VPN

New Research from Knight Ink and BlastWave Provides Vital Insight to Preventing Account Take Over, VPNs are Dead

BlastWave, a new challenger in the software-defined perimeter (SDP) arms race designed to protect critical infrastructure assets and applications, today announced a partnership with Knight Ink, a full-service digital brand, content and experience agency for challenger brands in cybersecurity. Through the partnership, Knight Ink and BlastWave have jointly released a whitepaper to present a new approach to secure remote access that eliminates virtual private networks (VPNs) from the now defunct edge and dissolving intranet, to a new software-defined perimeter (SDP) that can prevent Account Take Over (ATO).

According to the recently released whitepaper, "The Valley of Kings: SDP Rising and The Fall of VPNs," when the COVID-19 pandemic forced a shift to work-from-home environments, many organizations relied on VPNs and other remote access solutions as they were the only options they had. Many continue to deploy VPNs even though a recent survey shows, "93 percent of organizations surveyed have deployed some sort of VPN, yet 94 percent know that VPNs are a popular target for cybercriminals." The same report states 67 percent are looking at alternatives to the traditional VPN for remote access requirements.

"We are seeing an exodus away from legacy VPN technology towards SDP solutions. But change is not happening fast enough. How many times must we repeat the same mistakes? Legacy VPNs are dead, much like the pharaohs who once ruled over Egypt who now lie in rest in the Valley of Kings graveyard for which the namesake of our new white paper was based. We must pave the way for the zero-trust enterprise now relying on SDP solutions to protect remote and hybrid workforces," said Alissa Knight, Cybersecurity Influencer and Partner, Knight Ink. "Our partnership with BlastWave made sense because they understand the advanced threats organizations face today. BlastWave has developed an innovative SDP solution with a unified stack combining passwordless multi-factor authentication, secure remote access, and microsegmentation that cloaks critical infrastructure."

Other key findings include:

  • When VPNs were introduced in 1996, they promised a new, more un-hackable future. 22 years later, 557 vulnerabilities are returned with the keyword VPN in the CVE database at MITRE.
  • Software-defined microsegmentation allows organizations to create communities of assets and people that define who and what can talk to each other in a network. True to its foundation in zero-trust security, SDP obviates the idea that we should trust users, the assets they're using, and the data they're trying to access.
  • According to Gartner "By 2023, 60 percent of enterprises will phase out most of their remote access VPNs in favor of ZTNA (SDPs).

So many cyber companies are obsessed with identifying and spotting malware signatures and patterns that look anomalous. But this is a computer science focus, not a human focus. Hackers are humans who use creativity, code and tools to take over accounts, implant malware, and profit with a low risk of getting prosecuted. BlastShield shuts down the top two ways hackers go after targets, credentials and exposed web services. We also greatly reduce human error by eliminating numerous configuration steps that can create inadvertent vulnerabilities. Fundamentally, BlastWave prevents many attacks and reduces the severity of the rest through microsegmentation. Our obsession about hacking from a human perspective is what drew us to Alissa Knight in the first place, with her credentials, experience, and chutzpah badassness, she tells the story through an adversarial lens. That is the partnership origin story of why we collaborate. Together we want to challenge the way the industry thinks about secure remote access, starting with VPNs - they are not effective and must be replaced."

Tom Sego, CEO and founder, BlastWave

As part of the collaboration, Knight Ink in partnership with its sister company M&A Knight Studios, will create written and visual experiences for BlastWave in the form of whitepapers, videos, and episodic short films to demonstrate the business imperative of organizations moving to zero-trust network access (ZTNA) powered by BlastWave's SDP solution.

BlastShield integrates three innovative products into a single, patented SDP solution that combines infrastructure, cloaking and passwordless multi-factor authentication (MFA) for identity-based secure remote network access for organizations that have adopted a zero-trust security model. BlastShield enables organizations to hide on-premises and cloud workloads from outsider and insider threats, concealing an organization's infrastructure from cyberattacks through software-defined microsegmentation, without modifications to existing network fabric and hardware. BlastWave solves the problem that traditional VPNs and other complex end-point technologies have been unable to address by applying a zero-trust software-defined perimeter throughout the network architecture, not just at the endpoint, rendering the entire network invisible.

