Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

OEM Security Newsalert – 27-Oct-2019

Posted on October 28, 2019January 13, 2022 by admini

 Check Point Revamps Small and Medium Businesses Security to Protect from the Most Advanced Cyber Attacks
Nasaq Globe Newswire 
EIN News 
/EIN News/ — SAN CARLOS, Calif., Oct. 17, 2019 (GLOBE NEWSWIRE) — Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a leading provider of cyber security solutions globally, announced the release of the new 1500 series security gateways for SMBs.
The two new SMB appliances set new standards of protection against the most advanced fifth-generation cyberattacks, and offer unrivalled ease of deployment and management.
The 1550 and 1590 gateways are powered by Check Point’s R80 release.
R80 is the industry’s most advanced security management software, and includes multi-layered next-generation protection from both known threats and zero-day attacks using the award-winning SandBlast™ Zero-Day Protection, plus antivirus, anti-bot, IPS, app control, URL filtering and identity awareness. 
ffective May 30th, 2020, Check Point will cease to sale the following security gateway models:  730, 750, 770, 790, 1430, 1450, 1470 and 1490 wired and wireless (excluding VDSL).
Link: https://software.einnews.com/pr_news/499529696/check-point-revamps-small-and-medium-businesses-security-to-protect-from-the-most-advanced-cyber-attacks?n=2&code=oFvCCJC2r-jYysMo&utm_source=NewsletterN

 How BlackBerry Used Improv Comedy To Make Cybersecurity A More ‘Human’ Topic
Marty Swant 
Forbes 
BlackBerry wants to make data breaches a laughing matter.
To illustrate how even the smartest and most capable employees can make accidental mistakes that put sensitive information at risk, the Canadian company is taking a more “human” approach to the serious subject of cybersecurity.
It’s not that Mark Wilson–who’s been CMO of the brand since 2017–doesn’t take threats lightly.
Rather, he said an overwhelming majority of customers surveyed viewed their own staff as more of an accidental threat than an outside hacker.
According to research conducted by BlackBerry, 94% of chief security officers and other executives don’t trust their own employees with critical information.
In fact, 72% suspected their employees were working around existing security measures. (For example, BlackBerry found that a nurse at a hospital sent X-ray images to a doctor via Snapchat because she was locked out of the company’s software.)
To promote its own security software, BlackBerry—which has pivoted from its earlier smartphone-making days to enterprise tech made for the era of self-driving cars and the Internet of Things—decided to humanize accidental errors.
But instead of just passing a brief over to an creative agency to come up with a TV spot and some billboards or print ads, Blackerry worked with Oakland-based Funworks to hire improv comedians to create a campaign alongside BlackBerry teams ranging from marketing and tech to sales.
The goal: to translate the technical side of security to something more relatable.
“The key to this is how do you evoke emotion into something that can be at times a very dry topic,” Wilson says. “That’s kind of the fun of what we do.
How do you break through a sea of sameness with something that’s an evolutionary or provocative point of view and that’s a very human point of view?”
Link: https://www.forbes.com/sites/martyswant/2019/10/18/how-blackberry-used-improv-comedy-to-make-cybersecurity-a-more-human-topic/#4ec87b51cf5a

 Zscaler: Time To Buy
Stefan Ong 
Seeking Alpha 
Summary
Zscaler has fallen roughly 46% since its 52-week high.
The stock has grown strongly with revenue growth rates above 50% for the past three years.
Moreover, Zscaler is undervalued by 9.5% based on my estimates.
Link: https://seekingalpha.com/article/4296361-zscaler-time-buy

 Apollo Global in rumoured $5bn takeover bid for Tech Data
Doug Woodburn 
Channel Partner Insight 
Tech Data’s shares have spiked following a report that it is the subject of a near $5bn (€4.53bn) takeover approach.
According to a report today by Reuters, private equity firm Apollo Global Management is offering to pay about $130 a share for the global distribution giant.
It cited “people familiar with the matter”.

Tech Data’s shares have hiked 14 per cent in after-hours trading this evening.
Apollo was linked with a $7.5bn bid for Tech Data’s arch-rival Ingram late last year.
Link: https://www.channelpartnerinsight.com/channel-partner-insight/news/3082668/apollo-global-in-rumoured-usd5bn-takeover-bid-for-tech-data?utm_medium=email&utm_content=&utm_campaign=Channel%20Partner%20In

 The software-defined rebirth of the load balancer
Frank J. Ohlhorst 
Channel Partner Insight 
Software-defined technologies have quickly transformed traditional WAN optimization solutions and load balancers into solutions now referred to as application delivery controllers (ADCs).  
ZK Research revealed that software defined technologies, along with cloud native applications, are being deployed more frequently, with 50 percent of UK businesses and 29 percent of US businesses expecting to move over half of their applications into the cloud within the next 12 months.
It’s a transformation that ZK expects to have a profound impact on the ADC Market.  
According to ZK Research, F5 and Citrix are the most commonly used ADCs by today’s businesses, yet ZK opines that cloud native ADCs are beginning to show strength as applications transform into cloud-based entities.  
Forrester’s Application Experience (AX) for Asia Pacific Enterprises in Multi-cloud Environments report reveals that 84 percent of CIOs in APAC believe that a multi-cloud deployment will constitute up to half of their web and application hosting environment in the next three years.
Link: https://www.channelpartnerinsight.com/channel-partner-insight/analysis/3082956/the-death-of-the-load-balancer-is-the-adc-market-primed-for-a-revolution?utm_medium=email&utm_content=&utm_campaign=Chann

 Nutanix and the ‘messy middle’ of the subscription software model
Ohn Leonard 
Computing 
Moving to a new licensing model always carries a degree of risk.
For hyperconvergence vendor Nutanix, the change to a subscription software vendor was more radical than for the many software vendors that have taken that route, in that Nutanix went public three years ago as a hardware vendor.
It is, perhaps, the only enterprise vendor to go directly from hardware to subscription software, according to VP investor relations Tonya Chin.
The company moved to the software subscription model two years ago and finally stopped selling hardware appliances altogether in 2018.
Speaking at a media briefing during the .NEXT event in Copenhagen this month, Chin put the dip down to a number of factors.
First, revenues for a three-year subscription contract will be realised three years later with than an equivalent up-front deal, so in the short-term income will inevitably decline.
Chin forecasts that company will get through its ‘messy middle’, becoming a fully-fledged subscription software company within the next two years.
Link: https://www.computing.co.uk/ctg/news/3083008/nutanix-and-the-messy-middle-of-the-subscription-software-model?utm_source=Adestra&utm_medium=email&utm_content=&utm_campaign=CTG.Daily_RL.EU.A.U&im_edp=14

 French VAR looks to triple revenues to €1bn through M&A
Josh Budd 
Channel Partner Insight 
French VAR C’PRO is aiming to hit €1bn revenues by 2025 as part of an M&A strategy which will see it acquire 10 competitors every year.
Print provider C’PRO merged with IT services firm Quadria at the start of 2018 to create a €300m-revenue entity with 1,000 employees.
Through acquiring Quadria, C’PRO, which claims to be Canon’s and Toshiba’s number one print partner in Europe, has now moved beyond its print provider roots into new areas of IT, including reselling PCs and infrastructure, systems integration, managed services, cloud, security and telco services.
Link: https://www.channelpartnerinsight.com/channel-partner-insight/news/3082869/french-var-looks-to-triple-revenues-to-eur1bn-through-m-a?utm_medium=email&utm_content=&utm_campaign=Channel%20Partner%20Insi

 Global Software-Defined Perimeter (SDP) Market key Insights Based on Product Type, End-use and Regional Demand Till 2025
Market Watch 
Oct 21, 2019 (AmericaNewsHour) — The Global Software-Defined Perimeter (SDP) Market was valued at USD 998.26 million in 2016 and is projected to reach USD 15,077.28 million by 2025, growing at a CAGR of 35.21% from 2017 to 2025.
Competitive Landscape:The major players in the market are as follows: 
1. Cisco Systems, Inc. 
2. Catbird Networks, Inc. 
3. Intel Corporation 
4. Symantec Corporation 
5. Check Point Software Technologies Ltd. 
6. Certes Networks, Inc. 
7. EMC RSA 
8. Palo Alto Networks, Inc. 
9. Fortinet, Inc. 
10. Juniper Networks, Inc.
These major players have adopted various organic as well as inorganic growth strategies such as mergers & acquisitions, new product launches, expansions, agreements, joint ventures, partnerships, and others to strengthen their position in this market.
Link: https://www.marketwatch.com/press-release/global-software-defined-perimeter-sdp-market-key-insights-based-on-product-type-end-use-and-regional-demand-till-2025-2019-10-21

 Avast says hackers breached internal network through compromised VPN profile
Catalin Cimpanu 
ZD Net 
Czech cyber-security software maker Avast disclosed today a security breach that impacted its internal network.
In a statement published today, the company said it believed the attack’s purpose was to insert malware into the CCleaner software, similar to the infamous CCleaner 2017 incident.
Avast said the breach occurred because the attacker compromised an employee’s VPN credentials, gaining access to an account that was not protected using a multi-factor authentication solution.
Baloo said Avast intentionally left the compromised VPN profile active, with the purpose of tracking the attacker and observing their actions.
This lasted until October 15, when the company finished auditing previous CCleaner releases, and pushed out a new clean update.
Link: https://www.zdnet.com/article/avast-says-hackers-breached-internal-network-through-compromised-vpn-profile/

 Proofpoint Announces Third Quarter 2019 Financial Results
Nasdaq Globe Newswire 
EIN News 
Total revenue of $227.4 million, up 23% year-over-year
Billings of $277.8 million, up 26% year-over-year
GAAP EPS of $(0.79) per share, Non-GAAP EPS of $0.49 per share
Operating cash flow of $68.6 million and free cash flow of $58.6 million
Increasing FY19 revenue and profitability guidance
Link: https://software.einnews.com/pr_news/500248740/proofpoint-announces-third-quarter-2019-financial-results?n=2&code=oFvCCJC2r-jYysMo&utm_source=NewsletterNews&utm_medium=email&utm_campaign=Targeted+Thre

