Security News > 2020 > November

Mastercard announced Cyber Secure, an AI-powered suite of tools that allows banks to assess cyber risk across their ecosystem and prevent potential breaches. Acquiring banks can help merchants understand their own cyber risk, preventing hundreds of millions of dollars in potential fraud.

McAfee announced extended detection and response capabilities with the introduction of MVISION XDR platform, a cloud-based advanced threat management solution with complete coverage across the attack lifecycle, prioritization to protect what matters, easy orchestration and efficient response. MVISION XDR improves security operations centers effectiveness with quick risk mitigation and delivers total cost of ownership for threat response with the inclusion of MVISION Insight's proactive threat analytics.

On a mission to help consumers reclaim control of their online privacy, NortonLifeLock unveiled Privacy Monitor Assistant, a new white-glove service, to help consumers fight back against data brokers sharing your personal information. "Consumers are managing unprecedented privacy incursions, and unfortunately, once your information is online, it can be incredibly difficult to remove. With our privacy offerings, Norton Secure VPN, PC SafeCam, and now, Privacy Monitor Assistant, we continue to arm consumers with the tools they need to reclaim control of their online privacy and defend against identity theft."

Mistrust in data is at an all-time high and mounting regulations such as GDPR, CCPA, and new cross-border data protection directives are forcing businesses into a complex reality for data sharing, slowing down the implementation of new business models while keeping data infrastructure costs high. To address these challenges, Sotero announces the general availability of Sotero Opaque, the first trusted data-sharing solution that keeps data protected when shared across sources and ecosystems.

Google has disclosed details of a new zero-day privilege escalation flaw in the Windows operating system that's being actively exploited in the wild. The elevation of privileges vulnerability, tracked as CVE-2020-17087, concerns a buffer overflow present since at least Windows 7 in the Windows Kernel Cryptography Driver that can be exploited for a sandbox escape.

Orca Security announced the second generation of its cloud security platform, featuring unique capabilities built specifically to respond to the public cloud security and compliance needs of global financial services customers. "The rapid digitization of services coupled with increased cloud adoption opens financial organizations to incredible risk. With Orca Security, they gain the full cloud coverage and insights they need without agents to maximize compliance and security confidence to meet the tsunami of regulations on the horizon."

India's Securities and Exchange Board appears to have sent a circular to stock exchanges that calls for market participants to upgrade information security as bad actors seek to take advantage of the financial services industry's move to working from home. SEBI appears not to have made its document public, but India's National Stock Exchange - the nation's largest - plus the Bombay Stock Exchange and Multi Commodity Exchange of India all late last week published the same 14-point security guidelines that say SEBI has called for market participants to implement a security baseline on the computers their staff use when working from home.

Exabeam announced a major enhancement to the Exabeam Security Management Platform, enabling organizations to detect improper access of cloud storage objects and defend against threats to cloud-based data, such as attackers exfiltrating sensitive data or hosting malicious files. By ingesting audit data from Amazon Simple Storage Services, Microsoft Azure Blobs and Google Cloud Platform Cloud Storage buckets, Exabeam can distinguish malicious activity from normal behavior and allow security analysts to easily identify and follow attacks on cloud storage objects before they lead to a security breach.

Lucidum launched with $4 million in seed funding from GGV Capital and Silicon Valley CISO Investments. Lucidum is founded by former security and technology leaders at Splunk and backed by nearly two dozen current or former security and technology leaders to solve the ubiquitous and fundamental challenge of asset discovery and visibility that's preventing enterprises from efficiently managing, securing, and transforming technology.

A new provocative eBook: "5 Questions to Determine: Is Your EDR Providing the Best Bang for Your Buck?" helps security executives who currently use an EDR solution determine if they're continuing to get their "Bang for the buck" from their EDR provider when compared to newer, equally-priced technologies as XDR. It's also an excellent resource for companies who are in the steps of choosing an EDR solution to deploy. Let's quickly look at the five questions you should ask to help decide if you should stay with your EDR solution or consider upgrading to an XDR solution.