CLOUD SECURITY

Prisma Cloud Delivers Context-Aware Software Composition Analysis to Secure Deployment of Open Source Software

Palo Alto Network | September 23, 2022 | Read time : 02:28 min

Palo Alto Network
Open source software is a critical component of cloud-native applications, allowing developers greater speed and modularity without having to reinvent the wheel each time they code. However, as the Unit 42 Cloud Threat Report, 2H 2021 found, open source software can often contain known vulnerabilities, which can open organizations up to significant risk. Palo Alto Networks (NASDAQ: PANW), the global cybersecurity leader, today introduced the industry's first context-aware software composition analysis (SCA) solution to help developers safely use open source software components. The integration of SCA into Prisma® Cloud further demonstrates why Palo Alto Networks is the leading provider of cloud-native security.

Traditional SCA solutions are standalone products that can produce a large number of alerts but lack the runtime context to help fix vulnerabilities. With the addition of SCA to the Prisma Cloud platform, developers and security teams can proactively surface and prioritize known vulnerabilities that impact the application lifecycle (i.e., code, build, deploy and run). Prisma Cloud SCA delivers deep dependency detection and remediation of vulnerabilities in open source software before applications reach production. It can also help developers prioritize remediation based on software components that are already in use. These capabilities are not possible when SCA solutions are deployed as single point products.

"Developers leveraging open source software should be able to build applications with the confidence they aren't opening the organization up to risk, With the average application consisting of 75% open source components, SCA on Prisma Cloud is key to protecting the organization from code to cloud and empowering developers to build with speed."

Ankur Shah, senior vice president, Prisma Cloud, Palo Alto Networks

As a complete cloud-native application protection platform (CNAPP), Prisma Cloud is context-aware at every stage of the application lifecycle to provide a unified view of risk across organizations' cloud environments. Where current approaches to cloud security rely on siloed products that provide intermittent visibility without remediation, Prisma Cloud approaches cloud security with a comprehensive, prevention-first framework. With 188% increase in cloud incident response cases over the past three years, this shift in approach has become mandatory.

A complete code-to cloud CNAPP needs to incorporate the following five key principles in order to keep organizations safe:
  • Security from code to cloud — protects applications at every stage of the development lifecycle — from code, build, deploy and run.
  • Continuous, real time visibility — uses real-time and contextual security analysis of cloud environments to help prevent misconfigurations, vulnerabilities and threats.
  • Prevention-first protection — stopping attacks and defending against zero-day vulnerabilities to drive down mean time to remediation.
  • Choice for every cloud journey — aligning security needs with current and future cloud priorities by supporting a breadth of cloud service providers, workload architectures, continuous integration and continuous delivery (CI/CD) pipelines, integrated development environments (IDEs), and repositories with a unified platform
  • Cloud scale security — consistently secures applications as cloud environments scale.

In addition to SCA and to further increase the safety of cloud-native applications, Prisma Cloud introduced a software bill of materials (SBOM) among other capabilities for developers to easily maintain and reference a complete codebase inventory of every application component used across cloud environments. Implementing SCA and SBOM ensures Prisma Cloud aligns with these principles.

"Buyers looking for cloud-native security solutions need to keep the requirements of microservices security protection in mind. The 'bolted-on' and 'whack-a-mole' approaches are a thing of the past," said Frank Dickson, program vice president, Security and Trust at IDC. "Security should be embedded throughout the application development life cycle. This means that buyers need to fundamentally change their approach to security, although they need to continue to protect their run-time environments, they must also embrace solutions that embed security in the application development process, an approach referred to as 'shift left.' Shift left requires one to think less about security products and more about continuous security processes."

About Palo Alto Networks
Palo Alto Networks is the world's cybersecurity leader. We innovate to outpace cyberthreats, so organizations can embrace technology with confidence. We provide next-gen cybersecurity to thousands of customers globally, across all sectors. Our best-in-class cybersecurity platforms and services are backed by industry-leading threat intelligence and strengthened by state-of-the-art automation. Whether deploying our products to enable the Zero Trust Enterprise, responding to a security incident, or partnering to deliver better security outcomes through a world-class partner ecosystem, we're committed to helping ensure each day is safer than the one before. It's what makes us the cybersecurity partner of choice.

Spotlight

Cloud Computing is the term used to describe accessing the resources that are available at the remote locations like servers through millions of clients who are just browsing the content from remote servers. This is a very generic definition for cloud computing.


