About Us

Become A Contributor

Linkedin Twitter Youtube

Tag: Security Professional

Rezilion Secures $30 Million In Series A Funding to Automate DevSecOps

Posted on by admin

Rezilion, a cyber startup that uses automation to change DevSecOps, today received $30 million investment in Series A funding led by Guggenheim Investments. Current and former cybersecurity professionals and luminaries from Google, Microsoft, CrowdStrike, IBM, Cisco, PayPal, JP Morgan Chase, Nasdaq, eBay, Symantec, RedHat, RSA, and Tenable contributed to the round, as did new investment partners JVP and Kindred Capital.

With DevOps, code development has become fully automated, yet there is now a crippling bottleneck between engineering and security teams. Understanding, mitigating, and limiting the risk associated with the huge lines of code published by corporations every day is a constant problem, and it still involves extensive manual work by highly skilled engineers. As a result, businesses must choose between remaining secure and distributing products quickly.

Rezilion makes security as agile as DevOps by automating repetitive security bottlenecks. It is the only approach that significantly minimizes the amount of security effort necessary to deploy new digital products while maintaining the security of software platforms. Clients who use Rezilion’s vulnerability validation technology have decreased their patching backlog by more than 70% on average, freeing up important engineering resources to focus on product expansion.

“Rezilion’s product suite is a game changer for security teams. It creates a win-win, allowing companies to speed innovative products and features to market while enhancing their security posture. We believe Rezilion has created a truly compelling value proposition for security teams, one that greatly increases return on time while thoroughly protecting one’s core infrastructure,” said Rusty Parks, Senior Managing Director of Guggenheim Investments.

“At Rezilion, we are deeply committed to helping organizations drive their own innovation by reducing the resource drain, inaccuracies and operational friction created by manual security work. We know there’s never been a better time for organizations to experience what we call ‘trust in motion,’ or the peace of mind that comes from moving fast while staying safe and secure,” said Liran Tancman, co-founder and CEO of Rezilion. “

“Our technology brings developers and security teams together. This funding round will allow us to dramatically accelerate our vision by advancing product development and driving growth on a global scale,” says Shlomi Boutnaru, co-founder and CTO of Rezilion.

“Rezilion’s pioneering approach generates a host of benefits to meet the needs of CEOs, CIOs and CISOs, from expediting digital transformation, faster product rollouts and enhanced productivity and compliance to the adoption of state-of-the-art development best-practices and the guarantee of better security and improved ROI. Under the proven leadership of Liran and Shlomi, we look forward to expanding Rezilion’s markets and offerings to provide more value based on its unique technology,” stated Yoav Tzruya, General Partner at JVP.

The funds will be utilized to rapidly accelerate Rezilion’s go-to-market strategy, including partnering with other DevSecOps solution providers and expanding operations across the US and Europe. Additional product development attempts to bridge the gap between security and engineering, increasing the productivity of both teams so that software can be delivered on time and businesses can innovate more quickly.

Nightdragon Partners With Diversity And Inclusion Companies To Advance Industry Talent

Posted on by admin

NightDragon, a specialized cybersecurity, security, safety, and privacy investment and consulting company has partnered with leading diversity and talent development organizations, including the Athena Alliance, Cyber Future Foundation (CFF) and Cybersecurity Gatebreakers Foundation (CGF) to expand talent and develop diversity and inclusion initiatives across its portfolio companies and the industry.

NightDragon will partner with the Athena Alliance, CFF, CGF, and other organizations to expand diversity and inclusion activities in its portfolio companies, such as talent acquisition, executive education, career training, and mentorship. It will continue to cooperate with these organizations on industry regulation to boost diversity and inclusion initiatives more widely.

Dave DeWalt, Founder and Managing Director, NightDragon said, “Improving diversity and inclusion is one of the most critical issues facing our industry today. By working together with organizations like the Athena Alliance, the Cyber Future Foundation and the Cybersecurity Gatebreakers Foundation, we hope to help build more diverse companies, leading to stronger cultures, increased company growth and better technology development to combat today’s biggest threats.”

Coco Brown, CEO and Founder, the Athena Alliance said, “Our industry has made progress around improvement of diversity and inclusion, but there is still much more work to be done. We look forward to working closely with NightDragon and its portfolio companies to further these efforts across the industry, as well as help them tap into the full potential that a diverse and vibrant company culture can provide.”

Val Mukherjee, Chairman and Founder of Cyber Future Foundation said “At CFF, we recognize that a global and comprehensive approach is needed to solve the cybersecurity workforce challenges and remove barriers to career entry, while helping leaders find new approaches to staff and up-skill their teams. We are proud to work with venture capital firms like NightDragon, as well as commercial, public and private sector, other nonprofits and academic organizations to build stronger company cultures and businesses with the ultimate goal of reducing cybercrime threats.”

