staging-devopsy.kinsta.cloud

Author: Veronica Haggar

  • Zscaler 2021 ‘Exposed’ Report Reveals Corporate & Cloud Infrastructures More at Risk Than Ever From Expanded Attack Surfaces

    First of its kind global report reveals hospitality, telecom industries are most vulnerable to undiscovered network breaches and offers ways to mitigate risk.

    San Jose, CA, June 15, 2021 – Zscaler, Inc. (NASDAQ: ZS), the leader in cloud security, today announced the release of “Exposed”, the industry’s first global report on the state of corporate attack surfaces. Based on data sourced between February 2020 and April 2021, the report provides a first-ever look at the impact of attack surface exposure during the COVID-19 pandemic. In the report, Zscaler notes that as businesses began offering more remote work options, their attack surfaces grew concurrently with their dispersed workforce. Coupled with increased reliance on public cloud services and vulnerable enterprise VPNs, large organizations not using zero trust security became more vulnerable to network intrusion attacks. “Exposed” identifies the most common attack surface trends by geography and company size while spotlighting the industries most vulnerable to public cloud exposure, malware, ransomware, and data breaches.

    “The sheer amount of information that is being shared today is concerning because it is all essentially an attack surface,” said Nathan Howe, Vice President, Emerging Technology at Zscaler. “Anything that can be accessed can be exploited by unauthorized or malicious users, creating new risks for businesses that don’t have complete awareness and control of their network exposure. Our goal with this report is to provide a view of what the internet sees of a company’s information landscape and offer useful tips on how to mitigate risk. By understanding their individual attack surfaces and deploying appropriate security measures, including zero trust architecture, companies can better protect their application infrastructure from recurring vulnerabilities that allow attackers to steal data, sabotage systems, or hold networks hostage for ransom.”

    While attack surface vulnerabilities impact organizations of all sizes, major international companies with more than 20,000 employees are more vulnerable due to their distributed workforce, infrastructure, and greater number of applications that need to be managed. To better understand the scale of the problem, Zscaler analyzed organizations in all geographies, partitioning the findings from 53 countries into three regions for ease of understanding – the Americas, EMEA, and APAC.

    EMEA at Risk
    The report found that while 59 percent of surveyed organizations were based in the Americas, the EMEA region led the world in overall exposure and potential risk, with 164 CVE vulnerabilities. EMEA-based businesses had the most exposed servers, with an average of 283 exposed servers and 52 exposed public cloud instances each. They were also more likely to support outdated SSL/TLS protocols and had greater risk of CVE vulnerabilities on average. The EMEA region was followed by the Americas, with 132 CVE’s (20 percent lower than EMEA), and APAC, with an average of 80 CVE possible vulnerabilities (51 percent lower than EMEA).

    While the report demonstrated that EMEA businesses had the most online exposure, all regions showed vulnerabilities, making it critical for IT teams to adopt best practices, including zero trust security, to minimize the attack surface and eliminate exposure no matter where they are based.

    Top Exposed Industries
    In addition to presenting geographic data, the report tracked corporate attack surfaces by industry, pinpointing the types of organizations most likely to be targeted by cybercriminals. The report analyzed a diverse group of companies, spanning 23 different industries, and found that telecommunications organizations were the most vulnerable and had the highest average number of outdated protocols in their servers. Telecom companies had the third highest average of exposed servers to the internet, increasing the risk of being targeted by cybercriminals for DDoS and double extortion ransomware attacks.

    The report also showed that the hospitality industry – including restaurants, bars, and food service vendors – had the highest average of exposed servers and public cloud instances; with AWS instances exposed 2.9 times more often than any other cloud providers. With the COVID-19 pandemic pushing many restaurants to offer online ordering, the rapid adoption of digital payment systems has increased risks for both businesses and customers.

    Three Steps to Reduce an Attack Surface
    With the number of cyberattacks increasing daily, business IT teams must minimize their attack surface as part of an overall organizational security policy. Without comprehensive security measures, such as a zero-trust model, digital transformation initiatives and cloud migration efforts can also create new vectors of attack and threaten business continuity, professional reputation, and employee safety. Although no approach will be completely effective, Zscaler recommends the following tips for minimizing corporate network risks:

    • Know your exposure: Knowing your visible attack surface is key to effective risk mitigation. As more and more applications move to the cloud, it becomes mission-critical to be aware of network access points that are exposed to the internet. Remember, if it can be found by your employees, it can also be found by criminals.
    • Know your potential vulnerabilities: Stay current with the latest updates to the CVE database. Be sure to remove support for older TLS versions from servers to reduce risk.
    • Adopt practices that minimize risk: Many different technologies exist to provide visibility into IT and cloud infrastructure and implement zero trust. The Zscaler Zero Trust Exchange™platform helps IT security teams bring zero trust security to every digital business, strengthens safe web access, and dramatically simplifies the adoption of zero trust policies.