Other News
CLOUD DEPLOYMENT MODELS

Fosfor by LTI Expands Partnership with Snowflake to Accelerate Data Monetization on the Data Cloud

LTI | November 04, 2022

Fosfor, the Data Products Unit of Larsen & Toubro Infotech (BSE: 540005, NSE: LTI), today announced that it has been approved as a Snowflake Ready Technology Validation Partner. Achieving this validation confirms Fosfor’s DataOps product, Spectra, and Decision Intelligence product, Lumin, adhere to Snowflake’s best practices around performance, reliability, and security. Under the Snowflake Ready Technology Validation program, Snowflake audits and validates a company’s native integration with Snowflake based on functional and performance best practices. The audit requires a native connector that has been available for at least six months, as well as a set of joint customers and case studies. With this validation, Fosfor joins a list of prominent product companies that have been approved under this program. “Efficient access to quality data helps organizations quickly inform strategies and decisions – it is a must-have for our customers," says Tarik Dwiek, Head of Technology Alliances at Snowflake. “Fosfor’s take on monetizing data at speed and scale for enterprises complements Snowflake's commitment to capitalizing on the infinite potential of the Data Cloud and creates a winning proposition for our customers.” Along with LTI recently being awarded Elite tier partner status and receiving the Delivery Partner of the Year award at the 2022 Snowflake Summit, the Technology Ready designation further reinforces the long-standing partnership between the companies. A growing number of Fosfor customers are realizing the synergistic value created by combining Fosfor’s data and AI capabilities with Snowflake’s Data Cloud. “The Snowflake-Fosfor partnership is a natural fit in exploding value from Data & AI for enterprises globally and is creating immense value for our joint customers with Fosfor products’ seamless native connectivity to Snowflake. Fosfor products like Spectra are solving major DataOps challenges for enterprises, while Lumin converts data into decision insights with ease for business users, We are delighted to be in lockstep with Snowflake to strengthen our valued partnership and in our aligned vision to create limitless business impact for enterprises.” Satyakam Mohanty, Chief Product Officer, Fosfor Snowflake has been a key partner of LTI since 2018, and of the Fosfor product suite since its launch in December of 2021. Click here to learn more about the powerful combination of Fosfor and Snowflake. About Fosfor The Fosfor Product Suite is the only end-to-end suite for optimizing all aspects of the data-to-decisions lifecycle. Fosfor helps you make better decisions, ensuring you have the right data in more hands in the fastest time possible. The Fosfor Product Suite comprises of Spectra, a comprehensive DataOps platform; Aspect, a no-code unstructured data processing platform; Optic, a data fabric to facilitate data discovery-to-consumption journeys; Refract, a data science and MLOps platform; and Lumin, a decision intelligence platform. Collectively, the Fosfor suite helps businesses discover the hidden value in their data. The Fosfor Data Products Unit is part of LTI, a global technology consulting and digital solutions company with hundreds of clients and operations in 33 countries. For more information, visit www.fosfor.com. About LTI: LTI (NSE: LTI) is a global technology consulting and digital solutions company helping more than 500 clients succeed in a converging world. With operations in 33 countries, we go the extra mile to assist our clients and accelerate their digital transformation journeys. Founded in 1997 as a subsidiary of Larsen & Toubro Limited, our unique heritage gives us unrivalled real-world expertise to solve the most complex challenges of enterprises across all industries. Each day, our team of more than 50,000 LTItes enable our clients to improve the effectiveness of their business and technology operations and deliver value to their customers, employees, and shareholders.

Read More

CLOUD STORAGE

Wasabi Technologies Closes $250 Million in New Funding to Usher In the Future of Cloud Storage

