The Latest

SCADAfence is partnering with Demisto to enable industrial organizations to respond to the threats that spread from IT to OT networks. With the integration of SCADAfence’s Continuous Network Monitoring (CNM) solution with Demisto’s Enterprise platform, security managers can assess their exposure to cyberattacks that move laterally from IT to OT. As a result, they can respond and mitigate ongoing incidents that threaten their operational availability.

For example, if a ransomware attack, such as the infamous WannaCry or NotPetya, occurs in the IT network, organizations can identify their exposed OT assets and mitigate the risks before further infection takes place.

Benefits of the SCADAfence-Demisto joint offering:

  • Leveraging SCADAfence CNM’s analytics and understanding of the characteristics of OT networks to assess exposure of OT operations to threats identified in IT networks, such as malware and ransomware.
  • Enabling the Demisto Enterprise platform to extend security orchestration and automation capabilities to OT networks, enabling incident management and policy enforcement across the IT/OT enterprise.

Cybersecurity events involving industrial operations and critical infrastructures are becoming more commonplace. As OT networks require increased connectivity to IT networks and to the Internet as a whole, air-gapping is no longer a viable option.

OT networks are now threatened by IT-originated attacks that spread to affect production lines. The potential damage to compromised OT networks is substantial – including sabotaging of goods and production stoppages – causing financial and reputational damage.

“We receive numerous requests from customers to gain visibility and control of the security in the OT networks, and we welcome SCADAfence as our partner to close this gap,” said Dan Sarel, Demisto’s Co-founder and Vice President of Products. “We can now offer a solution that unifies security incident handling across IT and OT networks, protecting critical production processes.”

“The partnership will enable our customers to leverage the power of Demisto’s Enterprise platform and benefit from integration with a wide range of security tools – to enforce the security policy according to the actions recommended by SCADAfence CNM’s monitoring and alerting functions,” concluded Tom Thirer, SCADAfence’s Vice President of Product Management.


from Help Net Security https://ift.tt/2BEvmpX

Aporeto released the Zero Trust security solution on Amazon Web Services (AWS) Marketplace for Containers. AWS customers can now use the Amazon Elastic Container Service (Amazon ECS) console and AWS Marketplace for Containers website to discover, produce and deploy container solutions – including the Aporeto Zero Trust security solution.

With this release, AWS Marketplace has extended its existing benefits and features to container products, with a discovery and search experience offering access to a curated catalog of trusted software from reputable vendors.

Aporeto provides an application segmentation solution that is designed to deliver cloud-native security for workloads being migrated from on-premises deployments to AWS. Aporeto for AWS is designed to make the deployment of hybrid workloads rapid and convenient, with consistent and portable security policies that are independent of the underlying infrastructure.

“We are excited to welcome Aporeto to the new AWS Marketplace for Containers to help the over 200,000 AWS customers find, buy and deploy solutions specific to their container environment,” said Garth Fort, director, AWS Marketplace, Amazon Web Services Inc. “We are happy to see that Aporeto has extended its Zero Trust security solution to container products.”

Aporeto powered by AWS helps enterprises deploy, manage and secure applications at scale on various platforms including Kubernetes, Docker, Linux, Mesos, among others. To fingerprint each workload, Aporeto is designed to combine metadata from the orchestration layer, the container, the operating system and the AWS instance identity document.

By combining these information sources, along with attributes such as image scanner inputs, Aporeto is designed to create a cryptographic identity for each workload to authenticate and authorize all network communications within a virtual private cloud (VPC), across VPCs independent of their region or availability zone and across cloud environments.

“As microservices, containers and cloud adoption continue to accelerate, we see more customers considering how they will port their legacy network security paradigm to the cloud,” said Jason Schmitt, CEO of Aporeto. “Our customers are attracted to AWS for its proven elasticity and scale and are looking for a new approach to securing applications that does not detract from the easy deployment and manageability that they demand in the cloud. Aporeto enables customers to migrate more aggressively to cloud, build cloud-native applications and improve application velocity, all without compromising security.”


from Help Net Security https://ift.tt/2DP7hOJ

DriveSavers unveiled it is utilizing new technology to recover data from password-locked smart devices with any length passcode.