“Closing the cybersecurity skills gap requires our industry to break down the traditional gates in cybersecurity – the years of experience, the computer science degrees, and the litany of security certifications that we for years have thought necessary to begin a career in cybersecurity. We need to teach people how to discover the untapped talent that is everywhere around us; people just need a chance. The Cybersecurity Gatebreakers Foundation looks forward to working closely with NightDragon and its portfolio companies to close the cybersecurity talent gap while helping CISOs and hiring managers find, train and retain great cybersecurity talent,” said Naomi Buckwalter, Founder and Executive Director of Cybersecurity Gatebreakers Foundation.

These partnerships are the newest additions to the NightDragon Network’s ND Talent program, which aims to provide value and advantages to portfolio firms while also addressing high-priority areas including talent hiring, diversity, and retention. These advantages will be available only to portfolio businesses, and NightDragon intends to expand its resources as needed.

Degreed and Cybrary formed partnership to provide integrated cybersecurity learning experiences

Posted on by admin

Cybrary, a cybersecurity employee development platform, and Degreed, the upskilling platform that connects learning to opportunities, formed a strategic partnership to produce a more comprehensive integrated learning process for cybersecurity experts devoted to cyber skill development.

The partnership will offer a smooth integration across the Cybrary and Degreed platforms, as well as give cybersecurity experts access to the most extensive and comprehensive collection of cybersecurity learning content presently available.

By making Cybrary’s entire library of Learning Paths available through Degreed Plans, learners can build their cybersecurity competencies through a balance of expert-led training and experiential learning. Cybrary will provide Degreed clients with a personalised consultation to assess each company’s unique training requirements as part of the deal.

Degreed clients can collaborate with Cybrary to develop a strategy that matches to organization’s strategic learning goals with precise knowledge, skills and abilities that are required for each job function, as well as identify workforce gaps.

“Partnering with a growing company like Degreed is a fantastic opportunity not only for us at Cybrary, but also our collective global community. The recent major breaches only adds fuel to the fire in meeting the demands for cybersecurity skills growth to combat ongoing threats. This partnership is another step in the right direction in supporting the frontline cybersecurity professional,” said Wesley Samuel III, Senior Vice President of Global Sales at Cybrary.

“The Degreed team is excited to partner with Cybrary to help solve the issues plaguing security training and cyber skill development. As more of our lives are digitized, cyber security skills have become increasingly sought after and this partnership provides Degreed clients and users with the resources they need to meet new demands,” said Rob Wellington, Head of Experience Partnerships at Degreed.

OMNICOMMANDER introduced a Solution to Assist Credit Unions Defend Against Cyber Threats and Ransomware Attacks

Posted on by admin

OMNICOMMANDER, the industry leader in credit union marketing services with over 400 clients in 47 states, is introducing a free cybersecurity information session and live training program to assist credit unions in protecting their assets and members from hackers.

The NCUA released a press statement on April 22, 2021, alerting federally insured credit unions and financial services of rising cybersecurity vulnerabilities. Ransomware, malware, and phishing cyberattacks, denial of service, ATM skimming, identity theft, pandemic-themed attacks, and supply chain attacks are among the most common dangers to credit unions.

Eric Isham, Founder & CEO of OMNICOMMANDER said, “It was at the beginning of the pandemic that I really started to take notice of all the ransomware, security breaches, and cybersecurity issues happening in the world. As a partner to over 400 credit unions, I wanted to help our clients protect themselves from cyber-attacks, so I decided to invest into building a smart cybersecurity solution that small, mid-sized, and even larger credit unions could implement throughout their organizations.”

Human error is said to be the cause of 95% of cybersecurity breaches, according to industry research. Credit union executives will learn critical checkpoints to properly protect their assets and members from cyber threats caused by human mistakes during OMNICOMMANDER’s one-hour cybersecurity training.

Elliott Franklin, OMNICOMMANDER’s Chief Information Security Officer, will host the live training and convey the information in a straightforward manner. Franklin has designed and maintained international, multi-million-dollar security program for firms ranging from 250 to over 20,000 people for over 20 years.

“I’m excited to offer this cybersecurity training to credit unions. Not only does it fulfill the National Credit Union Administration requirements for the Rules and Regulations of Part 748, but it could help protect the assets of thousands of credit union members. After the live training, each attendee will receive a digital certificate of completion that is good for one year,” said Franklin.

