- VMware News and Stories

https://news-editor.vmware.com/wp-content/uploads/2021/09/logo_media_thumbnail.jpg

VMware News & Stories

VMware News and Stories

Home

VMware Helps Customers Navigate Multi-Cloud with Innovative New Offerings 

VMware Redefines Networking and Security for Multi-Cloud with New Innovations

Night  cityscape with Neon light and  Futuristic digital design

VMware Wins 2022 SC Award for the Best Web Application Solution

Global Incident Response Threat Report HERO - VMware News and Stories

VMware Report Warns of Deepfake Attacks and Cyber Extortion

Global Incident Response Threat Report HERO

Expanded FedRAMP High Authorization HERO - VMware News and Stories

VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization 

Expanded FedRAMP High Authorization HERO

Tom Gillis Headshot - VMware News and Stories

Why CISOs Should Invest More Inside Their Infrastructure

Tom Gillis Headshot

Bank vault with open door &amp; grill (B&amp;W)

Modern Bank Heists 5.0: The Escalation from Dwell to Destruction

Female Government Employee Works in a Monitoring Room. In The Background Supervisor Holds Briefing. Possibly Government Agency Conducts Investigation.

public sector innovation - VMware News and Stories

Multi-Cloud for Mission Success

public sector innovation

This problem is going to need everyone's imput

VMware Prevents 100% of Critical Attacks Tested During MITRE Engenuity ATT&#038;CK® Evaluation

Network Security.

VMware Pioneers Modern Security for Modern Applications from Development to Production

Snowboarder Jumping

VMware Wins Gold at 2022 Cybersecurity Excellence Awards

Back View in the System Control Center Operator Working. Multiple Screens Showing Technical Data.

GovCon Wire: Government Security Strategy Zero Trust - VMware News and Stories

GovCon Wire | Zero Trust Should Be Part of Agencies&#8217; Holistic Security Strategy

GovCon Wire: Government Security Strategy Zero Trust

VMware unveils new and enhanced portfolio offerings, Cross-Cloud services and significant partner announcements at VMware Explore to deliver a faster and smarter path to cloud for digital businesses

core/paragraph

SAN FRANCISCO – VMware Explore 2022 US - Today at <a href="https://www.vmware.com/explore/us.html" target="_blank" rel="noreferrer noopener">VMware Explore 2022</a>, VMware, Inc. (NYSE: VMW) unveiled innovations, new offerings, services and expanded partnerships that further its commitment to help customers navigate and thrive in today’s multi-cloud world. As customers continue to evolve and digitize their businesses to innovate faster and better serve their own customers, VMware and its partner ecosystem are enabling businesses to select the right cloud for the right app.

“Whether you’re a challenger born in the cloud or an established player, the ultimate destination for customers is a multi-cloud environment that empowers teams to accelerate their digital innovation,” said Raghu Raghuram, CEO, VMware. “At VMware Explore, VMware and our partners are advancing our technology offerings to help customers gain advantages from a cloud-smart approach.”

<a href="https://news.vmware.com/vmware-explore/from-cloud-chaos-to-cloud-smart">Read Raghu Raghuram’s from Cloud Chaos to Cloud Smart blog post</a>

Many of these new capabilities are built on the <a href="https://www.vmware.com/cross-cloud-services.html">VMware Cross-Cloud™ services</a> the company <a href="https://news.vmware.com/releases/vmworld-2021-cross-cloud-services">introduced at VMworld 2021</a> and are designed to give organizations the strategic advantages of a cloud-smart approach. As organizations increase the number of clouds they support to accelerate their business goals, they experience an increase in operational complexity. VMware Cross-Cloud services deliver a unified and simplified way to build, operate, access, and better secure any application, on any cloud, from any device—across app platform, cloud management, cloud and edge infrastructure, networking and advanced security, and anywhere workspace.

Accelerate Enterprise Cloud Transformation

<a href="https://news.vmware.com/releases/vmware-explore-2022-cloud-edge-infrastructure">VMware is introducing cloud and edge infrastructure solutions</a> that help businesses accelerate their enterprise cloud transformation and enable customers to better run, scale and secure enterprise workloads across private and public clouds and at the edge. VMware and its public cloud partners also continue to help customers migrate and run those workloads in the public cloud of their choice. Additionally, <a href="https://news.vmware.com/releases/vmware-explore-2022-networking-security-multi-cloud">VMware unveiled networking and security innovations</a> to help customers further embrace the cloud operating model. Highlights include:

core/list

Scale Cloud Native Platform Operations

VMware continues to help customers secure, run and manage all cloud native apps. <a href="https://news.vmware.com/releases/vmware-explore-2022-tanzu-cloud-native-apps">New advances to the VMware Tanzu portfolio</a> unlock developer productivity, deliver end-to-end security from build to production, and enable more secure multi-cloud operations at scale, regardless of where enterprises are in their Kubernetes journey. <a href="https://news.vmware.com/releases/vmware-explore-2022-multi-cloud-management">VMware also introduced a new multi-cloud management portfolio</a>—VMware Aria—which will provide a set of end-to-end solutions for managing cloud native applications and infrastructure. The new offerings will help customers manage their costs, performance, configuration and delivery across public and private clouds. Highlights include:

Empower the Hybrid Workforce

Customers continue seek to enable anywhere work with secure and frictionless experiences. This week’s advancements across <a href="https://news.vmware.com/releases/vmware-explore-2022-anywhere-workspace">VMware Anywhere Workspace</a> will inject automation into the end-user computing environments of organizations, enabling IT teams to do more with less. Updates include:

For the latest news and more on how VMware is delivering a faster and smarter path to cloud for digital businesses including a comprehensive list of partner announcements, visit the <a href="https://news.vmware.com/vmware-explore-2022-media-kit">VMware Explore 2022 media kit</a>.

