vmwx22-announce-01 - VMware News and Stories

https://news-editor.vmware.com/wp-content/uploads/2021/09/logo_media_thumbnail.jpg

VMware News & Stories

VMware News and Stories

Home

VMware Unveils VMware Explore: The Industry&#8217;s Go-To-Event for All Things Multi-Cloud

vmwx22-announce-01

Professional Development programmer working in programming website a software and coding technology, writing codes and data code, Programming with HTML, PHP and javascript

Professional Development programmer working in programming website a software and coding technology, writing codes and data code, Programming with HTML, PHP and javascript - VMware News and Stories

More Secure Open Source Software: A Shared Responsibility

Cybersecurity-Predictions-2022-TWIT_800x418 - VMware News and Stories

VMware: A Look Ahead at 2022

Cybersecurity-Predictions-2022-TWIT_800x418

MicrosoftTeams-image - VMware News and Stories

New Research from VMware Reveals Deepening Divide Between Developer and Security Teams

MicrosoftTeams-image

Kit Colbert, Senior Vice President and Chief Technology Officer, VMware

Kit-Colbert-Headshot-Avatar - VMware News and Stories

Kit-Colbert-Headshot-Avatar

Kit-Colbert-Headshot - VMware News and Stories

Kit-Colbert-Headshot

PALO ALTO, Calif. – April 7, 2022 – VMware, Inc. (NYSE: VMW) today unveiled <a href="https://www.vmware.com/explore.html?src=WWW_us_VMW_UgnCFpyH1PfNWQ7uYMAv&int_cid=7012H000001lIFW">VMware Explore</a>, the global multi-cloud industry event. VMware Explore is an evolution of the company’s flagship conference, VMworld, and will be inclusive of more technologies, and ecosystem and developer communities that help shape the multi-cloud universe. VMware Explore US will be held August 29 – September 1, 2022 at Moscone Center in San Francisco. Later this year, VMware Explore Europe will be held November 7–10, 2022 at the Fira Gran Via in Barcelona, Spain. Additional VMware Explore regional events are scheduled for Brazil (October 19-20), China (November 17-18), Japan (November 15-16), and Singapore (November 15-16).

core/paragraph

core/image

After two years of virtual events, VMware Explore attendees will experience a refreshed customer event and an opportunity to network with new and old friends and colleagues. Attendees can expect feature-rich technical content – both in-person and on-demand – along with more business-oriented sessions, customer success stories, community corners, and a renewed attendee experience. Attendees will learn about multi-cloud and edge architectures from the perspective of VMware product experts and industry thought leaders, as well as how to streamline developer experiences and DevOps practices across applications. VMware Explore will remain familiar to previous VMworld attendees in many ways and will offer numerous new opportunities for discovery.

“VMware Explore will serve as the center of the multi-cloud universe. This event will bring together customers, partners, developers, and industry experts to share best practices and insights,” said Laura Heisman, senior vice president and chief marketing officer, VMware. “This evolution reflects how VMware is transforming to work with our customers and ecosystem to innovate and deliver powerful VMware Cross Cloud services for the Multi-Cloud Era.”

At VMware Explore, attendees will be able to:

core/list

Special programming will be available to previous attendees of Security Connect, CloudLIVE and SaltConf annual events at VMware Explore 2022.

VMware Explore US Registration

VMware Explore US registration will open in May 2022. Follow VMware Explore 2022 on social media for updates at:

Facebook: <a href="https://www.facebook.com/vmwareexplore">https://www.facebook.com/vmwareexplore</a>

Twitter: <a href="https://twitter.com/VMwareExplore">https://twitter.com/VMwareExplore</a>

LinkedIn: <a href="https://www.linkedin.com/groups/2028037/">https://www.linkedin.com/groups/2028037/</a>

About VMware Explore 2022

VMware Explore is an evolution of the company's flagship conference, VMworld. The event has transformed to be the industry’s go-to-event for all things multi-cloud. VMware Explore 2022 features more industry-led solution and technical sessions than ever before, an extensive ecosystem of 90% of the top cloud partners, a thriving marketplace of multi-cloud ISVs ​and several networking events with VMware Cross-Cloud™ services and open source communities. With an unparalleled view into multi-cloud services, from public to private to edge, for all applications, VMware Explore 2022 attendees will gain the tools they need to solve challenges by simplifying multi-cloud complexity without compromise.