 Trustwave Unveils Government, Enterprise Security Testing Services
Dan Kobialka 
MSSP Alert 
Trustwave, a Top 200 MSSP for 2019, has launched Trustwave Security Testing Services to help government agencies and enterprises leverage security scanning and testing capabilities across their IT environments.
Trustwave Security Testing Services provide access to a catalog of scanning and testing services and security personnel that can be scaled as required, according to the company.
They are built on the Trustwave Fusion cloud-based cybersecurity platform and offer a variety of security scanning and testing capabilities, including:
• Network and application scanning scheduling and execution.
• Security tests led by Trustwave SpiderLabs.
• Risk analysis.
Link: https://www.msspalert.com/cybersecurity-companies/mssps/trustwave-testing-services/?utm_medium=email&utm_source=sendpress&utm_campaign

 Atos Acquires Identity Management
Dan Kobialka 
MSSP Alert 
Atos, a Top 200 MSSP for 2019, has finalized its acquisition of European digital identity infrastructure management provider IDnomic.
The news comes after Atos in July announced that it had entered into exclusive negotiations to acquire IDnomic.
More than 100 IDnomic digital identity specialists are joining Atos’s cybersecurity team as part of the acquisition, the companies said.
In addition, the IDnomic acquisition could help Atos extend its reach in the global identity and access management (IAM) and public key infrastructure (PKI) solutions markets.
Global IAM solutions market revenues are expected to increase at a compound annual growth rate (CAGR) of 13.1 percent between 2018 and 2025 and could be worth $24.1 billion by 2025, industry analyst Grand View Research stated.
Furthermore, the global PKI solutions market is projected to expand at a CAGR of 15.1 percent between 2019 and 2024 and could be worth $3.6 billion by 2024, industry analyst MarketsandMarkets indicated.
Link: https://www.msspalert.com/cybersecurity-companies/mssps/atos-buys-idnomic/?utm_medium=email&utm_source=sendpress&utm_campaign

 Accenture Acquires Happen for Digital Transformation Services
Ty Trumbull 
CHANNEL e2e 
Accenture is pushing forward with its rampant acquisition plan.
This time, the global systems integrator purchased London, England-based innovation firm Happen for an undisclosed sum.
The deal bolsters Accenture’s front-end innovation and analytics capabilities to help customers generate new ideas, products, and services, the company asserts.
Happen, founded in 2007, works with companies primarily in the consumer goods, food & beverage, retail, and life sciences industries.
The firm’s key skills include consumer insights and product and service innovation.
Link: https://www.channele2e.com/investors/mergers-acquisitions/accenture-buys-happen/?utm_medium=email&utm_source=sendpress&utm_campaign

 Trend Micro has acquired Cloud Conformity, a software platform that helps partners and customers to spot and mitigate cloud security misconfigurations across Amazon Web Services (AWS), Microsoft Azure and Google Cloud Platform (GCP).
Joe Panettieri 
MSSP Alert 
OpenText late on October 18 released a statement saying that it was not considering a potential acquisition of Micro Focus.
The statement surfaced after Bloomberg speculated a deal may be brewing.
Micro Focus shares rose nearly 7 percent today amid the takeover rumors on October 18.
The snuffed-out takeover rumors follow chatter in September 2019 that suggested private equity firms may want to acquire Micro Focus’s Arcsight and Fortify security software units, according to DealReporter sources.
At the time, interested parties apparently included Carlyle, Veritas and KKR.
All of Cloud Conformity’s employees  — including 50 developers and engineers — will join Trend Micro.
Cloud Conformity, founded in 2016, has 100-plus customers and offices in Sydney, Australia; Dallas, Texas; London, United Kingdom; Montreal, Canada and Singapore.
Financial terms of the deal and specific revenue figures for Cloud Conformity were not disclosed.
Link: https://www.msspalert.com/investments/trend-micro-acquires-cloud-conformity/?utm_medium=email&utm_source=sendpress&utm_campaign

 Radiflow and Asset Guardian Introduce Joint Solution to Enrich Industrial Asset Monitoring and Risk Assessment English T
Cision PR Newswire 
MAHWAH, New Jersey and LIVINGSTON, Scotland, Oct. 21, 2019 /PRNewswire/ — Radiflow, a leading provider of cybersecurity solutions for industrial automation networks, and Asset Guardian, a dedicated provider of leading edge protection for process control and industrial software, today jointly announced that the two companies have launched a joint solution to expand industrial asset monitoring, change management and risk assessment capabilities for industrial enterprises.
In this new integrated solution, iSID’s asset inventory now incorporates the asset information stored in the Asset Guardian database, including the detailed asset information that is not available from traffic monitoring.
With this new detailed asset information from Asset Guardian, such as logic version, ownership, geo-location and more, the result is a far more granular risk score calculated by iSID for each asset.
Changes to assets, such as new firmware or PLC logic, are detected on the network in real-time by iSID and sent to Asset Guardian for verification, authorization and validation against the ‘golden image’ of the binary stored in the Asset Guardian database.
Link: https://www.prnewswire.com/news-releases/radiflow-and-asset-guardian-introduce-joint-solution-to-enrich-industrial-asset-monitoring-and-risk-assessment-300941791.html

 Upstream Security raises $30 million to protect connected cars from cyberattacks
Paul Sawers 
Venture Beat 
Upstream Security, a cloud-based cybersecurity platform for connected cars, has raised $30 million in a series B round of funding led by Alliance Ventures, an automotive alliance constituting Renault, Mitsubishi, and Nissan.
Volvo Group, Hyundai, CRV, Glilot Capital, Maniv Mobility, and Nationwide also participated in the round.
The connected car market was pegged at $63 billion in 2017, a figure that could rise to more than $200 billion by 2025.  
ounded in 2017, Upstream Security is adopting a “multi-layer” approach to protecting connected cars and the underlying network infrastructure.
Its C4 platform integrates with automotive data streams of vehicles and promises to detect incidents as they happen in real time, allocating a rating based on perceived impact and severity.
Link: https://venturebeat.com/2019/10/21/upstream-security-raises-30-million-to-protect-connected-cars-from-cyber-attacks/

 Upstream Security raises $30 million to protect connected cars from cyberattacks
Paul Sawers 
Venture Beat 
Upstream Security, a cloud-based cybersecurity platform for connected cars, has raised $30 million in a series B round of funding led by Alliance Ventures, an automotive alliance constituting Renault, Mitsubishi, and Nissan.
Volvo Group, Hyundai, CRV, Glilot Capital, Maniv Mobility, and Nationwide also participated in the round.
The connected car market was pegged at $63 billion in 2017, a figure that could rise to more than $200 billion by 2025.  
ounded in 2017, Upstream Security is adopting a “multi-layer” approach to protecting connected cars and the underlying network infrastructure.
Its C4 platform integrates with automotive data streams of vehicles and promises to detect incidents as they

Read more

Incident Response Newsalert – 2019-08-18

Posted on August 21, 2019December 30, 2021 by admini

 Security warning for software developers: You are now prime targets for phishing attacks
Anny Palmer 
ZD Net 
Software developers are the people most targeted by hackers conducting cyberattacks against the technology industry, with the hackers taking advantage of the public profiles of individuals working in the high-turnover industry to help conduct their phishing campaigns.
The August 2019 Threat Intelligence Bulletin from cybersecurity company Glasswall details the industries most targeted by phishing, with the technology sector accounting for almost half of malicious phishing campaigns.
According to the Glasswall report, software developer is the role most targeted by hackers going after the technology sector.
A key reason for this is that devs do the groundwork on building software and will often have administrator privileges across various systems.
That’s something attackers can exploit to move laterally around networks and gain access to their end goal.
One way potential victims could make themselves less susceptible to attacks would be to display less information about themselves on their public-facing profiles – although given this is how many look for work, that might not be practical for everyone.
Link: https://www.zdnet.com/article/security-warning-for-software-developers-you-are-now-prime-targets-for-phishing-attacks/

 [Infographic] Nations and Hackers Unleash Destructive Malware!
Rich Tehrani 
Tehrani Blog 
A new report from IBM X-Force Incident Response and Intelligence Services (IRIS) shows that these attacks have been on the rise, posing a growing threat to a wide variety of businesses that may not consider themselves an obvious target.
Key findings include:
• Massive destruction, massive costs: Destructive attacks are costing multinational companies $239 million on average.
As a point of comparison, this is 61 times more costly than the average cost of a data breach ($3.92 million).
• The long road to recovery: The debilitating nature of these attacks requires a lot of resources and time to respond and remediate, with companies on average requiring 512 hours from their incident response team.
It’s also common for organizations to use multiple companies to handle the response and remediation, which would increase hours even further.
• RIP laptops: A single destructive attack destroys 12,000 machines per company on average — creating quite a tab for new devices in order to get companies’ workforce back in action.
Link: https://blog.tmcnet.com/blog/rich-tehrani/security/infographic-nations-and-hackers-unleash-destructive-malware.html

 Why Modernizing Security is Like Visiting a Fast-Food Restaurant
Jonathan Divincenzo 
Dev Ops.com 
Fast casual restaurants are taking over the food industry.
Today’s consumers want quality and speed, and the brick-and-mortar model offering immediate service paired with quality ingredients perfectly fits the bill.
It’s the new, modernized dining experience.
You can also argue that the same modernization taking the food industry by storm is happening in the security sector.
A modern infrastructure mix is made up of many parts (much like a layered chicken sandwich): cloud, containers, hardware, platforms—and sometimes serverless.
Flexibility and deployment options are essential to defending applications and APIs across multiple components and delivery stacks.
Typically, security teams end up in a balancing act of supporting new infrastructure plans while taking over existing legacy systems and applications.
The modern world is ever-evolving and the definition of “modern” changes as new technology is introduced.
Fast-food chains have evolved over the years and, in turn, moved the food industry forward with the introduction of fast, casual and reliable options.
The companies continue to evolve to meet the customers’ demands by introducing delivery services, unique rewards programs and leading mobile apps.
Link: https://devops.com/why-modernizing-security-is-like-visiting-a-fast-food-restaurant/

