Securing the Unseen: Reimagining Data Security with Confidential Computing

Reimagining Data Security with Confidential Computing
Understanding today's escalating data security challenges and the need to fortify defenses against breaches: why long-term security strategies are important to safeguard critical business assets.
 

Acknowledge the Data Security Challenge

Data usage has exploded, with massive volumes of data being generated every day. Data has emerged as one of the most valuable business assets, applicable across all industries. The safeguarding of this data, whether in the form of financial records, healthcare information, or intellectual property, holds prime importance. However, protecting corporate data and preventing data loss or breaches is not an easy task while simultaneously ensuring accessibility to authorized personnel within the organization.
 
Companies must also adhere to specific data protection regulations, particularly to secure sensitive information like customer data and health records. In some sectors, the demand for elevated data security is even more pronounced. Nevertheless, the risks associated with data breaches continue to escalate, as underscored by a recent report from IBM Security. The report revealed that 52% of all breaches were malicious attacks, with personally identifiable information (PII) of customers being the most frequently compromised data type, incurring the highest costs. Astonishingly, 80% of data breaches involved PII, with an average cost of $150 per lost or stolen record.
 
Moreover, a study by Cisco indicates that nearly two-thirds of the global population will have internet access within the next year, projecting a total of 5.3 billion internet users by 2023, encompassing 66% of the global populace. This growing internet usage intensifies the need to bolster data security across industries. To effectively tackle these challenges, businesses must formulate a comprehensive solution and strategy. As they progress, the cultivation of a positive brand image hinges on their ability to adapt. As technology advances, the imperative for enhanced security measures will only grow more urgent.
 

Fortifying Data Security in the Digital Age: Is There a Need for Evolution?

Organizations got a taste of remote working due to the pandemic, which resulted in an upsurge in cloud adoption. However, this did not come without challenges. As businesses increasingly rely on public and hybrid cloud services, safeguarding data privacy within the cloud becomes critical. Consequently, there is a pressing need for enhanced cloud data security to instill greater confidence in business leaders regarding the protection and confidentiality of their data in the cloud.
 
Data exists in three primary states: at rest, in use, and in transit. Even if organizations implement encryption measures for data at rest and data in transit over the network, the data they process remains vulnerable to unauthorized access and tampering while in use. Therefore, ensuring the protection of data in use is a critical component of comprehensive security throughout the entire data lifecycle. In today's data-centric environment, it is prudent to prioritize a method that centers on securing the data itself.
 
Statista reveals that as of 2023, the average damage caused by a data breach in the USA amounts to $9.4 million. These incidents, however, translate beyond the financial losses and further result in erosion of customer trust and damage to the organization's reputation. CISOs need to ensure that vulnerabilities related to data security are eliminated, particularly for data in use, and work in conjunction with business leaders to establish a robust framework for data governance.
 

Confidential Computing: Your Data's Fort Knox

After all is said, the central challenge remains unchanged: how to protect data and code that are actually in use in memory. Security entities have grappled with an ongoing battle against cyber threats, often yielding to breaches and the unauthorized extraction of highly valuable information. The need is to establish unaltered workload applications and data system memory capable of functioning seamlessly in any environment, free from the reach of internal and external attacks.
 
Confidential Computing emerges as a solution with an innovative, hardware-based architectural approach to security through secure enclaves. Confidential Computing concentrates on safeguarding data in use, specifically by securing memory to mitigate the inherent vulnerabilities of unencrypted data during processing. To better prepare for modern requirements, businesses must seek collaboration with a trusted advisor and transition toward modern solutions. Partnering with a proficient service provider can yield cost reductions, whether in terms of time, financial resources, or computing expenses, while also offering long-term strategic guidance.
 
It is important for organizations and decision-makers to avoid falling into the fallacy of illusory security, assuming that strategies solely focused on thwarting malicious intruders are adequate and that the time for action has not yet arrived. The security landscape is in constant flux, with the rapid advancement of technology in our daily lives reshaping the approach to security. As per Gartner, by 2025, over 75% of enterprise-generated data will be processed through edge or cloud computing. The software sourced by companies from cloud-service platforms, open repositories, and software-as-a-service providers is anticipated to surge from 23% today to nearly 50% in 2025, says McKinsey. Consequently, security leaders must grasp the trajectory their organizations are on and ensure that effective protective measures are implemented.
 