VMware Explore is an evolution of the company's flagship conference, VMworld. VMware Explore aims to be the industry’s go-to-event for all things multi-cloud. This year, it will feature industry-led solution and technical sessions, an extensive ecosystem of 90% of the top cloud partners, a thriving marketplace of multi-cloud ISVs and several networking events. To learn more about VMware Explore, please visit: <a href="http://www.vmware.com/explore.html">www.vmware.com/explore.html</a>.

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="http://www.vmware.com/company">www.vmware.com/company</a>.

VMware, Anywhere Workspace, Explore, VMworld, Tanzu, vSAN, and vSphere, VMware Aria, NSX, Workspace ONE, and Horizon are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and other jurisdictions. This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

core/separator

VMware Global Communications

Media Contacts

corpnews-blocks/media-contact

At VMware Explore 2022, VMware unveils innovations, new offerings, services and expanded partnerships that further its commitment to help customers navigate and thrive in today’s multi-cloud world.

VMware Helps Customers Navigate Multi-Cloud with Innovative New Offerings

https://news-editor.vmware.com/wp-content/uploads/2022/08/Umbrella-Announcement-HERO.jpg

VMware Helps Customers Navigate Multi-Cloud with Innovative New Offerings￼ - VMware News and Stories

Posts

VMware Helps Customers Navigate Multi-Cloud with Innovative New Offerings￼

Introduces new tech previews that will help transform the way customers consume networking and security across cloud environments

SAN FRANCISCO — VMware Explore 2022 – VMware Inc. (NYSE: VMW) today announced new innovations across its expanding networking and security portfolio that will help customers embrace the cloud operating model. These new innovations include:

“Enterprises are facing an unprecedented level of threat and complexity as they operate in today’s multi-cloud world,” said Tom Gillis, senior vice president and general manager of VMware’s Networking and Advanced Security business group. “VMware is radically transforming how our customers consume networking and security – allowing them to realize the agility and efficiencies of the cloud operating model through a cloud-smart approach. With a privileged position in the infrastructure and a scale out distributed software architecture, we’re able to leverage the intrinsic attributes of our platforms and deliver these unique solutions in a consumption-oriented manner.”

Simplifying Networking and Security for Multi-Cloud

In <a href="https://blogs.vmware.com/networkvirtualization/2022/08/announcing-project-northstar.html/" target="_blank" rel="noreferrer noopener">Project </a><a href="https://blogs.vmware.com/networkvirtualization/2022/08/announcing-project-northstar.html/">Northstar</a>, VMware announces a major advancement of its NSX platform. Announced in technology preview today, Project Northstar will transform how enterprises consume networking and security in a multi-cloud world. Project Northstar will deliver multi-cloud networking, security, workload mobility and end-to-end threat detection and response with a centralized cloud-console for consistent and simplified software-as-a-service (SaaS) consumption. This family of services includes network & security policy management, network detection and response (NDR), network visibility and analytics (NSX Intelligence), advanced load balancing (ALB), and workload mobility (HCX) for private cloud environments and VMware Cloud deployments.

“As an innovator in software-defined networking, VMware offers a full-stack of networking and security services in an integrated solution that benefits thousands of enterprise customers today,” said Umesh Mahajan, senior vice president and general manager for VMware’s Networking and Security business unit. “Customers are seeking a uniform policy model across multi-cloud deployments, along with consistent network connectivity, security, and load balancing services. With Project Northstar we continue to shape how enterprises consume networking and security in a multi-cloud world.”

Today, with the latest update to VMware NSX 4.0 and VMware vSphere 8, <a href="https://blogs.vmware.com/networkvirtualization/2022/08/announcing-dpu-based-acceleration-for-nsx.html/" target="_blank" rel="noreferrer noopener">NSX networking and security functions can now be implemented on Data Processing Units</a> (DPUs, also known as SmartNICs) connected to the host hypervisor. Offloading NSX services to the DPU can accelerate networking and security functions without impacting the host CPUs, addressing the needs of modern applications and other network-intensive and latency-sensitive applications.

Strengthening Lateral Security <a></a><a></a>

The growth in laterally moving threats requires security teams to pay closer attention to east-west network traffic. Examining traffic through network taps is no longer sufficient. Modern distributed cloud architectures can further exacerbate blind spots. VMware’s architecture allows customers see processes running in an endpoint, packets crossing the network, access points, and the inner workings of both traditional and modern apps to identify and stop threats others can’t. As part of today's announcements, VMware is strengthening its lateral security capabilities by embedding network detection and visibility into Carbon Black Cloud's endpoint protection platform, which is now available to select customers in early access. This extended detection and response (XDR) telemetry adds network detection and visibility to endpoints with no changes to infrastructure or endpoints, providing customers with extended visibility into their environment across endpoints and networks leaving attackers nowhere to hide.