 The Mainframe Is Seeing a Resurgence. Is Security Keeping Pace?
Ray Overby 
Dark Reading 
The old-school technology is experiencing new popularity, but too many people assume mainframes are inherently secure.
Case in point: IBM’s Z series mainframe sales are up 70% year-over-year.
And a recent Compuware survey showed that mainframe workloads are increasing.
Currently, 57% of enterprises with a mainframe run more than half of their critical applications on the mainframe, but that number is expected to rise to 64% by next year, according to Compushare.
Overlooking mainframe security is an industrywide issue today.
Recent research shows that even though 85% of companies say that mainframe security is a top priority, 67% admit that they only sometimes or rarely factor security into mainframe environment decisions.
Ultimately, the mainframe renaissance will equip businesses with the processing power, reliability, and scalability they need to thrive.
But for true peace of mind, especially where sensitive customer data is involved, businesses need to be aware of the importance of mainframe security and, just as importantly, prepared to execute on it.
Link: https://www.darkreading.com/vulnerabilities—threats/the-mainframe-is-seeing-a-resurgence-is-security-keeping-pace/a/d-id/1335476

 The Ins and Outs of SOC for MSSPs and MSPs
Edward Gately 
Channel Partners 
To be successful as an MSSP or security-centric MSP, security operations center (SOC) is a must.
Channel Partners: What are some of the issues to consider when deciding whether to build your own SOC or outsource?

  • Cost – building a SOC could cost $1-3 million depending on the size and scope.  
  • Timing – some partners may find that it’s better to outsource the SOC to ensure your sales team is capable of selling the solution before you invest in building it yourself.  
  • Skills – finding qualified people to work as SOC analysts is very difficult, so make sure that you have a pipeline of these rare resources before you invest.
  • Scope – you need to decide early if you will staff for 24×7 or 9×5. Maybe you should partner for the after-hours work.

CP: What are some common mistakes to avoid when building your own SOC?
AR: Automation needs to be top of mind from the start.
A security information and event management (SIEM) solution alone with SOC analysis to sift through the data will not be effective unless you can automate some of the incident response to help you scale.
CP: What’s the best criteria for choosing a specialist to handle your SOC?
IT people think in a structured way with rules, policies and procedures – but hackers are very unstructured and creative.
To catch a hacker, you need to think like them, so hire a former programmer with problem-solving skills.
Link: https://www.channelpartnersonline.com/article/the-ins-and-outs-of-soc-for-mssps-and-msps/

 Demisto & Uptycs: Orchestrating Incident Response Activities
Security Boulevard 
Uptycs leverages the open-source osquery agent in order to acquire real-time data about nearly any facet of your infrastructure (more about osquery here).
This data is streamed, aggregated, and stored in the Uptycs backend and then made accessible via our API, allowing the integration of Uptycs data with other services.
The Uptycs-Demisto integration (available here in the Demisto Integration catalog) allows customers of both solutions the use of Uptycs data within their Demisto instance.
Link: https://securityboulevard.com/2019/08/demisto-uptycs-orchestrating-incident-response-activities/

 Secureworks Unveils 24/7 Threat Detection and Response Service
Dan Kobialka 
MSSP Alert 
Secureworks, a Top 100 MSSP, has added a 24/7 service to its Red Cloak Threat Detection and Response (TDR) offering.
Red Cloak TDR’s 24/7 service helps organizations scale their security expertise and combat cyber threats, according to Secureworks.
In doing so, the service enables organizations to accelerate threat detection, response and remediation.
The 24/7 service for Red Cloak TDR is now available.
Also, Secureworks is showcasing its updated version of Red Cloak TDR at this week’s Black Hat USA conference in Las Vegas, Nevada.
Red Cloak TDR is a managed detection and response (MDR) offering designed to help organizations identify cyber threats that typically go undetected by traditional security solutions, Secureworks noted.
It uses insights from incident response engagements to provide continuously updated threat intelligence and analytics that enables organizations to recognize malicious activity.
In addition, Red Cloak TDR analyzes data from IT environments and applies advanced analytics and threat intelligence, Secureworks said.
It then alerts end users if it identifies suspicious activity that requires attention.
Link: https://www.msspalert.com/cybersecurity-companies/mssps/secureworks-threat-detection/?utm_medium=email&utm_source=sendpress&utm_campaign

 IBM: Average Destructive Attacks Costs Over $200 Million
Dan Kobialka 
MSSP Alert 
Destructive malware, malicious software with the capability to render affected systems inoperable, represents a growing problem for global organizations, according to IBM X-Force Incident Response and Intelligence Services (IRIS).
Large multinational companies appear to incur costs around $239 million per destructive malware incident — 61 times greater than the cost of a typical data breach, IBM IRIS noted.
Furthermore, the average destructive malware attack affects 12,316 computer workstations and servers and requires 512 hours to remediate.
Link: https://www.msspalert.com/cybersecurity-research/ibm-destructive-malware-costs/?utm_medium=email&utm_source=sendpress&utm_campaign

 Cylance report looks into questionable pentesting practices
Security Brief – Asia 
BlackBerry has announced that new research from the BlackBerry Cylance Threat Intelligence Team has uncovered a trove of highly sensitive data. 
In Thin Red Line: Penetration Testing Practices Examined, the BlackBerry Cylance Threat Intelligence Team sheds light on a range of questionable pentesting practices, by-products and outcomes.
The report raises critical questions about the industry’s adherence to expectations of privacy and confidentiality, as well as compliance with legal and regulatory requirements, like Europe’s General Data Protection Regulation (GDPR). 
Included in the report is a case study of an advanced persistent threat (APT) like group which the research team found to be operating openly as a Brazilian security firm that is linked to the exposure of sensitive air traffic control data.
The research also explores the tradecraft of more than two dozen well-known companies offering pentesting services, from boutiques to blue chips, and finds the widespread exposure of client data in semi-public repositories.
Link: https://securitybrief.asia/story/cylance-report-looks-into-questionable-pentesting-practices

 Nmap 7.80 released: A mature Npcap Windows packet capturing driver, 11 new NSE scripts
Help Net Security 
It includes a mature Npcap raw packet capturing/sending driver, 11 new NSE scripts, a bunch of new libraries, bug fixes and performance improvements.
Nmap team has created the Npcap raw packet capturing/sending driver because the previously used Winpcap hasn’t been updated since 2013, doesn’t always work on Windows 10, and depends on long-deprecated Windows APIs.
Npcap uses modern APIs, is more performant, secure and featureful.
Nmap 7.80 updates the bundled Npcap from version 0.99-r2 to 0.9982, including all changes from the last 15 Npcap releases.
Link: https://www.helpnetsecurity.com/2019/08/12/nmap-7-80/

 NTT Security partners with Europol to bolster Threat Intelligence
Response Source 
NTT Security, the specialised security company of NTT Group, has signed a Memorandum of Understanding (MoU) with Europol’s European Cybercrime Centre (EC3).
This latest move forms part of its committment to sharing its strategic threat intelligence with industry partners and law enforcement agencies to prevent cybercrime globally.
The new MoU defines a framework for NTT Security and Europol to exchange strategic threat intelligence as well as information relating to cybersecurity trends and industry best practice.
Trust building through public-private sector partnerships is a priorty for NTT Security as it looks to enhance it’s relationship with EC3 which now includes NTT Security’s Global Threat Intelligence and Incident Center (GTIC)
Europol is one of many partners with whom NTT Security collaborates.
Others include the National Cyber Forensics and Training Alliance (NCFTA); Council of Registered Ethical Security Testers (CREST); Cyber Threat Alliance (CTA) Forum of Incident Response Teams (FIRST) and others.
Link: https://pressreleases.responsesource.com/news/98221/ntt-security-partners-with-europol-to-bolster-threat-intelligence/

 ConnectWise Identifies MSP Security Holes Through Risk Assessments
Maddie Bacon 
Channel Futures 
More than half of MSPs don’t do basic security awareness training, according to new data from ConnectWise.
57% of participating MSPs and SMBs don’t do security awareness training, 48% have not assessed or analyzed cybersecurity attack targets and tactics, and 48% don’t have a security incident response plan in place — all while more than 60% of SMBs experience cyberattacks or data breaches, according to the “2017 State of Cybersecurity in Small and Medium-Sized Businesses (SMB)” report from Ponemon Institute.
Link: https://www.channelfutures.com/security/connectwise-identifies-msp-security-holes-through-risk-assessments

 Stronger as One: IronNet Expands the Power of Collective Defense to Organizations of All Sizes
Iron Net 
New strategic initiative will improve cyber defense collaboration and security outcomes across organization and industry
IronNet Cybersecurity, the leading provider of collective defense and network behavioral analysis for companies and industries, today announces that IronDome, the industry’s first and only collective defense platform, is now available to companies of all sizes.
IronDome is a revolutionary way to defend against sophisticated and well-funded cyber adversaries by enabling organizations to join resources and envision impending potential threats to collectively defend against targeted attacks.
The platform applies advanced behavioral analytics, AI, and machine learning techniques to network traffic data and combines the tradecraft knowledge of the best offensive and defensive cyber operators in the world with world-class mathematicians and data scientists.
This IronDome expansion will be the first cross-sector sharing initiative at scale.
Additional initiatives will be launched to complement other public-private sharing entities and to provide a real-time anonymized view into domestic and international threats for cyber response.
Link: https://ironnet.com/new/stronger-as-one-ironnet-expands-the-power-of-collective-defense-to-organizations-of-all-sizes/

Copyright © *|CURRENT_YEAR|* *|LIST:COMPANY|*, All rights reserved.