    For more information, including access to the full report, please see “Exposed”: The world’s first report to reveal how exposed corporate networks really are. Prospective and existing customers can also sign up to run their own website through the Zscaler attack surface analysis here.

    Lisa Lorenzin, Senior Director of Transformation Strategy at Zscaler, will be discussing the “Exposed” research results and the tool used to complete the attack surface analysis in an upcoming Zenith Live 2021 session: Secure Access to Private Apps: The Cornerstone to your Zero Trust Journey; scheduled for June 15, 2021, at 11:30am PT.

    About Zscaler

    Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across more than 150 data centers globally, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.

  • Global Fuze Study Reveals Gaps in Trust and Shifting Attitudes Toward Flexible Work

    Seventy five percent of workers believe flexible work should be an essential part of how people work going forward.

    Boston, MA, June 14, 2021 — Fuze, the leading cloud-based communications provider for the modern global enterprise, today announced the results of a new global study of 8,800 workers, which reveals that as flexible work is increasingly viewed as an expectation for the working world, attitudes continue to vary widely across industries, roles and geographies. The Fuze report, “Flex Study: Global Findings on the Future of Flexible Work,” reinforces that organizations and business leaders should not consider flexible work as a ‘one-size-fits-all’ benefit, but a personalized experience that should be tailored to an individual’s unique work preferences, role within their team, industry practices, aligned to goals and expected outcomes, and established through a foundation of trust.

    The Flex Study was unveiled today at the 2021 Flex Summit Week, a week-long virtual event that brings together industry experts and visionaries to discuss how enterprises are embracing flexible work. Results from the study were collected from more than 8,800 frontline and office workers in the United States, United Kingdom, France and Australia, and across a number of core industries, including manufacturing, retail, professional services, financial services, and software and technology.

    Among the key findings from the study, 75% reported that flexible work should be an essential part of how people work. In most regions, a full-time return to the office or worksite mandate could result in destabilizing job churn. In the UK, US, and Australia, approximately two-thirds of employees (67%) would consider finding a new job for greater flexibility in when and how they work. In France, more than half of employees (57%) would consider finding a new job for greater flexibility. However, trust in flexible work varies widely across roles. Across all regions, about half (54%) of workers think management is more trusting of remote work, while 70% of senior leaders believe management is more trusting, highlighting a gap between management’s new-found trust in remote work and employee perception of that trust. The gap in trust toward remote work is also reflected by role, with office workers (73%) more likely to say they are more trusting of remote work compared to frontline workers (50%). This may be credited to the lack of flexible work options traditionally offered to frontline workers versus office workers.

    Other key insights from the report include:

    • Frontline workers perceive flexible work differently than office workers. 42% of frontline workers believe management is trustworthy of remote work, compared to 62% of office workers. 78% of frontline workers also report that their organization requires them to be in their current working location versus only 60% of office workers. However, six in 10 (63%) frontline workers say they would be willing to change jobs for more flexibility.
    • Remote workers feel more productive. For those working remotely full-time, 60% say they are more productive at home than they were in the office. However, this feeling of productivity varies across regions with 70% of Australian respondents saying that they felt more productive versus only 52% of UK respondents.
    • Companies must reshape their culture of video meetings to drive engagement. In every industry, every job category, and every region, fewer than 10% of workers consider seeing someone’s face the most critical part of an effective meeting. For workers who report being happier at home, if their day is packed with meetings they become less engaged and productive. In fact, 59% of respondents say they would like to spend less than two hours a day in video meetings.
    • Companies must establish a structure for the work day to prevent burnout. Only 66% of respondents say they are ensuring they take a break every day. In addition, a quarter of respondents report that they find themselves working longer hours since they started working remotely.

    “Over the last year, the pandemic forced many organizations to digitally transform and embrace flexible work,” said Brian Day, CEO, Fuze. “While office workers have been at the forefront of the flexible work conversation for years, other segments of the workforce are playing a critical role in the movement’s evolution. This study provides organizations with the foundational data required to inform their approach to flexible work and empower employees to be more engaged and productive.”

    To download the full “Flex Study: Global Findings on the Future of Flexible Work” report, click here.

    About Fuze

    Fuze is a global cloud communications provider for the enterprise. Our intuitive unified communications and contact center platform enables seamless transition between calling, meeting, chatting, and sharing powered by the industry-leading intelligent cloud architecture. Fuze empowers the digital and distributed workforce to communicate anywhere, anytime, and across any device. Founded in 2006, Fuze is headquartered in Boston, MA with offices around the world. For more information, visit fuze.com.

  • Domo Joins Snowflake’s Snowpark Accelerated Program

    Domo Announces New Integration to Snowpark to Make it Easier for Developers, Data Engineers and Data Scientists to Build and Extend Custom Data-Driven Solutions Across the Enterprise

    Silicon Slopes, UT, June 10, 2021 – Domo (Nasdaq: DOMO), provider of the Domo Business Cloud, today announced support for Snowpark, the new developer experience for Snowflake, the Data Cloud Company, to deliver joint solutions that make it easier for developers, data engineers and data scientists to build and extend custom solutions across the enterprise. As part of this announcement, Domo introduced a new integration with Snowpark, Snowflake’s new developer experience, to make it easier to use other languages such as Scala and Java to build custom solutions within Domo’s modern BI platform. In addition, Domo announced support of Snowflake’s Java/Scala User Defined Functions (UDFs), in which customers can run code editor interfaces on the Domo platform, to create and edit their UDFs.

