Young female engineer coding over laptop in IT startup company

Young female engineer coding over laptop in IT startup company - VMware News and Stories

https://news-editor.vmware.com/wp-content/uploads/2021/09/logo_media_thumbnail.jpg

VMware News & Stories

VMware News and Stories

Home

VMware Attends White House Summit on Open Source Software Security

Cybersecurity-Predictions-2022-TWIT_800x418 - VMware News and Stories

VMware: A Look Ahead at 2022

Cybersecurity-Predictions-2022-TWIT_800x418

Red and white lighthouse on the sea shore.

Red and white lighthouse on the sea shore. - VMware News and Stories

Fighting Back Against Cyberattacks: VMware Answers &#8216;SOS&#8217; of Understaffed Security Teams

- VMware News and Stories

VMware and Mitacs Set Sights on Discovering a Sustainable Path for 6G

Kit Colbert, Senior Vice President and Chief Technology Officer, VMware

Kit-Colbert-Headshot-Avatar - VMware News and Stories

Kit-Colbert-Headshot-Avatar

Kit-Colbert-Headshot - VMware News and Stories

Kit-Colbert-Headshot

core/paragraph

Today, Kit Colbert, VMware’s Chief Technology Officer, Alex Tosheff, VMware’s Chief Security Officer, and Michael Kennedy, VMware’s Vice President, Global Government Relations and Public Policy, attended the White House Open Source Software Security Summit.

Led by Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technology, the summit focused on ways to improve the security of open source software. As both a user of and contributor to open source software, VMware encouraged continued industry collaboration on issues from education and common standards to interoperability and distribution mechanisms.

“VMware commends the Biden Administration for convening this incredibly constructive discussion and for recognizing that collaboration is key to advancing the security of open source software,” said Kit Colbert, VMware’s Chief Technology Officer. “We look forward to continued engagement between the White House and industry as we work together to build trust and resiliency in this key building block for technological and economic progress.”

As part of its commitment to open source software and security, VMware is an active participant and contributor to open source-related industry consortia such as the Linux Foundation, Apache Software Foundation, Cloud Native Computing Foundation and Open Source Security Foundation (OpenSSF).

VMware encourages continued industry collaboration on issues from education and common standards to interoperability and distribution mechanisms.

VMware encourages industry collaboration on issues from education and common standards to interoperability and distribution mechanisms.

https://news-editor.vmware.com/wp-content/uploads/2022/01/WH-Summit-FACEB_1200x628.png

Posts

https://secure.gravatar.com/avatar/123c935f0dbf4f619f790c609e2b3fce?s=96&d=mm&r=g

druyak@vmware.com

Happy new year, 2022! It’s time to look deep into our enterprise-technology crystal ball to see what we might expect over the coming year. But first, some context: no psychic powers are required to predict that the trend towards a multi-cloud approach will continue. Multi-cloud gives the enterprise freedom to pursue a best-of-breed cloud strategy to accelerate business transformation and innovative app development. So, we’ll look through the lens of a multi-cloud environment as we consider VMware leaders’ 2022 predictions from cloud, security, apps, and anywhere workspace. I’ll share my own prediction near the end of this post, along with one from a customer.  

core/heading

corpnews-blocks/pull-quote-image

Most companies have already identified solutions for application portability across clouds (although some environments are more conducive to app migration than others). Data portability, however, remains the big challenge — and data is the fuel that propels apps. Traditional storage systems cannot deliver a cloud-like experience. They are defined by fixed hardware boundaries that confine resources. This can result in trapped data, stranded capacity, limited scalability and elasticity, complex placement decisions, and high sunrise and sunset costs. The industry’s march towards the multi-cloud/zettabyte era will only exacerbate these limitations. In the next two years, we predict that we will see the emergence of a cloud-agnostic federated data fabric, which will enable organizations to mitigate data gravity as a key inhibitor to successfully operationalizing a multi-cloud architecture. 

core/pullquote

As organizations implement network segmentation to stop the spread of ransomware, attackers have begun to leverage trusted credentials to move freely throughout the network. With a valid set of credentials, attackers can accomplish much of their nefarious activity without raising a single alarm.  