Wasabi Technologies | October 04, 2022

Wasabi Technologies, the hot cloud storage company, today announced it has achieved unicorn status following $250 million in new funding. Wasabi raised $125 million in Series D equity led by L2 Point Management with participation from Cedar Pine; an affiliate of Cerberus Capital Management; and returning investors including Fidelity Management & Research Company and Forestay Capital, bringing the company’s valuation to over $1.1 billion. Wasabi also expanded its existing debt facility with MGG Investment Group to $125 million. Barclays acted as sole placement agent on the transaction. Wasabi provides fast, affordable, and highly reliable cloud data storage for businesses all over the world at 1/5th the cost of large hyperscale providers or on-premises storage, with no charges for egress or API requests and no complex tiering. The company's revenues more than doubled from 2020-2021, and Wasabi now has more than 40,000 customers in over 100 countries, 13,000 partners, 250+ global employees and 13 storage regions across North America, Europe, and Asia Pacific. The new equity will drive expansion into additional vertical markets and geographies, enhance Wasabi’s channel partnerships, and scale the company’s go-to-market team and global brand strategies. Meanwhile, the debt will be used to finance capital equipment and infrastructure in Wasabi’s storage regions around the world, and to invest in Wasabi’s technology capabilities to lay the groundwork for a new generation of cloud storage architecture. “Closing a large up round in this environment speaks to the spectacular growth of Wasabi, the magnitude of the cloud storage opportunity, and our leadership as the industry’s largest pure-play cloud storage vendor. At Wasabi, we focus on just one thing: cloud storage. We do it better than anyone else in the industry. Because of this singular focus, our team has achieved best-in-class performance and security at the lowest prices in the industry,” David Friend, co-founder and CEO of Wasabi Technologies Kerstin Dittmar, managing partner of lead investor L2 Point, will join Wasabi’s Board of Directors. “Wasabi provides a game-changing product that offers customers a simpler, faster, and significantly more economical solution to their cloud data storage needs. We believe this capital raise will allow Wasabi to continue to expand its offering across additional services and geographies to meet their global customers’ needs,” said Dittmar. “We are proud to partner with Wasabi to provide innovative solutions in cloud storage and security,” added Sam Barnett, PhD, executive chairman of Cedar Pine. “The importance of Wasabi’s technology is increasing in every industry.” Kevin Griffin, CEO of MGG Investment Group, also commented, “We seek to partner with best-in-class entrepreneurs and companies and are excited to continue supporting Wasabi Technologies and their global expansion.” In addition to the industry-leading performance of Wasabi hot cloud storage, the company partners with over 350 technology companies, including most of the world’s leading backup, disaster recovery, and surveillance companies. Wasabi is used to store data across a wide range of industries, including professional sports, energy and natural resources, finance, surveillance, education, manufacturing, consumer technology, healthcare, scientific research, and media and entertainment. “As our data needs continue to evolve, from player analytics, IoT, digital assets and even security, this presents an enormous learning opportunity for the organization,” said Brian Shield, senior vice president and CTO of the Boston Red Sox. “Wasabi provides a cost-effective cloud-based solution that enables us to retrieve content quickly and improve the level of video analysis and production we do here at the Red Sox.” About Wasabi Technologies Wasabi provides simple, predictable and affordable hot cloud storage for businesses all over the world. It enables organizations to store and instantly access an unlimited amount of data at 1/5th the price of the competition with no complex tiers or unpredictable egress fees. Trusted by tens of thousands of customers worldwide, Wasabi has been recognized as one of technology’s fastest-growing and most visionary companies. Created by Carbonite co-founders and cloud storage pioneers David Friend and Jeff Flowers, Wasabi is a privately held company based in Boston. Wasabi is a Proud Partner of the Boston Red Sox, and the Official Cloud Storage Partner of Liverpool Football Club and the Boston Bruins. About L2 Point Management L2 Point Management (“L2 Point”) is a San Francisco based investment firm providing innovative capital solutions for growth companies. With expertise across the capital structure, L2 Point works to address a common concern of late-stage companies today: the lack of an alternative cost of capital product between highly dilutive growth equity and operationally restrictive debt.

Read More

CLOUD SECURITY

Wolters Kluwer cloud-based global expert solution named a global leader in cloud computing

