VIRTUAL DESKTOP TOOLS
VMware | August 09, 2022
At Black Hat USA 2022, VMware, Inc. released its eighth annual Global Incident Response Threat Report, which takes a deep dive into the challenges faced by security teams amid pandemic disruptions, burnout, and geopolitically motivated cyberattacks. Sixty-five percent of defenders state that cyberattacks have increased since Russia invaded Ukraine, according to report findings. The report also shines a light on emerging threats such as deepfakes, attacks on APIs, and cybercriminals targeting incident responders themselves.
“Cybercriminals are now incorporating deepfakes into their attack methods to evade security controls,” said Rick McElroy, principal cybersecurity strategist at VMware. “Two out of three respondents in our report saw malicious deepfakes used as part of an attack, a 13% increase from last year, with email as the top delivery method. Cybercriminals have evolved beyond using synthetic video and audio simply for influence operations or disinformation campaigns. Their new goal is to use deepfake technology to compromise organizations and gain access to their environment.”
Additional key findings from the report include:
Cyber pro burnout remains a critical issue. Forty-seven percent of incident responders said they experienced burnout or extreme stress in the past 12 months, down slightly from 51% last year. Of this group, 69% (versus 65% in 2021) of respondents have considered leaving their job as a result. Organizations are working to combat this, however, with more than two-thirds of respondents stating their workplaces have implemented wellness programs to address burnout.
Ransomware actors incorporate cyber extortion strategies. The predominance of ransomware attacks, often buttressed by e-crime groups’ collaborations on the dark web, has yet to let up. Fifty-seven percent of respondents have encountered such attacks in the past 12 months, and two-thirds (66%) have encountered affiliate programs and/or partnerships between ransomware groups as prominent cyber cartels continue to extort organizations through double extortion techniques, data auctions, and blackmail.
APIs are the new endpoint, representing the next frontier for attackers. As workloads and applications proliferate, 23% of attacks now compromise API security. The top types of API attacks include data exposure (encountered by 42% of respondents in the past year), SQL and API injection attacks (37% and 34%, respectively), and distributed Denial-of-Service attacks (33%).
Lateral movement is the new battleground. Lateral movement was seen in 25% of all attacks, with cybercriminals leveraging everything from script hosts (49%) and file storage (46%) to PowerShell (45%), business communications platforms (41%), and .NET (39%) to rummage around inside networks. An analysis of the telemetry within VMware Contexa, a full-fidelity threat intelligence cloud that’s built into VMware security products, discovered that in April and May of 2022 alone, nearly half of intrusions contained a lateral movement event.
“In order to defend against the broadening attack surface, security teams need an adequate level of visibility across workloads, devices, users and networks to detect, protect, and respond to cyber threats, When security teams are making decisions based on incomplete and inaccurate data, it inhibits their ability to implement a granular security strategy, while their efforts to detect and stop lateral movement of attacks are stymied due to the limited context of their systems.”
Chad Skipper, global security technologist at VMware
Despite the turbulent threat landscape and rising threats detailed in the report, incident responders are fighting back with 87% saying that they are able to disrupt a cybercriminal’s activities sometimes (50%) or very often (37%). They’re also using new techniques to do so. Three-quarters of respondents (75%) say they are now deploying virtual patching as an emergency mechanism. In every case, the more visibility defenders have across today’s widening attack surface, the better equipped they’ll be to weather the storm.
VMware conducted an online survey about trends in the incident response landscape in June 2022, and 125 cybersecurity and incident response professionals from around the world participated. Percentages in certain questions exceed 100 percent because respondents were asked to check all that apply. Due to rounding, percentages in all questions may not add up to 100 percent.
In addition to VMware’s presence at Black Hat USA 2022, there will be more than 100 security talks at VMware Explore, the global multi-cloud industry event taking place August 29 – September 1, 2022 at Moscone Center in San Francisco. Register today to begin building your agenda.
VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda.
VMware | June 13, 2022
VMware has been rated a Visionary in the Gartner Magic Quadrant for Application Performance Monitoring and Observability for 2022. Tanzu Observability by Wavefront, a VMware observability platform, has been honored for its vision and execution. Visit the VMware Tanzu website to get a free copy of the Gartner 2022 Magic Quadrant for Application Performance Monitoring and Observability.
To satisfy the criteria of becoming a contemporary digital company, organizations are increasingly embracing multi-cloud strategies and modern application development. However, managing and monitoring app performance across these dispersed settings is challenging and requires unified observability throughout the tech stack, which conventional segregated monitoring technologies lack.
“VMware Tanzu Observability by Wavefront delivers enterprise-grade observability and analytics for multi-cloud and Kubernetes environments at scale, allowing our customers to quickly troubleshoot and reduce performance bottlenecks across their infrastructure and applications, and in turn, achieve higher availability of business-critical services to their end-users. This recognition by Gartner affirms our commitment to giving organizations the solutions they need to succeed in their cloud journeys.”
VIRTUAL DESKTOP TOOLS
Mastek | July 20, 2022
Mastek, a turnkey & trusted Digital Engineering and Cloud Transformation provider, today announced the signing of a definitive agreement to acquire MST Solutions.
MST Solutions is based in Chandler, AZ, and is an independent Salesforce consulting partner in the Americas region. MST is a trusted partner to several Fortune 1000 and large enterprise clients. MST has built a strong reputation for themselves, especially in the Healthcare, Public Sector and Manufacturing Industry verticals.
"Mastek's Business Outcomes and Industry First DNA paired with MST's Salesforce-led innovation capabilities will only strengthen the value we will deliver to our customers and help them in their journey to Decomplex Digital. This acquisition is expected to significantly increase our market share in existing accounts across industries in the Americas and provide a foundation to scale our Digital Transformation business globally," shared Hiral Chandrana, Global CEO, Mastek.
"We're thrilled to join the Mastek family. We share a strong cultural alignment and a deep commitment to the growth and experience of our colleagues. Partnering with Mastek is the right choice for us to expand into a global market with a continued focus on delivering outcomes for our customers. By combining our decade of experience in the Salesforce ecosystem across multiple clouds with Mastek's global scale, we'll be able to deliver value across a wide range of integrated service offerings,"
Thiru Thangarathinam, Founder and CEO, MST Solutions
"Our partner ecosystem is a key growth driver of the Salesforce Economy," said Tyler Prince, Executive Vice President, Worldwide Alliances & Channels, Salesforce. "The combined power of Mastek and MST Solutions will help companies drive their digital transformations and connect with their customers in this new digital economy."
"Mastek has built a Build-Buy-Partner strategic vision for Digital & Cloud services and Salesforce is identified as a growth opportunity. MST brings in all the right attributes with deep expertise in Salesforce clouds to help us achieve this strategy and provide differentiated industry solutions," shared Raman Sapra, President and Global Chief Growth Officer for Mastek.
Mastek is a turnkey & trusted Digital Engineering & Cloud Transformation partner that delivers Innovative Solutions and Business Outcomes for clients in Healthcare & Life Sciences, Retail, Manufacturing, Financial Services, Government/Public Sector, etc. We enable customer success and business change programs by partnering with enterprises to unlock the power of data, modernize applications to the cloud, and accelerate digital advantage for all stakeholders. Customers Trust Mastek to deliver Business Value with Velocity, and we operate in 40+ countries, including the U.K., the Americas, Europe, the Middle East, and APAC, with ~5000 employees. We are in the business of de-complexing Digital and making our clients future-ready with an industry-first approach. Evosys, a Mastek company, is an Oracle Partner and a leading Oracle Cloud implementation and consultancy provider and has executed programs for 1,300+ Oracle Cloud clients.
About MST Solutions:
Founded in 2012, MST Solutions is the largest independent Salesforce consulting partner in the American Southwest region. With Summit-level status in the Salesforce ecosystem and a 5 out of 5 Customer Satisfaction score, they're service experts who take service to a whole new level. Through the framework of a proven effective Roadmap to Results, their team of Salesforce architects, developers, project managers, and administrators add their expertise to your team to craft agile, innovative solutions that answer your organization's operational challenges today and grow as you grow.