    With Snowpark and Java/Scala UDFs, Snowflake and Domo are harnessing the power of custom code to solve the most complex business problems by enabling joint customers to drive more value from their data, and providing powerful and actionable data insights to anyone inside and outside of an organization.

    “Domo and Snowflake share a mission to offer customers the flexibility, scalability and security needed to get more value from massive amounts of data, no matter where that data lives. As part of the Snowpark Accelerated Program, Domo will offer an integrated and customized interface to run Snowpark and Java/Scala UDFs on the Domo platform, enabling users with more tools to further manage their entire data ecosystem and put data to work across the business,” said Daren Thayne, Domo’s Chief Technology Officer.

    “Our latest Snowpark announcement continues Snowflake’s mission of mobilizing the world’s data by giving even more users the ability to uncover powerful data insights,” Snowflake SVP of Worldwide Partners and Alliance, Colleen Kapase said. “Our continued partnership with Domo extends the value of massive amounts of data by delivering rich insights that can drive better decisions and actions for any business.”

    Most recently, Domo announced Domo for Snowflake, a rich, native integration that puts modern BI directly on top of  Snowflake’s platform, allowing customers to keep data for analytic workloads directly in the Snowflake Data Cloud. Customers can read and write directly into Snowflake, create databases, and manage access to databases according to the schema they’ve established while using Domo to make that data more accessible and actionable for anyone across the business. Domo’s modern BI platform ensures that data is not only accessible, but also properly governed, giving BI and data professionals the confidence they need to unleash data across and beyond their organization with Domo solutions such as intelligent apps and Domo Everywhere. Domo is also a Premier Partner in Snowflake’s Partner Connect Program.

    For more information on Domo for Snowflake, visit www.domo.com/partners/snowflake.

    About Domo

    Domo is the Business Cloud, empowering organizations of all sizes with BI leverage at cloud scale, in record time. With Domo, BI-critical processes that took weeks, months or more can now be done on-the-fly, in minutes or seconds, at unbelievable scale. For more information about how Domo (Nasdaq: DOMO) helps its customers go fast, go big and go bold, visit www.domo.com. You can also follow Domo on Twitter, Facebook and LinkedIn.

  • Coalition Has Teamed Up with QuickBooks to Offer Leading Cyber Insurance Coverage to Small Businesses

    Relationship enables Intuit QuickBooks customers to quickly and affordably access comprehensive coverage from the QuickBooks ecosystem

    San Francisco, CA, June 10, 2021 — Coalition, the leading cyber insurance and security company, today announced its relationship with Intuit (Nasdaq: INTU), enabling QuickBooks customers to access comprehensive cyber insurance coverage to protect their business. This announcement includes the ability for millions of QuickBooks customers to directly access a streamlined quoting and purchase process for Cyber Insurance through Coalition.

    The increased automation of cyber crime, such as phishing campaigns and ransomware attacks, has disproportionately impacted small and midsize organizations that may previously have avoided detection. Cyber insurance claims are among the most frequent insurance claims made by small and medium-sized businesses, and yet a substantial majority remain uninsured. Coalition’s relationship with Intuit enables its small business customers to conveniently and affordably access coverage directly through the QuickBooks ecosystem.

    “Small businesses are increasingly targeted by cyber crime, and the losses they face can be catastrophic,” said Shawn Ram, Head of Insurance for Coalition. “Teaming up with Intuit enables us to bring our leading insurance and security solutions to microbusinesses and make them resilient to cyber threats.”

    “Together with Coalition, we’ve created a simple and quick way for QuickBooks customers to purchase and manage their cyber insurance,” said Mauricio Comi, Head of Insurance for Intuit Quickbooks. “Cyber threats have quickly become one of the leading risks for our customers, therefore we are developing comprehensive coverage and innovative tools to help QuickBooks small business owners manage their risk.”

    Coalition’s unique product and partner offering combines best-in-class cyber insurance and proactive cybersecurity tools to help organizations manage cyber threats and protect the value of their entire business. Its cybersecurity tools and partner ecosystem help prevent incidents from happening in the first place, while its comprehensive cyber insurance covers the full breadth of cyber peril, including cyber crime, forensics, bodily injury and property damage, and more, to offer support before, during, and after a crisis.

    To learn more about Coalition, visit https://www.coalitioninc.com/.