To learn more about VMware Explore, please visit: <a href="https://www.vmware.com/explore.html?src=WWW_us_VMW_UgnCFpyH1PfNWQ7uYMAv&int_cid=7012H000001lIFW">www.vmware.com/explore.html</a>.

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a></a><a href="http://www.vmware.com/company">www.vmware.com/company</a>.

VMware today unveiled VMware Explore, the global multi-cloud industry event.

VMware Unveils VMware Explore: The Industry’s Go‑To‑Event for All Things Multi‑Cloud

https://news-editor.vmware.com/wp-content/uploads/2022/04/vmwx22-announce-01.png

VMware Explore Unveiled - VMware News and Stories

Posts

VMware Comment Letter in Advance of the White House Open Source Security Summit

corpnews-blocks/subhead

Last week, I attended the <a href="https://www.whitehouse.gov/briefing-room/statements-releases/2022/01/13/readout-of-white-house-meeting-on-software-security/">White House Open Source Software Security Summit,</a> along with VMware’s Chief Security Officer, Alex Tosheff, and Michael Kennedy, our VP of Global Government Relations and Public Policy. Led by Deputy National Security Advisor for Cyber and Emerging Technology Anne Neuberger, the summit was attended by both private industry leaders and government agencies.

This important gathering was precipitated by the Log4j vulnerability, but the real issue is — how can we ensure source code, build, and distribution integrity in <a>all open source</a> software (OSS)?

Building open source software and contributing to its many communities is a big part of VMware’s engineering and innovation spirit, and we believe the way forward hinges on continued collaboration. As such, we brought some practical recommendations to the table for accelerating both industry and public/private partnerships, as detailed in the following letter we submitted in advance of the summit.

core/separator

Anne Neuberger Deputy National Security Advisor for Cyber and Emerging Technology The White House 1600 Pennsylvania Avenue, Northwest Washington, D.C.  20500

Thank you again for inviting VMware to the Open Source Software Security Summit at the White House. As you may be aware, VMware is both a heavy user of and contributor to open source software. As such, VMware takes open source, and in particular open source security, very seriously. To that end, we participate in and contribute to many open source-related industry consortia, such as the Linux Foundation, Apache Software Foundation, Cloud Native Computing Foundation and the Open Source Security Foundation (OpenSSF), to name just a few. <del></del>

VMware believes that open source software has been and will continue to be an important source of innovation, industry collaboration, and industry standardization. It has enabled both new and existing businesses to rapidly build out new technologies on openly available, proven software capabilities. And because of the above-mentioned consortia, open source enables industry participants to collaborate around common standards and interoperability, which benefit all participants as well as consumers.  Much of this benefit is due to the fundamental “openness” of open source.<del></del>

Unfortunately, the increasing use of open source in commercial software has also meant that it is increasingly targeted by cyber-attackers. This increased threat of cyber-attacks is not unique to open source software, as evidenced by SolarWinds, Colonial Pipeline, and other recent high-profile cyber attacks. However, while companies have taken steps to address security issues in their proprietary software, the same degree of security hardening has not happened at scale across the thousands of open source projects regularly used by businesses. Security challenges with open source software stems neither from its openness nor because the projects are maintained by “hobbyists”<a href="#_ftn1">[1]</a>. Rather, data shows that historically the main cause of open source vulnerabilities are a lack of security education and awareness, discipline in open-source sourcing, secure build-and-release pipeline, and best practices and reference architectures for properly applying tooling. It is exactly these areas we must address collectively as an industry in order to enhance the aggregate security of open source projects.<del></del>

We recognize the many security issues that we and our industry peers face with open source, and we are firmly committed to addressing them. While we as an industry strive to address open source security issues, we must ensure that we do not unintentionally eliminate what makes open source a critical enabler of innovation – its inherent accessibility and openness. We believe the common guiding principle should be to provide education and apply safeguards to dramatically improve open source security while continuing to enable innovation and collaboration.  On balance, we believe open source is good for the industry and consumers, and that we should be doing more of it, but doing it the right way!<del></del>

VMware recommends that the open source community and industry participants take the following actions. As the responsibility is a shared one, we recommend coordinating and implementing these recommendations across the community in two ways:

VMware is committed to continuing to improve open source security, and we look forward to addressing these issues live in our meeting on Tuesday and at the Summit on Thursday. Thank you for your leadership and the opportunity to engage on these important issues.

