Security News
Threat Stack announced new alert context functionality to reduce mean-time-to-know within the Threat Stack Cloud Security Platform. Threat Stack's enhanced alert context provides meaningful data that will help guide security leaders' investigations into high severity alerts in real-time.
PacketFabric announced that it has released native support of IPsec VPN tunnels as a connection type for its Cloud Router product. "The cloud is all about scale and flexibility. But traditional cloud connectivity hasn't delivered scalability or flexibility. You've had to backhaul traffic through data centers, wait an entire ice age for circuits to provision, rely on unpredictable Internet, or deal with inflexible long-term telco-style contracts," said PacketFabric Chief Technology Officer and Chief Product Officer Anna Claiborne.
To help ease the transition to the cloud, VMware announced GE Healthcare will leverage VMware SD-WAN, now part of VMware SASE, to seamlessly deliver cloud-based services to GE Healthcare customers. "VMware SD-WAN provides this network overlay to prioritize and move high-fidelity, latency-sensitive data to the cloud and between edge locations. Leveraging VMware SD-WAN enables GE Healthcare to offer rapid, more securely deployed, and easily accessed virtual care solutions."
"We found a simple loophole that allowed us to intercept a portion of worldwide dynamic DNS traffic going through managed DNS providers like Amazon and Google," researchers Shir Tamari and Ami Luttwak from infrastructure security firm Wiz said. The exploitation process hinges on registering a domain on Amazon's Route53 DNS service with the same name as the DNS name server - which provides the translation of domain names and hostnames into their corresponding Internet Protocol addresses - resulting in a scenario that effectively breaks the isolation between tenants, thus allowing valuable information to be accessed.
"We found a simple loophole that allowed us to intercept a portion of worldwide dynamic DNS traffic going through managed DNS providers like Amazon and Google," researchers Shir Tamari and Ami Luttwak from infrastructure security firm Wiz said. The exploitation process hinges on registering a domain on Amazon's Route53 DNS service with the same name as the DNS name server - which provides the translation of domain names and hostnames into their corresponding Internet Protocol addresses - resulting in a scenario that effectively breaks the isolation between tenants, thus allowing valuable information to be accessed.
Google Cloud and Workday announced a strategic partnership that will enable businesses across the world to further their digital transformations. As a Workday preferred cloud partner across core industries-such as healthcare, financial services, and retail-Google Cloud will help businesses run Workday enterprise applications for finance, HR, and planning in a public cloud environment, with ease-of-management, and low network latency.
Extreme Networks announced the intent to acquire a newly created entity called Ipanematech, the SD-WAN division of Infovista. The acquisition will expand Extreme's market-leading ExtremeCloudä portfolio, offering new cloud-managed SD-WAN and security solutions required to power the Infinite Enterprise.
OwnBackup also announced plans to expand its comprehensive backup and recovery solutions across other cloud platforms later this year, beginning with Microsoft. OwnBackup currently provides cloud data protection, sandbox seeding and data archiving solutions for nearly 4,000 organizations worldwide.
McAfee announced that MVISION Cloud, part of its secure access service edge offering - MVISION Unified Cloud Edge, now provides enhanced security coverage for Microsoft Dynamics 365, a line of enterprise resource planning and customer relationship management software applications. MVISION Cloud for Dynamics 365 provides an advanced set of security tools that are delivered via API, enabling holistic security controls across Dynamics 365.
The PCI Security Standards Council and the Cloud Security Alliance issued a joint bulletin to highlight the importance of properly scoping cloud environments. At a high level, scoping involves the identification of people, processes, and technologies that interact with or could otherwise impact the security of payment data or systems.