    To read more about QuickBooks Insurance, visit their blog or website

    About Coalition

    Coalition is the leading provider of cyber insurance and security, combining comprehensive insurance and proactive cybersecurity tools to help businesses manage and mitigate cyber risk. Backed by leading global insurers Swiss Re Corporate Solutions, Arch Insurance, Lloyd’s of London, and Argo Group, Coalition provides companies with up to USD $15 million of cyber and technology insurance coverage in all 50 states and the District of Columbia, as well as CAD $20M of coverage across 9 provinces and 3 territories in Canada. Coalition’s cyber risk management platform provides automated security alerts, threat intelligence, expert guidance, and cybersecurity tools to help businesses remain resilient in the face of cyber attacks. Headquartered in San Francisco, Coalition’s team is global with employees based across the United States, Canada, the United Kingdom, Switzerland, and Portugal.

    About Intuit

    Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving approximately 100 million customers worldwide with TurboTax, QuickBooks, Mint and Credit Karma, we believe that everyone should have the opportunity to prosper. We never stop working to find new, innovative ways to make that possible. Please visit us for the latest information about Intuit, our products and services, and find us on social.

  • AppSec Innovator Invicti Appoints Cybersec Veteran Sonali Shah as Chief Product Officer

    Former Veracode, BitSight product visionary to lead the next phase of innovation for Invicti’s web application security products, Netsparker and Acunetix

    Austin, TX, June 10, 2021 – Invicti Security™, a global innovator in web application security, today announced cybersecurity leader Sonali Shah has joined its executive team as Chief Product Officer. A seasoned business and product leader, Shah brings more than 20 years of B2B SaaS and cybersecurity sector experience, having led product management, marketing, and strategy teams at companies such as HUMAN (formerly White Ops), Veracode, BitSight, and VeriSign, among others. Skilled at leading teams with a proven track record in bringing innovative solutions to market, she will be building on Invicti’s long history of innovation, transforming the application security market, with its enterprise Netsparker and mid-market Acunetix solutions.

    “We are thrilled to have Sonali join our leadership team, bringing her field-tested leadership and strategy expertise in the enterprise sector, alongside her success in scaling organizations and building high-performing teams,” said Ferruh Mavituna, founder and CEO, Invicti. “As we continue to expand globally, Sonali will not only help accelerate our growth, she will bring the customer voice front and center in the next phase of our product innovation.”

    “Invicti has been leading innovation in the application security sector for over 15 years, and I am excited to play a role in shaping its future as we continue to grow the company,” shared Sonali. “I was immediately impressed with our products and the accuracy, speed, and intelligence they bring to the daunting task of web security.  I’m looking forward to working with our great team to release exciting new features, and to partnering with our customers to help them reduce risk and infuse security into development.”

    Shah joins Invicti at an inflection point for the company. With more than 3,300 customers in 115 countries, including many Fortune 500 companies, Invicti’s Dynamic and Interactive Application Security Testing products are increasingly being adopted by organizations in every industry to scale their overall security operations, make the best use of their security resources, and engage developers in helping to improve their overall security posture. Recently recognized in the Gartner Magic Quadrant for Application Security Testing with its Netsparker and Acunetix products, Invicti has been chosen by global enterprises as their DAST provider of choice, including AWS, NASA, Amex, Air Force, Cisco, Lowes Verizon, Ford, and Starbucks, among many others.

    About Invicti Security

    Invicti Security is changing the way web applications are secured. A global leader in web application security for more than 15 years, Invicti’s dynamic and interactive application security products help organizations in every industry scale their overall security operations, make the best use of their security resources, and engage developers in helping to improve their overall security posture. Invicti’s product Netsparker delivers industry-leading enterprise web application security, while Acunetix is designed for small and medium-sized companies. Invicti is backed by Turn/River Capital, and is headquartered in Austin, Texas, with offices in London, Malta, and Istanbul.

  • Honeycomb Metrics Modernizes the Use of Metrics for Debugging Cloud-Native Distributed Systems

    New metrics feature helps customers bridge the gap between traditional debugging practices and modern systems, without compromising the powerful insights of observability.

    San Francisco, CA, June 10, 2021 — Honeycomb, which provides industry-leading observability software for understanding, troubleshooting, and optimizing cloud-native distributed systems, today announced the availability of Honeycomb Metrics. The new feature enables customers already using observability to quickly identify and resolve application issues by allowing them to correlate metrics-based indicators of system health from the same interface. This streamlined view bridges the gap between traditional monitoring and modern observability practices, providing engineering teams with simplicity and speed in their investigative workflow.

    Many organizations use multiple third-party traditional monitoring and debugging tools to identify and diagnose systems-level constraints that impact their application-level performance. The complexity of multiple tools adds to the challenges software developers already face when building and maintaining production environments using cloud-native and distributed systems—making it nearly impossible to debug application failures with traditional monitoring tools that use metrics at the application level.

    With Honeycomb Metrics, customers can maximize their technology investments by making it easy for engineering teams to use one interface to identify and diagnose complex application performance problems, whether they originate from application code or system issues. It relieves them from needing to use several legacy monitoring tools that diagnose application-level issues or system-level issues and having to connect the dots themselves. Honeycomb Metrics gives engineering teams an understanding of application-level issues with observability and systems-level issues with metrics.

