Thread by @convequity

No doubt the war & rising geopolitical tensions will lead to more ransomware & other cybercrime.

Here is a thread highlighting the key security areas & the associated strongest vendors to prosper.

$PANW, $FTNT, $S, $ZS, $CRWD, $OKTA, Illumio, Netskope

War will escalate state-backed attacks >>> more funding going to skilled bad actors.

This funding will pay for increased automation to scan for openings across the web > therefore enterprises w/ global IT sprawl are most vulnerable.

$PANW has the best solution to fight this.

If/when bad actors do enter a network, they'll need to laterally move (east-west) searching for systems & data.

Best way to prevent this is with segmentation.

Illumio & $PANW are BoB for microsegmentation for cloud.

$FTNT is best option for industrial environments (OT).

Of course, enterprises also need to secure north-south connections - i.e., client to data centre.

Best way to do this amid dist. environments is Zero Trust Network Access.

Best ZTNA vendors are $PANW, $ZS, $FTNT, Netskope, $NET

However, Zero Trust adds latency coz default stance for every connection request is Zero Trust & trust is built up from there.

This is why ZTNA needs to be accompanied by powerful risk engines that blend the right amount of security + user exp.

$OKTA & $PANW are best solution

We mentioned east-west & north-south but attacks can come from emp. surfing the web.

Could see more advanced drive-by malware downloads as peeps visit legit-looking sites.

To reduce risk firms need SWGs, poss with RBI.

Netskope, $ZS, Menlo Security, iBoss, $PANW, $FTNT, $NET

Even after having all the above implemented, some bad actors will still manage reach some endpoints (client devices & servers).

Best XDR vendors >>> $S, $PANW, $CRWD.

Not helping this treacherous security landscape is the rampant activity in the cloud.

Cloud-using firms need to give tools to devs to better secure things.

It's got to be $PANW again. Also $HCP.

Securing data in cloud also appears problematic.

Best bet is Netskope.

Summary, look for BoB related:

Removing improperly configured/decommissioned internet-facing assets

Secure east-west w/ segmentation

Secure north-south w/ ZTNA

> Add sophisticated risk engine for user exp

Secure web use

Secure endpoints

Help devs secure

& secure data

Almost forgot to mention. Despite all this enterprises will still need an in-house or outsourced SOC.

Skill in threat hunting & remediation and lots of autonomy & automation is required due to mass shortage in security personnel.

Good for $MNDT, $PANW, $S, & $CRWD

And promise this is last tweet.

Zero Trust Architectures need super fast networks to compensate for latency.

Good for $FTNT (SD-WAN BoB) and Netskope (lightning fast network w/ great SD-WAN integration).