Our mailing address is: dailynews@paulgdavis.com

If someone forwarded this email to you and you want to be added in,
please click this subscribe to this list

unsubscribe from this list   
update subscription preferences 

*|IF:REWARDS|* *|HTML:REWARDS|* *|END:IF|*



Read more

OEM IT Security News – 28-Jul-2019

Posted on July 31, 2019January 13, 2022 by admini

5 best practices to choose the right email security software

Karen Scarfone

Tech Target – Security

Examine the five best practices and most important criteria for evaluating email security software products and deploying them in your enterprise.
How advanced are basic security functions?
organization should look for more advanced antivirus, antispam and antiphishing technologies.
What other security features do email security gateways offer?
For many organizations, especially larger enterprises, these additional functions are irrelevant, because the organization already has enterprise DLP and email encryption capabilities.
But for organizations without these capabilities, adding DLP and email encryption options to an email security gateway — often for an additional fee — can be a cost-effective and streamlined way to add these capabilities to the enterprise.
How usable and customizable are the management features?
Although organizations may not want to spend significant time customizing their email security gateways, doing so can improve detection capabilities, as well as enhance the management process itself by customizing administrator dashboards, gateway reports and other aspects of the gateway.
What are the typical false positive and negative rates?
Since each email security gateway uses several detection techniques in parallel with each other, it's not generally helpful to report overall false positive and negative rates for the entire gateway.
Instead, vendors provide typical rates for each threat type — spam detection, malware detection and phishing detection, among others.
Are email messages or attachments processed or stored in an external system?
Transferring email to an external server for processing or storage may be an unacceptable risk for some organizations, particularly if gateways are analyzing internal email messages.
This could cause the email security gateway vendor to access sensitive data and inadvertently or intentionally expose it to breach.
Similarly, if the vendor's server is compromised, the sensitive data could be compromised as well.
Link: https://searchsecurity.techtarget.com/feature/Five-criteria-for-selecting-an-email-security-gateway-product

Proofpoint Drives People-centric Innovation with Two Industry-Firsts: Enhanced URL Isolation Based on User Risk Profiles and New Training Customization

Nasdaq Globe Newswire

EIN News

/EIN News/ — SUNNYVALE, Calif., July 22, 2019 (GLOBE NEWSWIRE) — Proofpoint, Inc., (NASDAQ: PFPT), a leading cybersecurity and compliance company, today announced two people-centric innovations that enhance how organizations protect their most attacked people from malicious URLs, while increasing the effectiveness of security awareness training content.
In an industry-first, Proofpoint’s newly announced adaptive security controls can dynamically isolate URL clicks in corporate email and cloud collaboration URLs based on the risk profile of the recipient, as well as the riskiness of the URL itself.
These security controls are integrated with Proofpoint’s award-winning Targeted Attack Protection (TAP) intelligence.
These people-centric innovations are featured in both Proofpoint Email Isolation, which isolates both links in corporate email and personal webmail, and Proofpoint Browser Isolation, which isolates risky browsing behavior on corporate devices for all websites.
Both products leverage Proofpoint Isolation technology, which fetches content and executes it within Proofpoint’s cloud, while allowing the user to view a safely mirrored image of the site, assuming zero trust of all content.
Each solution also enables isolated use of cloud collaboration tools such as Dropbox and Microsoft SharePoint to help dramatically lower an organization’s attack surface.
Both Proofpoint Browser Isolation and Email Isolation integrate critical Proofpoint Targeted Attack Protection intelligence to help security teams detect, mitigate, and block advanced threats that target users through email.
In addition to blocking attacks that leverage malicious attachments and URLs, TAP also detects threats and risks in cloud applications.
The Proofpoint Attack Index within TAP provides organizations with visibility into their most targeted users based on four factors: threat actor sophistication, spread and focus of attack targeting, type of attack, and overall attack volume.
Link: https://software.einnews.com/pr_news/491352371/proofpoint-drives-people-centric-innovation-with-two-industry-firsts-enhanced-url-isolation-based-on-user-risk-profiles-and-new-training?n=2&code=oFvCCJC

Frost & Sullivan Names Luminati the 2019 Global Market Leader in the Enterprise IP Proxy Networks Market

OA Online

Luminati, the Israeli company that allows businesses to experience the web through the eyes of individual consumers throughout the world, today announced it has received a Market Leadership Award in the first independent analysis of the sector.
Luminati’s enterprise IP proxy network (IPPN) services for global retailers, brand owners and advertising networks feature strongly in the report by analyst firm Frost & Sullivan.
The report outlines a relatively new, but rapidly growing market and recognizes Luminati’s leading position in the provision of solutions that are increasingly important for businesses to remain competitive and compliant in the digital landscape. [S1]

“ The market for enterprise IP proxy network solutions is in its early growth stages, basically being invented by Luminati only a few years ago.
With the more specialized targeting of customers by demographics and location, companies are finding it more difficult than ever to do competitive analysis and verify advertising, security, and website performance.
Companies not familiar with these website practices or Internet Protocol proxy network (IPPN) solutions are at risk of gathering incorrect data and left behind technology-wise,” noted Robert Cavin, Industry Analyst, Digital Media, Frost & Sullivan.
Frost & Sullivan’s report names Luminati the 2019 global market leader in the Enterprise IP Proxy Network market, and acknowledges how the company has revolutionized the technology through its residential peer-to-peer network.
What’s more, the analysis identifies Luminati’s technical leadership and strict adherence to compliance procedures as factors that will likely cement the company’s leadership position over the coming years.
The top five use cases for enterprise IPPN by revenue (2018) are:
▪ Price comparison
▪ Ad verification
▪ Fraud protection
▪ Data collection
▪ Brand protection
Link: https://www.oaoa.com/news/business/article_8cbd1f76-f158-503e-869d-c81573fa29f2.html

WatchGuard Speeds Zero Day Malware Breach Detection from Months to Minutes

Nasdaq Globe Newswire

EIN News

WatchGuard® Technologies, a global leader in network security and intelligence, secure Wi-Fi and multi-factor authentication, today announced a series of major updates to its threat correlation and response platform, ThreatSync, with latest release of Threat Detection and Response (TDR).
These enhancements include accelerated breach detection, network process correlation and AI-powered threat analysis, enabling managed service providers (MSPs) and the organizations they support to reduce breach detection and containment timeframes from months to minutes, automate the remediation of zero day malware and better defend against targeted, evasive threats both inside and outside the network perimeter.
According to the Ponemon Institute, the mean time to identification (MTTI) for a security breach is 197 days, while the mean time to containment (MTTC) is another 69 days after initial detection.
In Q1 2019 alone, zero day malware capable of escaping traditional antivirus (AV) solutions accounted for a massive 36% of threats, according to WatchGuard’s latest Internet Security Report.
With each passing day a security threat goes unnoticed, its potential to inflict both financial and reputational harm on an organization increases drastically.
Key ThreatSync features now available via TDR include: 
Host Containment and Automated Response
Accelerated Breach Detection
Network Process Correlation 
Artificial Intelligence Analysis
Link: https://software.einnews.com/pr_news/491429092/watchguard-speeds-zero-day-malware-breach-detection-from-months-to-minutes?n=2&code=1hzWYhpPFpH-t3yN&utm_source=NewsletterNews&utm_medium=email&utm_campa

Bitdefender upgrades to deal with malware, privacy and child safety

Sam Varghese

IT Wire

In a statement, the company said the Bitdefender 2020 series of products introduced browser anti-tracking for both Windows and macOS.
This would list all trackers behind any website visited and would allow an user to switch off the trackers and control the information that companies and third parties could compile obtain.
A second new feature, Microphone Monitor, reinforced Bitdefender’s existing Web cam protection, blocking unauthorised access to the user’s microphone.

Also due for launch is the first real-time protection for iOS, to block phishing scams.
No matter the browser, this feature will block transmission of any personal information such as credit card details or social security numbers.
Link: https://www.itwire.com/security/bitdefender-upgrades-to-deal-with-malware,-privacy-and-child-safety.html

SonicWall CEO on McAfee IPO rumours and Symantec's possible sale

Nima Green

CRN

Conner was speaking as rumours of a Broadcom's possible takeover of Symantec continue to swirl, while McAfee is reportedly eyeing up an IPO.

CrowdStrike, meanwhile, recently exceeded analyst expectations when its valuation soared after going public.
"I think security is hot," Conner said. "There's a lot of money at play.
And look at the data: the threat landscape is getting very, very real.
On McAfee, he added: "McAfee is the latest example of change in the market: they were private, they went public, they got bought up strategically, they went private, and now they're going to IPO.
"So, IPOs now are the whole way to monetise yourself if you've got a stable business.
"The question is whether it will consummate as a true IPO, or whether they'll get bought at the last minute by private equity.
That's a financial play that's playing out, because to maximise the value they get, a lot of PEs don't want to buy right now because security is becoming a premium in the market.
Since Dell divested SonicWall by selling up to PE firms Francisco Partners and Elliott Management in 2016, Conner says it has built its partner base from zero to 18,700.
He said that as the vendor is increasingly turning its eye to the public sector and enterprise customers, some of its partners are specialising to match that focus.
Link: https://www.channelweb.co.uk/crn-uk/news/3079499/sonicwall-ceo-on-mcafee-ipo-rumours-and-symantecs-possible-sale

Long-time LogRhythm CEO Grolnick out in favour of new blood

Marian Mchugh

CRN

LogRhythm has appointed Mark Logan as its new CEO, replacing  Andy Grolnick.
In its announcement of the news, the security information and event management (SIEM) vendor made no mention of Grolnick or why he was leaving the 16-year-old company he has headed since 2005.