On July 16, 2021, at 11 a.m. (CT), the first cybersecurity information session and live training will be delivered through Zoom. The program is intended to assist credit union staff in identifying and evaluating risks to their IT infrastructure, as well as developing plans to reduce such risks so that member data and information is protected.

1Password Launches Events API To Provide Real-time Data Streaming To Third-party Platforms

Posted on by admin

1Password, the industry leader in enterprise password management, announced the release of Events API, a new way for security teams to gain more data visibility and actionable insights. While events have always been available to administrators in 1Password, this new feature focuses on the information available by allowing events to be piped directly to tools like Splunk and other SIEM platforms, providing a holistic view that can be correlated with data from other sources.

In commercial contexts, the number of attacks and breaches has never been higher. While recent news cycles have focused on the most serious incidents, smaller but harmful attacks occur on a daily basis, if not more frequently. Losses from cybercrime have increased six times by 2020. Nearly half of the organizations in the United Kingdom have experienced some type of cybersecurity attack, with the average cost of a data breach approaching $4 million.

According to 1Password’s own research, 77 percent of DevOps and IT experts admitted to still having access to prior employers’ infrastructure, posing a significant security risk to affected firms.

1Password is the first line of defence for over 80,000 corporates globally securing passwords, confidential documents, and infrastructure secrets to protect their employees, customers and intellectual property. This  announcement is yet another step in solidifying the company’s position as a reliable enterprise solution for safeguarding mission-critical data. The 1Password Events API extends beyond the platform, allowing event data to exit while maintaining client privacy and data security.

Jeff Shiner, CEO of 1Password said, “With today’s launch of the 1Password Events API, our enterprise customers are able to access far deeper information than ever before, and most importantly, that information can now be used in an actionable way through the SIEM tools already in place. This will enable administrators to prevent future attacks, and if something does happen, take fast and decisive action. We’ve managed to do all this while protecting the privacy and security of our customers.”

Brian Jack, CISO at KnowBe4 said, “We’ve been using 1Password for over 4 years and it’s been a huge asset in securing our employee passwords and other sensitive information. With over 1000 employees, understanding who is accessing and using data within 1Password is very important to us. Events API has allowed us to integrate with our SIEM and use that data to highlight suspicious activity that will help us protect against future threats, as well as enabling us to quickly react to any active insider attack, should it ever happen.”

ColorTokens Launches Xaccess, Enhancing its Xtended ZeroTrust™ SaaS Platform for Zero Trust Access

Posted on by admin

ColorTokens, a Zero Trust cybersecurity platform company, introduced a new product Xaccess, a SaaS module within its Xtended ZeroTrustTM Platform that enables clients to provide secure Zero Trust access for remote staff members, third parties, or contractors connecting to cloud or data center-based applications or data. Xaccess also offers clients a single integrated solution across numerous user access requirements and across cloud or hybrid apps and data repositories when combined with broader capabilities in the Xtended ZeroTrustTM Platform.

“Providing the right level of access is a common problem that many enterprises face, irrespective of whether they are dealing with different users accessing cloud workloads or providing controlled access to a legacy application in their data center or setting up access policies for their data fabric architecture. Xaccess not only allows our customers to define intelligent, user identity-based access, but also handle more common and complex use cases such as enabling remote IT admins with deeper access specifications or session-based access needed for multi-user terminals. Customers can also avail themselves of our broader platform capabilities to define restricted levels of access for specific crown jewel applications or sensitive company data stores or enforce process-level controls at less-trusted accessing devices, making Xaccess one of the most advanced access products available to customers in the market today,” said Vats Srivatsan, President and Chief Operating Officer at ColorTokens.

Satyam Tyagi, Senior Director of Product Management at ColorTokens said, “Xaccess is a true Zero Trust-based solution that brings a rich context of threats, reputation feeds, and vulnerabilities into the access decision. Its ML-based access engine dynamically autogenerates access policies based on risk, usage, and disruption metrics. We further have the capability to isolate breaches at workloads or endpoints/users and thus limit the blast radius in our extended platform.”

“We chose ColorTokens over other offerings in the market to benefit from their single-platform approach to implementing Zero Trust workload segmentation and Zero Trust access. ColorTokens secured our full computing infrastructure, spanning our users, devices, apps, and workloads. With one console, we gained broad and deep visibility of our access, full context awareness, and the ability to tie user access to specific application segments. This would have been nearly impossible to achieve with a VPN or single tool for each environment approach,” said Martin Cherry, Managing Director at Banntech, a U.K.-based managed services provider.