Michael Kennedy, Vice President, Global Government Relations and Public Policy

<a href="#_ftnref1">[1]</a> The majority of open source contributors are employed by technology companies, as shown in many studies, e.g., the Linux Foundation OSS Contributor Survey: <a href="https://www.linuxfoundation.org/wp-content/uploads/2020FOSSContributorSurveyReport_121020.pdf">https://www.linuxfoundation.org/wp-content/uploads/2020FOSSContributorSurveyReport_121020.pdf</a>.

Recommended Actions

core/heading

Open Source Community and Projects

Businesses Incorporating OSS Into Their Products and Services

VMware firmly believes that working with industry and government is key to building more innovative, interoperable, scalable and secure solutions so that innovation can continue to drive benefits for all. To participate in this dialog, visit my <a href="https://octo.vmware.com/strength-in-numbers-the-white-house-open-source-security-summit">Strength in Numbers</a> blog and share your thoughts with the OSS community.

VMware recommendations for ensuring more secure open source software through industry collaboration and public-private partnership.

Building open source software and contributing to its many communities is a big part of VMware’s engineering and innovation spirit, and we believe the way forward hinges on continued collaboration.

More Secure Open Source Software is a Shared Responsibility

https://news-editor.vmware.com/wp-content/uploads/2022/01/WH-Summit-Open-Source-FACEB_1200x628.png

Kit Colbert joined VMware in September 2003 (following an internship in 2002) and currently serves as senior vice president and chief technology officer. He is responsible for ensuring VMware’s long term technology leadership through research and innovation programs, with the primary goal of positively impacting and shaping the future of VMware, its ecosystem, and its customers. As CTO, Colbert’s will shape the technical vision for the company, and the transformation to a cloud and subscription-centric R&amp;D organization. His oversight includes advancing research and development efforts, overseeing the VMware Engineering Services team, the Design/UX team and the company’s ESG commitments. Prior to September 2021, Colbert served in multiple roles, including VMware’s Cloud CTO, General Manager of VMware’s Cloud-Native Apps business, CTO for VMware’s End-User Computing Business, and as the lead architect for the VMware vRealize Operations Suite. Colbert joined VMware as the technical lead behind the creation, development and delivery of the vMotion and Storage vMotion features in VMware vSphere. Colbert is a recognized thought-leader on application modernization and multi-cloud trends. He speaks regularly at industry conferences and serves as the multi-cloud voice for the VMware Office of the CTO blog. Colbert holds a bachelor’s of science in computer science from Brown University.

https://news-editor.vmware.com/wp-content/uploads/2022/01/Kit-Colbert-Headshot-Avatar.jpeg?w=150&h=150&crop=1

Kit Colbert

VMware recommends industry collaboration to ensure source code, build, and distribution integrity in all open source software.

Happy new year, 2022! It’s time to look deep into our enterprise-technology crystal ball to see what we might expect over the coming year. But first, some context: no psychic powers are required to predict that the trend towards a multi-cloud approach will continue. Multi-cloud gives the enterprise freedom to pursue a best-of-breed cloud strategy to accelerate business transformation and innovative app development. So, we’ll look through the lens of a multi-cloud environment as we consider VMware leaders’ 2022 predictions from cloud, security, apps, and anywhere workspace. I’ll share my own prediction near the end of this post, along with one from a customer.  

corpnews-blocks/pull-quote-image

Most companies have already identified solutions for application portability across clouds (although some environments are more conducive to app migration than others). Data portability, however, remains the big challenge — and data is the fuel that propels apps. Traditional storage systems cannot deliver a cloud-like experience. They are defined by fixed hardware boundaries that confine resources. This can result in trapped data, stranded capacity, limited scalability and elasticity, complex placement decisions, and high sunrise and sunset costs. The industry’s march towards the multi-cloud/zettabyte era will only exacerbate these limitations. In the next two years, we predict that we will see the emergence of a cloud-agnostic federated data fabric, which will enable organizations to mitigate data gravity as a key inhibitor to successfully operationalizing a multi-cloud architecture. 

core/pullquote

As organizations implement network segmentation to stop the spread of ransomware, attackers have begun to leverage trusted credentials to move freely throughout the network. With a valid set of credentials, attackers can accomplish much of their nefarious activity without raising a single alarm.  

