problem. Many services use log4j as part of their core service which means exploitation is not only towards the apache web server but many other services based on the apache log4j and httpd.
To mitigate this major vulnerability, our security team added an automatic discovery feature for affected exposed assets by log4j, to our Google-like mapping platform. This means Reposify’s customers can be notified on an exposed and vulnerable CVE-2021-4428, without the need to perform any action. They can continue their R&R weekend… so can you.
PM me or Contact us at [email protected] and get free and automatic discovery of your affected assets.
#cybersecurity #visibility #log4j