Fortanix as a Data Security Partner: What Does It Offer?

Execution follows comprehension; after all, mere discourse is futile without practical implementation. It is already established that an adept partner significantly contributes to the data security efforts of an organization, resulting in potential cost savings. Fortanix is such a name that has emerged as a prominent player in data security. The company is a pioneer in the confidential computing area, and this serves as a huge differentiator. Fortanix caters to a diverse array of use cases, spanning key management services, tokenization, secret management, code signing, and more.
 
In an insightful interview with Media7, Shashi Kiran, the Chief Marketing Officer at Fortanix, aptly remarked:
 
In today’s environment, when data breaches and ransomware have become the norm, it is a big deal for companies to have an elegant solution that allows them to simplistically deal with securing data in a manner that allows regulatory compliance as well.
 
The significance of AI-based approaches cannot be ignored either. The escalating volume of data, particularly the surge in regulated data, has brought in the need to construct automation and Artificial Intelligence–based frameworks capable of operating at scale. Fortanix has delved into this arena, recognizing the heightened utility of AI in conjunction with confidential computing principles, especially in the case of encrypted data. The company has introduced confidential AI solutions that are gaining mainstream applicability, with initial ventures into the healthcare sector.
 
Furthermore, Fortanix is well positioned to meet the diverse needs of customers. While the concept of a unified data security platform implies an architecture designed to accommodate diversity and address a spectrum of use cases, it also has remarkable extensibility. Customers appreciate this approach, as it enables them to leverage the platform's capabilities to tackle various challenges without the need for reassessing multiple vendors, retraining staff, or navigating operational complexities. This convergence is particularly advantageous in driving down costs.
 
Moreover, in the realm of Software as a Service (SaaS), a focal point for the company, the “scale as you need” model offers significant flexibility, allowing organizations to align the solution with their business growth seamlessly.
 

Deliberating Security Strategy: Focus on the Long Term

Strengthening security measures without compromising IT productivity poses a complex challenge, particularly exacerbated by the cloud, which underscores the issue of limited control over personnel and third-party contractors associated with IT cloud platform providers. The constant threat of overexposure of host data looms, with even a momentary lapse or a minor oversight risking compromise to the organization's security. The need is to consider a proper functional strategy that deals with it.
 
However, organizations must recognize that constructing a robust data-protection strategy does not necessitate starting from scratch. Established tools such as the NIST Cybersecurity Framework offer a valuable resource, aiding in the comprehension of security risks, prioritization of security efforts, and assessment of the return on investment in cybersecurity investments. The incorporation of technologies like confidential computing and Fortanix can further enhance these efforts.
 
What organizations truly need is a trusted advisor who can guide them away from the allure of project-based security solutions, emphasizing the importance of prioritizing long-term, comprehensive solutions. In this regard, embracing a forward-thinking approach is a promising start for a secure future.

Spotlight

Datashield

Datashield is the leading provider of Managed Security Services (MSS), and Managed Detection and Response (MDR), to middle market and enterprise customers. Datashield maintains a SOC 2 Type II Advanced Security Operation Center located in Scottsdale, AZ. 2009: Datashield was founded as leading edge Cyber Technology company by a joint investment between RSA, EMC and CEO Michael Malone. 2011: Datashield began offering an MSS solution around log based SIEM technologies. As the market evolved, the need for an MSS provider offering real time forensics and malware analysis emerged and DS expanded the offering. Datashield became the exclusive white labeled MSS solution for RSA Netwitness Security Analytics platform to RSA/EMC middle market and enterprise customers. 2012: Datashield reclaims the initial equity investment from RSA/EMC. Additionally, Datashield partnered with the Frank Keener Investments to buy back the investment from RSA /EMC. 2014: Datashield achieved SOC II Type 2 certificat

OTHER ARTICLES
Data Security

Security by Sector: Improving Quality of Data and Decision-Making a Priority for Credit Industry

Article | February 12, 2024

The subject of how information security impacts different industry sectors is an intriguing one. For example, how does the finance industry fare in terms of information security compared to the health sector, or the entertainment business? Are there some sectors that face greater cyber-threats and risks than others? Do some do a better job of keeping data secure, and if so, how and why?A new study of credit management professionals has revealed that improving the quality of data and decision-making will be a top priority for the credit industry in the next three years. The research, from Equifax Ingnite in collaboration with Coleman Parkes, takes a deep dive into the views of credit management pros across retail, banking, finance and debt management/recovery sectors.