Limited visibility into the east-west traffic between microservices also puts modern applications at greater risk. Project Trinidad, which is in tech preview, extends VMware's API security and analytics by deploying sensors on Kubernetes clusters and uses machine learning with business logic inference to detect anomalous behavior in east-west traffic between microservices.

Findings from VMware’s recent <a href="https://news.vmware.com/releases/vmware-report-warns-of-deepfake-attacks-and-cyber-extortion">Global Incident Response Threat </a><a href="https://news.vmware.com/releases/vmware-report-warns-of-deepfake-attacks-and-cyber-extortion" target="_blank" rel="noreferrer noopener">Report</a> reveal that ransomware actors continue to evolve their cyber extortion strategies. Ransomware will continue to be a business reality, and VMware uniquely makes recovery from an attack faster, more predictable, and less prone to error with <a href="https://blogs.vmware.com/virtualblocks/2022/08/30/the-need-for-ransomware-recovery-as-a-service-introducing-vmware-ransomware-recovery/" target="_blank" rel="noreferrer noopener">VMware Ransomware Recovery for VMware Cloud DR</a>, a new offering unveiled at VMware Explore. This new, purpose-built ransomware recovery-as-a-service solution enables safe recovery that prevents re-infection of IT and line-of-business production workloads through its innovative use of an on-demand isolated recovery environment on VMware Cloud on AWS. Guided recovery workflows allow customers to quickly identify recovery point candidates, validate restore points using embedded behavioral analysis, and recover data with minimal loss.

Expanding Security for the Data Center and Cloud Edge

Last year, VMware announced the industry-first elastic application security edge (EASE) which enables the networking and security infrastructure at the data center or cloud edge to flex and adjust as app needs change. To help customers preserve their investments in expensive hardware appliances that are incapable of adapting to changing app environments, VMware is introducing:

Securing the Edge for the Distributed Workforce

In the past two years, enterprise customers have fundamentally changed how they build and deploy networks and access to support distributed workers. The market for secure access service edge (SASE) solutions is expected to nearly triple by 2026 with security being a key driver of growth as enterprises strategically invest for the new age of distributed applications and hybrid work, according to the Dell'Oro Group1. A leader in SD-WAN2, VMware is now offering additional deployment flexibility to customers who want a multi-phase journey from their current network and endpoint management solutions to a next-generation SASE offering by adding new web proxy-based connectivity to VMware Cloud Web Security.

VMware Cross-Cloud™ services Helps Customers Navigate the Multi-Cloud Era

At VMware Explore 2022, VMware is unveiling new and enhanced offerings for VMware Cross-Cloud services to help customers navigate the multi-cloud era with freedom, flexibility and security. VMware Cross-Cloud services is a portfolio of cloud services that deliver a unified and simplified way to build, operate, access, and better secure any application on any cloud from any device. VMware Cross-Cloud service pillars include 1) App Platform 2) Cloud Management 3) Cloud & Edge Infrastructure 4) Security & Networking, and 5) Anywhere Workspace. For the latest news and more on how VMware is delivering a faster and smarter path to cloud for digital businesses, visit the <a href="https://news.vmware.com/vmware-explore-2022-media-kit">VMware Explore 2022 media kit</a>.

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="https://cts.businesswire.com/ct/CT?id=smartlink&url=http%3A%2F%2Fwww.vmware.com%2Fcompany&esheet=52787028&newsitemid=20220721005271&lan=en-US&anchor=www.vmware.com%2Fcompany&index=9&md5=8afe7ba2d36912953923dda1bf1573ca" target="_blank" rel="noreferrer noopener">www.vmware.com/company</a>.

VMware, Explore, Carbon Black, NSX, and vSphere are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and other jurisdictions. This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

At VMware Explore 2022, VMware announces new innovations across its expanding networking and security portfolio that will help customers embrace the cloud operating model.

https://news-editor.vmware.com/wp-content/uploads/2022/08/1587007-vmwx22-security-network.png

VMware Redefines Networking and Security for Multi-Cloud with New Innovations - VMware News and Stories

We are excited to announce that VMware NSX Advanced Load Balancer has won the <a href="https://www.scmagazine.com/news/application-security/best-web-application-solution-vmware-nsx-advanced-load-balancer-avi" target="_blank" rel="noreferrer noopener">2022 SC Award in Trust for the Best Web Application Solution</a>. The industry awards program is a prestigious and competitive cybersecurity award program, recognizing organizations, individuals, and solutions that drive innovation and success.

Application security threats resulting from web attacks are among the most frequent types of breaches occurring today. VMware NSX Advanced Load Balancer is a true multi-cloud application services platform that empowers customers to deliver and protect their applications across on-premises, containers, or public cloud environments. It allows organizations to protect their multi-cloud applications with best-in-class Web Application Firewall (WAF), Bot Management, API (Application Programming Interface) protection, and more, based on a built-in analytics engine. These analytics provide visibility into the attacks against the applications, and it is the basis for the machine learning algorithms that empower customers to take the best security decisions. 