Some of the stealthiest credential attacks use native, authorized tools like PowerShell to gain access by appearing as legitimate activity. Once an attacker can move laterally across an organization’s network, they have the “keys to the kingdom” and can access sensitive customer information and corporate proprietary data.  

Enter the double-extortion ransomware attack, in which an attacker quietly exfiltrates this sensitive information before encrypting a victim’s files and threatening to make sensitive data public. This ensures financial gain for cybercriminals who force organizations to not only pay to decrypt their files, but to prevent harmful data from being sold or publicly disclosed. 

While ransomware attacks like Kaseya and Colonial Pipeline made the nightly news this year, we think that threat actors will take this one step further in 2022 by using a double-extortion ransomware attack as a result of stolen credentials. 

The good news is that we can expect a cadre of tech companies, the open-source community, academia, cybersecurity institutions and government agencies around the world to unite to meet this challenge. We’ve done it before, and we will do it again.

We will see the emergence of tools that bring the Kubernetes (K8s) patterns to new domains —solving new problems and changing the intersection of development, security, and operations practices. K8s has proven to be successful for containerized infrastructure, but its embedded ideas have broader applicability. We will see an increasing number of systems (build systems, infrastructure management, and federated application-control planes) leverage the manifest-based model popularized by K8s. This will mean a transition to a manifest-based approach and will mark a shift from imperative DevSecOps practices to the consumption of intent-driven services that apply a declarative approach to management. This will lead to something of an inversion of IT — moving from systems that try to make sense of what is running and provide APIs to change what is running, to systems that consume manifests that represent intended state and then allow for reconciliation of actual state with intended state. This will allow them to tackle challenges in areas like AI/ML, stream-based processing, app integration and other areas without having to make significant 'full stack' investments in platforms. 

One of the major trends we predict in the end-user computing space is the broad adoption and general acceptance of password-less authentication — something we believe is a “must-have” moving forward. Most attacks can be avoided by using stronger methods of authentication. 

Password-less authentication is a type of multifactor authentication that replaces the user’s password with a different factor (typically a client-side certificate unlocked via biometrics). This would allow users to authenticate to corporate resources from a fingerprint or face scan throughout the course of a day, rather than having to remember a constantly rotating password or using an authenticator app. 

We see 2022 as the year where VPNs start to die off in huge numbers. During the course of the pandemic, companies realized that VPNs were one of their most vulnerable areas. They did not provide sufficient security for remote users who required broad access to the corporate network. Micro-perimeters, real-time security posture checks, and the wide availability of SASE offerings will be VPNs’ successors. 

Today’s multi-party enterprise workflows are fragmented and highly complex to maintain. This causes delays, increased costs and hinders innovation. Workflow data is often siloed within the enterprise — resulting in inefficient and costly steps to share and reconcile data across boundaries. This is where blockchain/digital ledger technology (DLT) enters the picture. While trendy cryptocurrencies and non-fungible tokens (NFTs) - which are also built on blockchain - capture memes and headlines, blockchain is quietly making waves in the enterprise driving real productivity. Blockchain’s real power lies in how it enables multiple parties to work together on a shared trustworthy source of data, fully and securely digitizing transactions. Maturing technologies, new delivery models, adoption of standards and the energy of an extensive and vibrant ecosystem are accelerating enterprise adoption. In 2022, we suspect that we’ll  see the value of enterprise blockchain becoming increasingly clear, as well as strong acceleration in production deployments across many industries (such as supply-chain use cases, for example), fundamentally changing the nature of doing business across organizational boundaries. In the financial-services industry, it is already meeting customers’ needs for high-frequency, complex business operations. We expect there will be an even broader enterprise blockchain adoption in 2022 and we’ll see major financial institutions more confident to deploy blockchain technology into production.  

