Security News

For most organizations today, endpoint protection is the primary security concern. The eBook, titled Why Autonomous XDR is Going to Replace NGAV/EDR, starts with a look at how NGAV and EDR tools can defend an organization with the "Assume breach" mentality - expecting a breach to occur and protecting endpoints from extended breach incidents.

Like most companies, you've already come across its shortcoming - and these are amplified since you have a small security team. According to a Cynet 2021 survey of CISOs with small security teams, the biggest pain point in operating threat protection products selected by 51% of companies, and with a significant gap of 38% from the second place, is the overlapping capabilities of disparate technologies.

In a new e-book recently published, CISOs with small security teams talk about the drivers for replacing their EDR/NGAV solutions with an Autonomous XDR solution and why they believe consolidation provides significant benefits to organization and team. Organizations keep adding more and more security solutions that extend visibility, yet these solutions need to be maintained, monitored, and managed, taking up quite a bit of the analyst's time.

To secure information, it is critical to have an endpoint security strategy that reliably encompasses mobile devices and embraces all their aspects. Inevitably, when EDR is used to protect all endpoints in an indistinct manner, it creates a security gap at the mobile level.

Whether you're evaluating an EDR for the first time or looking to replace your EDR, as an information security professional, you need to be aware of the gaps prior already to implementation so you can best prepare how to close the gaps. It's important to understand that each company is unique, and an EDR that a large company uses might not necessarily be the technology that works best when you are leading a small security team, even if you're within the same industry vertical.

McAfee announced that it is partnering with ECS to offer managed threat detection and response capabilities through McAfee MVISION EDR. ECS is the first North American MDR partner for McAfee MVISION EDR and will leverage MVISION EDR and supporting vendors to deliver a scalable, repeatable and customizable program that enables organizations to focus on only verified threats. "Protecting an organization against threats and attacks is a difficult endeavor that requires innovative technology coupled with technical know-how," said Anand Ramanathan, vice president of product and marketing, McAfee.

Bitdefender launched a new cloud-based dedicated Endpoint Detection and Response solution designed to help enterprise customers and Managed Service Providers improve the ability to detect and eradicate threats as they occur and strengthen overall resiliency against cyberattacks. Unique in the EDR space, it combines endpoint telemetry and human risk analytics with the advanced threat detection capabilities that have made Bitdefender a recognized endpoint security leader.

Microsoft has included support for the latest six most common Linux server distributions within Defender for Endpoint, namely RHEL 7.2+, CentOS Linux 7.2+, Ubuntu 16 LTS or higher LTS, SLES 12+, Debian 9+, and Oracle Linux 7.2. The Microsoft Defender for Endpoint public preview capabilities are available for customers with the preview features enabled in Defender Security Center.

A new provocative eBook: "5 Questions to Determine: Is Your EDR Providing the Best Bang for Your Buck?" helps security executives who currently use an EDR solution determine if they're continuing to get their "Bang for the buck" from their EDR provider when compared to newer, equally-priced technologies as XDR. It's also an excellent resource for companies who are in the steps of choosing an EDR solution to deploy. Let's quickly look at the five questions you should ask to help decide if you should stay with your EDR solution or consider upgrading to an XDR solution.

Qualys announced the immediate availability of Qualys Multi-Vector EDR. Taking a new multi-vector approach to Endpoint Detection and Response, Qualys now brings the unified power of its highly scalable cloud platform to EDR. "Qualys Multi-Vector EDR provides our Infosec team with actionable visibility into our endpoints in terms of detecting malicious hashes provided by intelligent agencies as well as detecting potential malicious attacks through authorized processes, to keep our company assets secure." "Unfortunately, not all organizations have such a focus. Nevertheless, weaving in threat intelligence enables Qualys to combine in-house context and vulnerability management-driven prioritization with external context, representing an opportunity to achieve something greater than the majority of the market to date," said Mark Child, research manager, European Security, IDC. "We are proud to deliver Multi-Vector EDR to customers and extend into the detection and response market," said Philippe Courtot, chairman and CEO of Qualys.