Some of the stealthiest credential attacks use native, authorized tools like PowerShell to gain access by appearing as legitimate activity. Once an attacker can move laterally across an organization’s network, they have the “keys to the kingdom” and can access sensitive customer information and corporate proprietary data.  

Enter the double-extortion ransomware attack, in which an attacker quietly exfiltrates this sensitive information before encrypting a victim’s files and threatening to make sensitive data public. This ensures financial gain for cybercriminals who force organizations to not only pay to decrypt their files, but to prevent harmful data from being sold or publicly disclosed. 

While ransomware attacks like Kaseya and Colonial Pipeline made the nightly news this year, we think that threat actors will take this one step further in 2022 by using a double-extortion ransomware attack as a result of stolen credentials. 

The good news is that we can expect a cadre of tech companies, the open-source community, academia, cybersecurity institutions and government agencies around the world to unite to meet this challenge. We’ve done it before, and we will do it again.

We will see the emergence of tools that bring the Kubernetes (K8s) patterns to new domains —solving new problems and changing the intersection of development, security, and operations practices. K8s has proven to be successful for containerized infrastructure, but its embedded ideas have broader applicability. We will see an increasing number of systems (build systems, infrastructure management, and federated application-control planes) leverage the manifest-based model popularized by K8s. This will mean a transition to a manifest-based approach and will mark a shift from imperative DevSecOps practices to the consumption of intent-driven services that apply a declarative approach to management. This will lead to something of an inversion of IT — moving from systems that try to make sense of what is running and provide APIs to change what is running, to systems that consume manifests that represent intended state and then allow for reconciliation of actual state with intended state. This will allow them to tackle challenges in areas like AI/ML, stream-based processing, app integration and other areas without having to make significant 'full stack' investments in platforms. 

One of the major trends we predict in the end-user computing space is the broad adoption and general acceptance of password-less authentication — something we believe is a “must-have” moving forward. Most attacks can be avoided by using stronger methods of authentication. 

Password-less authentication is a type of multifactor authentication that replaces the user’s password with a different factor (typically a client-side certificate unlocked via biometrics). This would allow users to authenticate to corporate resources from a fingerprint or face scan throughout the course of a day, rather than having to remember a constantly rotating password or using an authenticator app. 

We see 2022 as the year where VPNs start to die off in huge numbers. During the course of the pandemic, companies realized that VPNs were one of their most vulnerable areas. They did not provide sufficient security for remote users who required broad access to the corporate network. Micro-perimeters, real-time security posture checks, and the wide availability of SASE offerings will be VPNs’ successors. 

Today’s multi-party enterprise workflows are fragmented and highly complex to maintain. This causes delays, increased costs and hinders innovation. Workflow data is often siloed within the enterprise — resulting in inefficient and costly steps to share and reconcile data across boundaries. This is where blockchain/digital ledger technology (DLT) enters the picture. While trendy cryptocurrencies and non-fungible tokens (NFTs) - which are also built on blockchain - capture memes and headlines, blockchain is quietly making waves in the enterprise driving real productivity. Blockchain’s real power lies in how it enables multiple parties to work together on a shared trustworthy source of data, fully and securely digitizing transactions. Maturing technologies, new delivery models, adoption of standards and the energy of an extensive and vibrant ecosystem are accelerating enterprise adoption. In 2022, we suspect that we’ll  see the value of enterprise blockchain becoming increasingly clear, as well as strong acceleration in production deployments across many industries (such as supply-chain use cases, for example), fundamentally changing the nature of doing business across organizational boundaries. In the financial-services industry, it is already meeting customers’ needs for high-frequency, complex business operations. We expect there will be an even broader enterprise blockchain adoption in 2022 and we’ll see major financial institutions more confident to deploy blockchain technology into production.  

A key area of focus for NKI will be applying AI and ML to cancer recognition through imaging and research models. It can support the automatic analysis of medical images for decision support of healthcare providers, as well as the analysis of cells to better understand the origin of cancer. 