VMware NSX Advanced Load Balancer wins the 2022 SC Award in Trust for the Best Web Application Solution.

https://news-editor.vmware.com/wp-content/uploads/2022/08/GettyImages-1343571001.jpg

https://secure.gravatar.com/avatar/f691974e1fa9d914ee2e5ed6ff27eb1a?s=96&d=mm&r=g

vgideon@vmware.com

Burned out security teams fight back against geopolitically motivated attacks and lateral movement inside networks

core/heading

PALO ALTO, Calif. – At Black Hat USA 2022, VMware, Inc. (NYSE: VMW) released its eighth annual <a href="https://www.vmware.com/content/microsites/learn/en/1553238_REG.html">Global Incident Response Threat Report</a>, which takes a deep dive into the challenges faced by security teams amid pandemic disruptions, burnout, and geopolitically motivated cyberattacks. Sixty-five percent of defenders state that cyberattacks have increased since Russia invaded Ukraine, according to report findings. The report also shines a light on emerging threats such as deepfakes, attacks on APIs, and cybercriminals targeting incident responders themselves.

“Cybercriminals are now incorporating deepfakes into their attack methods to evade security controls,” said Rick McElroy, principal cybersecurity strategist at VMware. “Two out of three respondents in our report saw malicious deepfakes used as part of an attack, a 13% increase from last year, with email as the top delivery method. Cybercriminals have evolved beyond using synthetic video and audio simply for influence operations or disinformation campaigns. Their new goal is to use deepfake technology to compromise organizations and gain access to their environment.”

Additional key findings from the report include:

“In order to defend against the broadening attack surface, security teams need an adequate level of visibility across workloads, devices, users and networks to detect, protect, and respond to cyber threats,” said Chad Skipper, global security technologist at VMware. “When security teams are making decisions based on incomplete and inaccurate data, it inhibits their ability to implement a granular security strategy, while their efforts to detect and stop lateral movement of attacks are stymied due to the limited context of their systems.”

Despite the turbulent threat landscape and rising threats detailed in the report, incident responders are fighting back with 87% saying that they are able to disrupt a cybercriminal’s activities sometimes (50%) or very often (37%). They’re also using new techniques to do so. Three-quarters of respondents (75%) say they are now deploying virtual patching as an emergency mechanism. In every case, the more visibility defenders have across today’s widening attack surface, the better equipped they’ll be to weather the storm.

For more information on the evolving threat landscape as well as actionable guidance and recommendations for incident responders and security teams, <a href="https://www.vmware.com/content/microsites/learn/en/1553238_REG.html">download the full report here</a>.

VMware conducted an online survey about trends in the incident response landscape in June 2022, and 125 cybersecurity and incident response professionals from around the world participated. Percentages in certain questions exceed 100 percent because respondents were asked to check all that apply. Due to rounding, percentages in all questions may not add up to 100 percent. To read last year’s report, please visit<a href="https://www.vmware.com/resources/security/global-incident-response-threat-report-manipulating-reality.html"> Global Incident Response Threat Report: Manipulating Reality.</a>

VMware at Black Hat USA 2022

VMware will discuss the findings from this report and other key security topics in the sessions listed below. Visit us at our Black Hat booth #1620, and follow along with us on social <a href="https://twitter.com/vmwarenews">@VMwareNews</a> and in the <a href="https://www.vmware.com/company/news/media-resources/security-anywhere-workspace.html">VMware Newsroom</a>

<a href="https://www.blackhat.com/us-22/sponsored-sessions/schedule/index.html#why-workloads-are-more-secure-on-vmware-clouds-28736">Why Workloads Are More Secure on VMware Clouds</a> Wednesday, August 10 at 1:50 pm PT Chad Skipper, Global Security Technologist Stefano Ortolani, Threat Research Lead

<a href="https://www.blackhat.com/us-22/sponsored-sessions/schedule/index.html#exposing-malware-in-a-linux-based-multi-cloud-environment-28693">Exposing Malware in a Linux-based Multi-Cloud Environment</a> On-demand Dale McKay, Senior Technical Marketing Architect

<a href="https://www.blackhat.com/sponsor-interview/07282022.html#vmware">Black Hat Interview with Tom Gillis</a>

<a href="https://www.blackhat.com/sponsor-posts/07292022-vmware.html">Black Hat Article by Giovanni Vigna and Stefano Ortolani</a>

In addition to VMware’s presence at Black Hat USA 2022, there will be more than 100 security talks at VMware Explore, the global multi-cloud industry event taking place August 29 – September 1, 2022 at Moscone Center in San Francisco. <a href="https://www.vmware.com/explore/us.html">Register today</a> to begin building your agenda.

core/image

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit www.vmware.com/company. 

VMware and VMware Contexa are registered trademarks or trademarks of VMware, Inc. in the United States and other jurisdictions. This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Kerry Tuttle, VMware Global Communications, ktuttle@vmware.com

The Global Incident Response Threat Report takes a deep dive into the challenges faced by security teams amid pandemic disruptions, burnout, and geopolitically motivated cyberattacks.

https://news-editor.vmware.com/wp-content/uploads/2022/08/Global-Incident-Response-Threat-Report-FB.jpg

https://secure.gravatar.com/avatar/4d948efc2db683c0cb4aa50361a076f7?s=96&d=mm&r=g

ktuttle@vmware.com

UPDATED July 27, 2022

The following announcement has been updated. The release of VMware Carbon Black Cloud on AWS GovCloud (US) is delayed, the offering is now  expected to be available in August 2022.

