Archive: November 10, 2021

Micro Focus’ CyberRes Delivers on Product Strategy for DevSecOps with Complete CI/CD Integrations

INDIA, Bangalore – November 10, 2021 – CyberRes, a Micro Focus (LSE: MCRO; NYSE: MFGP) line of business, today has released Fortify Scan pipe and Fortify Tools Installer, now enabling developers to dynamically install Fortify tools into any existing CI/CD pipelines. With these releases, CyberRes has completed another product initiative around DevSecOps to deliver a more comprehensive, automated static application security testing (SAST) user experience to developers.

“Moving beyond early adopters to the mainstream has driven the DevSecOps evolution beyond basic integration and it continues to be pushed by the rush to shift left,” said Dylan Thomas, Head of Fortify Product Management for CyberRes. “Security must keep pace with the ‘everything-as-code’ era, and Fortify is focused on transforming AppSec from point of friction to enablement – without sacrificing quality – by providing a seamless user experience and flexibility to adapt to the needs of any software team.”

With automated workflows built for DevSecOps, Fortify’s extensive integration ecosystem leverages investments and workflows in current tools and reduces friction by embedding security into current processes. These capabilities now allow for integration with virtually any CI/CD system such as AWS CodeStar, Bitbucket Pipelines, Github Actions and GitLab Pipelines.

With these releases, Fortify now provides organizations:

• Easy to use, out-of-the-box pipeline integration
• Capability to automate orchestration into any containers used by existing CI/CD pipelines
• Ability to scan raw source code as the build takes place
• Prioritized SAST scan results to focus developer remediation efforts on vulnerabilities that matter most
• Direct feedback into the Fortify platform for even more comprehensive results and coverage

Fortify delivers complete solutions for on-premise, SaaS and as-a-service offerings that enable customers the flexibility of choice based on their application security needs. This complete portfolio automates testing throughout the CI/CD pipeline so developers can quickly resolve issues and key stakeholders have visibility of their applications’ security posture.

Quantum Introduces Scalar Ransom Block, An Industry-First Solution That Creates Physical Block Between Data Tapes And Robotic Tape System

New feature can be initiated remotely and instantly, ensures data stored on tape is completely offline and secure, provides ultimate level of data security for cyber-resilient archives

BANGALORE, India – November 09, 2021- Quantum Corporation (NASDAQ: QMCO) today announced its latest innovations to protect against ransomware and other forms of cyberattacks. Quantum’s Scalar® Ransom Block is an industry-first feature of Quantum’s Scalar tape systems that eliminates the risk of data being accessed or compromised over the network. This patent-pending feature creates a hardware “block” between data stored on tapes and every network-connected device including the robotic tape system, as shown in this short video.

Ransom Block can be initiated remotely, does not require any person to handle tapes, ensures data cannot be accessed over the network even if the tape library is hacked, and preserves the ability to audit the tape library so customers know their data is safe and secure.

“The threat of ransomware and other forms of cyber-attacks are one of the chief concerns of our customers,” says Jamie Lerner, chairman and CEO of Quantum. “Tape storage systems are a critical part of building cyber-resilient infrastructures, both for large archives and as part of a comprehensive data protection strategy. However, even data stored on tapes can be compromised if the tape library itself is hacked, which is why we designed these new features in partnership with a large cloud provider. Quantum Scalar Ransom Block is an industry-first solution that ensures data is protected and secure with a click of a button and provides the ultimate layer of protection for data stored on tape.”

Ensure Your Data on Tape is Safe from Attack with Quantum Scalar Ransom Block

Cyber threats are unrelenting, and data is being encrypted, stolen, and leaked on the dark web. According to a recent study by analyst firm Enterprise Strategy Group (ESG) of more than 300 IT and line of business executives, two out of five respondents reported that their organizations had experienced successful ransomware attacks, and more than 80 percent had paid ransoms to retrieve their data.¹ When ransomware breaches a network successfully, the monetary damage can be substantial, as are the risks from downtime of critical systems, lost revenue and damaged reputation.

Tape systems are a critical part of a comprehensive strategy to ensure data is protected and quickly recoverable in the event of a ransomware attack. Tape systems are inherently more secure than hard drive (HDD) or flash (SSD) storage systems because the data stored on tape is not connected to the network. However, because the tape library itself is a network connected device, there is still some risk of a remote hack in the unlikely event the tape library itself is hacked. To address this risk in a simple, automated way, Quantum designed the Scalar Ransom Block feature.

How Ransom Block Works

Tapes stored in the library sit in a magazine. Quantum’s patent-pending design partially ejects the magazine so the tapes cannot be selected by the robot until an operator physically re-inserts the magazine. Because the magazine is only partially ejected, the barcode scanner on the robot can still scan the tape barcodes, so that system administrators can perform periodic audits of the tape system to ensure tapes are still present.

The tapes are inaccessible until an operator, who must have physical access to the tape library, re-inserts the magazine. Tape systems can be stored in secure data centers that require badged access.

In addition, Quantum has introduced Logical Tape Blocking, which enables administrators to use software commands to prevent tapes from being loaded into a drive while the magazine is being filled with tapes, before it is ejected.  Although still software-based and not a physical blocking mechanism, this new capability further reduces the risk window until Ransom Block is initiated.

Latest Innovations are Part of a Comprehensive Security Framework

Ransom Block and Logical Tape Blocking are the latest innovations that are part of a comprehensive security framework that make Scalar tape systems to be one of the most secure tape storage systems on the market.

Many features are unique to Quantum Scalar Tape Systems², including:

• Scalar Ransom Block and Logical Tape Blocking to ensure data stored on tape is secure, even in the event of a remote hack.
• Scalar Active Vault enables tapes to be moved into a secure, isolated in-library vault partition that has no network connectivity and is not visible to any application or network.
• Scalar Media Security Alerts notify the administrator when media is removed – either expectedly or unexpectedly – from the library.
• Multi-Factor Authentication can be enabled for administrator and user logins, providing additional security for access control.

These unique features are part of over 25 features and capabilities that form the Quantum Scalar Security Framework, a comprehensive security framework that controls system access, provides system monitoring and event detection, data security and encryption, and unique features for cyber protection and data integrity.

Availability and Pricing

Ransom Block and Logical Tape Blocking are expected to be available on new Scalar i6 and Scalar i3 tape libraries in December 2021. The remaining features listed as part of the Quantum Scalar Security Framework are generally available today. Certain features are sold separately, and not all features are available on all models. For more information on Quantum Scalar Ransom Block, Logical Tape Blocking and Quantum’s entire Scalar Security Framework, visit https://www.quantum.com/security-framework.

¹ Validating Data Challenges, Enterprise Strategy Group, September 2021
² Not all features are available on all Scalar tape library models.  Visit www.quantum.com for details.

Local Tenable.io Instance Now Available in India on AWS

Mumbai, India – 10 Nov 2021 –– Tenable®, Inc., the Cyber Exposure company, today announced it has established a local cloud instance for its software-as-a-service (SaaS) solution, Tenable.io®, on Amazon Web Services (AWS), using the AWS Asia Pacific (Mumbai) Region. Hosted in Mumbai, using the local AWS Region increases the scalability and flexibility of Tenable.io for customers in India, offering additional data integrity, availability, and security on top of the already-secure cloud.

Organizations in India, including those in highly regulated sectors such as government and banking and financial service institutions (BFSI), have fast-tracked the adoption of cloud-based applications and SaaS models to bridge the gap between a distributed workforce and service delivery. By using Tenable.io hosted on the AWS Region in India, organizations can comply with local data privacy regulations and policies without compromising security, scalability and flexibility.

“As a cloud-first company, we understand both the business benefits of operating in the cloud and the importance of doing so in a secure way,” said Kartik Shahani, country manager for Tenable India. “By expanding our Tenable.io support and service in India on AWS, organizations can benefit from the provider’s breadth and depth of cloud capabilities while adhering to local data regulations and requirements.”

“As we expand our footprint to help organizations meet the data sovereignty requirements of their geographic regions, the ability to optimize onshore operating models is vital. Through our collaboration with AWS, and Tenable’s track record of automating the deployment of our cloud infrastructure, we have the ability to rapidly create and maintain cloud instances in any region,” said Manoj Srivastava, vice president of Engineering for Tenable.