To support researchers in conducting their work, we need a capable infrastructure for a wide variety of workloads. It must be a scalable and secure environment that supports data exchange with other institutions. We must work together to amplify our impact. Network virtualization, containerization, and sharing a single platform with workload isolation are all technologies we hope to leverage in the coming years. 

These new technological possibilities will allow researchers to work more flexibly and safely to help make our mission — a cure for every cancer — a reality in the near future.

core/separator

What do you think of the VMware leaders' predictions for 2022? Let us know and feel free to share your own predictions for the coming year.  

VMware leaders share their technology predictions for 2022 in cloud, security, apps, anywhere workspace, enterprise blockchain and more.

VMware leaders share their 2022 predictions in cloud, security, apps, anywhere workspace and enterprise blockchain.

https://news-editor.vmware.com/wp-content/uploads/2022/01/Cybersecurity-Predictions-2022-TWIT_800x418.png

VMware Leaders' 2022 Predictions - VMware News and Stories

Kit Colbert joined VMware in September 2003 (following an internship in 2002) and currently serves as senior vice president and chief technology officer. He is responsible for ensuring VMware’s long term technology leadership through research and innovation programs, with the primary goal of positively impacting and shaping the future of VMware, its ecosystem, and its customers. As CTO, Colbert’s will shape the technical vision for the company, and the transformation to a cloud and subscription-centric R&amp;D organization. His oversight includes advancing research and development efforts, overseeing the VMware Engineering Services team, the Design/UX team and the company’s ESG commitments. Prior to September 2021, Colbert served in multiple roles, including VMware’s Cloud CTO, General Manager of VMware’s Cloud-Native Apps business, CTO for VMware’s End-User Computing Business, and as the lead architect for the VMware vRealize Operations Suite. Colbert joined VMware as the technical lead behind the creation, development and delivery of the vMotion and Storage vMotion features in VMware vSphere. Colbert is a recognized thought-leader on application modernization and multi-cloud trends. He speaks regularly at industry conferences and serves as the multi-cloud voice for the VMware Office of the CTO blog. Colbert holds a bachelor’s of science in computer science from Brown University.

https://news-editor.vmware.com/wp-content/uploads/2022/01/Kit-Colbert-Headshot-Avatar.jpeg?w=150&h=150&crop=1

Kit Colbert

Check out VMware's 2022 tech predictions featuring CTO @kitcolbert on #enterpriseblockchain, @marcfleischmann on #cloud, @_tomgillis on #security, @patelajayp on #apps, and @brianmadden on #anywhereworkspace.

Today, Security Operations Center (SOC) teams are understaffed and overwhelmed by cyberattacks that are increasing in both volume and sophistication. Amid the rapidly evolving threat landscape, security teams are spending too much time monitoring and validating alerts instead of gaining visibility and an understanding of the threats in their environment. A new VMware Carbon Black Cloud capability helps fill the gaps of understaffed security teams by providing 24/7/365 monitoring, alert triage, and threat analyst guidance on policy changes as well as assistance with threat containment in the event of an incident.

Introducing Managed Detection and Response for Endpoints and Workloads

VMware Carbon Black Cloud Managed Detection and Response (MDR) for endpoints and workloads provides critical insight into attacks along with recommendations for policy changes customers can take to remediate the threat. VMware Carbon Black Cloud MDR, supported by a world-class team of security experts, helps enterprises respond more quickly to cyberattacks. Our analysts monitor and analyze the data for our MDR customers in the VMware Carbon Black Cloud using advanced machine learning and algorithmic tool sets.

“As the threat surface expands and cyberattacks become increasingly destructive, our customers require a strong security posture that can be realized at speed,” said Kal De, vice president and general manager of VMware’s Security Business Unit. “VMware’s mission is to enable our customers to have the security required for the threats of today and tomorrow. Our MDR offering provides customers with the threat intelligence and the guidance required to help reduce the overall risk of security incidents.”

The new offering will provide security and IT teams with increased visibility and faster incident response, helping to reduce SOC staffing pressures and freeing up time for the security team to proactively hunt threats to better protect their organizations.