“As companies re-evaluate security, in light of digital transformation and recent attacks, the appeal of Zero Trust has grown tremendously. At the same time, the practical considerations and challenges of operationalizing Zero Trust have become increasingly apparent. IDC believes that a cloud-delivered, infrastructure-agnostic platform design used by ColorTokens provides a worthy blueprint for accelerated implementation for organizations in their Zero Trust journey,” added Michael Suby, Research Vice President of Security and Trust at IDC.

DRT Cyber, a VersaBank subsidiary based in Washington, DC, has signed an agreement with EzoTech to expand its Cybersecurity offering with AI Penetration Testing

Posted on by admin

VersaBank announced that DRT Cyber Inc. (“DRT Cyber”), its wholly-owned Washington, DC-based subsidiary, has signed a reseller and development agreement with EzoTech Inc. (“EzoTech”), the creators of the world’s first AI-powered Autonomous cybersecurity penetration testing platform. Penetration testing is the process of imitating a cyber cyberattack on a company’s assets and infrastructure in order to find both strengths and vulnerabilities in security systems and processes so that real-world cyber attacks can be avoided.

DRT Cyber will expand its solutions to present and new customers throughout the United States, Canada, and Europe with an AI-powered, automated, on-demand penetration testing platform under the reseller component of the arrangement. DRT Cyber will use EzoTech’s advanced AI Cyber Security technology and prowess to develop and rollout what it anticipates to be the world’s first AI-powered, automated, and continuous cyber security posture reporting platform for businesses of all types and sizes, as part of the development component of the agreement.

“Our agreement with EzoTech is a significant step forward in our strategy to expand DRT Cyber’s suite of cybersecurity offerings to complement existing services to our clients, as well as attract new clients, as we leverage our acquisition of Digital Boundary Group (DBG) last November. DRT Cyber’s acquisition of DBG provided a tremendous platform to build one of the pre-eminent cybersecurity businesses in North America; DRT Cyber boasts a client roster of national and multinational corporations, as well as government entities, including infrastructure assets, numerous police departments in the U.S., national retailers, and many others.  The addition of AI-powered, automated penetration testing, followed by a continuous, automated cyber security reporting solution, designed for organizations large and small, will significantly help expand DRT’s client roster, as the identification of cyber security vulnerabilities moves to the top of the priority list for IT departments globally,” said David Taylor, President and CEO of VersaBank and DRT Cyber.

“We are very pleased to be working with the team at DRT Cyber. Our fully autonomous, AI-driven penetration testing platform is licensed and deployable in a number of ways: as a stand-alone testing platform, as an autonomous test in combination with manual testing resources, and also ultimately as the engine for continuous reporting at the executive and working levels, to deliver a high level of confidence to organizations that their systems, networks and assets are well positioned to thwart cyber threats that are growing globally at an accelerating rate,” said Xristos Silaidis, President and CEO, EzoTech. 

“Businesses, governments and other entities are especially vulnerable to cybersecurity breaches due to a number of factors including, but not limited to, continuous changes in infrastructure, patch management issues and incorrect or stale security configurations, all of which can result in unforeseen security consequences that may not be readily apparent. In today’s IT environment, in which systems are being continuously deployed, updated or moved, continuous cyber security testing is essential to ensure that an organization’s IT systems are resistant to adversarial attacks 24/7, every week of the year. Our goal is to provide an automated and continuous cyber security reporting solution that not only is best-in-class for large organizations but also fits the IT budgets for the mass market of small-to-mid-size businesses and government entities,” said Gurpreet Sahota, Chief Operating Officer, DRT Cyber. 

CompTIA Members offer assistance to victims of Ransomware Attacks

Posted on by admin

CompTIA, the non-profit association for the information technology (IT) industry and workforce, announced a number of initiatives to assist IT companies affected by the global ransomware outbreak.

CompTIA member organisations are assisting and supporting other IT companies and via them the customers who have been affected by the ransomware attack.

MJ Shoer, senior vice president and executive director of the CompTIA ISAO said “Within hours of the attack being discovered more than three dozen members of the CompTIA Information Sharing and Analysis Organization (ISAO) offered assistance, including driving or flying to impacted companies to provide additional ‘boots on the ground,’ as well as sharing communications, incident response strategies, technical support and other resources.”

CompTIA is creating a Rapid Response Team, comprising of internal and member resources, to assist any IT firm that is the victim of a cyberattack, whether or not they are a CompTIA member.

In addition, the CompTIA ISAO’s Cyber-Forum is giving near-real-time updates on the attack, with the information open to the entire industry, not just ISAO members.

“This was a global attack impacting companies around the world, reminding us that we face unprecedented threats from cyberattacks, unlike any threat we have collectively faced in the past. That is why it is critical that we engage in an active discourse that discourages ‘cyber-shaming’ and encourages public and private organizations to come forward immediately and share as much threat intelligence as possible to limit the damage of these attacks and to ward off future incursions.” Shoer said.