Read More
Data Security, Enterprise Security

3 Trends in Data Privacy Breach Laws That Will Carry Over to 2020

Article | November 22, 2022

During 2019, new privacy laws were introduced, and many current laws evolved in the United States and across the global landscape. With the General Data Protection Regulation (GDPR) in full effect, we saw expensive fines levied upon companies that fell victim to data privacy breaches. As we move into a new year, probably the biggest takeaway from 2019 is that being proactive and having a data privacy strategy in place is important to help mitigate the risk of a data privacy breach. The regulatory landscape continues to evolve as states and countries actively pass new expanded requirements for privacy and cybersecurity regulations. While laws in the U.S., like the California Consumer Privacy Act (CCPA), are getting significant attention, many other states and countries are actively amending their breach notification laws to include tighter restrictions.

Read More
Data Security, InfoSec Project Management

Ryuk: Defending Against This Increasingly Busy Ransomware Family

Article | July 13, 2023

On December 16, 2019, the U.S. Coast Guard disclosed a security incident at a facility regulated by the Maritime Transportation Security Act (MTSA). Forensic analysis suggests that the incident might have begun when an employee clicked on a link embedded in a phishing email.This action enabled a threat actor to set Ryuk ransomware loose on the facility’s network. Ultimately, the infection spread to all IT network files, leading Ryuk to disrupt the corporate IT network and prevent critical process control monitoring systems from functioning properly. Phishing is one of the primary infection vectors for most ransomware families, but there’s an interesting twist with this particular family. As noted by Malwarebytes, a typical Ryuk attack begins when a user opens a weaponized Microsoft Office document attached to a phishing email. Opening the document causes a malicious macro to execute a PowerShell command that attempts to download the banking trojan Emotet. This has the ability to download additional malware onto an infected machine that retrieves and executes Trickbot.

Read More

New Ransomware hitting Industrial Control Systems like a nuclear bomb

Article | February 10, 2020

Researchers at security firms including Sentinel One and Drago’s have been mystified by a piece of code named Ekans or Snake, over the last month. Drago’s publically released its full report on Ekans Ransomware that has recently inflicted Industrial Control Systems and these are some of the most high-value systems that bridge the gap between digital and physical systems. In the history of hacking, only a few times a piece of malicious code has been marked attempting to intrude Industrial Control Systems. Ekans is supposed to be the first Ransomware with real primitive capability against the Industrial Control Systems, software, and hardware used in everything from oil refineries to power grids. Researchers say this ransomware holds the capability to attack ICS by Honeywell and GE as well.

Read More

Spotlight

Datashield

Datashield is the leading provider of Managed Security Services (MSS), and Managed Detection and Response (MDR), to middle market and enterprise customers. Datashield maintains a SOC 2 Type II Advanced Security Operation Center located in Scottsdale, AZ. 2009: Datashield was founded as leading edge Cyber Technology company by a joint investment between RSA, EMC and CEO Michael Malone. 2011: Datashield began offering an MSS solution around log based SIEM technologies. As the market evolved, the need for an MSS provider offering real time forensics and malware analysis emerged and DS expanded the offering. Datashield became the exclusive white labeled MSS solution for RSA Netwitness Security Analytics platform to RSA/EMC middle market and enterprise customers. 2012: Datashield reclaims the initial equity investment from RSA/EMC. Additionally, Datashield partnered with the Frank Keener Investments to buy back the investment from RSA /EMC. 2014: Datashield achieved SOC II Type 2 certificat