VMware Government Services helps agencies accelerate innovation across data centers, cloud and the edge for mission success

PALO ALTO, CA -- VMware Inc. (NYSE: VMW), a leading innovator in enterprise software, today announced that it has achieved Federal Risk and Authorization Management Program (FedRAMP) High Authorization through the Joint Authorization Board (JAB) for VMware Government Services, which includes VMware Carbon Black Cloud and VMware SD-WAN on AWS GovCloud (US). These cloud services are designed to empower US government agencies and customers supporting the US government to migrate, manage, and operate sensitive workloads in the cloud. VMware Government Services is now available on the <a href="https://marketplace.fedramp.gov/#!/product/vmware-government-services-vgs?sort=productName&productNameSearch=vmware">FedRAMP Marketplace</a>.

Across the public sector, agencies are laying the groundwork for multi-cloud-adoption. With expanded FedRAMP Authorized offerings at the High Impact Level, VMware can help agencies accelerate their digital transformation timelines. VMware Government Services provides software-as-a-service, platform-as-a-service, and infrastructure-as-a-service capabilities, delivering modern applications at the speed that government agencies demand and enabling them to operate across data centers, the edge, and cloud. VMware Carbon Black Cloud, VMware SD-WAN and VMware Cloud on AWS GovCloud (US), are cost-effective, more secure and compliant offerings that government agencies can now seamlessly leverage to modernize their infrastructures and accelerate multi-cloud initiatives.

“VMware continues to invest to help government agencies leverage the power of the cloud and evolve IT infrastructures,” said Jennifer Chronis, vice president, public sector, VMware. “Achieving expanded FedRAMP authorizations enables us to meet our customers wherever they are on their digital transformation journeys to help them innovate faster and create resiliency while adhering to the highest security and compliance standards. These additional accreditations further our commitment to our public sector customers to help them better serve and meet mission demands.” (<a href="https://twitter.com/jenniferchronis">Twitter</a>,<a href="https://www.linkedin.com/in/jennifer-chronis-4a11745/"> LinkedIn</a>)

Empowering the Public Sector to See and Stop More Threats

VMware Carbon Black Cloud on AWS GovCloud (US) has received FedRAMP High authorization amid an increasing demand by federal agencies for cloud-delivered security. Public sector customers can now deploy the modern endpoint security and advanced workload protection required to stay one step ahead of adversaries as geopolitically fueled cyberattacks increase. This authorization underscores VMware Carbon Black Cloud’s ability to prevent, detect, and respond to threats on endpoints and server workloads from a single console for improved visibility and simplified operations. Powered by VMware Contexa, VMware Carbon Black Cloud delivers authoritative intelligence that enables federal customers to correlate threats across their environments.

This designation solidifies VMware Carbon Black Cloud’s position as a trusted security platform helping the US government protect its most critical assets. As a founding member of the Cybersecurity and Infrastructure Security Agency’s Joint Cyber Defense Collaborative, VMware is also a trusted national security partner participating in public-private sector collaboration, threat intelligence sharing and cyber defense planning. In addition, VMware Carbon Black Cloud is pursuing authorization to operate at Department of Defense (DoD) Impact Level (IL-4) to expand its federal footprint to U.S. DoD and Defense Industrial Base customers.

Secure, Reliable Access to Cloud Apps & Services from Anywhere

VMware SD-WAN is an industry-leading software-defined WAN solution, that connects users across distributed locations more safely, reliably, and efficiently to cloud-based applications, cloud services and agency data centers. The anywhere workforce has become the new normal for many government agencies. Modernizing agency networks with VMware SD-WAN on AWS GovCloud will improve remote employee productivity with more secure and optimized application access while simplifying operations and maximizing ROI. VMware SD-WAN is the only SD-WAN solution today to receive FedRAMP High Authorization that complements government agencies’ cloud-smart adoption with assured performance for mission-critical applications in the cloud. In addition, VMware SD-WAN is a key enabler for agencies to deliver on their vision of 5G and edge compute by eliminating IT complexity while delivering greater efficiency and faster deployment. Agencies can leverage VMware SD-WAN as a critical component of a multi-layered security strategy to help accelerate their journey towards a zero-trust architecture.

Enabling Accelerated Multi-Cloud Adoption

In April, VMware Cloud on AWS GovCloud (US) achieved FedRAMP High JAB authorization as well as DISA Impact Level 5 (IL5) provisional authorization. VMware Cloud on AWS GovCloud (US) supports critical public sector use cases, including data center extension, cloud migration, virtual desktops, disaster recovery, and application modernization. Now in its third year of operation, VMware Cloud on AWS GovCloud (US) is serving a wide range of mission owners with availability in both US-East and US-West.

VMware is committed to achieving FedRAMP authorization for additional services. VMware Government Services will help fast-track authorizations enabling agencies to accelerate innovation and multi-cloud adoption on VMware’s trusted digital foundation.

For more information on how VMware is helping agencies accelerate innovation across the public sector, please visit: <a href="https://www.vmware.com/products/trust-center/certificate.html?family=FedRAMP">VMware Cloud Trust Center</a>.

Additional Resources

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="http://www.vmware.com/company" target="_blank" rel="noreferrer noopener">www.vmware.com/company</a>.

VMware, Carbon Black and VMware SD-WAN are registered trademarks or trademarks of VMware, Inc. in the United States and other jurisdictions.