    Honeycomb Metrics also helps teams get started with observability more easily by allowing them to use their traditional monitoring data in tandem with their new observability data. New customers can use Honeycomb Metrics as a stepping stone from the legacy approach—debugging with application-level metrics—to adopting event-driven observability practices in parallel, without first needing to identify and rewrite existing instrumentation.

    “Honeycomb Metrics help customers new to observability quickly see how their traditional monitoring world fits into the modern world of observability,” said Christine Yen, Honeycomb Co-founder and CEO. “Adding native support for systems-level metrics lowers the barrier for entry into observability, while still providing the essential, event-driven analytical capabilities at the application-level that have made Honeycomb a market leader in the observability space.”

    Honeycomb Metrics works by letting customers send metrics data to Honeycomb using either OpenTelemetry or one of several other metrics formats, including StatsD, Prometheus, and Amazon CloudWatch. Honeycomb Metrics includes usability enhancements that overlay time series metrics data with events data in useful and logical visualizations. Customers can see how their infrastructure-level metrics correlate with their application-level events for one consistent representation of overall system performance. Honeycomb Metrics also introduces suggested queries that guide customers toward seeing the representations they need automatically.

    “With Honeycomb Metrics, we’re able to very easily switch between searching, visualizing, and viewing raw metrics data all in one place,” said Sarah Sherbondy, Principal Engineer, Platform Observability, at Heroku. “That helps us more quickly verify and iterate on instrumentation improvements than we’d been able to do previously. The Honeycomb query interface is awesome for metrics, just as it is for events. With just a few clicks, getting insights and clarity from our metrics has never been easier. Plus, setting it up was a breeze since Honeycomb works with the OpenTelemetry Protocol. That ease of use means improved reliability for very little effort! A win, win situation for us!”

    Honeycomb Metrics is now in open beta for all Enterprise customers. Click here for more information and to sign up.

    About Honeycomb
    Honeycomb provides observability for modern development teams to learn, debug, and improve their production systems efficiently so that business-critical apps perform with minimal disruption to users. Honeycomb’s customers rely on the product for fast incident response, system optimization, and delivering pain-free releases across the software engineering cycle that translates to happy devs and happy customers. Learn more at www.honeycomb.io and follow us on Twitter.

  • Apifiny Hires President and CFO, Erez Simha, to Help Lead Company Toward Public Offering

    Mr. Simha to Help Accelerate Growth of Apifiny’s Digital Asset Trading and Liquidity Solutions for Institutional Traders, Exchanges, and Market Makers 

    New York, NY, June 10, 2021 — Apifiny, a leading global digital asset trading and mining network, today announced Erez Simha has been appointed president and chief financial officer to help accelerate the company’s global growth and lead the company toward a public offering in 2021. Mr. Simha brings over 20 years of  experience in global finance, operations management, and executive leadership in global public and private tech companies. His experience includes executive finance and operations roles with Stratasys (Nasdaq: SSYS), Orbotech (Nasdaq: ORBK), Mercurity Fintech Holdings (Nasdaq: MFH) and two private tech companies, Roo and Ju.st Inc, among others.

    Throughout his career, Mr. Simha has assumed broad responsibilities in all aspects of global finance, operations, M&A activity, IT infrastructure, HR, SEC reporting, Sarbanes-Oxley compliance, risk management, and legal and investor relations in global hyper-growth environments. Before joining Apifiny, he served as the president and chief financial officer of Mercurity Fintech holding (MFH), and chief financial officer and chief operating officer of Roo Inc. (2019 to 2020) and Ju.st Inc (2017 -2019), where he directed all aspects of executive leadership. Prior to that, Mr. Simha was global chief operating officer and chief financial officer at Stratasys (2011 – 2017), a company he took public, and chief financial officer at Orbotech (2004 – 2011).

    “Erez brings a proven track record of taking global companies public and accelerating their growth before and after public offerings,” said Haohan Xu, chief executive officer of Apifiny. “His executive leadership success in both private and public global tech companies will bring tremendous value to our customers, our team, and the market at-large.”

    “Apifiny is well-positioned to capture a huge market opportunity in global digital asset trading,” said Erez Simha, president and chief financial officer at Apifiny. “We have the right technology, the right team, and the right experience to execute our mission to connect the world’s global trading marketplaces so that professional traders and digital asset exchanges have a simpler, faster, and more cost-effective global trading platform.”

    About Apifiny

    Apifiny is a leading, global digital asset trading and mining network. Apifiny unifies fragmented global trading marketplaces to provide professional traders and digital asset exchanges with simpler, faster, and more cost-effective, global trading and liquidity solutions. The company connects centralized financial institutions with decentralized networks to reimagine the global liquidity and trading value chains. Apifiny’s trading network enables professional traders to execute global, multi-exchange strategies, access deep global liquidity, superior price discovery, normalized market data, tighter spreads, and higher fill rates and capital utilization. For more information, visit https://www.apifiny.com/.