Logan (pictured) comes to LogRhythm from his role as president of data management solutions at vendor Attunity.
He has also served as CEO of WealthEngine, a data-driven consumer analytics business; and Rivermine, a business analytics company.
His appointment seems to be effective immediately as he is billed as CEO on the company's website, though Grolnick's own LinkedIn account still has him listed as chief exec.
The recent shuffle has seen Sue Buck appointed senior vice president of engineering and Barry Capoot installed as chief financial officer.
Link: https://www.channelweb.co.uk/crn-uk/news/3079562/long-time-logrhythm-ceo-grolnick-out-in-favour-of-new-blood?utm_medium=email&utm_content=&utm_campaign=CRN.SP_01.Daily_RL.EU.A.U&utm_source=CRN.DCM.Edi

Check Point Introduces Record Breaking Security Gateways

Nasdaq Globe Newswire

EIN News

/EIN News/ — SAN CARLOS, Calif., July 24, 2019 (GLOBE NEWSWIRE) — Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a leading provider of cyber security solutions globally, today announced two new high-end appliances optimized for data center and Telco environments. 
Check Point announces three new security gateway appliance models: 16000 Base, 16000 Plus and the record breaking 26000 Turbo are extensions of Check Point’s new gateway appliance series 16000 and 26000 which were introduced in June, presenting a complete line of high-end appliances with up to 64 networking interface, 16 100 GbE (Giga-bit-Ethernet) or 40 GbE.
Powered by the Check Point Infinity architecture, the 16000 and 26000 Security Gateways incorporate Check Point’s ThreatCloud and award-winning SandBlast™ Zero-Day Protection.
These modular gateways come in base, plus and turbo models, delivering up to 30 Gbps of Gen V Threat Prevention security throughput.
Link: https://software.einnews.com/pr_news/491573805/check-point-introduces-record-breaking-security-gateways?n=2&code=oFvCCJC2r-jYysMo&utm_source=NewsletterNews&utm_medium=email&utm_campaign=Targeted+Threa

Mimecast Is Likely To Break Out On The Upside

Seeking Alpha

Summary
The company's platform is increasingly sophisticated and sticky, opening new revenue streams, so we expect growth to continue to be brisk.
The figures are plagued by currency headwinds but underlying growth is good and operational leverage is kicking in.
The company generates considerable cash flows and the shares are not exorbitantly valued.
Link: https://seekingalpha.com/article/4276921-mimecast-likely-break-upside

Kaspersky launches its 2020 range with traffic encryption and scanning speed improvements

Chris Wiles

Beta News

Kaspersky has officially launched its 2020 edition, but only in certain territories.
Localized builds such as the English GB or German edition will follow in August (but there’s nothing stopping you installing the worldwide edition available in 'US English').
What’s new in 2020.
Expect to find 'enhanced security' (which we’d expect to find by default, to be fair) which now includes protection against the latest threats, including EternalBlue.
RATs support is now included.
This is protection against remote access tools which are used by support companies but often used by fraudsters to obtain access to your computer.
With the 2020 edition, RATs are now blocked by default and you can only choose whether to grant access by switching off the RATs module.
This could become rather confusing for a novice user who requires genuine remote access support.
If you’re a Mac user, Kaspersky for Mac 2020 now includes a dark theme (but we’re confused why the Windows version doesn’t include a dark mode), while Safe Money will check external drives once they are connected to your Mac.
Lastly, Kaspersky states the entire 2020 range sees significant performance enhancements, where users can expect to see a speed increase of 15 percent across platforms.
Mac application scanning has improved by 50 percent.
Link: https://betanews.com/2019/07/26/kaspersky-2020/

Barracuda Increases Requirements and Benefits for Top-Tier Partners

Rich Freeman

Channel Pro Network

Barracuda Networks has revamped its partner program to deliver more benefits to top-tier partners while simultaneously raising the requirements to qualify for those rewards.
The changes, which have been rolled out to Barracuda’s channel in recent days, come in response to rapid cloud computing adoption among businesses of all sizes.
Securing cloud-based systems calls for capabilities that many traditional resellers lack at present, according to Ezra Hookano, Barracuda’s vice president of channels.
Under the new tiering scheme, partners will have to clear a higher sales revenue bar to qualify for top-level status.
They will also have to earn a competency in email security, public cloud security, or data and network application security.
Partners who meet those heightened prerequisites will receive extra benefits in return.
Most top-tier partners will see margins rise 10 to 30%, predicts Hookano, who expects roughly 200 Barracuda partners to retain top-level status in the program, versus approximately 1,200 before.
The new rules and requirements do not apply to managed service providers who partner with Barracuda through its Barracuda MSP division. “Our current MSP program is working fine,” Hookano says. “MSPs are already providing the correct service levels, so that program will not change.”
Link: https://www.channelpronetwork.com/news/barracuda-increases-requirements-and-benefits-top-tier-partners

NSS Labs test exposes weaknesses in NGFW products

Help Net Security

NSS Labs announced the results of its 2019 NGFW Group Test.
Twelve of the industry’s NGFW products were tested to compare NGFW product capabilities across multiple use cases.
Products were assessed for security effectiveness, total cost of ownership (TCO), and performance.
Test results showed that block rates for simple clear-text attacks remain strong (over 96%) for nine out of twelve products.
However, while known/published exploits were frequently blocked, test engineers were able to bypass protection in all devices with minor modifications to known and blocked exploits.
Key takeaways
• Enterprises expect when they purchase products that they will remain viable over multiple years.
• While it is tempting to draw conclusions from one test, NSS Labs recommends enterprises favor vendors that consistently engage and improve over time.
• Scripting evasions are challenging for NGFWs since they require real-time code analysis in order to determine whether a function is legitimate or obfuscating an attack.
• Vendor claims to protect vulnerabilities (regardless of the exploit specifics) are largely dependent on the nature of the vulnerability and whether it lends itself to such protection.
Test results found all products had room for improvement when confronted with unknown variants of known exploits.
• Research indicates that over 70% of Internet traffic is encrypted using TLS/SSL.
NSS Labs recommends measuring the performance of devices both with and without TLS/SSL enabled.
Failure to do so could result in unexpected performance bottlenecks.
Link: https://www.helpnetsecurity.com/2019/07/19/nss-labs-2019-ngfw-group-test/

CyberArk enhances its portfolio of SaaS offerings for privileged access security

Help Net Security

CyberArk announced groundbreaking new services and enhancements to the industry’s most complete portfolio of Software-as-a-Service (SaaS) offerings for privileged access security.
CyberArk Alero is a dynamic solution for mitigating risks associated with remote vendors accessing critical systems through CyberArk.
CyberArk Alero also improves operational efficiencies and productivity by making it simple and easy for organizations to provision and manage remote vendor access.
This new SaaS-based offering provides Zero Trust access for remote vendors connecting to the CyberArk Privileged Access Security Solution for complete visibility and control of privileged activities.
Just-in-time elevation and access with CyberArk Endpoint Privilege Manager – CyberArk Endpoint Privilege Manager is an industry leading SaaS-based solution that reduces the risk of unmanaged administrative access on Windows and Mac endpoints.
With Endpoint Privilege Manager’s new just-in-time capabilities, organizations can mitigate risk and reduce operational friction by allowing admin-level access to Windows and Mac endpoints on-demand for a specific period of time with a full audit log and the ability to revoke access as necessary.
Link: https://www.helpnetsecurity.com/2019/07/19/cyberark-saas-portfolio/

Cisco in talks to acquire security startup Signal Sciences

Gina Narcisi

CRN

Five-year-old Signal Sciences is a web application security company that develops software to protect applications running in private data centres and in the cloud.
The startup has raised a total of US$61.7 million in funding over four rounds, according to Crunchbase.
In February, the company raised US$35 million in funding led by growth equity firm Lead Edge Capital with participation from previous investors including CRV, Index Ventures, Harrison Metal, and OATV.
Link: https://www.crn.com.au/news/cisco-in-talks-to-acquire-security-startup-signal-sciences-528525

Avnet appoints Max Chan as CIO

Help Net Security

Avnet, a leading global technology solutions provider, announced the promotion of Max Chan to Chief Information Officer (CIO), reporting to MaryAnn Miller, Chief Administrative Officer.
Chan has been serving as the head of global information solutions (GIS) within Avnet since November 2018.
Link: https://www.helpnetsecurity.com/2019/07/22/avnet-cio/

ESET unveils new version of File Security for Linux

Help Net Security

ESET File Security for Linux is powered by the latest ESET LiveGrid technology and eliminates all types of threats, including viruses, rootkits, worms and spyware.
Version 7.0 offers a host of advanced features, including real-time file system protection, tighter security and a real-time web graphical user interface (GUI).
Additionally, ESET File Security is fully compatible with the ESET Security Management Center and allows you to manage the software through a web interface, giving you the option to schedule on-demand scans, actions and security tasks.
Link: https://www.helpnetsecurity.com/2019/07/23/eset-file-security/

ThetaRay 4.0 With IntuitiveAI Gives Banks a Powerful New Weapon Against Financial Cybercrime

Cision PR Newswire

Yahoo – Finance

NEW YORK, July 23, 2019 /PRNewswire/ — ThetaRay, a leading provider of AI-based Big Data analytics, today announced Version 4.0 of the company's namesake advanced analytics platform.
The update includes major capability upgrades to help global banks detect and prevent financial cybercrime.
ThetaRay's IntuitiveAI solutions replicate the powerful decision-making capabilities of human intuition to detect "unknown unknowns" that cannot be identified by first-generation AI or legacy products.
Version 4.0 provides a new hybrid learning approach.
The hybrid supervised/unsupervised learning capability integrates the two learning styles and applies the most effective one based on use case.
This approach finds significantly more potential threats through a single process and delivers a holistic view of a bank's threat landscape.
The new release also provides an additional method for anomaly clustering, which is a critical enabler to accurately detect more true positives while dramatically decreasing the number of false positive alerts.
In version 4.0, customers can now cluster identified anomalies by pattern, in addition to a density-clustering approach.
This clustering method ensures that AML and fraud teams have the right approach to analyze anomalous events with the method most applicable to a particular use case.
The addition of pattern-based clustering also enhances the built-in transparency and explainability of ThetaRay's "white box" AI applications.
Link: https://finance.yahoo.com/news/thetaray-4-0-intuitiveai-gives-000000610.html

Global Cyber Security Market Analysis 2019-2026: Market is Expected to Reach $345.42 Billion