About BlastWave
Founded by former executives and technologists from Apple and Cisco, BlastWave is taking a fundamentally different approach to security aimed at protecting privacy and connected devices from cyberattacks. BlastWave's patented product, BlastShield™️, is an integrated, zero-trust stack that combines state-of-the-art passwordless multi-factor authentication with high-performance, resilient encrypted connectivity and built-in microsegmentation. BlastWave is backed by Rocket Strategies, Lucas Venture Group, and Millennium Investments. The company is headquartered in Palo Alto, California.

About Knight Ink
Knight Ink is a content strategy, content creation, and influencer marketing agency founded for category leaders and challenger brands in cybersecurity to fill current gaps in content marketing. We will help you create and distribute your stories to the market in the form of written and visual storytelling drawn from 20+ years of experience working with global brands in cybersecurity. We are trusted advisers to cybersecurity marketing leaders to help them find their blue ocean strategy; develop their content strategy; and create the content that tells their unique story through the lens of an adversary. The content we create for our clients tells that story of efficacy through the lens of the adversary that their product protects their customers against.

Spotlight

Other News
Virtual Desktop Tools, Virtual Desktop Strategies

Leostream Enhances Security and Management of vSphere Hybrid Cloud Deployments

Business Wire | January 29, 2024

Leostream Corporation, the world's leading Remote Desktop Access Platform provider, today announced features to enhance security, management, and end-user productivity in vSphere-based hybrid cloud environments. The Leostream platform strengthens end-user computing (EUC) capabilities for vSphere users, including secure access to both on-premises and cloud environments, heterogeneous support, and reduced cloud costs. With the Leostream platform as the single pane of glass managing EUC environments, any hosted desktop environment, including individual virtual desktops, multi-user sessions, hosted physical workstations or desktops, and hosted applications, becomes simpler to manage, more secure, more flexible, and more cost-effective. Significant ways the Leostream platform expands vSphere’s capabilities include: Security The Leostream platform ensures data remains locked in the corporate network, and works across on-premises and cloud environments, providing even disparate infrastructures with the same levels of security and command over authorization, control, and access tracking. The Leostream platform supports multi-factor authentication and allows organizations to enforce strict access control rules, creating an EUC environment modeled on a zero-trust architecture. Multivendor/protocol support The Leostream platform was developed from the ground up for heterogeneous infrastructures and as the connection management layer of the EUC environment, the Leostream platform allows organizations to leverage vSphere today and other hypervisors or hyperconvergence platforms in the future as their needs evolve. The Leostream platform supports the industry’s broadest array of remote display protocols, including specialized protocols for mission-critical tasks. Consistent EUC experience The Leostream platform enables IT to make changes to the underlying environment while ensuring the end user experience is constant, and to incorporate AWS, Azure, Google Cloud, or OpenStack private clouds into their environment without disruptions in end-user productivity. By integrating with corporate Identity Providers (IdPs) that employees are already familiar with, and providing employees with a single portal they use to sign in, the Leostream platform offers simplicity to users too. Connectivity The Leostream Gateway securely connects to on-prem and cloud resources without virtual private networks (VPNs), and eliminates the need to manage and maintain security groups. End users get the same seamless login and high-performance connection across hybrid environments including corporate resources located off the internet. Controlling cloud costs The Leostream Connection Broker implements automated rules that control capacity and power state in the cloud, allowing organizations to optimize their cloud usage and minimize costs, such as ensuring cloud instances aren’t left running when they are no longer needed. The Connection Broker also intelligently pools and shares resources across groups of users, so organizations can invest in fewer systems, reducing overall cost of ownership. “These features deliver a streamlined experience with vSphere and hybrid or multi-cloud resources so end users remain productive, and corporate data and applications remain secure,” said Leostream CEO Karen Gondoly. “At a time when there is uncertainty about the future of support for VMware’s end-user computing, it’s important to bring these options to the market to show that organizations can extend vSphere’s capabilities and simultaneously plan for the future without disruption to the workforce.” About Leostream Corporation Leostream Corporation, the global leader in Remote Desktop Access Platforms, offers comprehensive solutions that enable seamless work-from-anywhere environments for individuals across diverse industries, regardless of organization size or location. The core of the Leostream platform is its commitment to simplicity and insight. It is driven by a unified administrative console that streamlines the management of users, cloud desktops, and IT assets while providing real-time dashboards for informed decision-making. The company continually monitors the evolving remote desktop landscape, anticipating future trends and challenges. This purposeful, proactive approach keeps clients well-prepared for the dynamic changes in remote desktop technology.

Read More