  • Gigamon Launches ThreatINSIGHT Guided-SaaS NDR to Improve SOC Effectiveness and Reduce Analyst Burnout

    Visibility, focus, and expertise, delivered as a service, guides SOC analysts to more efficient investigations with zero detection tuning or system maintenance required

    Santa Clara, CA, June 10, 2021 – Gigamon, the leader in cloud visibility and analytics, today announced ThreatINSIGHT Guided-SaaS NDR (network detection and response), which was purpose built to improve SOC (Security Operations Center) effectiveness and reduce analyst burnout. ThreatINSIGHT Guided-SaaS NDR, which redefines how SaaS-based security solutions are delivered, arrives at a critical juncture in threat defense as exponential growth in infrastructure complexity, and ever-increasing cyber threat activity, is negatively impacting InfoSec team’s ability to efficiently do their jobs, ultimately contributing to high burnout rates.

    ThreatINSIGHT alleviates the three most common problems that continue to plague SOC analysts and incident responders. They are often working in the dark without foundational visibility to observe adversary movement, leading 69% of IT and security practitioners to cite network visibility as the top reason for SOC ineffectiveness. They continually face the distraction of burdensome tool maintenance, prompting 43% of SOC analysts to indicate that maintaining, tuning and providing updates to their security tools is their core responsibility. Finally, they are often operating alone, without expert support, which is a factor CISOs must consider when addressing why 70% of their SOC analysts report burnout due to high-pressure environments. Gigamon ThreatINSIGHT removes these burdens that otherwise prohibit teams from focusing on effectively identifying adversary activity across the MITRE ATT&CK framework. In addition, during high-pressure, active incidents, customers benefit from access to expert-level guidance from the experienced security analysts and incident responders on the Gigamon Technical Success Managers (TSM) team.

    “Security analysts are consistently overwhelmed, stressed, and understaffed, leaving the majority pretty much unable to anticipate, recover from, or adapt to new attacks (without reaching burnout, which is common),” wrote analyst Allie Mellen from Forrester in a recent series of blog posts. “Security tools must support security teams in doing their jobs better, from the people side, the process side, and the technology side.”[1]

    With Gigamon ThreatINSIGHT Guided-SaaS NDR, teams are more effective with less stress as a result of:

    • Visibility. ThreatINSIGHT ensures SOC analysts are never in the dark by delivering guided visibility to adversary network activity, not observable by EDRs and SIEMs. Network traffic provides the essential foundation for incident response including visibility to lateral movement, command and control, and other steps along the MITRE ATT&CK framework. ThreatINSIGHT can observe and identify adversary activity on any device or network, across any type of traffic, including encrypted traffic, thereby eliminating the SOC visibility gap.

    • Focus. ThreatINSIGHT minimizes distractions by guiding security professionals to high-confidence detections crafted by the Gigamon Applied Threat Research (ATR) team. By continuously delivering QA’d and tuned advanced machine learning, behavioral analytics, and proprietary threat intelligence for true positive adversary detection, clients are not distracted with laborious false-positive tuning.

    • Expertise. ThreatINSIGHT guides SOC analysts via product and people. The solution guides investigative workflows built by our expert responders, on top of a powerful and flexible Insight Query Language. TSMs, included as part of the service, are security analysts and incident responders themselves who provide best practices and threat knowledge to directly assist clients when they need it most.

    “As hybrid cloud and hybrid workforces become the new normal and as threat actors continually increase their sophistication, the job of security analysts and incident responders becomes even more complex,” said Michael Dickman, Chief Product Officer at Gigamon. “The rise in recent ransomware attacks is a strong reminder that security teams need defense-in-depth with visibility, focus, and expertise. Now, with the world’s first Guided-SaaS NDR, customers no longer have to fight this battle alone, or without full visibility of their adversary. InfoSec teams now have the tools and expertise to respond with speed and confidence.”

    For more information on the efficiency and effectiveness of ThreatINSIGHT, read the ESG Technical Review to learn how ESG independently validated the efficacy of Gigamon ThreatINSIGHT.

    About Gigamon

    Gigamon helps the world’s leading organizations run fast, stay secure and innovate. We provide the industry’s first Guided-SaaS NDR (network detection and response) solution which closes the Security Operations Center (SOC) visibility gap, removes unnecessary distractions and provides expert advisory guidance when it matters most. With visibility into network traffic across their entire hybrid cloud infrastructure, organizations eliminate security blind spots while benefiting from Gigamon security expert guidance, helping improve SOC effectiveness and reducing burnout of their security teams. Gigamon has been awarded over 90 technology patents and enjoys world-class customer satisfaction with more than 4,000 organizations, including over 80 percent of the Fortune 100 and hundreds of government and educational organizations worldwide. Headquartered in Silicon Valley, Gigamon operates globally. For the full story on how Gigamon can help you to run fast, stay secure and innovate, please visit www.gigamon.com and follow us on Twitter. and LinkedIn.