Related News

Data Security

GuidePoint Security Announces Portfolio of Data Security Governance Services

GuidePoint Security | January 30, 2024

GuidePoint Security, a cybersecurity solutions leader enabling organizations to make smarter decisions and minimize risk, today announced the availability of its Data Security Governance services, which are designed to help customers address the challenges of unstructured data and data sprawl through a proven process and program to meet their unique needs. GuidePoint’s Data Security Governance services consist of policies, standards, and processes leveraging the newest technologies to meet organizations’ data governance goals in both on-prem and cloud environments. Once the right strategy is determined with the customer, GuidePoint Security consultants will review program requirements, assess current policies and controls, perform gap analysis, design and develop/enhance the program, recommend and implement supporting technologies, and create operational processes and metrics. “Whether an organization is just beginning to build their data security governance program or needs help assessing and improving an existing program, our team and service capabilities are built to meet them at their current maturity level,” said Scott Griswold, Practice Director - Security Governance Services, GuidePoint Security. “We work side by side with the customer to conduct the necessary data discovery in their environment and provide tailored recommendations for solutions and processes to ultimately build/improve upon the data security governance program.” GuidePoint’s Data Security Governance Services include: Sensitive Data Cataloging: For organizations just getting started in the process of protecting their sensitive data, GuidePoint offers Data Identification workshops to identify sensitive data types in the environment, including trade secrets, intellectual property, and sensitive business communications. Data Security Governance Program Assessment: For organizations with existing Data Security Governance or Data Protection programs, GuidePoint Security experts will assess the program to identify policy non-compliance, gaps in data protection requirements—whether legal, regulatory, contractual, or business—and program maturity levels. Data Security Governance Program Strategy Development: The GuidePoint team will work with an organization's key stakeholders to design a program strategy aligned with relevant requirements. The outputs of this effort include delivering ongoing sensitive data discovery, automated classification and labeling, the application of required sensitive data protections, restrictions on where sensitive data can be stored and sent, and data retention policy enforcement. Merger and Acquisition Data Identification: This offering provides the ability to identify sensitive data within an M&A target or recent acquisition (including locations, amounts, and access rights) and then perform penetration testing on the storage repositories where that sensitive data exists to determine the risk of data compromise. About GuidePoint Security GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions that minimize risk. Our experts act as your trusted advisor to understand your business and challenges, helping you through an evaluation of your cybersecurity posture and ecosystem to expose risks, optimize resources and implement best-fit solutions. GuidePoint’s unmatched expertise has enabled a third of Fortune 500 companies and more than half of the U.S. government cabinet-level agencies to improve their security posture and reduce risk. Learn more at www.guidepointsecurity.com.

Read More

Software Security

Trellix and One Source Deliver Industry-Leading Managed Detection and Response Security Services

Trellix | January 22, 2024

Trellix, the cybersecurity company delivering the future of extended detection and response (XDR), today announced an expanded strategic partnership with One Source, a Managed Security Services Provider (MSSP) and technology delivery partner. Customers benefit from a Fortune 500 SOC capability built on the Trellix XDR Platform with AI-guided intelligence, enabling faster detection, investigation, and remediation. Trellix, the cybersecurity company delivering the future of extended detection and response (XDR), today announced an expanded strategic partnership with One Source, a Managed Security Services Provider (MSSP) and technology delivery partner. Customers benefit from a Fortune 500 SOC capability built on the Trellix XDR Platform with AI-guided intelligence, enabling faster detection, investigation, and remediation. “The partnership aligns with Trellix’s ongoing commitment to secure organizations from advanced cyber threats,” says Sean Morton, SVP of Professional Services at Trellix. “Leveraging One Source’s MDR capabilities and expanded footprint, we enable more businesses to build cyber resilience, with continued innovation in our combined products and solution offerings to stay ahead of bad actors.” One Source has multiple SOCs leveraging Trellix’s technology, staffed by the industry’s top experts to provide Managed Detection and Response (MDR) capabilities. Their team implements a proactive cyber strategy for customers specific to industry, technology environment, and vulnerabilities, built on the Trellix XDR Platform with 24x7 monitoring. The partnership and combined expertise benefits customers with enhanced services like managed threat detection and response, incident response, security operations and analytics, threat intelligence, threat hunting and forensics, and training and enablement. “The Trellix and One Source partnership is extremely powerful; the former offers an incredible set of security solutions, and the latter excels at personalized deployment and execution,” said Paul Moline, Chief Information Officer, Lindsay Automotive Group. “I never anticipated we could protect our environment with the same security solutions used by government agencies and Fortune 50 companies: I can now sleep at night.” The Trellix XDR Platform’s open architecture and broad set of native security controls across endpoint, email, network, cloud, and data security integrates with over 500 third-party tools to create multi-vector, multi-vendor event correlation and context to speed up investigations. The Trellix Advanced Research Center provides an additional layer of protection by continuously informing the platform with information from millions of global sensors on the latest threat vectors, tactics, and recommendations. One Source experts apply these insights to stay ahead of the constantly evolving threat landscape. “The collaboration with Trellix is a game-changer in reshaping the cybersecurity landscape,” says Eric Gressel, Executive Vice President of Sales, One Source. “Thanks to our partnership, we have access to the highest level of cyber intelligence to fend off newly-revealed hackers and their means of attack, enabling our customers with the most comprehensive offering of enhanced Managed Security Services to protect their businesses.” One Source has a proven track record supporting global businesses spanning retail, restaurant, automotive, healthcare, financial, and manufacturing industries. Trellix customers can rely on One Source's leading Managed Security Services to optimize technology expenses while enhancing telecom connectivity, IT infrastructure, and cybersecurity strategies. About Trellix Trellix is a global company redefining the future of cybersecurity and soulful work. The company’s open and native extended detection and response (XDR) platform helps organizations confronted by today’s most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through machine learning and automation to empower over 40,000 business and government customers with living security. More at https://trellix.com. About One Source One Source helps businesses simplify a complex technology world. One Source is the leading provider of Technology and Managed Security Services for enterprises. Today, One Source manages more than 2,500 customers, 45,000 business locations, and over one million assets throughout North America. In addition to Managed Security Services, One Source provides Managed Technology Expense Management, 24 / 7 local helpdesk, procures and provisions telecom & IT solutions, and manages customer service requests. One Source frequently generates triple-digit ROI for customers through contract negotiation, portfolio optimization, and ongoing expense management. In addition, One Source leverages partnerships with industry leaders, including Trellix to bring Fortune 500 security solutions and fully managed services to the mid-market. One Source's approach empowers businesses to focus on customers and revenue-generating activities. Learn more at https://www.onesource.net/.