Nasdaq Globe Newswire

Dublin, July 24, 2019 (GLOBE NEWSWIRE) — The "Global Cyber Security Market Analysis 2019" report has been added to ResearchAndMarkets.com's offering.
The Global Cyber Security market is expected to reach $345.42 billion by 2026 growing at a CAGR of 12.3% during 2018 to 2026
Factors such as rise in malware and phishing threats, and growth in adoption of IoT and BYOD trend among organizations, are driving the cyber security industry growth.
However, the Limited security budget among SMEs is restraining the market.
Link: https://www.globenewswire.com/news-release/2019/07/24/1887360/0/en/Global-Cyber-Security-Market-Analysis-2019-2026-Market-is-Expected-to-Reach-345-42-Billion.html

Bitdefender Browser Isolation defeats attacks by monitoring memory for attack techniques

Help Net Security

The security employed by Bitdefender Browser Isolation leverages unique capabilities of Citrix Hypervisor.
Only Bitdefender takes advantage of this security approach, known as Bitdefender Hypervisor Introspection, to monitor the raw memory of running Citrix Virtual Apps servers, including web browsers hosted on the servers.
The security requires no footprint in protected Virtual Apps servers to identify attack techniques used to exploit both known and unknown vulnerabilities in web browsers and their associated plugins.
Link: https://www.helpnetsecurity.com/2019/07/24/bitdefender-browser-isolation/

Greenbone Security Feed detects and protects against more than 70,000 vulnerabilities

Help

Read more

IR Security News – 28-Jul-2019

Posted on July 31, 2019December 30, 2021 by admini

Average cost of a data breach rises to $3.92 million: IBM study

Nandita Mathur

Live Mint

The cost of a data breach has risen 12% over the past five years and now costs $3.92 million on an average, said study by IBM Security on Tuesday.
Assessing the financial impact of data breaches on organisations, the report claimed that the rising expenses were representative of multi-year financial impact of breaches, increased regulation, and the complex process of resolving criminal attacks.
The report also found that companies with less than 500 employees suffered losses of more than $2.5 million on average – a potentially crippling amount for small businesses, which typically earn $50 million or less in annual revenue.
While an average of 67% of data breach costs were realized within the first year after a breach, 22% accrued in the second year and another 11% accumulated more than two years after a breach.
The long tail costs were higher in the second and third years for organisations in highly-regulated environments, such as healthcare, financial services, energy and pharmaceuticals.
The study also found that data breaches which originated from a malicious cyber attack were not only the most common cause of a breach, but also the most expensive.
Malicious data breaches cost companies, examined in the study, $4.45 million on average – over $1 million more than those originating from accidental causes such as system glitch and human error.
These breaches are a growing threat, as the percentage of malicious or criminal attacks as the root cause of data breaches in the report crept up from 42% to 51% over the past six years of the study (a 21% increase).
One particular area of concern is the mis-configuration of cloud servers, which contributed to the exposure of 990 million records in 2018, representing 43% of all lost records for the year, according to the IBM X-Force Threat Intelligence Index.
The report found that the average life cycle of a breach was 279 days with companies taking 206 days to first identify a breach after it occurs and an additional 73 days to contain the breach.
However, companies in the study who were able to detect and contain a breach in less than 200 days spent $1.2 million less on the total cost of a breach.
A focus on incident response can help reduce the time it takes companies to respond, and the study found that these measures also had a direct correlation with overall costs.
Companies that had both these measures in place had $1.23 million less total costs for a data breach on average than those that had neither measure in place ($3.51 million vs. $4.74 million).
Link: https://www.livemint.com/technology/tech-news/average-cost-of-a-data-breach-rises-to-3-92-million-ibm-study-1563872957873.html

Immunity's penetration testing utility now includes an exploit for BlueKeep flaw

Dev Kundaliya

Computing

The exploit for the BlueKeep flaw is now included in CANVAS v7.23, enabling users to achieve remote code execution on unprotected PCs during penetration tests – in other words, able to open a shell on infected hosts.

The BlueKeep flaw, aka CVE-2019-0708, was first uncovered by security researchers in May, with Microsoft rushing out a patch to cover it.
According to Microsoft, it is a "wormable" vulnerability that can self-propagate from one vulnerable system to another without requiring user interaction – similar to the way that WannaCry and NotPetya were spread.
Link: https://www.computing.co.uk/ctg/news/3079585/bluekeep-exploit-released?utm_source=Adestra&utm_medium=email&utm_content=&utm_campaign=CTG.Daily_RL.EU.A.U&im_edp=146339-8a9e173aa3aaf898%26campaignname%3

MSP State of the Market report: MSPs give blunt feedback on what they really value from their vendor partners

Josh Budd

Channel Partner Insight

US and European providers anonymously share their experiences with vendors in CPI's MSP State of the Market report

Some MSP repsondents slammed their vendor partners for taking a short-term approach to the managed services market.
Our research finds that more than two thirds of MSPs are still running an "operationally immature" model where they are not selling a standardised and fully managed package.
Link: https://www.channelpartnerinsight.com/channel-partner-insight/feature/3079483/msp-state-of-the-market-report-msps-give-blunt-feedback-on-what-they-really-value-from-their-vendor-partners?utm_medium=em

Penetration Test Data Shows Risk to Domain Admin Credentials

Jai Vijayan

Dark Reading

A new analysis of data from 180 real-world penetration tests in enterprise organizations suggests that cybercriminals who manage to get a foothold on an internal network have an opportunity to then gain domain administrator access in more than three in four cases.
But attacks on Internet-facing assets actually result in some kind of internal access only about 20% of the time because of the security controls that many organizations have implemented at the network perimeter.
Attacks on Web applications are likely to result in site-wide compromise even more rarely (3%) of the time, the study by security vendor Rapid7 showed.
Most of the flaws on the internal LAN tend to be Microsoft-centered and have an impact on data integrity.
The biggest problems here have to do with SMB relaying: a failure to apply critical patches and credentials being stored in cleartext.
In 11% of the client sites, Rapid7 found organizations had not deployed patches even for very old vulnerabilities and for extremely critical flaws like EternalBlue, which was exploited in the WannaCry ransomware attacks of 2017.
Unlike prior years, penetration testers were able to use SMB relaying as a viable attack only about 15% of the time, suggesting organizations are much more aware of the need for SMB signing and are getting rid of SMB clients that don't support signing, Beardsley says.
Link: https://www.darkreading.com/vulnerabilities—threats/penetration-test-data-shows-risk-to-domain-admin-credentials/d/d-id/1335324

Fujitsu opens SOC in Canberra

Eleanor Dickinson

ARN, from IDG

Named the Cyber Resilience Centre (CRC), the facility will provide a centralised management hub for Fujitsu’s new security-as-a-service (SECaaS) offerings.

Aimed primarily at Federal and State Government customers, the facility will oversee managed and professional security services across the Oceania region using an unnamed Australian Signals Directorate-certified Protected Cloud as a host.
Operating on a consumption cost mode, the centre will provide services including: threat analytics, vulnerability management, threat intelligence and threat response.
Link: https://www.arnnet.com.au/article/664253/fujitsu-launches-protected-level-security-services-hub-in-canberra/?fp=2&fpid=1

How DNS firewalls can burn security teams

Andrew Wertkin

Help Net Security

It’s easy to see how DNS firewalls could have thwarted 33% of data breaches.
For most IT and security teams, DNS has been an afterthought.
Or, worse, not even that.
The research, conducted by the Global Cyber Alliance, was absolutely still worth doing.
On the surface, this research is good news.
It suggests there is a low-hanging fruit in the cybersecurity space.
But it also suggests that a DNS firewall is the logical next step to improved security.
It’s not — at least not on its own.
Turning DNS data gathering inwards, towards the edge, will allow you to examine the contextual data you need to shut down malicious activity long before it attempts to smuggle data out of the network.
Compromised devices can, and often do, act locally to perform reconnaissance or hoover up data before communicating out.
These internal queries, to private DNS, are not seen at all by most external facing DNS firewalls.
Further, by having device attribution of this data, I can spot patterns that are difficult or impossible to find among a firehose of data that doesn’t have originating device attribution.
Link: https://www.helpnetsecurity.com/2019/07/22/dns-firewalls/

Verint Systems selected as official supplier of Web Intelligence solutions to the UK police forces

Help Net Security

Verint Systems, a global provider of data mining software for Cyber Intelligence, announced it has been selected by The UK Police ICT Company as an official supplier of Web Intelligence solutions to the UK police forces, under Project IRIS.
Project IRIS represents all police forces in England and Wales as well as associated forces and agencies across the UK, including Police Scotland and the Police Service of Northern Ireland.
The total value of the IRIS procurement framework is £50 million over several years.
Link: https://www.helpnetsecurity.com/2019/07/22/verint-systems-uk-police/

Optiv Security opens the Dallas Innovation and Fusion Center

Help Net Security

Optiv Security, a security solutions integrator delivering end-to-end cybersecurity solutions across the globe, announced the opening of its new Dallas Innovation and Fusion Center, a state-of-the-art, more than 14,000-square-foot facility located in the HALL Park complex in Frisco, Texas.
The Center brings together a diverse team of cybersecurity experts – cyber digital and risk professionals, threat and innovation experts and others – working together with clients and industry partners to develop integrated, tailored and proactive cybersecurity solutions that address the speed of business change.
Link: https://www.helpnetsecurity.com/2019/07/22/optiv-security-dallas-innovation-and-fusion-center/

Analytics new battleground for MSSPs in Asia

Kenny Yeo

Channel Asia

This lack of talent and the constant push to meet regulatory compliance is driving the adoption of managed security services (MSS) solutions.
Traditional security monitoring is no longer sufficient because of limited log collection and rule-based analysis.
This shift in enterprise focus from device management to threat management is expected to drive the MSS market from US$1.97 billion in 2017 towards US$4.34 billion in 2022, at a compound annual growth rate (CAGR) of 17.1 per cent.
Furthermore, MSSPs are investing in technologies such as anti-distributed denial of service (DDoS), advanced malware analysis and advanced endpoint protection to deliver cloud-based security services.
Link: https://sg.channelasia.tech/article/664306/