  • Acronis Arms Service Providers with Advanced Email Security to Stop All Email Cyberthreats

    Acronis Cyber Protect Cloud’s new advance pack, powered by Perception Point, blocks email-borne threats from reaching client inboxes

    SCHAFFHAUSEN, Switzerland, June 10, 2021 – Acronis, the global leader in cyber protection, today released a new advanced protection pack for Acronis Cyber Protect Cloud. Powered by the industry-leading solution from Perception Point, the new Advanced Email Security pack enables service providers to enhance and extend their cybersecurity capabilities by detecting and stopping all email-borne cyberthreats before they can reach their clients’ end users.

    The native integration of Acronis Cyber Protect Cloud with Advanced Email Security means MSPs can use one solution to extend their cyber protection services to protect their clients’ Microsoft 365, Google Workspace, Open-Xchange mailboxes, or on-premises mail server. Advanced Email Security intercepts all email-based threats, including spam, phishing and spoofing, business email compromises (BECs), advanced persistent threats (APTs), and even the zero-day malware attacks that are behind 80% of breaches [1].

    “Email is both business-critical and the top threat vector for organizations today. For service providers, preventing email threats from reaching their clients is vital,” said Jan-Jaap “JJ” Jager, Board Advisor & Chief Revenue Officer at Acronis. “The new Advanced Email Security pack marries the best-in-class technology from Perception Point with the unified cybersecurity, data protection, and endpoint protection of Acronis Cyber Protect Cloud. As a result, MSPs have everything needed to keep clients secure and their business efficient and profitable.”

    “We are thrilled to partner with Acronis to power the leading Acronis Cyber Protect Cloud solution, with Perception Point, integrated as the Advanced Email Security pack,” said Yoram Salinger, CEO of Perception Point. “Together we are making enterprise-grade cybersecurity solutions available to all MSPs and their end-customers. Acronis’ and Perception Point’s approach helps us realize our vision of combining the best technology with personalized services, to protect customers from the broad range of constantly evolving threats.”

    Proven email security

    While legacy sandboxing technologies assess threats reactively, which limits how much traffic can be scanned and delays malware verdicts by up to 20 minutes, the technology in Advanced Email Security scales to cover 100% of the email traffic and shortens that scanning time to a maximum of 30 seconds.

    As a result, Advanced Email Security enables MSPs to automatically:

    • Stop phishing and spoofing attempts by leveraging powerful threat intelligence, heuristics, URL reputation checks, unique computer vision algorithms, and machine-intelligence-enhanced Domain-based Message Authentication, Reporting and Conformance (DMARC), DomainKeys Identified Mail (DKIM), and Sender Policy Framework (SPF) record checks.
    • Detect advanced evasion techniques used to hide malicious content. To do this, the solution recursively unpacks embedded files and URLs, and separately analyzes them with dynamic and static detection engines.
    • Prevent malware and email threats that evade conventional defenses such as advanced persistent threats (APTs) and zero-day attacks. By leveraging Perception Point’s unique CPU-level technology, it acts earlier in the attack chain to block exploits before the malware is released and delivers a clear verdict within seconds.

    Unlike other email security solutions, Acronis Cyber Protect Cloud with Advanced Email Security also stops threats delivered via internal email addresses, preventing malware from spreading laterally throughout an organization.

    Advanced Email Security is the latest advanced protection pack released for Acronis Cyber Protect Cloud, which enables MSPs to build services at little to no upfront expense, ensuring 100% coverage of clients’ workloads with cyber protection.

    Additional advanced protection packs such as Advanced Backup, Advanced Security, Advanced Disaster Recovery, and Advanced Management give MSPs the flexibility to expand and customize their services to deliver the optimum level of cyber protection for each client and every workload.

    Partners and analysts respond to the new solution pack  

    “Bluefin trusts Acronis Cyber Protect Cloud because we’ve seen how it’s enabled us to provide a comprehensive range of cyber protection services to our clients – and Advanced Email Security is an exciting, welcome addition,” said Dawn Wilson, Chief Executive Officer of Bluefin Technology Group. “With data breaches that are happening daily, we’re expected to keep our clients’ email inboxes safe and protected. This addition makes it easy for us to enhance our services with email security that is proven without having to add a whole new vendor and set-up.”

    According to Simon Edwards, CEO of SE Labs, the Advanced Email Security pack gives MSPs a single, multi-layered email security solution that detects threats more quickly and more precisely than other options. Perception Point received top overall ranking in SE Labs Independent testing, ranking #1 in detection rate, false-positive rate, and overall accuracy rating.

    “This extremely challenging test puts email services through a very rigorous assessment and it is to Perception Point’s credit that it achieved first place and the highest AAA award,” said Edwards.