Read More

Platform Security

Stellar Cyber and Proofpoint Strategic Alliance to Deliver Comprehensive Email Security Solution For SecOps Teams

Stellar Cyber | January 23, 2024

Stellar Cyber, the innovator of Open XDR, announced a new partnership with Proofpoint, a leading cybersecurity and compliance company. Through this alliance, Proofpoint and Stellar Cyber customers benefit from an out-of-the-box integration enabling swift email investigations and real-time response actions to email-driven attacks. Proofpoint Targeted Attack Protection monitors emails to identify suspicious emails and potentially malicious attachments and URLs. Once identified, the findings are shared with Stellar Cyber automatically. Stellar Cyber’s Open XDR platform ingests, normalizes, and analyzes Proofpoint findings and other collected data to deliver a comprehensive threat picture. As security analysts conduct investigations, they can instruct integrated third-party products – including Proofpoint – on corrective actions. “Protecting organizations against email-borne attacks is a top priority, and security teams need a way to automatically correlate threat telemetry across the entire attack surface in order to quickly remediate threats,” said Andrew Homer, VP of Strategic Alliances, Stellar Cyber. “This new partnership with Proofpoint is the latest example of Stellar Cyber delivering on its Open XDR strategy to provide customers turn-key integrations that improve productivity and threat detection.” “Email attacks remain the number one entry point into an organization, and the level of sophistication of these attacks continues to grow exponentially,” said D.J. Long, Vice President, Strategic Alliances & Business Development, Proofpoint. “We’re thrilled to work with Stellar Cyber on this strategic alliance to help customers protect against advanced email-based threats and unify their cybersecurity defense.” Through this alliance, Stellar Cyber and Proofpoint give security teams an advantage over attackers, resulting in the following: Real-time threat signals exchanged for proactive detection Correlation of Proofpoint alerts across the entire attack surface Automated response actions for immediate threat containment About Stellar Cyber Stellar Cyber’s Open XDR Platform delivers comprehensive, unified security without complexity, empowering lean security teams of any skill level to secure their environments successfully. With Stellar Cyber, organizations reduce risk with early and precise identification and remediation of threats while slashing costs, retaining investments in existing tools, and improving analyst productivity, delivering an 8X improvement in MTTD and a 20X improvement in MTTR. The company is based in Silicon Valley.