“Kaseya just holds the unfortunate distinction of being the company attacked, even as they were working on closing down the very vulnerability that the attackers used,” he said. “Kaseya is to be commended for their transparency throughout this attack.”

Cisco Finishes Acquisition of Kenna Security

Posted on by admin

The acquisition of Kenna Security, Inc. by CISCO is complete. Cisco clients will tackle important security posture concerns by working cross-functionally to swiftly automate cybersecurity threat prediction, identification, prioritisation, and remediation with the integration of Kenna Security’s industry-leading risk-based vulnerability management platform.

Customers will be able to locate and prioritise an organization’s assets with a consolidated, contextual view after combining Kenna’s vulnerability management platform with Cisco’s SecureX platform’s market-leading detection and response capabilities (XDR). This will lower the friction associated with compliance activities by speeding decision making, accelerating and simplifying orchestration responses. Kenna’s solution is compatible with all major vulnerability assessment platforms in the market.

“Cisco is helping customers and partners reimagine a future of work that is hybrid. As they work from anywhere, continue their transition to the cloud and manage the rapidly evolving threat landscape, we are focused on radically simplifying security. By taking a risk-based approach to vulnerability management, we are able to speed and automate threat detection and response, allowing users to quickly address the most pressing issues first. Combined with SecureX, Kenna Security will weave threat management and risk-based vulnerability management together to further extend our lead in providing the broadest XDR capabilities in the industry – truly transforming how teams effectively manage the overall risk for an organization,” said Jeetu Patel, executive vice president and general manager, Cisco Security and Collaboration.

“Every security team wants to work more efficiently, and every leader needs the data to support critical decisions about risk. Kenna Security’s sophisticated, data-driven platform combined with Cisco’s breadth and scale will help our customers continue to do both. Together we will reshape the way the industry at large addresses risk by applying proven data science and machine learning at scale,” said Karim Toubba, Kenna Security CEO.

Accenture has acquired Sentor, a Cyber Defense and Managed Security Services company based in Sweden

Posted on by admin

Accenture has acquired Sentor, a cyber defense and managed security services company based in Sweden. Financial terms of acquisition were not disclosed.

Sentor was established in 1998 and is based in Stockholm, with offices in Gvle and Malm as well. Advisory services, security testing, managed detection, and incident-response capabilities are all part of the company’s offering, which is backed up by a security operations centre in Stockholm that operates 24 hours a day, seven days a week. Finance, insurance, manufacturing, and retail are just a few of the industries that it serves.

The approximately 80 cybersecurity experts from Sentor will join the Accenture Security team in Sweden, boosting Accenture’s local resources and skills and meeting the increasing demand for domestic cybersecurity and managed security services.

Åse Holmberg, Sentor CEO, said, “Maintaining a high cybersecurity posture is not an IT-issue, but a major concern for businesses and organizations around the world. Sentor’s goal has never been to ‘just’ help our clients with cybersecurity. We strive to raise the bar throughout the entire region to ensure organizations in the Nordics have a strong cybersecurity presence. Joining forces with Accenture’s global team will help us towards that goal, and together we can provide an unmatched level of advanced technical skills needed to tackle the cybersecurity challenges of the 21st century. As a result, we not only help clients better defend themselves against the imminent threat adversaries pose but give our employees more opportunities to grow.”

“Sentor has a very strong reputation in the cybersecurity community in Sweden through its long-lasting experience in delivering advanced cybersecurity services to the Swedish market. They have managed to attract exceptional talent and grow a technical security culture that is unique in the industry. We are very excited to welcome this highly talented group of professionals that will strengthen our ability to provide world-class cybersecurity to our clients,” said Bala Periasamy, who leads Accenture Security in Sweden.

“With the daily barrage of cyberattacks, it’s time for organizations to take a new view on managing cyber risks. Securing a business ecosystem can’t be piecemeal; it takes the right talent, investments and technology know-how. The acquisition of Sentor further expands our ability to help clients match this challenging cybersecurity environment. We are excited about what we can achieve together to help organizations in Sweden become more resilient,” said Kelly Bissell, who leads Accenture Security globally.

InfoSecurity Outlook Magazine focuses on keeping track of Information Security, Data Security, Cloud Security, IoT Security and Fraud Management related technology to help entrepreneurs protect their organizational data from threats and misuse.

Quick Links

Our Brands

© 2023 InfoSecurity Outlook. All rights reserved.

Terms & Conditions

Privacy Policy