    According to Gartner, “As organizations continue to migrate to cloud email, the need to reevaluate email security is even greater. The solutions and controls that were put in place for on-premises email solutions are no longer enough.” Further, Gartner states, “Integrated email security solutions (IESSs) provide many of the capabilities in an SEG such as advanced malware protection, sandbox analysis and URL analysis, intercepting malicious emails before they reach a user’s inbox.” Perception Point was recognized as a Representative Vendor for IESS in the 2020 Gartner Market Guide for Email Security report.

    Any service provider interested in learning more about Acronis Cyber Protect Cloud with Advanced Email Security is encouraged to view a demonstration at the Acronis Demo Center or go to https://www.acronis.com/en-us/products/cyber-protect/.

    [1] https://www.linkedin.com/pulse/ponemon-institute-research-concludes-80-successful-breaches-haas

    About Perception Point

    Perception Point is a Prevention-as-a-Service company, offering fast interception of any content-based attack across all collaboration channels, including email, cloud storage, CRM apps, and messaging platforms. The company prevents phishing, BEC, spam, malware, Zero-days, and N-days well before they reach enterprise users. Deployed in minutes with no change to the enterprise’s infrastructure, the Perception Point solution conforms with any policy and requires zero fuss from IT teams. The company’s Incident Response team serves as a force multiplier to the enterprise’s SOC team.

  • AttackIQ Helps VMware NSX Customers Validate Efficacy of Their Network Security Controls

    AttackIQ Helps VMware NSX Customers Validate Efficacy of Their Network Security Controls

    Santa Clara, CA, June 10, 2021 – AttackIQ®, a leading independent vendor of Breach and Attack Simulation (BAS) systems, today announced the company is working with VMware to enable VMware NSX customers to improve the way they validate the efficacy of their network security controls. Using the AttackIQ Security Optimization Platform with the MITRE ATT&CK framework, mutual customers can now leverage the power of automation to continually emulate realistic attacks and prove that controls are working as expected to help protect them from breaches and attacks.

    “As we have seen from supply-chain and ransomware intrusions, organizations need to assume breach and adopt advanced security capabilities to prevent successful attacks,” said Carl Wright, AttackIQ Chief Commercial Officer. “VMware is one of the world’s leading security providers, and we are excited to work with the VMware team to elevate our mutual customer’s security program performance.”

    “While traditional penetration testing and red teaming can provide useful insights into security control effectiveness, their infrequent scheduling and limited scope fail to provide holistic, up-to-the minute data during security proof of values,” said Chad Skipper, Global Security Technologist at VMware. “AttackIQ will enable VMware NSX customers to proactively validate NSX Advanced Threat Prevention controls against emulated adversary behaviors, with the end result being increased confidence in their cybersecurity performance.”

    AttackIQ conducts automated security testing to improve program performance

    AttackIQ operates under the “assume breach” mindset, recognizing that it is not a question of if but when an intruder will break past an organization’s perimeter defense. Aligned to the MITRE ATT&CK framework, AttackIQ’s Security Optimization platform contains a deep library of adversary emulation scenarios to emulate post-breach adversary behaviors and continuously validate an organization’s defenses. The Security Optimization Platform tests and validates security controls continuously, safely, at scale and in production.

    By combining AttackIQ with VMware NSX, teams can gain comprehensive, data-driven control over their security program through continuous testing. With clear performance data generated from AttackIQ’s automated testing capabilities, security teams identify program challenges, adjust their security program operations, and make data-informed decisions about their security investments. The outcome is that the organization’s security controls work as intended, resources are aligned to address the most important threats, and the organization maximizes its return on investment.

    VMware simplifies network security by leveraging the infrastructure to protect apps and data from endpoint to cloud. By virtualizing the network security stack, companies gain better protection that is built into the infrastructure to help mitigate risks and enable compliance, lower costs, and simplify operations. The VMware NSX security family includes the VMware NSX Service-defined Firewall, a distributed, scale-out internal firewall purpose-built to protect east-west network traffic, and VMware NSX Advanced Threat Prevention for network detection and response capabilities with network traffic analysis, distributed IDS/IPS, and advanced malware analysis. These solutions provide deep visibility into network traffic regardless of whether it is north-south or east-west and are coupled with advanced machine learning techniques. As a result, cybersecurity teams can respond to advanced threats more quickly and effectively by providing high-fidelity alerts with a very low rate of false positives, plus visualize the entire attack chain.

    About AttackIQ

    AttackIQ, the leading independent vendor of breach and attack simulation solutions, built the industry’s first Security Optimization Platform for continuous security control validation and improving security program effectiveness and efficiency. AttackIQ is trusted by leading organizations worldwide to plan security improvements and verify that cyberdefenses work as expected, aligned with the MITRE ATT&CK framework. The Company is committed to giving back to the cybersecurity community through its free AttackIQ Academy, open Preactive Security Exchange, and partnership with the MITRE Center for Threat-Informed Defense. For more information visit www.attackiq.com. Follow AttackIQ on Twitter, LinkedIn, and YouTube.

    VMware and NSX are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and other jurisdictions.