Read More

Data Security

GuidePoint Security Announces Portfolio of Data Security Governance Services

GuidePoint Security | January 30, 2024

GuidePoint Security, a cybersecurity solutions leader enabling organizations to make smarter decisions and minimize risk, today announced the availability of its Data Security Governance services, which are designed to help customers address the challenges of unstructured data and data sprawl through a proven process and program to meet their unique needs. GuidePoint’s Data Security Governance services consist of policies, standards, and processes leveraging the newest technologies to meet organizations’ data governance goals in both on-prem and cloud environments. Once the right strategy is determined with the customer, GuidePoint Security consultants will review program requirements, assess current policies and controls, perform gap analysis, design and develop/enhance the program, recommend and implement supporting technologies, and create operational processes and metrics. “Whether an organization is just beginning to build their data security governance program or needs help assessing and improving an existing program, our team and service capabilities are built to meet them at their current maturity level,” said Scott Griswold, Practice Director - Security Governance Services, GuidePoint Security. “We work side by side with the customer to conduct the necessary data discovery in their environment and provide tailored recommendations for solutions and processes to ultimately build/improve upon the data security governance program.” GuidePoint’s Data Security Governance Services include: Sensitive Data Cataloging: For organizations just getting started in the process of protecting their sensitive data, GuidePoint offers Data Identification workshops to identify sensitive data types in the environment, including trade secrets, intellectual property, and sensitive business communications. Data Security Governance Program Assessment: For organizations with existing Data Security Governance or Data Protection programs, GuidePoint Security experts will assess the program to identify policy non-compliance, gaps in data protection requirements—whether legal, regulatory, contractual, or business—and program maturity levels. Data Security Governance Program Strategy Development: The GuidePoint team will work with an organization's key stakeholders to design a program strategy aligned with relevant requirements. The outputs of this effort include delivering ongoing sensitive data discovery, automated classification and labeling, the application of required sensitive data protections, restrictions on where sensitive data can be stored and sent, and data retention policy enforcement. Merger and Acquisition Data Identification: This offering provides the ability to identify sensitive data within an M&A target or recent acquisition (including locations, amounts, and access rights) and then perform penetration testing on the storage repositories where that sensitive data exists to determine the risk of data compromise. About GuidePoint Security GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions that minimize risk. Our experts act as your trusted advisor to understand your business and challenges, helping you through an evaluation of your cybersecurity posture and ecosystem to expose risks, optimize resources and implement best-fit solutions. GuidePoint’s unmatched expertise has enabled a third of Fortune 500 companies and more than half of the U.S. government cabinet-level agencies to improve their security posture and reduce risk. Learn more at www.guidepointsecurity.com.

Read More

Software Security

Trellix and One Source Deliver Industry-Leading Managed Detection and Response Security Services

