AWS ANALYTICS

Lightspin Launches Free AWS Cloud Security Tool to Reveal Publicly Exposed Cloud Assets on Any Domain

Lightspin | April 06, 2022

Lightspin_Launches_Free
Lightspin, the next-generation cloud security platform, today announced the first free AWS cloud security tool that scans any and all domains to reveal publicly exposed cloud assets.Recon.Cloud is a free AWS cloud threat intelligence resource that provides a clear view of any domain's current exposure from an attacker's perspective. Users will have vastly greater visibility into and increased transparency of their publicly exposed assets.

Attack surface management is a rising challenge of cloud migrations. Gartner predicts that, through 2025, 99% of breaches in cloud environments will come as a result of human error, such as misconfiguration of cloud roles, permissions, and policies. Existing subdomain enumeration tools do not provide the granular specifics for cloud environments. Unlike other tools, Recon.Cloud scans provide a full picture of an AWS environment with all AWS metadata accessible within the user interface. Users can then easily export their results via a JSON file or incorporate their findings into the Lightspin platform to see even more contextual risk within their broader attack surface.

With Recon.Cloud, we are helping to solve the issue of poor visibility in cloud environments. Recon.Cloud is specifically designed to focus on only the pertinent publicly exposed cloud assets in a domain. DevOps and red team members can use Lightspin's free and easy-to-use threat intelligence tool for an in-depth picture of their AWS environment with the option of exporting and analysis just one click away. It also allows security operations to scan targets for research or to better understand recent acquisitions during threat modeling."

Gafnit Amiga, Director of Security Research at Lightspin.


About Lightspin
Lightspin's next-gen cloud security posture management (CSPM) platform protects cloud and Kubernetes environments from build to runtime and simplifies cloud security for security and DevOps teams. Using advanced graph-based technology, Lightspin prioritizes risks across the cloud environment focusing security efforts on the critical issues that matter most. Lightspin serves Fortune 500 customers across the globe and is headquartered in Tel Aviv, Israel with offices in New York, NY.

Spotlight

What does big data really mean? Where is the data landscape headed? How can we use big data to drive better decision-making and power productivity? How it can be linked to cognitive technologies to make an impact on industries such as pharmaceuticals, engineering and agri-tech? In this animation we aim to answer those burning big data questions, providing our perspective on why data analytics is so important, and demonstrate that it's not just how much data you have, but how you use it that makes it truly valuable.

Spotlight

What does big data really mean? Where is the data landscape headed? How can we use big data to drive better decision-making and power productivity? How it can be linked to cognitive technologies to make an impact on industries such as pharmaceuticals, engineering and agri-tech? In this animation we aim to answer those burning big data questions, providing our perspective on why data analytics is so important, and demonstrate that it's not just how much data you have, but how you use it that makes it truly valuable.

Related News

CLOUD DEPLOYMENT MODELS

UiPath to Collaborate with Microsoft on Vision for the Future of Automation in the Cloud

UiPath | October 04, 2022

UiPath a leading enterprise automation software company, today announced during its FORWARD 5 global user conference that it is engaging with Microsoft to build best-in-class automation experiences and integrations between the two strategic partners. Microsoft Azure is a preferred cloud platform for UiPath, including the UiPath Automation Cloud™, while UiPath is a preferred enterprise automation partner at Microsoft. UiPath and Microsoft will collaborate and innovate together to bring automation solutions powered by Microsoft Azure to market, creating a powerful value proposition for customers seeking to enhance productivity by using UiPath automation capabilities within Microsoft Office. Today, UiPath is available to purchase directly in the Azure Marketplace and via private offers and will integrate with Microsoft Power Platform by early 2023. Scott Guthrie, Executive Vice President, Cloud + AI Group at Microsoft, will address the live audience at Forward via video to describe how the partnership will further democratize automation. “At UiPath, we strongly believe that automation is the future of work and is transforming how enterprises conduct business, Our UiPath Automation Cloud is core to our vision as a company, and we are seeing more customers select cloud as the basis for their automation journeys. This would not be possible without our great partnership with Microsoft and its Azure platform, our preferred cloud. Together, we are helping customers realize and achieve the business value of automation at scale. We are excited to work alongside Microsoft to deliver substantial, integrated cloud offerings.” UiPath Co-Founder and Co-CEO Daniel Dines UiPath, in collaboration with Microsoft, has developed more than 80 best-in-class integrations that are available to joint customers out-of-the-box. The robust and comprehensive integrations within the UiPath business automation platform span across Office 365 and Teams in Modern Work; Power Platform and Dynamics 365 in Business Applications; and Cognitive Services and SQL Azure in the Azure Data and AI solution areas. As part of the strategic partnership, Microsoft is committed to helping UiPath and joint customers expand upon these market-leading integrations in the Microsoft platform and offerings. The UiPath Business Automation Platform is a leading, easy-to-use, scalable, and open platform that allows everyone – from RPA developers and testers to citizen developers and business users – to work alongside software robots and achieve better business outcomes. “UiPath Automation Cloud™ on Azure delivers the UiPath platform and allows customers to deploy unattended robots quickly without IT, resources, or infrastructure, while the Microsoft Cloud enables organizations to reach their full potential by relying on an integrated and open cloud platform that spans six critical areas—security, infrastructure, digital and app innovation, data and AI, business applications, and modern work,” said Guthrie. UiPath and Microsoft will collaborate to integrate UiPath cloud products and services with a range of Microsoft commercial cloud services, publish UiPath products on the Azure Marketplace, and jointly market industry-specific solutions, among other activities. About UiPath UiPath has a vision to deliver the Fully Automated Enterprise™, one where companies use automation to unlock their greatest potential. UiPath offers an end-to-end platform for automation, combining the leading Robotic Process Automation (RPA) solution with a full suite of capabilities that enable every organization to rapidly scale digital business operations.