A key area of focus for NKI will be applying AI and ML to cancer recognition through imaging and research models. It can support the automatic analysis of medical images for decision support of healthcare providers, as well as the analysis of cells to better understand the origin of cancer. 

To support researchers in conducting their work, we need a capable infrastructure for a wide variety of workloads. It must be a scalable and secure environment that supports data exchange with other institutions. We must work together to amplify our impact. Network virtualization, containerization, and sharing a single platform with workload isolation are all technologies we hope to leverage in the coming years. 

These new technological possibilities will allow researchers to work more flexibly and safely to help make our mission — a cure for every cancer — a reality in the near future.

What do you think of the VMware leaders' predictions for 2022? Let us know and feel free to share your own predictions for the coming year.  

VMware leaders share their technology predictions for 2022 in cloud, security, apps, anywhere workspace, enterprise blockchain and more.

VMware leaders share their 2022 predictions in cloud, security, apps, anywhere workspace and enterprise blockchain.

https://news-editor.vmware.com/wp-content/uploads/2022/01/Cybersecurity-Predictions-2022-TWIT_800x418.png

VMware Leaders' 2022 Predictions - VMware News and Stories

Check out VMware's 2022 tech predictions featuring CTO @kitcolbert on #enterpriseblockchain, @marcfleischmann on #cloud, @_tomgillis on #security, @patelajayp on #apps, and @brianmadden on #anywhereworkspace.

Security teams must rethink processes to aid innovation and customer experience

PALO ALTO, Calif.--VMware, Inc. (NYSE: VMW), a leading innovator in enterprise software, today announced findings from a study on the relationship between IT, security, and development teams as organizations adopt a Zero Trust security model. The study, titled “<a href="https://www.vmware.com/resources/security/bridging-the-developer-and-security-divide.html">Bridging the Developer and Security Divide</a>” and conducted by Forrester Consulting on behalf of VMware, found that security is still perceived as a barrier in organizations, with 52% of developers believing that security policies are stifling their innovation.

Forrester Consulting surveyed 1,475 IT and security leaders and discovered that only one in five (22%) developers strongly agree that they understand which security policies they are expected to comply with. Alarmingly, more than a quarter (27%) of the developers surveyed are not involved at all in security policy decisions, despite many of these greatly impacting their roles. Organizations where security and development teams have a positive relationship can accelerate the software development lifecycle five business days faster than those without – demonstrating how speed to market and competitive advantage are at stake here.

Seventy-three percent of respondents agreed that their senior leadership focuses more on strengthening the relationship between development and security than they did two years ago, but relationships are still strained. In fact, one in three (34%) decision makers reported their organizations’ teams are not effectively collaborating or taking strides to strengthen relationships between security and development teams. Lack of role definition for development teams, lack of communication between teams and competing priorities have major impacts on collaboration.

“Our research shows that security needs a perception shift,” said Rick McElroy, principal cybersecurity strategist, VMware. “Rather than be seen as the team that only swoops in to fix breaches and leaks, or who ‘gets in the way’ of innovation, security should be embedded across people, processes, and technologies. Security needs to be a team sport that works alongside IT and developers to ensure protection across clouds, apps and all digital infrastructure. We have to develop a culture where all teams have shared interests and common goals or metrics, and where they speak one language. There’s overwhelming value to the business when IT, security, and developers are all part of the decision making, design, and execution.”

Shared team priorities and engagement will pave the way forward and there’s already progress being made on this front. More than half (53%) of respondents expect security and development teams to be unified within three years. And 42% expect security to become more embedded in the development process in that same period. There’s a broader acknowledgment that cross-team alignment empowers businesses to reduce team silos (71%), create more secure applications (70%) and increase agility to adopt new workflows & technologies (66%).

The full study, complete with recommendations to bridge the divide between developer and security teams, can be downloaded <a href="https://www.vmware.com/resources/security/bridging-the-developer-and-security-divide.html">here</a>.

