CLOUD INFRASTRUCTURE MANAGEMENT

Zscaler: Cloud infrastructure is highly vulnerable due to expanded attack surfaces

Zscaler | June 16, 2021

As per the 2021 "Exposed" report from the cloud security company Zscaler, around 400,000 servers that belongs to 1,500 companies worldwide are exposed and ascertainable over the internet, which means anyone in the world can attempt to access them, not just bad players.

Knowing about the server's existence makes it halfway for the players, who can then explore further around the application stack or server configuration for potential susceptibilities to exploit. For instance, the "Exposed" report discovered that 47% of the supported protocols were obsolete and vulnerable to attack.

Zscaler says the typical organization has an average of 262 servers exposed.

The report found that public cloud providers Amazon Web Services (AWS), Microsoft Azure Cloud, and Google Cloud Platform (GCP) is out for a massive risk of attack surface exposure with more than 60,500 instances, averaging 40 exposures per organization. Public cloud exposure can be predominantly dangerous as many IT security leaders may be uninformed about the scope of cloud infrastructure in use within their organizations. IT leaders should discover the degree of public cloud usage across their organizations and identify mediums to reduce the attack surface.

The hospitality industry, which comprises restaurants, bars, and food service vendors, had the highest exposed servers and public cloud instances on average. The exposure of AWS instances was 2.9 times more often than servers from other cloud providers. The COVID-19 pandemic possibly contributed to the exceeding number of exposed servers as several entrepreneurs had to scramble in a short timeframe to set up online ordering and digital payment systems.

According to Zscaler, the cloud exposure increases as the cloud continues to grow.

For the 2021 "Exposed" Report, Zscaler analyzed 1,500 organizations for the attack surfaces to emphasize and identify attack surface trends affecting businesses of all sizes across all geographies and industries. The time frame of the analysis for this report provided a prima facia at the potential impact on attack surface due to remote work during the global pandemic.

Spotlight

At Columbia Sportswear, you will find that one size doesn’t fit all in terms of their infrastructure. In some places where intellectual property or other concerns are really important, they will use their private cloud while for less sensitive or more commoditized, they may look at a hybrid or a public cloud offering. It’s all about matching the workflows with the right delivery and hosting mechanism for their business. VMware is really now leading not only inside your data center but helping Columbia leverage things outside where they can have cloud and scale things in and outside of their walls leveraging the tools that VMware has and that they can consistently do things whether it's in their private cloud or in a public cloud or a hybrid.


Other News
CLOUD DEPLOYMENT MODELS

Mavenir Expands Capabilities in Europe With Open RAN Centre of Excellence in Germany

Mavenir | April 25, 2022

Mavenir, the Network Software Provider building the future of networks with cloud-native software that runs on any cloud and transforms the way the world connects, has expanded its European capabilities with the establishment of an Open RAN Centre of Excellence in Germany. Centred in Bonn, with satellite teams in Düsseldorf and Munich, the Centre of Excellence will support European Mobile Network Operators (MNOs) with Open Radio Access Network (Open RAN) engineering, planning, design, system integration and deployment. Germany is a strong advocate for the development and adoption of Open RAN technologies. Open RAN is playing a key role in the country’s Mobile Network Transformation strategy: all German MNOs have committed to adopting Open RAN. The technology is also backed by Germany’s Federal Ministry of Transport and Digital Infrastructure, which announced €300 million ($344 million) in funding to develop and test Open RAN technology in the country. Vishant Vora, President, Global Operations and Managed Services at Mavenir, said, “Mavenir’s Centre of Excellence in Germany is developing advanced Open RAN end-to-end skills, and supporting our German customers with localised support to accelerate Open RAN deployments.” This latest Centre of Excellence further extends access to Mavenir’s Open RAN expertise across Europe and complements existing R&D design centres of excellence in Sweden, the Czech Republic, and the United Kingdom.” Puneet Sethi, Senior Vice President and General Manager of RAN Business at Mavenir This announcement builds on Mavenir’s leadership in Open RAN. Earlier in the year, Mavenir launched the comprehensive OpenBeam™ portfolio of O-RAN compliant radio products, which provide MNOs with Open RAN solutions spanning micro, macro, millimeter wave (mmWave), and massive MIMO (mMIMO) use cases. Mavenir is a multinational organisation delivering a regional focus through its globally placed offices and centres of excellence, driving the knowledge and innovation across the regions. The Centre of Excellence in Germany builds on Mavenir’s growing global presence with its network of dedicated Centres of Excellence and Innovation. It joins the Open vRAN, 5G, Artificial Intelligence/Machine Learning (AI/ML), open virtualized Multi Radio Access Technology (vMRAT), and software/system design for Open RAN Radio Units Centres located across EMEA, as well as the NFV/SDN Cloud Innovation Centres in North America, India, and Asia Pacific. About Mavenir Mavenir is building the future of networks and pioneering advanced technology, focusing on the vision of a single, software-based automated network that runs on any cloud. As the industry's only end-to-end, cloud-native network software provider, Mavenir is focused on transforming the way the world connects, accelerating software network transformation for 250+ Communications Service Providers and Enterprises in over 120 countries, which serve more than 50% of the world’s subscribers.

Read More

CLOUD COMPLIANCE AND AUDIT

UiPath Launches Next-Gen UiPath Automation Cloud™ to Extend Automation Leadership in Latest Platform Release

UiPath | May 10, 2022

UiPath (NYSE: PATH), a leading enterprise automation software company, today introduced Automation Cloud Robots alongside a wealth of other powerful new capabilities as a part of the UiPath 2022.4 platform release. The new release provides enterprises with an even more comprehensive automation foundation to achieve fast and accurate outcomes. The new SaaS robots—along with added features that simplify how developers create automations, uplevel security and governance, and expand access to automation to Mac—deepen the reach of automation in the enterprise. It is clear that automation is the technology of choice for developers who need to rapidly build applications that drive the business forward,” said Ted Kummert, Executive Vice President, Products & Engineering at UiPath. “We are seeing more customers selecting cloud and our customer-focused innovation continues to strengthen our leadership in the automation market. Our Automation Cloud Robots bring customers the full benefit of the cloud as they scale their automation programs. This release also expands use cases for automation professionals and citizen developers alike and provides numerous enterprise-grade performance and security improvements.” New features now available in the UiPath Platform 2022.4 release include: Automation Cloud™ Robots:SaaS robots hosted in the UiPath Automation Cloud™ allow customers to deploy unattended robots instantly without IT, resources, or infrastructure. A VM Automation Cloud Robot is a Windows virtual machine created on-demand in Automation Cloud. It provides an unattended robot that can incorporate customers’ software and configurations and will scale as needed. The new Serverless Automation Cloud Robot is part of a ‘ready-when-you-are’ pool of robots that will immediately and securely run selected automation jobs on demand. With simple browser-based access, Windows, Mac, or Linux users can send work to Automation Cloud Robots and immediately execute in Automation Cloud. Frictionless development: With speedier performance, expanded integration options, and low code tools and templates, this release removes friction and complexity from the development process. Automation professionals can now leverage the power of UiPath Integration Service to quickly develop trigger-based automations; access more than 40 API-based connectors to automate processes involving common applications such as Slack, Salesforce Marketing Cloud, Mulesoft, and others; and reduce custom coding to streamline app development with new controls and templates in UiPath Apps. Meanwhile, citizen developers get new, simplified access to AI-powered tools like Forms AI, Document Understanding, and Task Capture to automate more tasks. Automation access for all: For the first time, Mac users get API and web automation, plus support for UiPath Assistant. Linux robots now support long-running workflows, expanding automations that can run cross-platform. Automation Center of Excellence leaders can preview Automation Launchpad, a new tool which can help them evangelize and scale their program to more users. Users will benefit from a vastly expanded set of ready-to-go automations for a variety of tasks in UiPath Marketplace and Assistant. Finally, developers can create end-user-friendly automations with the UiPath Attended Framework through best practices and development processes for providing an engaging user experience, maximizing automation performance, and simplifying the development process. Enhanced Security and Compliance: Security and compliance upgrades in 2022.4 include every UiPath service now in scope for SOC 2 and Automation Cloud™ HIPAA attestation to facilitate UiPath cloud solution adoption with confidence. Both user and device access controls are strengthened, with expanded role-based controls for managing users and IT governance for conditional access to ensure only managed devices are used. In addition, every customer’s data is now co-located in a single data center to simplify meeting government and enterprise data sovereignty requirements. “In the post-pandemic world, enterprises must become more agile and practice enterprise acceleration. Robots have been a welcome and effective tool for developers and business leaders who must create that acceleration,” said Holger Mueller, Vice President and Principal Analyst at Constellation Research. “By making robot usage a cloud offering via Automation Cloud™ Robots, UiPath is providing enterprises an easy way to create and operate bots, democratizing automation even further.” In addition, UiPath is expanding its monetization offering on its Marketplace by introducing end-to-end business solutions that address business challenges across areas such as accounting, supply chain, manufacturing, insurance, and sales. It opens another gateway for UiPath partners and independent vendors to monetize their automation solutions, attract a wider audience, and unveil greater revenue opportunities through UiPath Marketplace. Vendors can take their business further by offering additional implementation and customization services. Initial vendors launching their business solutions on the Marketplace include: AuraPlayer, Base64.ai, DRUID AI, Element Blue, Int4 AG, INVOKE, KTern.AI, Kanverse.ai, and WonderBotz. About UiPath UiPath has a vision to deliver the fully automated enterprise™, one where companies use automation to unlock their greatest potential. UiPath offers an end-to-end platform for automation, combining the leading Robotic Process Automation (RPA) solution with a full suite of capabilities that enable every organization to rapidly scale digital business operations.