THREAT INTELLIGENCE MARKET PROJECTED TO REACH US$ 12.9 BILLION BY 2023

Ramona Zimmerman

Rent Fin

The Global Research report titled Threat Intelligence Market delivering key insights and providing a competitive advantage to clients through a detailed report.
The report contains 200 pages which highly exhibit on current market analysis scenario, upcoming as well as future opportunities, revenue growth, pricing and profitability.
An exclusive data offered in this report is collected by research and industry experts team.
The Threat Intelligence Market size is estimated to grow from US$ 5.3 Billion in 2018 to US$ 12.9 Billion by 2023, at a Compound Annual Growth Rate (CAGR) of 19.7%.
The report spread across 200 Pages, Profiling 25 Companies and Supported with 90 Tables and 41 Figures is now available in this research.
The SMEs segment is expected to grow at the highest CAGR, owing to the rising deployment of threat intelligence solutions by SMEs to proactively protect their digital assets.
SMEs are small in terms of their size but cater to a large number of customers globally.
Robust and comprehensive security solutions are not implemented in SMEs, due to financial constraints in these organizations.
Weak cyber security and low budget make the organizations more susceptible to advanced cyber-attacks such as ransomware, botnets, zero-day attacks, and Advanced Persistent Threats (APTs).
APAC includes emerging economies such as India, China, Australia, Hong Kong, and Japan, which are rapidly deploying threat intelligence solutions.
APAC is expected to grow at the highest CAGR during the forecast period.
The APAC threat intelligence market is gaining traction as it provides proactive security measures against the evolving cyber-attacks.
Link: http://rentfint.com/2019/07/23/threat-intelligence-market-projected-to-reach-us-12-9-billion-by-2023/

Endace and Micro Focus Partnership Delivers New Security Insights for Threat Hunting and Investigation

Realwire

Virtual Strategy

London, UK – July 24, 2019 – Endace, specialists in high speed network recording and analytics hosting, today announced a new partnership with Micro Focus®.
Alongside the partnership announcement, Endace and Micro Focus also announced new integration between ArcSight Enterprise Security Manager and the EndaceProbe™ Analytics Platform to deliver faster, more accurate response to cybersecurity threats.
This integration dramatically reduces the time required for security analysts to respond to cybersecurity threats, at scale.
Link: http://virtual-strategy.com/2019/07/24/endace-and-micro-focus-partnership-delivers-new-security-insights-for-threat-hunting-and-investigation/

‘SOC’ It to ‘Em: How to Overcome Security Operations Center Challenges

Ericka Chickowski

Channel Futures

According to a new study from SANS Institute, today’s SOCs are treading water when it comes to making progress on maturing their practices and improving their technical capabilities.
Experts say that may not be such a bad thing considering how quickly the threats and the tech stacks they monitor are expanding and changing.

Staffing levels.
According to SANS, the size scales by organizational size, with organizations with between 10,000 and 15,000 employees generally running a SOC with six to 10 employees; organizations from 15,001 employees up to 100,000 putting together SOC teams of approximately 11-25 analysts; and very large enterprises with over 100,000 employees standing up SOCs with 26-100 analysts.
SOC budgets.
When asked about where they’d like to see more investments, 39% said they’d want to make additional investments in new/modern technology, 35% said they’d like to secure additional funding for staffing needs, and 34% would invest in automation to save time.
Outsourcing.
Some 43% of organizations report that they outsource certain functions of their work.
The three most popular functions for outsourcing – both in prevalence and growth over the last year – were malware analysis expertise, threat analysis and threat intel services.
This is in line with SANS outsourcing findings, which broke up categories differently but found that monitoring and detection capabilities were outsourced to some degree by 76% of respondents.
Top tech used.
ccording to the SANS study, security information and event management (SIEM) platforms are far and away the front-running technology for security analysts to correlate and analyze all of the data feeds they must deal with on a daily basis.
That’s followed by threat intel platforms, log management systems, and security automation and orchestration tools (SOAR).
SOC pain points.
Time wasted spinning wheels was one of the biggest pain points identified by those surveyed in the Exabeam study.
Other common complaints were out-of-date systems or applications, false positives, and lack of visibility.
SOC-NOC relationships.
Getting SOC analysts to team with network operations center (NOC) analysts is still a tall task for most organizations.
Proving SOC value with metrics.
SANS analysts say that if SOC managers are going to get more budget to make the investments they need to move the needle on SOC maturity, they’ve got to get better at the metrics game.
The No. 1-used metric to track and report the SOC’s performance is the number of incidents handled.
Meantime, only a very slim number of SOCs track monetary cost per incident or losses accrued versus losses prevented.
Link: https://www.channelfutures.com/mssp-insider/soc-it-to-em-how-to-overcome-security-operations-center-challenges

D3 Security Creates First Proactive Response Platform by Bringing Together SOAR and the MITRE ATT&CK Framework

Business Wire

VANCOUVER, British Columbia–(BUSINESS WIRE)–D3 Security, an innovator in security orchestration, automation and response (SOAR) technology, has released ATTACKBOT, a unique solution that utilizes the MITRE ATT&CK framework to identify and address the entire kill chain of complex attacks.
ATTACKBOT is a significant enhancement to existing SOAR capabilities that allows organizations to predict attacker behavior and focus remediation efforts effectively for more conclusive incident response.
ATTACKBOT streamlines the identification of incidents by allowing security teams to monitor attack progress in real time, correlate incidents with known adversary behaviors, and take appropriate action with the assistance of decision-tree-based playbooks.
ATTACKBOT delivers proactive intervention against ongoing attacks by treating every event as a link in a large chain of adversarial intent instead of solely isolated incidents.
By enabling visualizations of what the attack is and how far it has progressed, organizations are able to proactively intervene before the kill chain is complete.
Link: https://www.businesswire.com/news/home/20190724005141/en/D3-Security-Creates-Proactive-Response-Platform-Bringing

Read more

Security Industry News – 27-Dec-2018

Posted on December 28, 2018December 30, 2021 by admini


NetSecOPEN announces cybersecurity founding members and appoints board of directors

Help Net Security

NetSecOPEN revealed that 11 security vendors, test solutions and services vendors, and testing laboratories have joined the organization as founding members.
The organization also appointed its board of directors, who will guide NetSecOPEN toward its goal: making open network security testing standards a reality.
The NetSecOPEN standard is designed to provide metrics that can be used to compare solutions and to understand the impact on network performance of different solutions under the same conditions.
The goal is to examine the performance ramifications of a solution with all of that solution’s security features enabled, conveying the true costs of the solution.
The 11 founding member organizations are: Check Point Software Technologies, Cisco, Fortinet, Palo Alto Networks, SonicWall, Sophos, and WatchGuard; test solution and services vendors Spirent and Ixia/Keysight; and testing labs European Advanced Networking Test Center (EANTC) and the University of New Hampshire InterOperability Lab (UNH-IOL).
Link: https://www.helpnetsecurity.com/2018/12/12/netsecopen-standard/

Password-less security arrives on macOS with HYPR

Help Net Security

HYPR released its Employee Access solution for macOS.
The addition of macOS marks a milestone in expanding enterprise-wide coverage of HYPR’s Decentralized Authentication Platform, enabling businesses to secure password-less access to corporate resources, eliminate credential reuse and stop phishing attacks while improving workforce productivity on a global scale.
With existing support for Windows 7, 8 and 10, the launch of MacOS rounds off the HYPR Employee Access offering and accelerates HYPR’s continued transformation of enterprise security.
Link: https://www.helpnetsecurity.com/2018/12/12/hypr-employee-access-solution/

Palo Alto Networks expands partnership with Google Cloud

Eleanor Dickinson

Networks Asia

Google and Palo Alto Networks have expanded their cyber security partnership in order to scale the latter’s cloud services.
As part of the new deal, Palo Alto Networks will use the Google Cloud Platform (GCP) to run to run some cloud-delivered services.
In addition, the company will expand its Global Protect cloud service to run on GCP, which is targeted at mobile and branch office end-users.
This follows Palo Alto Networks’ recent acquisition of RedLock in a deal valued at US$173 million.
Link: https://www.networksasia.net/article/palo-alto-networks-expands-partnership-google-cloud.1544584245

Avant Signs Alert Logic for Threat Management Services

James Anderson

Channel Partners

Avant announced Tuesday that its subagents can now sell Alert Logic’s products and services, which include a security platform, threat intelligence and security-operations-center experts.
Link: https://www.channelpartnersonline.com/2018/12/11/avant-signs-alert-logic-for-threat-management-services/

Channelnomics Recognizes FireEye for Innovation in Machine Learning

Business Wire

MILPITAS, Calif.–(BUSINESS WIRE)–FireEye, Inc. (NASDAQ: FEYE), the intelligence-led security company, has been named a Channelnomics Innovation Award winner for FireEye® Endpoint Security with MalwareGuard™.
Link: https://www.businesswire.com/news/home/20181212005067/en/Channelnomics-Recognizes-FireEye-Innovation-Machine-Learning

Top Seven IT Security Trends For 2019

Facility Executive

A team of security analysts from Netwrix reveal the top IT security trends that will influence businesses in 2019.
Compliance will get broader and stricter.
Security will become more data-centric.
Cloud adoption will accelerate.
AI and advanced analytics will be more sought after.
Blockchain will be used for IT security.
IoT devices will continue to be at risk.
Personal data breaches will have more ramifications.
Link: https://facilityexecutive.com/2018/12/top-seven-it-security-trends-2019/

RSA Conference Puts Politics, Data Protection In The Spotlight

Silicon [UK]