VMware commissioned a survey, undertaken by an independent research organization, Forrester Consulting, in April 2021. 1,475 IT and security managers and above (including CIOs and CISOs) with responsibility for security strategy and decision-making were surveyed with an additional 5 qualitative interviews with IT and security and development VP and above (including CIOs and CISOs) with responsibility for development or security strategy decision-making. Respondents were from a range of industries including technology services, manufacturing, financial services, retail and healthcare. The research was carried out across 26 countries around the world, including: Australia, Belgium, Canada, China, France, Finland, Germany, India, Italy, Israel, Japan, Norway, New Zealand, Netherlands, Poland, Russia, Saudi Arabia, South Africa, Spain, Singapore, South Korea, Turkey, United Kingdom, United States, UAE.

VMware software powers the world’s complex digital infrastructure. The company’s cloud, app modernization, networking, security, and digital workspace offerings help customers deliver any application on any cloud across any device. Headquartered in Palo Alto, California, VMware is committed to being a force for good, from its breakthrough technology innovations to its global impact. For more information, please visit <a href="https://www.vmware.com/company.html">https://www.vmware.com/company.html</a>

Samantha Mayowa VMware Global Communications smayowa@vmware.com +1 (781) 552-3062

Kerry Tuttle VMware Global Communications ktuttle@vmware.com +1 (470) 247-1987

VMware announced findings from a study conducted by Forrester Consulting on the relationship between IT, security, and development teams as organizations adopt a Zero Trust security model.

As organizations adopt a Zero Trust security model, bridging the developer and security divide is more important than ever. Learn why in this new study conducted by Forrester Consulting on behalf of VMware.

https://news-editor.vmware.com/wp-content/uploads/2021/09/MicrosoftTeams-image-1.png

As organizations adopt a Zero Trust security model, bridging the developer and security divide is more important than ever. Learn why in this new study conducted by @Forrester Consulting on behalf of @VMware.

developer

developer Archives - VMware News and Stories

cybersecurity

cybersecurity Archives - VMware News and Stories

edge

edge Archives - VMware News and Stories

innovation

innovation Archives - VMware News and Stories

multi-cloud

multi-cloud Archives - VMware News and Stories

security

security Archives - VMware News and Stories

zero trust

zero trust Archives - VMware News and Stories

Anywhere Workspace

Anywhere Workspace - VMware News and Stories

Technologies

Apps & Cloud

Apps &amp; Cloud - VMware News and Stories

Apps &amp; Cloud

Company

Company News - VMware News and Stories

Corporate News

Corporate News - VMware News and Stories

Future Tech & Innovation

Future Tech &amp; Innovation - VMware News and Stories

Future Tech &amp; Innovation

Leadership

Leadership News - VMware News and Stories

Partners

Partners - VMware News and Stories

Security

Security - VMware News and Stories

VMware Explore

VMware Explore - VMware News and Stories

VMworld

VMworld - VMware News and Stories

News Releases

News Releases - VMware News and Stories

Stories

Stories - VMware News and Stories

Kit Colbert joined VMware in September 2003 (following an internship in 2002) and currently serves as senior vice president and chief technology officer. He is responsible for ensuring VMware’s long term technology leadership through research and innovation programs, with the primary goal of positively impacting and shaping the future of VMware, its ecosystem, and its customers. As CTO, Colbert’s will shape the technical vision for the company, and the transformation to a cloud and subscription-centric R&amp;D organization. His oversight includes advancing research and development efforts, overseeing the VMware Engineering Services team, the Design/UX team and the company’s ESG commitments.

Prior to September 2021, Colbert served in multiple roles, including VMware’s Cloud CTO, General Manager of VMware’s Cloud-Native Apps business, CTO for VMware’s End-User Computing Business, and as the lead architect for the VMware vRealize Operations Suite. Colbert joined VMware as the technical lead behind the creation, development and delivery of the vMotion and Storage vMotion features in VMware vSphere.

Colbert is a recognized thought-leader on application modernization and multi-cloud trends. He speaks regularly at industry conferences and serves as the multi-cloud voice for the <a href="https://octo.vmware.com/author/kit_colbert/">VMware Office of the CTO blog</a>.

Colbert holds a bachelor’s of science in computer science from Brown University.