The service is being offered to consumers who have forgotten device passwords, been locked out after too many incorrect attempts, and for those who need access to data stored on the device of a deceased family member.

Other companies offer a similar service only to law enforcement. DriveSavers offers a Passcode Lockout Data Recovery service to consumers. The DriveSavers service is not available for law enforcement and requires proof of ownership prior to unlocking a device.

“Smartphones store irreplaceable data like family pictures and videos, contacts, notes, text messages and voice recordings. Losing access to this type of data can be devastating. We are delighted to offer this service to individuals who are locked out of their phones or wish to gain access to memories stored on a lost loved one’s smart device,” said DriveSavers President Scott Moyer.

The service is designed for customers who need access to critical or sentimental data stored on locked smart devices running any operating system, such as iOS, Android and Windows. iPhones, LG, Samsung, Huawei, Lenovo, BlackBerry and other phones belonging to consumers are all candidates for this service.


from Help Net Security https://ift.tt/2QsnrnQ

Software AG unveiled its next-generation Software AG Cloud, an open, enterprise-grade cloud platform for building, testing, deploying and managing everything from simple apps to complex, cloud-enabled enterprise and IoT applications.

Software AG Cloud is a one-stop shop for “all things cloud” and provides customers and partners with subscription-based access to Software AG’s enterprise applications and middleware technology.

Dr. Wolfram Jost, Chief Technology Officer, Software AG noted: “Software AG Cloud is a reliable and scalable cloud platform that brings all of our cloud offerings onto a single, unified and integrated platform. It includes common identity, tenant and subscription management, and provides shared services for our current and future middleware, data and analytics cloud portfolio. Additionally, because it is a fully-integrated cloud platform, it enables enterprises to easily move, connect and scale from one cloud product to another, as well as take advantage of our growing ecosystem of software and services, while enjoying the same, consistent experience.”

Based on open industry standards, Software AG Cloud enables enterprises to integrate everything, connect the digital and the physical world or develop next-generation apps, without needing to invest in on-premises infrastructure. It is a multi-cloud platform that supports different infrastructure providers, including Amazon Web Services (AWS), Microsoft Azure and others.

Software AG Cloud initially includes the following products:

  • ARIS Cloud — provides documentation, analysis and streamlining of processes. It enables enterprises to design, document, analyze, optimize and communicate processes responding to changing business and market requirements.
  • Alfabet Cloud — drives the right investment decisions now and in the future with IT planning and portfolio management.
  • Cumulocity IoT Cloud — connects and manages devices, analyzes and acts on data to give insights in real time, and integrates with enterprise applications to offer smarter products and services.
  • webMethods API Cloud — manages and exposes APIs to third-party developers, partners and other consumers for use in web, mobile and IoT applications.
  • webMethods B2B Cloud — exchanges B2B documents in the cloud; built on webMethods Trading Networks, business documents can be transmitted electronically with customers, distributors and trading partners without any hardware investment, maintenance or upgrades.
  • webMethods Dynamic Apps Cloud — designs and delivers apps with a service that allows the subject matter experts, and IT developers, to visually build and deploy process-driven, application solutions.
  • webMethods Integration Cloud — connects SaaS apps and makes business processes more efficient and agile.

from Help Net Security https://ift.tt/2Qo3Kxy

Deadspin Here’s A Really Bizarre Stat About The Steelers | Jezebel The Making of a Sympathetic Man | Splinter Meghan McCain’s Rant About Climate Change Is Perfect, Loud Nonsense | The Root Black Man Graciously Helps Intoxicated Neighbor, Gets Arrested for Some Silly Shit | The A.V. Club Sylvester Stallone sure sounds like he’s done playing Rocky Balboa |


from Lifehacker https://ift.tt/2Q1brKR