Politics and data security, two of the hot-button issues of this year, are set to feature in the keynote lineup of RSA Conference 2019 next March.
Speakers from a variety of high-powered tech and security companies are set to appear, but also figures such as Megan Smith, who served as the US’ chief technology officer from 2014 to 2017, and Donna Brazile, a veteran political strategist and former presidential advisor.
Meanwhile, the head of global privacy for LinkedIn, Kalinda Raina, and Uber chief privacy officer Ruby Zefo, are set to headline a panel discussion on the ways the tech industry is adapting to new privacy imperatives brought in by stricter data protection laws.
The conference is also set to include a panel on cryptography and another featuring experts from the SANS Institute.
Link: https://www.silicon.co.uk/workspace/rsa-conference-puts-politics-data-protection-in-the-spotlight-239667?inf_by=5a1213f9671db8f27c8b4a0f

Global Endpoint Security Market Report 2018 Covers Trends, Challenges, Vendors, Growth and Technology Leadership Forecast by 2023

Security Market Research

Industry Professionals forecast Endpoint Security market is predicted to grow at 9.88% CAGR during the period 2018-2023.
Key Developments in the Endpoint Security Market:
October 2017 – McAfee announced the integration of advanced analytics to increase the efficiency of security operation center and protect endpoints and cloud.
December 2017 – VMware partnered with Carbon Black, to offer a new joint data center security solution that combines VMware AppDefense and CB Defense, to offer a unique solution for stopping threats concentrated on applications inside a data center.
Key Manufacturers: Cardon Black Technology Inc., Cisco Systems,Cylance Inc.,McAfee Inc.,CrowdStrike Inc.,Trend Micro Inc.,Symantec Corporation,Palo Alto Networks Inc. ,RSA Security LLC,FireEye Inc. ,SentinelOne Inc. ,Sophos Group Plc ,IBM Corporation ,Kaspersky Lab Inc. ,Panda Security S.L,Eset LLC,Fortinet Inc. ,Bitdefender LLC,Avast Software Inc., And many more…
Link: https://securitymarketresearch.com/39632/global-endpoint-security-market-report-2018-covers-trends-challenges-vendors-growth-and-technology-leadership-forecast-by-2023/

Global Threat of Cyber Attacks Is Spurring the Fraud Detection and Prevention Market Growth

Financialbuzz.Com

Cision PR Newswire

According to data compiled by Marketsand Markets research, the global fraud detection and prevention (FDP) market is projected to grow from USD 19.5 Billion in 2018 to USD 63.5 Billion 2023.
Additionally, the market is projected to register a CAGR of 26.6%.
The FDP market will be accelerated by the growth of electronic transactions and companies' increasingly losing revenue due to cyber-attacks.
Glance Technologies Inc. (OTC: GLNNF), Cisco Systems, Inc. (NASDAQ: CSCO), Oracle Corporation (NYSE: ORCL), Proofpoint, Inc. (NASDAQ: PFPT), Juniper Networks, Inc. (NYSE: JNPR)
The retail segment is expected to witness the highest CAGR during the forecast period due to the large amount of fraudulent incidents.
Link: https://www.prnewswire.com/news-releases/global-threat-of-cyber-attacks-is-spurring-the-fraud-detection-and-prevention-market-growth-815814026.html

IntSights Cyber Intelligence Appoints CyberArk's Ron Zoran to Its Board of Directors

Cision PR Newswire

IntSights Cyber Intelligence, the leading provider of surface, deep and dark web cyber threat intelligence and digital risk protection solutions, announced today the addition of Ron Zoran, chief revenue officer of CyberArk to the company's Board.
Link: https://www.prnewswire.com/news-releases/intsights-cyber-intelligence-appoints-cyberark-s-ron-zoran-to-its-board-of-directors-817164461.html

3 Security Business Benefits From a 2018 Gartner Magic Quadrant SIEM Leader

John Burnham

Security Intelligence, IBM

Last week Gartner published its 2018 Magic Quadrant for Security Information and Event Management (SIEM).
As in past years, the report supports the steady evolution of SIEM technology and the growing demand from customers for simple SIEM functionality with an architecture built to scale that meets both current and future use cases.
What Separates a SIEM Leader From the Rest of the Market?
The first element, early detection via analytics — more clearly stated as efficacy in threat detection and response — remains the centerpiece of any effective SIEM solution.
The second element of Gartner’s definition of a leader, rapid adaptation to customer environments, is becoming a core factor in how much return on investment (ROI) customers realize and how quickly they realize it.
Ad hoc content, add-on applications and flexibility in upgrading the platform are all required to mature a SIEM system in an affordable way once it’s installed.
Also included in this element is the ability to scale the platform in terms of both network coverage and security capabilities.
The third element of a leading SIEM is strong market presence and easy access to services.
Link: https://securityintelligence.com/3-security-business-benefits-from-a-2018-gartner-magic-quadrant-siem-leader/

Webroot Strengthens Leadership in Security and Data Protection with ISO 27001 Certification

PR Newswire

Sys.Con Media

BROOMFIELD, Colo., Dec. 13, 2018 /PRNewswire/ — Webroot, the Smarter Cybersecurity® company, announced it received ISO 27001 certification, one of the highest internationally recognized standards for information security management systems.
This achievement highlights Webroot's ongoing commitment to providing the highest standard in security protection.
Link: http://www.sys-con.com/node/4357981

Pulse Secure and BNT Pro sign Technical Alliance Partnership to deliver identity control

Help Net Security

Pulse Secure revealed a Technical Alliance Partnership with BNT Pro to jointly sell and support a solution that offers SecTrail, an Identity Control and Management Platform developed by BNT Pro, as part of an integrated solution with Pulse Secure Connect Secure VPN appliances.
The agreement will ensure that joint customers benefit from compatibility, enhanced features and simplified support and upgrades.
Link: https://www.helpnetsecurity.com/2018/12/14/pulse-secure-bnt-pro-technical-alliance-partnership/

Our 2018 Update for “Endpoint Detection and Response Architecture and Operations Practices” Publishes

Anton Chuvakin

Security Boulevard

Our main EDR document (“Endpoint Detection and Response Architecture and Operations Practices”) was just updated by Jon Amato, and it looks much better now.
The abstract states “’Increasing complexity and frequency of attacks elevate the need for detection of attacks and incident response, all at enterprise scale.
Technical professionals can use endpoint detection and response tools to speedily investigate security incidents and detect malicious activities and behaviors.”
A few of my favorite quotes are:
▪ “Extracting the full value of EDR tools demands mature security operations and IR processes.
Organizations not prepared to handle the large volume of alerts produced by EDR tools may wish to consider a managed EDR service.” [reminder: a managed EDR is a type of MDR, while not every MDR uses EDR]
▪ “EDR tools are also not malware-centric; they reflect a broader focus on all threats affecting endpoints, rather than the more narrow coverage of malware detection and prevention, as is the case for traditional anti-malware tools.” [this is obvious to many, but a useful reminder to some]
▪ “This combination of EDR and advanced anti-malware [from one vendor] is so pervasive that many Gartner clients conflate the two tools, treating EDR as synonymous with advanced machine learning-type anti-malware.
This is incorrect.
EDR and EPP (including advanced anti-malware) are still two separate pieces of technology that happen to be found very commonly in the same product and platform.”
▪ “Most EDR business cases seen by Gartner for Technical Professionals were focused on: Saving on IR costs | Detecting threats faster and better | Enabling wider and deeper endpoint visibility”
▪ “EDR users need not assume that all data coming from the compromised endpoints is wrong, only that it needs to be verified through other means (such as network monitoring) and cross-referenced by different types of information (such as verification of the list of running processes by means of direct memory read)”
Link: https://securityboulevard.com/2018/12/our-2018-update-for-endpoint-detection-and-response-architecture-and-operations-practices-publishes/

Fortinet FortiMail Receives Top AAA Rating in SE Labs Email Security Test

Nasdaq Globe Newswire

Fortinet® (NASDAQ: FTNT), a global leader in broad, integrated and automated cybersecurity solutions, today announced that its FortiMail Secure Email Gateway solution earned SE Labs’ top AAA rating in the 2018 Email Security Services (ESS) group test, while maintaining a perfect score in legitimate accuracy.
Email continues to be the primary attack vector for cybercriminals, with 92.4 percent of all malware and over 90 percent of all reported security incidents starting with phishing emails, with malicious attachments or links being sent to and opened by company employees.
Such attacks may lead to sensitive information and data getting into the hands of cybercriminals as well as costing organizations large sums of money.
Link: https://globenewswire.com/news-release/2018/12/13/1666687/0/en/Fortinet-FortiMail-Receives-Top-AAA-Rating-in-SE-Labs-Email-Security-Test.html

Venafi Launches $12.5M Machine Identity Protection Development Fund

Business Wire

SALT LAKE CITY–(BUSINESS WIRE)–Venafi®, the inventor and leading provider of machine identity protection, today announced the launch of the Machine Identity Protection Development Fund at Machine Identity Protection Live.
The first $12.5 million tranche of the fund provides developers with direct sponsorship from Venafi to help accelerate the delivery of comprehensive protection for all machine identities.
Venafi will use the Machine Identity Protection Development Fund to sponsor a range of developers, including consultants, systems integrators, fast-moving startups, open-source developers and other cybersecurity vendors.
Funded developers will create integrations that ensure every new machine identity is automatically updated in the Venafi Platform.
Venafi also named the first three developers to receive sponsorships:
Jetstack
OpenCredo
Cygnacom
Link: https://www.businesswire.com/news/home/20181213005089/en/Venafi-Launches-12.5M-Machine-Identity-Protection-Development

Read more

OEM Security News – 22-Apr-2018

Posted on April 22, 2018January 13, 2022 by admini

Table of Contents Teramind Prevents Insider Threats Combining New Data Loss Prevention Features with User Behavior Analytics & Forensic Insights Symantec Analytics Enables Customers to Uncover the Most Dangerous Cyber Attacks 1Cisco Fights Malware, Email Intrusions with New Services Cybersecurity Companies Demo Support for STIX and TAXII Standards for Automated…

Read more

Posts pagination

  • Previous
  • 1
  • …
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • …
  • 421
  • Next

Recent Posts

  • AI News – Mon, 17 Nov 2025
  • CSO News – Mon, 17 Nov 2025
  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15

Archives

  • November 2025
  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme