CloudPassage, VMware Cloud, & Portshift K8SHIELD – ESW #192

Announcements

• Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

• Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!

Hosts

Paul Asadoorian

Founder at Security Weekly

0offset

https://securityweekly.com

1. 1. Fortinet Buys Cloud Security Firm OPAQ
   Fortinet has acquired Secure Access Service Edge (SASE) provider OPAQ in a move to add SASE capabilities to the Fortinet Security Platform and Security Fabric architecture. OPAQ brings the cloud-based Zero Trust Network Access (ZTNA) solution to Fortinet's existing SASE offering. The company has focused on security for widely distributed networks and endpoints, including branch offices, remote users, and IoT devices.
2. 2. Attivo Networks EDN enhancements prevent attackers from fingerprinting an endpoint – Help Net Security
   Unlike traditional security solutions, these new capabilities proactively redirect suspicious endpoint inbound or outbound traffic to decoys for attacker engagement. The new EDN Deflect functionality provides alerts to unauthorized host and service scanning, which is critical because other security controls typically do not generate an alert for these types of activities.
3. 3. Risk Assessment Company CyCognito Raises $30 Million
4. 4. CloudPassage Expands Cloud Security Capabilities for Docker, Kubernetes, and Container-related Services on AWS
5. 5. Attivo Networks integrates with FireEye for advanced threat protection
6. 6. Tanium Brings Intelligence to the Edge with Zero Infrastructure Endpoint Management and Security
7. 7. VMware Cloud on AWS drives app modernization, business continuity and better cloud economics – Help Net Security
   These new offerings include the new Amazon Elastic Compute Cloud (Amazon EC2) i3en instances that can deliver nearly 50% lower cost per GB of raw storage, a 2-host SDDC configuration that lowers the entry price for production environments by 33%, and a new multi-tenant cloud management service that enables partners to support 5-10x more customers with no additional upfront costs, while enabling smaller organizations to purchase VMware Cloud on AWS on a per VM rather than per host basis.
8. 8. Portshift unveils new K8SHIELD Framework and introduces context aware security policy enablement – Help Net Security
9. 9. Sequitur Labs Launches EmSPARK 2.0 Security
10. 10. Artificial Intelligence Cybersecurity Company CalypsoAI Announces $13 Million in Series A Funding
11. 11. Digital Shadows announces integration with Atlassian Jira
12. 12. LogRhythm Releases Version 7.5 of NextGen SIEM Platform and New Open Collector Technology
    Neat: Quickly onboard Cloud services: While customers can choose to manually create and customise collection interfaces if desired, Open Collector also provides several premade Beats. This allows analysts to onboard many popular cloud services with minimal administration work. Out-of-the-box Beats include those for Google G Suite, AWS S3, Event Hub and Sophos.
13. 13. Attivo Networks Announces Endpoint Capabilities that Catch Attackers at Hello
14. 14. RiskSense platform now provides visibility across both infrastructure and application vulnerability risk – Help Net Security
15. 15. Sysdig Cuts Container and Kubernetes Visibility and Security Onboarding to 5 Minutes
16. 16. Aqua Security Unveils New Platform to Secure the Build, Infrastructure, and Workloads of Cloud Native Applications
    Auto-Remediation of many common weaknesses in configuration, in addition to remediation advice that can be applied manually, Additional public cloud support is now generally available for Google Cloud Platform (GCP) and Oracle Cloud, Infrastructure as Code (IaC) scanning of Terraform and AWS CloudFormation to find weaknesses in deployment templates
17. 17. Dragos and Fortinet partner to broaden cybersecurity across industrial networks
    Dragos announced that through a partnership with Fortinet it has released an initial integration of the Dragos Platform with FortiSIEM, giving cyber defenders at industrial organizations a unified view of threats and events across the converged enterprise IT and industrial OT (operational technology) environment. Threats detected on OT networks via the Dragos Platform can now be visualized in FortiSIEM.
18. 18. Cloudflare releases Workers Unbound, a secure serverless computing platform
    "Cloudflare announced the release of Cloudflare Workers Unbound, offering a serverless platform for developers with unparalleled flexibility, performance, security, ease of use, and pricing." - So priced cheap, fast, secure AND easy to use? I don't believe it..
19. 19. Sysdig Secure DevOps Platform offers onboarding, out-of-the-box dashboards and integrations – Help Net Security
20. 20. Amazon Fraud Detector: Use machine learning in the fight against online fraud – Help Net Security

John Kinsella

Co-founder & CTO at Cysense