Category: Insider Security

HelpSystems acquired Outflank, an Amsterdam-based team of professionals who collaborates with financial institutions, multinational corporations, and other organizations that demand the highest level of security by using ethical hacking techniques that closely resemble those used by cybercriminals in the real world. 

To assist clients in assessing and preventing risk from various perspectives, the company has joined the HelpSystems Offensive Security portfolio of solutions for vulnerability management, penetration testing, and red teaming/adversary simulation. 

Kate Bolseth, CEO, HelpSystems commented, “This is an incredibly fast-moving and exciting space, and we’re thrilled to welcome the Outflank experts to the HelpSystems family. Offensive security tactics like adversary simulation are an essential part of a well-rounded cybersecurity strategy, particularly for organizations operating in complex, sensitive IT environments. Our customers can rest assured that we’re able to support them with an unparalleled combination of targeted software and expert-led services.” 

In the form of red teaming operations, advanced security assessments are sought after by many organizations, but few possess the internal resources to successfully complete this crucial task. 

Some members of the red team create their own tools or search for specialized open-source solutions before starting an engagement. 

In order to help rigorously vetted organizations, assess their defenses in light of the current high-stakes security environment, Outflank offers consulting, training, and a SaaS-based software toolkit. In fact, the company created its Outflank Security Tooling solution to collaborate with Cobalt Strike from HelpSystems for a powerful adversary simulation strategy. 

Outflank team stated, “Our team is passionate about offensive security and proud of our critical role as a red teaming leader in the cybersecurity industry. We excel at supporting, challenging, and training security teams to identify and correct gaps in their defenses through advanced adversary simulations. With our SaaS solution for red teams, we offer an extremely powerful toolset to our customers so they can execute sophisticated attack scenarios themselves. As part of HelpSystems, we can expand our market reach and support more security teams, while continuing to apply stringent controls over the access to our powerful toolset and staying mindful of how our solution is used.”

VerSprite, an Atlanta-based cybersecurity threat management consultant and service provider, and Stellar Cyber, the creator of Open XDR, announced that VerSprite has adopted Stellar Cyber’s Open XDR platform as the foundation of its managed security service offering. For each client in a variety of vertical industries, including healthcare, fintech, information services, and retail, VerSprite develops unique, contextual threat models. Since the Stellar Cyber platform has built-in multitenancy, connects with any EDR, and includes configurable playbooks that recognize and address each client’s security risks, it is perfect for VerSprite’s managed security service. 

Stephan Tallent, vice president for global service providers at Stellar Cyber said, “Each end customer’s environment is different, and it’s critical to understand the context and shape of evolving threats. VerSprite has a unique perspective on the threat landscape, and our Open XDR platform enables them to implement their vision in the SOC.” 

The Process for Attack Simulation and Threat Analysis (PASTA) methodology, which underpins VerSprite’s threat modelling procedure, was co-developed by Uceda Velez. Organizations as diverse as Microsoft and Carnegie Mellon University have endorsed PASTA. 

Tony UcedaVélez, CEO of VerSprite said, “The reason our clients come to us is that we provide an understanding of everything in their security environment, and we build an organizational threat model that’s contextual to their specific business. We looked at several different SOC platforms that could implement a secure environment based on our threat modeling, and Stellar Cyber’s platform stood head and shoulders above the rest.” 

Dynatrace has announced the expansion of its Application Security Module to detect and protect against vulnerabilities in runtime environments such as the Node.js runtime, .NET CLR, and Java Virtual Machine (JVM).  

Dynatrace now also supports Go-based applications, with these enhancements, the Dynatrace platform now provides visibility and vulnerability analytics across the entire application stack, including custom code, open-source and third-party libraries, language runtimes, container runtimes, and container orchestrators. 

Steve Tack, SVP of Product Management at Dynatrace commented, “The number of entry points attackers use to target applications continues to expand. Vulnerabilities can creep into applications from any part of the software supply chain, including open-source or third-party components and application runtimes.” 

Dynatrace not only identifies vulnerabilities across these layers but also analyzes them to provide actionable and precise answers. This enables development and security teams to better assess risk, prioritize and remediate threats, and innovate faster and with greater security.  

“Traditional approaches can’t accurately surface vulnerabilities at runtime or analyze their potential exploitability and impact. Dynatrace is the only solution that provides runtime vulnerability analysis across the entire application stack and AI-assisted prioritization for the most popular cloud-native application technologies, now including Golang. With these capabilities, DevSecOps teams can focus on remediating the most impactful vulnerabilities. This helps them innovate faster, with the confidence that all layers of their applications are vulnerability-free.”, Tack continued. 