Wolters Kluwer | September 30, 2022

Wolters Kluwer Tax & Accounting announced that its innovative TeamMate+ suite of cloud-based expert audit solutions was recognized by the Business Intelligence Group as a global leader in cloud computing and awarded the 2022 Stratus Awards for Cloud Computing in their annual business award program. TeamMate+ was recognized as a global leader in the Software as a Service category. Through these awards, the Business Intelligence Group sought to identify the companies, products and people that are offering unique solutions and technology that will continue to lead the industry. “We are honored to be recognized by the Business Intelligence Group for our part in the evolution of cloud solutions for the internal audit profession, TeamMate continues to help organizations redefine their risk assessment methodology to ensure they stay ahead of risk while optimizing human resources and adhering to professional standards.” Frans Klaassen, Senior Vice President & General Manager, Wolters Kluwer TeamMate TeamMate+ supports all phases of audit work, from overarching audit plans aligned with organizational objectives to individual project planning, which guides day-to-day work. It enhances workflow using request and tracking features to ensure appropriate data is provided and captured within the tool during audit execution. And provides reporting capabilities that allow audit teams to craft output appropriate to various audiences including audit management and stakeholders. In addition, the TeamCloud hosting provides a secure and stable environment to access a customizable TeamMate environment from the web. Earlier this year, TeamMate achieved authorization status from the Federal Risk and Authorization Management Program (FedRAMP) for the TeamMate+ FedRAMP cloud hosting environment. Achieving authorization means that auditors within US Federal agencies can create, manage, and execute audits all while staying aligned with the Red and Yellow Book standards. “Wolters Kluwer is at the forefront of the cloud helping to drive practical innovations in the cloud,” said Maria Jimenez, Chief Nominations Officer of Business Intelligence Group. “The cloud is now part of the fabric of our society, and we are thrilled that our volunteer judges were able to help promote all of these innovative services, organizations and executives.” About Business Intelligence Group The Business Intelligence Group was founded with the mission of recognizing true talent and superior performance in the business world. Unlike other industry and business award programs, business executives—those with experience and knowledgejudge the programs. The organization’s proprietary and unique scoring system selectively measures performance across multiple business domains and then rewards those companies whose achievements stand above those of their peers. About Wolters Kluwer Wolters Kluwer (WKL) is a global leader in professional information, software solutions, and services for the healthcare; tax and accounting; governance, risk and compliance; and legal and regulatory sectors. We help our customers make critical decisions every day by providing expert solutions that combine deep domain knowledge with advanced technology and services. Wolters Kluwer reported 2021 annual revenues of €4.8 billion. The group serves customers in over 180 countries, maintains operations in over 40 countries, and employs approximately 19,800 people worldwide. The company is headquartered in Alphen aan den Rijn, the Netherlands. Wolters Kluwer shares are listed on Euronext Amsterdam (WKL) and are included in the AEX and Euronext 100 indices. Wolters Kluwer has a sponsored Level 1 American Depositary Receipt (ADR) program. The ADRs are traded on the over-the-counter market in the U.S. (WTKWY).

Read More

CLOUD SECURITY

ThinkData Works Now Available On Google Cloud Marketplace

ThinkData Works | September 09, 2022

Data catalog provider ThinkData Works Inc has launched its catalog and enrichment services on Google Cloud Marketplace, providing customers with reduced time-to-value and access to Google Cloud’s leading AI and data analytics capabilities. The ThinkData Works catalog platform allows customers to make better business decisions by connecting to both internal and external data sources and providing rich metadata, governance, and discoverability features. Unlike alternative solutions, it offers unique enriched data feeds on global trade, demographics, business attributes, and more – fueling powerful insights when combined with existing internal data assets. Google Cloud Marketplace allows customers to quickly and simply access powerful software and Google Cloud-based data solutions. “Google Cloud is committed to helping organizations scale their data analytics and AI/ML initiatives,” said Dai Vu, Managing Director, Marketplace & ISV GTM Programs, Google Cloud. “With ThinkData Works’ data catalog available on Google Cloud Marketplace, customers will be able to easily access and act on data insights, enabling them to execute on data-driven initiatives with greater speed and at scale.” The partnership builds on a growing ecosystem of data and management tools available to customers of both organizations. “Many companies have invested in AI and ML solutions but find that data variety and poor data health restrict their progress, Availability on Google Cloud Marketplace means customers can more easily deploy our leading catalog platform through their existing relationship with Google Cloud, enabling them with the tools to manage and distribute data to unlock further AI and ML capabilities.” Brendan Stennett, ThinkData Works co-founder and Chief Technology Officer About ThinkData Works ThinkData Works unlocks the value of data to grow your business. Connect seamlessly to any source, drive critical insights, and deliver data while retaining visibility and control. Founded in 2014, ThinkData Works offers flexible data connections, an intuitive catalog interface, and secure tools to deliver data where it needs to be — inside or outside your organization. Purpose-built to handle the complexities of data variety, their unified cloud platform cuts overhead, fuels innovation, and drives revenue growth.

Read More

Spotlight

Cloud Computing is the term used to describe accessing the resources that are available at the remote locations like servers through millions of clients who are just browsing the content from remote servers. This is a very generic definition for cloud computing.

Resources