This press release may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

VMware achieves FedRAMP High Authorization for VMware Government Services to help agencies accelerate innovation across data centers, cloud and the edge for mission success

VMware Furthers Commitment to Public Sector

https://news-editor.vmware.com/wp-content/uploads/2022/07/Expanded-FedRAMP-High-Authorization-FB.jpg

VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization  - VMware News and Stories

https://secure.gravatar.com/avatar/ef7da3c5b02b380f4b9387286b0f030f?s=96&d=mm&r=g

smayowa@vmware.com

Tom Gillis explores how CISOs should invest in detecting and stopping lateral movement of threats on private and public clouds. 

Tom Gillis explores how CISOs should invest on detecting and stopping lateral movement of threats on private and public clouds. 

https://news-editor.vmware.com/wp-content/uploads/2022/06/Tom-Gillis.jpg

There has been a fundamental restructuring of cybercrime cartels thanks to a booming dark web economy of scale. Powerful cybercriminal groups now operate like multinational corporations and are relied upon by traditional crime syndicates to carry out illegal activities such as extortion and money laundering. Cybercrime cartels are more organized than ever before and enjoy greater protection and resources from the nation-states that view them as national assets.1

With this ground truth serving as the backdrop for the threats facing financial institutions, I interviewed 130 financial security leaders and CISOs from around the world for the fifth edition of the <a href="https://www.vmware.com/learn/security/1414485_REG.html">Modern Bank Heists report.</a> This year’s findings should serve as a warning to the financial sector that attackers are moving from dwell to destruction.

Geopolitical Tension Is Metastasizing in Cyberspace

Cybercriminals targeting the financial sector often escalate their destructive attacks in order to burn evidence as part of their counter incident response. Our report found that 63% of financial institutions experienced an increase in destructive attacks, a 17% increase from last year. Destructive attacks are launched punitively to destroy, disrupt, or degrade victim systems by taking actions such as encrypting files, deleting data, destroying hard drives, terminating connections, or executing malicious code. In fact, we’ve recently witnessed <a href="https://blogs.vmware.com/security/2022/03/shields-up-prepare-for-destructive-cyberattacks.html">destructive malware</a> like HermeticWiper being launched following Russia’s invasion of Ukraine. Notably, the majority of financial leaders I spoke to for this report stated that Russia posed the greatest concern to their institution.

Financial institutions were certainly not immune to the recent resurgence of ransomware. 74% of financial security leaders experienced one or more ransomware attacks in the past year, and 63% of those victims paid the ransom. This is a staggering statistic.

One of the reasons that traditional crime syndicates have become loyal dark web customers is because of the well-funded ecosystem of readymade and available ransomware kits. Cybercrime cartels, such as the Conti ransomware gang, have made it as easy as possible for their associates to launch ransomware attacks on critical industries like the financial sector.

A technical analysis in the VMware Threat Analysis Unit’s latest <a href="https://www.vmware.com/resources/security/exposing-malware-in-multi-cloud.html">threat report</a> provides a view into the proliferation of ransomware and how Remote Access Tools (RATs) help adversaries gain control of systems. Ransomware has a sinister relationship with these RATs, given these tools allow bad actors to persist within the environment and establish a staging server that can be used to target additional systems. Once an adversary has gained this limited access, they will typically work to monetize it by relying on the victim’s data for extortion (including double and triple extortion) or through stealing resources from cloud services using cryptojacking attacks.

Manipulation of Financial Markets

Cybercrime cartels have realized that the most significant asset of a financial institution is nonpublic market information. 2 out of 3 (66 percent) of the leaders I interviewed experienced attacks that targeted market strategies, and 1 in 4 (25 percent) stated that market data was the primary target for cyberattacks on their financial institution.

What exactly are these cybercrime cartels looking for? We’re witnessing an evolution from bank heist to economic espionage, where cybercriminals target corporate information or strategies that can affect the share price of a company as soon as it becomes public. This information can then be used to digitize insider trading and front-run the market. Our report also found that 44% of Chronos attacks targeted market positions. A Chronos attack involves the manipulation of time stamps – a concerning development considering how critical of a role the clock plays in the markets.

Defense Is the Best Offense

Security has become a top-of-mind issue for financial sector leaders. According to our report findings, the majority of financial institutions plan to increase their security budget by 20-30% this year and named extended detection and response (XDR) as their top security investment priority.

As security leaders, we know that a strong defense is the best offense. Modern threat hunting on a weekly basis should be adopted as a best practice to help security teams detect behavioral anomalies, as adversaries can maintain clandestine persistence in an organization’s system. Our report found that currently, only 51% of financial institutions are conducting weekly threat hunts. I am hopeful that this number will jump in next year’s report as threat hunting programs have multiple outputs beyond finding a cybercriminal, such as fueling threat intelligence.

In today’s evolving threat landscape, cybersecurity has become a brand protection imperative. Trust and confidence in the safety of financial institutions depends on effectively avoiding, mitigating, and responding to modern cyber threats.

Download the full report to learn more: <a href="https://www.vmware.com/learn/security/1414485_REG.html">Modern Bank Heists 5.0</a>

<a href="https://news-editor.vmware.com/wp-content/uploads/2022/04/MBH-5.0-Infographic.pdf" target="_blank" rel="noreferrer noopener">Click here</a> to download the full-size interactive infographic.