Trellix | January 22, 2024

Trellix, the cybersecurity company delivering the future of extended detection and response (XDR), today announced an expanded strategic partnership with One Source, a Managed Security Services Provider (MSSP) and technology delivery partner. Customers benefit from a Fortune 500 SOC capability built on the Trellix XDR Platform with AI-guided intelligence, enabling faster detection, investigation, and remediation. Trellix, the cybersecurity company delivering the future of extended detection and response (XDR), today announced an expanded strategic partnership with One Source, a Managed Security Services Provider (MSSP) and technology delivery partner. Customers benefit from a Fortune 500 SOC capability built on the Trellix XDR Platform with AI-guided intelligence, enabling faster detection, investigation, and remediation. “The partnership aligns with Trellix’s ongoing commitment to secure organizations from advanced cyber threats,” says Sean Morton, SVP of Professional Services at Trellix. “Leveraging One Source’s MDR capabilities and expanded footprint, we enable more businesses to build cyber resilience, with continued innovation in our combined products and solution offerings to stay ahead of bad actors.” One Source has multiple SOCs leveraging Trellix’s technology, staffed by the industry’s top experts to provide Managed Detection and Response (MDR) capabilities. Their team implements a proactive cyber strategy for customers specific to industry, technology environment, and vulnerabilities, built on the Trellix XDR Platform with 24x7 monitoring. The partnership and combined expertise benefits customers with enhanced services like managed threat detection and response, incident response, security operations and analytics, threat intelligence, threat hunting and forensics, and training and enablement. “The Trellix and One Source partnership is extremely powerful; the former offers an incredible set of security solutions, and the latter excels at personalized deployment and execution,” said Paul Moline, Chief Information Officer, Lindsay Automotive Group. “I never anticipated we could protect our environment with the same security solutions used by government agencies and Fortune 50 companies: I can now sleep at night.” The Trellix XDR Platform’s open architecture and broad set of native security controls across endpoint, email, network, cloud, and data security integrates with over 500 third-party tools to create multi-vector, multi-vendor event correlation and context to speed up investigations. The Trellix Advanced Research Center provides an additional layer of protection by continuously informing the platform with information from millions of global sensors on the latest threat vectors, tactics, and recommendations. One Source experts apply these insights to stay ahead of the constantly evolving threat landscape. “The collaboration with Trellix is a game-changer in reshaping the cybersecurity landscape,” says Eric Gressel, Executive Vice President of Sales, One Source. “Thanks to our partnership, we have access to the highest level of cyber intelligence to fend off newly-revealed hackers and their means of attack, enabling our customers with the most comprehensive offering of enhanced Managed Security Services to protect their businesses.” One Source has a proven track record supporting global businesses spanning retail, restaurant, automotive, healthcare, financial, and manufacturing industries. Trellix customers can rely on One Source's leading Managed Security Services to optimize technology expenses while enhancing telecom connectivity, IT infrastructure, and cybersecurity strategies. About Trellix Trellix is a global company redefining the future of cybersecurity and soulful work. The company’s open and native extended detection and response (XDR) platform helps organizations confronted by today’s most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through machine learning and automation to empower over 40,000 business and government customers with living security. More at https://trellix.com. About One Source One Source helps businesses simplify a complex technology world. One Source is the leading provider of Technology and Managed Security Services for enterprises. Today, One Source manages more than 2,500 customers, 45,000 business locations, and over one million assets throughout North America. In addition to Managed Security Services, One Source provides Managed Technology Expense Management, 24 / 7 local helpdesk, procures and provisions telecom & IT solutions, and manages customer service requests. One Source frequently generates triple-digit ROI for customers through contract negotiation, portfolio optimization, and ongoing expense management. In addition, One Source leverages partnerships with industry leaders, including Trellix to bring Fortune 500 security solutions and fully managed services to the mid-market. One Source's approach empowers businesses to focus on customers and revenue-generating activities. Learn more at https://www.onesource.net/.

Read More

Platform Security

Stellar Cyber and Proofpoint Strategic Alliance to Deliver Comprehensive Email Security Solution For SecOps Teams

Stellar Cyber | January 23, 2024

Stellar Cyber, the innovator of Open XDR, announced a new partnership with Proofpoint, a leading cybersecurity and compliance company. Through this alliance, Proofpoint and Stellar Cyber customers benefit from an out-of-the-box integration enabling swift email investigations and real-time response actions to email-driven attacks. Proofpoint Targeted Attack Protection monitors emails to identify suspicious emails and potentially malicious attachments and URLs. Once identified, the findings are shared with Stellar Cyber automatically. Stellar Cyber’s Open XDR platform ingests, normalizes, and analyzes Proofpoint findings and other collected data to deliver a comprehensive threat picture. As security analysts conduct investigations, they can instruct integrated third-party products – including Proofpoint – on corrective actions. “Protecting organizations against email-borne attacks is a top priority, and security teams need a way to automatically correlate threat telemetry across the entire attack surface in order to quickly remediate threats,” said Andrew Homer, VP of Strategic Alliances, Stellar Cyber. “This new partnership with Proofpoint is the latest example of Stellar Cyber delivering on its Open XDR strategy to provide customers turn-key integrations that improve productivity and threat detection.” “Email attacks remain the number one entry point into an organization, and the level of sophistication of these attacks continues to grow exponentially,” said D.J. Long, Vice President, Strategic Alliances & Business Development, Proofpoint. “We’re thrilled to work with Stellar Cyber on this strategic alliance to help customers protect against advanced email-based threats and unify their cybersecurity defense.” Through this alliance, Stellar Cyber and Proofpoint give security teams an advantage over attackers, resulting in the following: Real-time threat signals exchanged for proactive detection Correlation of Proofpoint alerts across the entire attack surface Automated response actions for immediate threat containment About Stellar Cyber Stellar Cyber’s Open XDR Platform delivers comprehensive, unified security without complexity, empowering lean security teams of any skill level to secure their environments successfully. With Stellar Cyber, organizations reduce risk with early and precise identification and remediation of threats while slashing costs, retaining investments in existing tools, and improving analyst productivity, delivering an 8X improvement in MTTD and a 20X improvement in MTTR. The company is based in Silicon Valley.

Read More

Events