Read More

CLOUD APP DEVELOPMENT

Wipro Unveils a New “Cloud Car” Platform; Aims to Accelerate the Deployment of Software-Defined Vehicles

Wipro Limited | March 03, 2022

Wipro Limited a leading global information technology, consulting, and business process services company, today announced the launch of its “Cloud Car” platform, which will be unveiled during the Engineering the Cloud Car Ecosystem panel at MWC Barcelona. Wipro’s Cloud Car platform will bring together its Wipro FullStride Cloud Services and engineering capabilities with a best-in-class partner ecosystem as well as consortiums. A first in the industry, the platform will deliver auto makers an integrated, cloud-native software solution—equipped with an end-to-end cybersecurity system—to help them innovate faster at a lower cost and keep software-defined vehicles (SDVs) digitally relevant for years. “Today, most SDVs come with pre-set features that are difficult and time-consuming to upgrade, rendering them outdated as new technologies come to market. Our goal is to make it possible for automobile manufacturers to deliver vehicles that get better every day, so both they and generations of owners can drive better return on investments.” Thomas Mueller, CTO, Engineering and R&D Services, Wipro Limited Wipro’s Cloud Car platform will decouple previously integrated software and hardware, enabling manufacturers to validate and upgrade software at an unmatched digital scale. As a result, generations of owners will be able to customize their vehicles based on their unique and changing needs. Automobile manufacturers, on the other hand, will be able to address software failures via over-the-air updates, without having to resort to physical recalls. The ‘always-on,’ ‘feature-on-demand’ functionality will come with a robust cyber security and functional safety architecture and will help increase vehicles’ residual value. “By 2030, the vast majority of new vehicles will be SDVs,” added Mueller. “These cars will connect in real-time with the world around them. They will leverage artificial intelligence and machine learning to constantly gather data, provide valuable information and, eventually, make autonomous decisions. Unlocking the true potential of SDVs will require moving them to the cloud. We are fast forwarding to that future by making the Cloud Car ecosystem available to every automotive company in the world today.” The Cloud Car platform will also leverage a ‘shadow mode’ architecture, working passively in the background, gathering and consolidating data from sensors and cameras as well as the driver, which, over time, will help with the validation and safety of autonomous functionalities. About Wipro Limited Wipro Limited is a leading global information technology, consulting and business process services company. We harness the power of cognitive computing, hyper-automation, robotics, cloud, analytics and emerging technologies to help our clients adapt to the digital world and make them successful. A company recognized globally for its comprehensive portfolio of services, strong commitment to sustainability and good corporate citizenship, we have over 220,000 dedicated employees serving clients across six continents. Together, we discover ideas and connect the dots to build a better and a bold new future.