Read More

CLOUD SECURITY

eCloudvalley Demonstrates its Cloud Expertise at CIO Innovation Forum

eCloudvalley | September 09, 2022

eCloudvalley Digital Technology (ECV), AWS Premier Tier Services Partner, has assisted more than 450 Hong Kong enterprises in digital transformation since 2016. eCloudvalley participated in the 9th CIO Innovation Forum to share cloud consulting experience in helping customers integrate cloud services seamlessly. This year's CIO Innovation Forum focused on how CIOs integrate internal and external resources to lead digital transformation in the context of information security. Going cloud represents a significant step forward in digital transformation. However, the increasingly complex IT environment burdens the Internal IT team. Many attendees expressed that lacking internal cloud professionals is a big headache. As a result, many enterprises have begun cooperating with the new generation of managed service providers (MSPs). With their expertise in the cloud, MSPs can provide customers with consulting services and a seamless cloud experience. Moreover, MSPs can further offer data analytics services to empower enterprises to unleash the potential of the cloud. "eCloudvalley serves customers from financial insurance, transportation, and communications industries. The cloud environment is complex. To unleash the potential of the cloud, enterprises can rely on MSP for consulting services and advice on information security and cloud optimization. Take eCloudvalley as an example. Based on our abundant experience, we can provide customers with comprehensive cloud services, such as data analysis, information security, and DevOps. In addition, we lighten the IT maintenance burden for our customers, and thus enterprises can concentrate on their own business and create new business models." Joe Kwok, Country Manager, Hong Kong at eCloudvalley Digital Since 2016, eCloudvalley has audited AWS MSP on an annual basis. In April 2022, it was named AWS Services Partner of the Year in Hong Kong. Furthermore, Gartner named eCloudvalley to its 2022 Market Guide for Public Cloud Managed and Professional Services Providers (Asia/Pacific), and ChannelE2E named eCloudvalley to its Top 100 Vertical Market MSPs for 2022, ranking it sixth globally and first in Asia. About eCloudvalley eCloudvalley was founded in 2013 and started the AWS business at the beginning of 2014. In 2017, eCloudvalley became the first AWS Premier Tier Services Partner in Greater China and acquired the AWS Authorized Training Partner status. As of 2022, we have obtained over 600 AWS professional certifications and served more than 1,800 enterprise customers. eCloudvalley has grown to over 600 employees with geographic footprints worldwide, including Hong Kong, Taiwan, China, Philippines, Singapore, United States, Malaysia, Thailand, Indonesia, and Vietnam.