Threat Analyst Support to Stay One Step Ahead of Attackers

VMware analysts monitor MDR customer environments around the clock to protect the organization and provide critical threat intelligence. They can notify customer IT and security teams via email of threats and provide specific policy changes to address the threat via the VMware Carbon Black Cloud. In addition, analysts are available to provide customers with incident remediation guidance and assist with threat containment during an incident.

core/image

“We have over a million licensed endpoints on managed detection today and are exposed to different attacks across every vector, whereas an analyst sitting in a single SOC for an enterprise may not come across the same breadth and depth of threats,” said Taree Reardon, manager of MDR at VMware. “We’re able to give customers increased visibility into their environment because we can layer on that threat expertise which allows our analysts to identify and contain threats more quickly. By handling the first level of triage, this helps to reduce staffing pressures.”

As organizations defend against increasingly sophisticated and destructive attacks, VMware Carbon Black Cloud MDR will help bolster threat intelligence, expand incident response support, and provide expert alert triage and containment to reduce the time spent on an investigation. An example of the real-time analysis that supports VMware’s MDR offering is demonstrated in the dissection of the <a href="https://blogs.vmware.com/security/2019/11/wild-blue-yonder-vmware-carbon-black-threatsight-dissects-bluekeep-windows-exploit.html">BlueKeep Windows exploit</a> by VMware security experts. Providing this level of critical insight through VMware’s MDR offering opens up resources for SOC teams to focus on strategic initiatives and proactive threat hunting to better defend against cyberattacks.

VMware Carbon Black Cloud MDR will be available as of December 1, 2021. For more information, please visit our MDR <a href="https://www.vmware.com/products/managed-detection-and-response.html">product page</a>.

VMware and Carbon Black are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and other jurisdictions.

Introducing Managed Detection and Response for endpoints and workloads to help security teams stay one step ahead of attackers.

VMware Answers 'SOS' of Understaffed Security Teams

https://news-editor.vmware.com/wp-content/uploads/2021/11/MDR_Launch_FB_1200x628.png

Partnership To Drive Applied Research with Canadian Universities in the Areas of Sustainable Grid, Digital Equity and Clean Tech

Research & Innovation Lab to Be Established in Montreal in Partnership with IEEE Future Networks Initiative

PALO ALTO, Calif. -- VMware (NYSE: VMW) today announced a partnership with Mitacs, a non-profit organization that connects industry with Canadian academic institutions, and launched its Digital Equity Grid Innovation initiative, also known as TETRA. The initiative, aligned with <a href="https://octo.vmware.com/re-imagining-the-internet-for-planet-scale-automation">VMware’s Automated Life vision</a>, aims to advance applied research that will play a critical role in paving a sustainable path for 6G. In addition, the organizations plan to establish a TETRA research & innovation (R&I) center in Montreal, in partnership with the IEEE Future Networks Initiative (FNI), a technical community of IEEE, the world’s largest technical professional organization advancing technology for the benefit of humanity. TETRA and FNI will collaborate on solutions to bridge the digital divide.

“The path to 6G requires a fundamental rearchitecting of the Internet to an Open Grid – one that can be accessed from everywhere and brings immersive apps to everyone,” said Kit Colbert, CTO, VMware. “This calls for significant advancement of physical and digital systems through broad partnerships and true cross-sector collaboration. Our partnership with Mitacs aims to drive this advancement forward, keeping sustainability and digital equity at the heart of our work.”

Initial applied research projects will focus in the areas of:

core/list

John Hepburn, CEO of Mitacs, said, “Connecting rural, remote, and Indigenous communities is critical to driving innovation in every part of Canada. Mitacs is thrilled to be collaborating with VMware as part of the Digital Equity Grid Innovation initiative. This initiative will improve connectivity; enable local, national, and international research collaboration; and support the development of an innovation ecosystem that leverages local strengths. We look forward to seeing where this partnership can take us.”

VMware, Mitacs and IEEE FNI also plan to establish a R&I center in Montreal where researchers will develop Open Grid infrastructure that bridges technologies from the satellite, wireless, networks and cloud industries. This infrastructure platform will serve as the application development platform for IEEE Future Networks Initiative’s <a href="https://ctu.ieee.org/">Connecting the Unconnected Challenge</a>, which seeks novel solutions for universal and affordable internet access. In addition, researchers will be able to test solutions in real-world environments via <a href="http://www.opengridalliance.org">Open Grid Alliance</a> Innovation Zones and IEEE FNI testbeds.