Language runtimes are an important component of the application stack because they ensure that apps can run on any platform without being rewritten or recompiled. Dynatrace delivers application vulnerability analysis in pre-production and production environments by extending its Application Security Module to support runtimes in the adopted programming languages. 

Luca Domenella, Head of Cloud Operations and DevOps at Soldo stated, “We have a proud heritage as a cloud-native business that harnesses agile delivery practices, the latest technology, and a state-of-the-art, secure development lifecycle to bring continuous innovation to our customers. Dynatrace Application Security helps to make this possible by giving us comprehensive visibility and analytics across all layers of our complex application ecosystem, ensuring no vulnerability escapes our secure DevOps lifecycle. In addition, it helps us instantly understand the risk and potential impact of zero-day vulnerabilities, such as Log4Shell, and automatically prioritizes the steps required to resolve them. This saves our teams from wasting weeks triaging alerts and enables them to resolve new vulnerabilities in just days or less, so they can stay focused on innovating.” 

Fastly, an American cloud computing services provider, recently collaborated with HUMAN, a leading cybersecurity company, to protect customers against fraud and account abuse. This partnership is also aimed at offering bot protection and reducing cyber-attacks.

Fastly is a global programmable edge cloud that enables clients to address issues using the tools of their choice. It offers first- and third-party products in security, edge computing, network services, and observability. Fastly’s WAF offers a solution with a variety of deployment choices, flexibility, and tooling interfaces. Following its integration with HUMAN, customers will have access to all the advantages of Fastly’s WAF combined with HUMAN’s bot cleanup and prevention features.

Lakshmi Sharma, Chief Product and Strategy Officer at Fastly, said, “In response to the rapid growth of bot-based cyberattacks, it was imperative for Fastly to offer our customers a world-class bot detection solution to complement our Signal Sciences-powered Next-Gen WAF. HUMAN will not only help safeguard Fastly customers from bot attacks and fraud, but also help increase ROI while decreasing data contamination and cybersecurity exposure. Together with HUMAN, we’re helping our valued customers protect what matters most: their users and their assets.”

Automated online attacks, commonly referred to as “bot attacks,” can seriously harm a company’s financial line and ruin digital experiences. Today, bots are responsible for three out of every four online attacks, including account theft, money fraud, content manipulation, etc. Bad bots make up at least 25% of all internet traffic, consuming resources and overwhelming companies. In order to deal with this threat, HUMAN uses defense to confirm the humanity of over 15 trillion interactions per week for some of the biggest businesses and online platforms.

Tamer Hassan, Co-Founder and CEO at HUMAN, said, “We look forward to deploying our modern defenses – including internet observability, collective protection, and actionable threat intelligence – to complement Fastly’s sophisticated security suite, resulting in fully protected customers.”

An AI-based FMS called AI Shield was introduced by AB Handshake. It blocks speech fraud attempts on all incoming and outgoing traffic on an operator’s network in real-time. Fraud has long been a concern for the telecom sector. There hasn’t been a comprehensive answer, even if traditional fraud management systems (FMS) have been able to halt some fraud attacks.

The $39.9 billion lost to telcos globally each year—a number that keeps increasing—sums up the impact of fraud. With a particular emphasis on robocalls, the FCC is actively engaged in the battle against worldwide telecom fraud. In its newest offering, AI Shield, AB Handshake has integrated machine learning and Big Data technology to lessen this threat. This technology achieves a new benchmark of 97% accuracy in identifying and stopping all significant voice fraud types.

AI Shield Capabilities-

AI & ML– detects early on well-covert attacks and patterns of telecom fraud.

Real-time monitoring: identifies and warns of impending threats or prevents them.

200+ parameters make up a complex system that reduces all major fraud types.

Instant Benefits of AI Shield–

• Money and time savior as it stops fraud in real-time.
• Engine of AI Shield has been trained on large volumes of wholesale and retail voice traffic and renders the greatest level of fraud detection accuracy on the market. 
• More revenue generation occurs by averting service denial. The in-built IVR module notifies you when calling high-risk number ranges.
• A user-friendly interface enabled with instant flexibility, allowing customization for blocking, alerting, and reports.

AI Shield is a one-stop voice fraud protection system that offers incredible cost reductions right away by thwarting fraudulent calls and halting revenue loss. In comparison to other FMSs, it offers organizations far higher telecom fraud protection at a lesser cost with practically seamless integration into a company’s current network’s default settings.