Modern Bank Heists 5.0 findings should serve as a warning to the financial sector that attackers are moving from dwell to destruction.

https://news-editor.vmware.com/wp-content/uploads/2022/04/Modern_Bank_Heists_Facebook_1200x628.jpg

Tom Kellermann

VMware Research Reveals Agencies are Navigating Compliance, Security and Upskilling Employees Amid Cloud Adoption

Today, at the <a href="https://upgather.com/vmware/public-sector-innovation-summit/">Public Sector Innovation Summit</a>, VMware announced findings from a study on how government agencies are scaling use of multi-cloud environments for mission success. The study, titled “<a href="https://www.vmware.com/learn/1380503_REG.html?src=wb_624ed0c315228&cid=7012H000001KaLSQA0">Multi-cloud Is The New Frontier Of Government IT</a>," conducted by Forrester Consulting, found while the move to multi-cloud is a priority, agencies face challenges supporting growing cloud environments, including compliance standards, data security and upskilling employees.

A ‘Cloud‑Smart’ Approach for the Public Sector

The survey captures responses from more than 500 agency leaders and IT decision-makers at federal, state, and local governments in the United States and Canada and discovered that while agencies are accelerating cloud adoption, multi-cloud environments are far more diverse, complex, and distributed than anything organizations have managed in the past. This can create barriers or force trade-offs between moving fast and managing risk. The challenge lies in finding the right tools and platforms to meet agency demands and keep data and processes safe and compliant. The study found when selecting cloud platform providers, the top priorities for agencies were: 

Talent Paired with Technology

To achieve a faster and smarter path to multi-cloud, agencies are focused on scaling security and upskilling employees in tandem with cloud adoption. More than half of agencies (57%) expressed concern about data security as they look to increase cloud adoption and 65% of agencies have plans to increase their investment in professional development for their developers.

core/pullquote

“Multi-cloud is the new reality for government agencies but as they increase cloud investments, they also need to lay the technical and cultural foundation,” said Jennifer Chronis, vice president, public sector, VMware. “VMware is uniquely positioned to meet our customers wherever they are on their digital transformation journeys and help them take full advantage of multiple clouds. Across the public sector, we are giving our customers the power to accelerate innovation and improve resiliency on a trusted digital foundation.” (<a href="https://twitter.com/jenniferchronis">Twitter</a>,<a href="https://www.linkedin.com/in/jennifer-chronis-4a11745/"> LinkedIn</a>)

The full study, complete with recommendations for a ‘cloud-smart’ approach to the multi-cloud era can be downloaded <a href="https://www.vmware.com/learn/1380503_REG.html?src=wb_624ed0c315228&cid=7012H000001KaLSQA0">here</a>.

Learn more at the Public Sector Innovation Summit

VMware’s Public Sector Innovation Summit brings together leading technologists from the private sector, along with IT leaders and experts from federal, state, and local government. This year’s theme, “A Holistic Multi-Cloud for Mission Success,” explores how agencies can reimagine mission success innovating across clouds.

The summit will take place at the Ritz Carlton Pentagon City in Arlington, Virginia, from 8:30 a.m. – 1:15 p.m. ET. It will also be live streamed. To learn more or to register to attend, please visit: <a href="https://upgather.com/vmware/public-sector-innovation-summit/">Public Sector Innovation Summit 2022</a>.

To learn more about VMware is helping the public sector innovate, please visit:

Methodology

VMware commissioned a survey, undertaken by an independent research organization, Forrester Consulting, in March 2022. 501 agency leaders and IT decision-makers at federal, state, and local governments were surveyed on cloud practices including strategy, process, and solutions. The research was conducted in the United States and Canada.

This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Samantha Mayowa, VMware Global Communications, <a href="mailto:smayowa@vmware.com">smayowa@vmware.com</a>

Today, at the Public Sector Innovation Summit, VMware announced findings from a study on how government agencies are scaling use of multi-cloud environments for mission success.

Public Sector Innovation Summit 2022

https://news-editor.vmware.com/wp-content/uploads/2022/04/public_sector_innovation_1200x628.jpg

Pubic Sector Innovation Summit

MITRE Results Showcase Powerful Combination of VMware Endpoint and Network Security

PALO ALTO, Calif. – March 31, 2022 – Today, VMware, Inc. (NYSE:VMW) announced the results of its successful completion of the MITRE Engenuity ATT&CK® Evaluation. VMware security solutions were put to the test in their detection and prevention of attack techniques used by Wizard Spider, a financially motivated cybercriminal group, and Sandworm, a destructive threat group that the U.S. and U.K. have attributed to Russia.

Modern cyberattacks are sophisticated, multi-step assaults launched by bad actors who disguise themselves in the noise of multi-cloud environments. During the evaluation, VMware delivered critical preventions in 100% of the cases tested with zero configuration changes.  The combination of VMware endpoint and network security provides customers with effective security that is easier to operate and designed specifically for the threats businesses and governments face today.

“MITRE Engenuity’s rigorous testing reflects the type of threats that our customers are seeing in the real world, where there are no redo’s,” said Scott Lundgren, Chief Technology Officer of VMware’s Security Business Unit. “With highly effective detection and prevention, our results demonstrate the power of VMware’s comprehensive endpoint and network visibility, which not only works out of the box, but also works the first time.”

Key MITRE ATT&CK® Evaluation results include:

To view the full Wizard Spider and Sandworm evaluation, please visit <a href="https://attackevals.mitre-engenuity.org/enterprise/wizard-spider-and-sandworm/">MITRE Engenuity</a> for evaluation details.