Read More

CLOUD SECURITY

Rapidly Evolving Hybrid Cloud Security Requirements are Driving the Need for Deep Observability

Gigamon | September 28, 2022

Gigamon, the leading deep observability company, is guiding the industry forward today, bringing application and network-level intelligence together for the first time to help network, security, and cloud IT operations teams eliminate security blind spots and deliver defense in depth across their highly distributed hybrid and multi-cloud infrastructure. Leading market intelligence firm, the 650 Group, forecasts the deep observability market’s CAGR to grow over 60 percent to reach $2 billion by 2026. They predict Gigamon will take a commanding lead with 68 percent market share in the first half of 2022. Together with an expanding ecosystem of technology alliance partners, Gigamon harnesses actionable network-level intelligence that amplifies the power of cloud, security, and observability tools, ultimately empowering large organizations to achieve the transformational promise of the cloud. A recent IDC global survey of 900 large organization IT executives and managers* revealed that 'strengthened cybersecurity posture and practices' is the number one benefit of deep observability intelligence and insights. And to overcome their concerns for security vulnerabilities, 79 percent of respondents indicate they have made good-to-excellent progress in leveraging network intelligence and performance metrics for security insights. When asked specifically where the alignment of NetOps and SecOps efforts and tools have improved security management, a strong majority of respondents cited the following: provide complete visibility into on-premises systems and cloud services, reduce false positives, improve speed and accuracy of triage, and validate remediation. To further underscore the urgency for organizations to address security blind spots, a recent Vitreous World State of Ransomware for 2022 and Beyond survey revealed more than 95 percent of the more than one thousand global respondents, consisting of large organization IT and security executives, had experienced ransomware attacks in the past year. The research also revealed that 89 percent of global security leaders surveyed agree deep observability is an important element of cloud security with 50 percent of global CISOs/CIOs strongly agreeing with this statement. “As a cloud-first dental support organization, we are continuously seeking new ways to fortify our security posture and equip our supported owner doctors with the latest, proven technology and highly skilled support staff, so they can focus on providing the perfect patient experience to patients with an extraordinary, differentiated care experience,” said Nemi George, vice president of IT and information security officer and IT service operations at Pacific Dental Services. “With the deep observability we gain from Gigamon, we can eliminate security blind spots at the network layer of our hybrid cloud infrastructure, deliver defense in depth, and confidently scale our operations.” A New Frontier: Deep Observability The Gigamon Hawk Deep Observability Pipeline harnesses actionable network-level intelligence to amplify the power of cloud, security, and observability tools, enabling IT organizations to assure security and compliance governance, speed root-cause analysis of performance bottlenecks and lower the operational overhead associated with managing today’s highly distributed hybrid and multi-cloud infrastructure. Gigamon extends the value of these tools with real-time network intelligence derived from packets, flows and application metadata to deliver defense in depth and performance management. Gigamon has an extensive ecosystem of technology alliance partners that includes leading observability vendors Dynatrace, New Relic and Sumo Logic. “We are proud to partner with Gigamon and integrate their network-level intelligence with the Dynatrace platform’s full-stack observability, application security, and AIOps capabilities to enable our joint customers to innovate faster and more securely,” said Bob Wambach, vice president of product marketing at Dynatrace. “Large organizations continue to embrace hybrid-cloud, multi-cloud, and cloud-native technologies as the foundation for their digital services and innovation. As a result, applications have become increasingly complex and distributed. The combination of Dynatrace and Gigamon gives customers unprecedented abilities to simplify cloud complexity. The actionable, network-level intelligence of the Gigamon deep observability pipeline provides additional network-security context to the precise answers and intelligent automation delivered by Dynatrace.” “At Trace3 we help our customers design, move and re-architect workloads to the Cloud. One of the challenges we face is maintaining visibility into key applications regardless of cloud architecture pattern, in alignment with guidance from well-architected frameworks,” said Chris Nicholas, vice president cloud and cloud solutions group at Trace3. “Gigamon Hawk helps us deliver actionable network-level intelligence against many advanced security and observability use-cases. The built-in performance tools help us accelerate troubleshooting while lowering operational costs.” “IT organizations are navigating an unprecedented increase in cyber threats across all vectors of their hybrid and multi-cloud infrastructure, and the underlying complexity and disparity of tools used to manage these environments introduces blind spots that can expose their organizations to risk, Gigamon is at the right place at the right time to capitalize on this high growth market and deliver more value to our customers by extending the value of tools they have already deployed and empowering them with actionable network-level intelligence for the hybrid cloud so they can run fast, stay secure, and accelerate innovation.” Shane Buckley, president and CEO of Gigamon About Gigamon Gigamon offers a deep observability pipeline that harnesses actionable network-level intelligence to amplify the power of observability tools. This powerful combination helps IT organizations to assure security and compliance governance, speed root-cause analysis of performance bottlenecks, and lower operational overhead associated with managing hybrid and multi-cloud IT infrastructures. The result: modern enterprises realize the full transformational promise of the cloud. Gigamon serves more than 4,000 customers worldwide, including over 80 percent of Fortune 100 enterprises, 9 of the 10 largest mobile network providers, and hundreds of governments and educational organizations worldwide.

Read More