Read More

CLOUD APP DEVELOPMENT

AST Announces Strategic Investment by Recognize

AST | January 25, 2022

AST Corporation, a leading cloud and digital transformation solutions provider, announced it has received a strategic growth investment from Recognize, a technology services-focused investment platform. AST is an award-winning cloud services provider that has served clients in the public and commercial sectors for more than two decades. The partnership with Recognize enables AST to accelerate investment in innovation, enhance its global delivery footprint and expand its solution offering to clients. "AST has built a strong foundation with an award-winning culture focused on leveraging cloud technology in our core Oracle and Salesforce ecosystems to deliver value-based outcomes for our customers. As we look at the next chapter, we are excited about the partnership with Recognize, which will accelerate our efforts in building a differentiated, purposeful digital transformation solutions provider.” Justin Winter, CEO of AST With over 750 team members globally, AST is a leading, trusted services partner to Oracle, Salesforce and other notable technology vendors, managing large-scale digital transformation efforts. As organizations accelerate their shift to leveraging next-generation technologies, AST is uniquely positioned to manage clients’ digital transformation initiatives, including securely and efficiently shifting on-premise systems to cloud-based applications. “We are excited to work alongside Justin and his team to help AST continue to build on its already strong track record,” said Charles Phillips, Recognize co-founder and former president of Oracle. “AST is well positioned to capitalize on Oracle’s maturing cloud service and customers now have a clear path toward meaningful digital transformation.” “We are deeply impressed by the company that Justin and his team have built,” said David Wasserman, co-founder and managing partner of Recognize. "AST’s leadership position across its core end markets, differentiated focus on best-in-class service capabilities and industry-leading culture made us excited to partner with the team as they continue scaling the business.” Charles Phillips will join the company’s Board of Directors as Chairman alongside fellow Recognize co-founder David Wasserman and Recognize partner Mike Grady. This is the fourth platform investment for Recognize as it continues to deploy capital from its flagship fund. Willkie Farr & Gallagher acted as legal advisor to Recognize. Guggenheim Securities, LLC and Harris Williams acted as financial advisors to AST and Davis Polk & Wardwell acted as legal advisor. About AST AST is an award-winning full-service enterprise systems integrator, serving clients in the public and commercial sectors for more than two decades. Clients look to AST for leadership and assistance in systems integration, business process redesign, project management, systems administration, and training. From on-premise applications to modern cloud technology, AST’s services encompass all aspects of Enterprise Resource Planning, Business Intelligence, Enterprise Performance Management, Customer Experience, and Middleware. AST also offers flexible Managed Services, supporting the needs of over 200 Public Sector and Commercial customers around the globe. About Recognize Recognize is a technology investment platform exclusively focused on the technology services industry. Tech services firms envision, build, configure, manage, and operate software and business processes to deliver digital outcomes for enterprises. The firm provides operational expertise, industry insights, and strategic capital to innovative companies in this sector. Recognize is led by industry veterans Frank D’Souza, Raj Mehta, Charles Phillips, and David Wasserman, along with partners Mike Grady, Josh Miller, Deborah Munfa, and Shawn Pride.

Read More

Spotlight

At Columbia Sportswear, you will find that one size doesn’t fit all in terms of their infrastructure. In some places where intellectual property or other concerns are really important, they will use their private cloud while for less sensitive or more commoditized, they may look at a hybrid or a public cloud offering. It’s all about matching the workflows with the right delivery and hosting mechanism for their business. VMware is really now leading not only inside your data center but helping Columbia leverage things outside where they can have cloud and scale things in and outside of their walls leveraging the tools that VMware has and that they can consistently do things whether it's in their private cloud or in a public cloud or a hybrid.

Resources