Topic: security
Report: Careless end users are an organization’s biggest security threat
IT operations teams are focusing their efforts on securing their networks and applications from outside threats, but the greatest threat to an organization may be its own users. A recent survey of 500 IT professionals from BetterCloud revealed that 91 percent of IT professionals feel vulnerable to insider threats. According to the survey, 62 percent … continue reading
Untangle tackles security orchestration with Network Security Framework
Network security company Untangle wants to provide better security orchestration across the enterprise and bring security capabilities at the network edge with a new solution for covering digital attack services. The company introduced its Network Security Framework at the RSA Conference in San Francisco this week designed to protect, monitor and control all devices, apps … continue reading
PagerDuty brings security closer to operations
PagerDuty wants to unify the security operations among developers, operations and security teams. The company announced PagerDuty for Security Operations with new and existing security integrations across the company’s ecosystem. “With PagerDuty for Security Operations, we now bring security professionals into the fold to operate in a unified platform to engage in real-time security response,” … continue reading
Aqua introduces new features for multi-cloud and hybrid infrastructures
Aqua Security’s cloud native security platform reached version 4.0 today, introducing new controls for security and policy enforcement across virtual, containerized and microservice-based infrastructures, on-premises and in the cloud. “Aqua’s comprehensive serverless security solution now includes a full chain of controls to discover functions across multiple cloud accounts, scan them for vulnerabilities, detect excessive permissions … continue reading
Tenable announces new insights into risks across IT/OT environments
Cyber exposure company Tenable has announced a new integrated Cyber Exposure solution, which combines Tenable Industrial Security and Tenable.sc. According to the company, the solution offers a unified view of cyber risk across IT and operational technology (OT) networks. The integration will enable security professionals to measure, manage, and reduce cyber risk from a single … continue reading
NeuVector to offer service mesh protection
Container network security provider NeuVector is giving users a new layer of security for service meshes. The company announced integration for the service meshes Istio and Linkerd, designed to expand security capabilities to production Kubernetes deployments. The new integration was developed in collaboration with IBM Cloud and the Istio open-source development team. According to the … continue reading
premium The top 5 tips to prevent cyberattacks in 2019
Cyberattacks have become an anticipated part of the IT world, regularly striking businesses both large and small. These attacks consistently infiltrate networks and expose an organization’s valuable data, and cause brand embarrassment and irate customers. Yet, the one way cybercriminals are inconsistent is the most damaging; their attack methods evolve each year in new and … continue reading
Red Hat brings workflow enhancements to Ansible Tower
Red Hat today rolled out its Ansible Tower 3.4 with workflow enhancements designed to improve IT operations automation in the areas of infrastructure, cloud, networks and security. With the company’s IT management portfolio — which includes Ansible Tower, Red Hat Satellite (for Linux management) and Red Hat Cloud Forms (for bare metal, virtual machines and … continue reading
HashiCorp Vault reaches 1.0
After years of development, HashiCorp is finally ready to release HashiCorp Vault 1.0 to the public. According to the company, Vault was developed as a tool for managing secrets and protecting sensitive data within an application and/or infrastructure. The 1.0 release includes batch tokens, open-source cloud auto unseal, OpenAPI support, and an updated UI. “Vault … continue reading
Kubernetes suffers from security flaw
Yesterday, a critical security flaw impacting Kubernetes 1.10 and higher was discovered. The flaw, CVE-2018-1002105, was publicly disclosed by the Kubernetes community and reported through the Kubernetes vulnerability reporting process. According to Red Hat, the flaw could allow malicious actors or unapproved users to escalate privileges on Kubernetes installations, including the company’s own container solution … continue reading
Aqua Security 3.5 comes with serverless functions and container encryption protection
Aqua Security has announced version 3.5 of its cloud-native security platform with new risk assessment controls for a range of cloud-native technologies. According to the company, this release addresses the need for runtime visibility and multi-application, multi-team policy management. A key feature of 3.5 is the ability to deploy end-to-end security for containers, serverless containers … continue reading
Cloud security company Threat Stack acquires Bluefyre for its targeted application security
Cloud security and compliance company Threat Stack wants to bolster its cloud capabilities with the acquisition of Bluefyre. According to the company, Bluefyre will help deliver greater visibility into security as well as help developers build secure, cloud-native apps. Bluefyre provides targeted application security for Kubernetes, Mesosphere and OpenShift applications, and according to Threat Stack … continue reading