MITRE Engenuity, a subsidiary of MITRE, is a tech foundation for the public good. MITRE’s mission-driven teams are dedicated to solving problems for a safer world. Through our public-private partnerships and federally funded R&D centers, we work across government and in partnership with industry to tackle challenges to the safety, stability, and well-being of our nation.

MITRE Engenuity brings MITRE’s deep technical know-how and systems thinking to the private sector to solve complex challenges that government alone cannot solve. MITRE Engenuity catalyzes the collective R&D strength of the broader U.S. federal government, academia, and private sector to tackle national and global challenges, such as protecting critical infrastructure, creating a resilient semiconductor ecosystem, building a genomics center for public good, accelerating use case innovation in 5G, and democratizing threat-informed cyber defense.

Kerry Tuttle, VMware Global Communications, ktuttle@vmware.com 

Today, VMware, Inc. (NYSE:VMW) announced the results of its successful completion of the MITRE Engenuity ATT&CK® Evaluation. VMware security solutions were put to the test in their detection and prevention of attack techniques used by Wizard Spider, a financially motivated cybercriminal group, and Sandworm, a destructive threat group that the U.S. and U.K. have attributed to Russia.

VMware Prevents 100% of Critical Attacks Tested During MITRE Engenuity ATT&CK® Evaluation

https://news-editor.vmware.com/wp-content/uploads/2022/03/MicrosoftTeams-image-4.png

The recent Presidential mandates and legislation aimed at strengthening public sector digital defenses are much needed reinforcements to ongoing challenges. Cybercrime is predicted to cost the world $10.5 trillion annually by 20251, up from $6 trillion in 2021. Added to this are the stressors caused by the global pandemic — requiring agencies to transition to remote workforces while still serving constituents. And while digital transformation, including cloud adoption, has been on the “to do” list for quite some time, the pandemic accelerated the timeline as agencies looked to modernize their infrastructure and build resilience.

With these forces in mind, VMware’s public sector experts weighed in on what should be at the top of mind for agencies this year.

The Journey to Zero Trust Cybersecurity

December’s discovery of the<a href="https://news.vmware.com/security/vmware-responds-to-log4j-vulnerability"> Log4j vulnerability</a> — which allowed hackers to run any code on vulnerable machines or hack into any application directly using the open-source Log4j framework — revealed the fragility of public and private digital architectures. Add to this, mainstream ransomware attacks targeting organizations in critical industries like Colonial Pipeline, JBS Foods and Kaseya made it starkly evident zero trust security needs to be a priority.

“Zero trust and supply chain risk management are at the top of the list,” says Jeremiah Sanders, Senior Federal Strategist at VMware. Zero Trust is the next-generation model for securely delivering IT services and solutions anywhere in the world, on any device or system. It’s not a single product but a security operations framework based on the notion of never trusting and always verifying.

Keith Nakasone, Federal Strategist at VMware added “Cybersecurity must be looked at holistically. It must become a part of the agency culture to include the people, process, and technology.”

Daniel Kent, Chief Architect, Public Sector, VMware notes that effective cybersecurity also requires agencies to practice good cyber hygiene. “IT security can’t be an afterthought, especially as we move to a devOps model, where analytics and automation will be critical to cybersecurity effectiveness,” he says.

The journey to Zero Trust security must be prioritized — and it’s now a<a href="https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/"> Presidential mandate</a>. Agencies need  a measured, phased approach to achieve this goal. For more information on cybersecurity mandates and adopting a Zero Trust framework, visit:<a href="https://techzone.vmware.com/blog/incorporating-vmware-zero-trust-presidential-executive-order"> Incorporating VMware Zero-Trust for the Presidential Executive Order</a>.

cybersecurity

VMware Helps Customers Navigate Multi‑Cloud with Innovative New Offerings

VMware Redefines Networking and Security for Multi‑Cloud with New Innovations

VMware Wins 2022 SC Award for the Best Web Application Solution

VMware Report Warns of Deepfake Attacks and Cyber Extortion

VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization

Why CISOs Should Invest More Inside Their Infrastructure

Modern Bank Heists 5.0: The Escalation from Dwell to Destruction

Multi‑Cloud for Mission Success

VMware Prevents 100% of Critical Attacks Tested During MITRE Engenuity ATT&CK® Evaluation

Innovating for the Future: 4 Public Sector Priorities for 2022

VMware Pioneers Modern Security for Modern Applications from Development to Production

VMware Wins Gold at 2022 Cybersecurity Excellence Awards

VMware Helps Customers Navigate Multi‑Cloud with Innovative New Offerings￼

VMware Redefines Networking and Security for Multi‑Cloud with New Innovations

VMware Wins 2022 SC Award for the Best Web Application Solution

VMware Report Warns of Deepfake Attacks and Cyber Extortion

VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization

Why CISOs Should Invest More Inside Their Infrastructure

Modern Bank Heists 5.0: The Escalation from Dwell to Destruction

Multi‑Cloud for Mission Success

VMware Prevents 100% of Critical Attacks Tested During MITRE Engenuity ATT&CK® Evaluation

Innovating for the Future: 4 Public Sector Priorities for 2022

VMware Pioneers Modern Security for Modern Applications from Development to Production

VMware Wins Gold at 2022 Cybersecurity Excellence Awards

VMware Helps Customers Navigate Multi‑Cloud with Innovative New Offerings