“Nearly half of the world’s population is still not connected to the Internet, but the Internet is a critical access point to education, economic opportunity, and health information and services. IEEE is excited to leverage our Connecting the Unconnected Challenge program to provide an innovation and a broad talent pipeline to the TETRA pilot project. This partnership provides the perfect framework to focus the expertise of our global member network on this critical humanitarian issue,” said Mary Ward-Callan, Managing Director, Technical Activities, IEEE.

The Honorable François-Philippe Champagne, Minister of Innovation, Science and Industry of Canada, said, “Canada is home to some of the best and brightest minds in emerging areas of technology like automated intelligence, machine learning and spatial computing. Thanks to VMware’s confidence in Canada, this investment will support our great talent and help solve some important challenges facing our society in the decades to come.”

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="http://www.vmware.com/company" target="_blank" rel="noreferrer noopener">www.vmware.com/company</a>.

This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Angela Leaf, VMware Global Communications, Phone: +1 (860) 480-3367, <a href="mailto:aleaf@vmware.com">aleaf@vmware.com</a>

VMware and Mitacs are partnering to advance applied research that will play a critical role in paving a sustainable path for 6G. Learn more:

https://news-editor.vmware.com/wp-content/uploads/2021/11/Sustainable-6G-VMware-Mitacs-News_FB-1.jpg

VMware and Mitacs Set Sights on Discovering a Sustainable Path for 6G - VMware News and Stories

https://secure.gravatar.com/avatar/ff0b7b611905906b871b2c46c2d5efa8?s=96&d=mm&r=g

aleaf@vmware.com

innovation

innovation Archives - VMware News and Stories

5G Archives - VMware News and Stories

cybersecurity

cybersecurity Archives - VMware News and Stories

developer

developer Archives - VMware News and Stories

edge

edge Archives - VMware News and Stories

multi-cloud

multi-cloud Archives - VMware News and Stories

open ran

open ran Archives - VMware News and Stories

security

security Archives - VMware News and Stories

telco

telco Archives - VMware News and Stories

Anywhere Workspace

Anywhere Workspace - VMware News and Stories

Technologies

Apps & Cloud

Apps &amp; Cloud - VMware News and Stories

Apps &amp; Cloud

Corporate News

Corporate News - VMware News and Stories

Company

Future Tech & Innovation

Future Tech &amp; Innovation - VMware News and Stories

Future Tech &amp; Innovation

Government

Government - VMware News and Stories

Industries

Leadership

Leadership News - VMware News and Stories

Partners

Partners - VMware News and Stories

Security

Security - VMware News and Stories

Technologies - VMware News and Stories

News Releases

News Releases - VMware News and Stories

Stories

Stories - VMware News and Stories

Kit Colbert joined VMware in September 2003 (following an internship in 2002) and currently serves as senior vice president and chief technology officer. He is responsible for ensuring VMware’s long term technology leadership through research and innovation programs, with the primary goal of positively impacting and shaping the future of VMware, its ecosystem, and its customers. As CTO, Colbert’s will shape the technical vision for the company, and the transformation to a cloud and subscription-centric R&amp;D organization. His oversight includes advancing research and development efforts, overseeing the VMware Engineering Services team, the Design/UX team and the company’s ESG commitments.

Prior to September 2021, Colbert served in multiple roles, including VMware’s Cloud CTO, General Manager of VMware’s Cloud-Native Apps business, CTO for VMware’s End-User Computing Business, and as the lead architect for the VMware vRealize Operations Suite. Colbert joined VMware as the technical lead behind the creation, development and delivery of the vMotion and Storage vMotion features in VMware vSphere.

Colbert is a recognized thought-leader on application modernization and multi-cloud trends. He speaks regularly at industry conferences and serves as the multi-cloud voice for the <a href="https://octo.vmware.com/author/kit_colbert/">VMware Office of the CTO blog</a>.

Colbert holds a bachelor’s of science in computer science from Brown University.