Tenable.io is a core component of the Tenable portfolio, which uniquely provides the breadth of visibility into cyber risk across IT, cloud, IoT and operational technology (OT) environments and the depth of analytics to measure and communicate cyber risk in business terms to make better strategic decisions. Customers will also be able to leverage Frictionless Assessment to evaluate cloud assets without interruption, quickly detecting new vulnerabilities as their cloud environment changes without ever having to schedule a scan or deploy an agent.

Akamai Redefines WAAP Simplicity and Automation with New App & API Protector

Bengaluru, India – November 9, 2021 – Akamai Technologies, Inc. (NASDAQ: AKAM), the world’s most trusted solution to power and protect digital experiences, today announces the launch of App & API Protector, the company’s next-generation web application and API protection (WAAP) solution. It provides a holistic set of powerful protections built for today’s modern applications and APIs with intelligent automation and simplicity.

Last month, Akamai released its latest State of the Internet / Security report, ‘API: The Attack Surface That Connects Us All,’ which highlighted the challenges organizations face in the evolving threat landscape, especially given that Gartner reported APIs will be the most frequent online attack vector by 2022. In fact, by design, API calls are easier and faster to automate than other software endpoints, making them an increasingly appealing target for cybercriminals.

With App & API Protector, Akamai customers have a single, integrated WAAP solution that is designed to deliver the strongest security outcomes, without compromising simplicity and ease of use. Key benefits include:

Automatic API discovery and security—Mitigate API-related risks and vulnerabilities with continuous discovery of known, unknown, and evolving APIs. API requests are automatically discovered and inspected for malicious code; and optional API security controls can be enforced at the edge to activate positive API security models. Gartner’s 2021 Critical Capabilities report gave Akamai the top spot for the use case on API programmability and security. 

Adaptive and more accurate detections—Detect up to two times more attacks compared to traditional rulesets. Adaptive, threat-based detection employs a multidimensional threat scoring model that combines Akamai’s platform intelligence with data/metadata from each web and API request. This data is actioned with decision-making logic that accurately identifies and stops stealthy attacks with surgical-grade precision.

Continuous self-tuning—Akamai’s Adaptive Security Engine not only keeps pace with rapidly evolving threats but reduces false positives by up to five times to alleviate the effort required to maintain and tune policies. Security triggers, whether true attacks or those misidentified as attacks, are automatically and continuously analyzed with machine learning to deliver highly accurate policy-by-policy tuning recommendations with a 1-click implementation.

Built-in bot mitigation—Automatically detect and mitigate unwanted bots with built-in bot visibility and mitigation capabilities. Akamai’s industry-leading bot technology features an expansive directory of 1,500+ known bots and provides customers with the ability to create and define bots to proactively monitor analytics and prevent attacks. For more persistent, adversarial bot operators, Akamai offers it’s category-leading Bot Manager solution to mitigate that threat.

Automatic updates—Enable a “hands off” approach to WAAP with adaptive protections fully managed by Akamai. Our world-class security researchers use advanced machine learning and data mining techniques to continuously analyze over 303TB of daily attack data and automatically update protections against the latest threats. Customers can also opt for manual/evaluation mode of operation to minimize any unexpected impact of new updates.

DevOps integration made simple—Easily integrate WAAP capabilities using the Akamai CLI, Terraform, or scripts in the CI/CD automation pipeline. Enable rapid onboarding of applications, ensure uniform security policy management across large application and API portfolios, and centralize security enforcement across hybrid and multi-cloud infrastructures.

“As the online threat landscape continues to evolve, the need for a holistic, adaptive approach to web application and API security is clear. With the introduction of our new App & API Protector, Akamai customers now have a single, holistic solution that makes sophisticated protection extremely simple,” said Amol Mathur, Vice President of Product Management, Akamai. “This builds on Akamai’s proven security technologies, introducing new levels of sophisticated, automated intelligence to keep our customers a step ahead of the cybercriminals.”

In September, Akamai was named a Leader in the Gartner Magic Quadrant for Web Application and API Protection report and placed highest in the Ability to Execute among the companies evaluated for their ability to protect web applications and APIs. In addition, Akamai also received the highest scores for three of the four Use Cases in the 2021 Gartner Critical Capabilities for Cloud Web Application and API Protection report, including the API Security Use Case.