VMware Carbon Black Workload for AWS HERO - VMware News and Stories

https://news-editor.vmware.com/wp-content/uploads/2021/09/logo_media_thumbnail.jpg

VMware News & Stories

VMware News and Stories

Home

VMware Introduces Advanced Workload Protection for AWS to Help Defend Against Emerging Threats

VMware Carbon Black Workload for AWS HERO

Global Incident Response Threat Report HERO - VMware News and Stories

VMware Report Warns of Deepfake Attacks and Cyber Extortion

Global Incident Response Threat Report HERO

Expanded FedRAMP High Authorization HERO - VMware News and Stories

VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization 

Expanded FedRAMP High Authorization HERO

Tom Gillis Headshot - VMware News and Stories

Why CISOs Should Invest More Inside Their Infrastructure

Tom Gillis Headshot

- VMware News and Stories

VMware Enhances Its Unique Lateral Security for Multi-Cloud 

Mobile Threat Defense Hero - VMware News and Stories

VMware Advances Its Anywhere Workspace Platform To Enable Intelligent, Proactive Security for All Employee Devices

Mobile Threat Defense Hero

American soldier in headquarter control center

GettyImages-1146898776 - VMware News and Stories

Defense Information Systems Agency Releases VMware NSX® Security Technical Implementation Guide

GettyImages-1146898776

Bank vault with open door &amp; grill (B&amp;W)

Modern Bank Heists 5.0: The Escalation from Dwell to Destruction

Female Government Employee Works in a Monitoring Room. In The Background Supervisor Holds Briefing. Possibly Government Agency Conducts Investigation.

public sector innovation - VMware News and Stories

Multi-Cloud for Mission Success

public sector innovation

This problem is going to need everyone's imput

VMware Prevents 100% of Critical Attacks Tested During MITRE Engenuity ATT&#038;CK® Evaluation

Business group having a meeting in new office

#BreakTheBias: Celebrating VMware’s Security Talent This International Women&#8217;s Day

Back View in the System Control Center Operator Working. Multiple Screens Showing Technical Data.

GovCon Wire: Government Security Strategy Zero Trust - VMware News and Stories

GovCon Wire | Zero Trust Should Be Part of Agencies&#8217; Holistic Security Strategy

GovCon Wire: Government Security Strategy Zero Trust

Burned out security teams fight back against geopolitically motivated attacks and lateral movement inside networks

core/heading

PALO ALTO, Calif. – At Black Hat USA 2022, VMware, Inc. (NYSE: VMW) released its eighth annual <a href="https://www.vmware.com/content/microsites/learn/en/1553238_REG.html">Global Incident Response Threat Report</a>, which takes a deep dive into the challenges faced by security teams amid pandemic disruptions, burnout, and geopolitically motivated cyberattacks. Sixty-five percent of defenders state that cyberattacks have increased since Russia invaded Ukraine, according to report findings. The report also shines a light on emerging threats such as deepfakes, attacks on APIs, and cybercriminals targeting incident responders themselves.

core/paragraph

“Cybercriminals are now incorporating deepfakes into their attack methods to evade security controls,” said Rick McElroy, principal cybersecurity strategist at VMware. “Two out of three respondents in our report saw malicious deepfakes used as part of an attack, a 13% increase from last year, with email as the top delivery method. Cybercriminals have evolved beyond using synthetic video and audio simply for influence operations or disinformation campaigns. Their new goal is to use deepfake technology to compromise organizations and gain access to their environment.”

Additional key findings from the report include:

core/list

“In order to defend against the broadening attack surface, security teams need an adequate level of visibility across workloads, devices, users and networks to detect, protect, and respond to cyber threats,” said Chad Skipper, global security technologist at VMware. “When security teams are making decisions based on incomplete and inaccurate data, it inhibits their ability to implement a granular security strategy, while their efforts to detect and stop lateral movement of attacks are stymied due to the limited context of their systems.”

Despite the turbulent threat landscape and rising threats detailed in the report, incident responders are fighting back with 87% saying that they are able to disrupt a cybercriminal’s activities sometimes (50%) or very often (37%). They’re also using new techniques to do so. Three-quarters of respondents (75%) say they are now deploying virtual patching as an emergency mechanism. In every case, the more visibility defenders have across today’s widening attack surface, the better equipped they’ll be to weather the storm.

For more information on the evolving threat landscape as well as actionable guidance and recommendations for incident responders and security teams, <a href="https://www.vmware.com/content/microsites/learn/en/1553238_REG.html">download the full report here</a>.

VMware conducted an online survey about trends in the incident response landscape in June 2022, and 125 cybersecurity and incident response professionals from around the world participated. Percentages in certain questions exceed 100 percent because respondents were asked to check all that apply. Due to rounding, percentages in all questions may not add up to 100 percent. To read last year’s report, please visit<a href="https://www.vmware.com/resources/security/global-incident-response-threat-report-manipulating-reality.html"> Global Incident Response Threat Report: Manipulating Reality.</a>

VMware at Black Hat USA 2022

VMware will discuss the findings from this report and other key security topics in the sessions listed below. Visit us at our Black Hat booth #1620, and follow along with us on social <a href="https://twitter.com/vmwarenews">@VMwareNews</a> and in the <a href="https://www.vmware.com/company/news/media-resources/security-anywhere-workspace.html">VMware Newsroom</a>

<a href="https://www.blackhat.com/us-22/sponsored-sessions/schedule/index.html#why-workloads-are-more-secure-on-vmware-clouds-28736">Why Workloads Are More Secure on VMware Clouds</a> Wednesday, August 10 at 1:50 pm PT Chad Skipper, Global Security Technologist Stefano Ortolani, Threat Research Lead

<a href="https://www.blackhat.com/us-22/sponsored-sessions/schedule/index.html#exposing-malware-in-a-linux-based-multi-cloud-environment-28693">Exposing Malware in a Linux-based Multi-Cloud Environment</a> On-demand Dale McKay, Senior Technical Marketing Architect

<a href="https://www.blackhat.com/sponsor-interview/07282022.html#vmware">Black Hat Interview with Tom Gillis</a>

<a href="https://www.blackhat.com/sponsor-posts/07292022-vmware.html">Black Hat Article by Giovanni Vigna and Stefano Ortolani</a>

In addition to VMware’s presence at Black Hat USA 2022, there will be more than 100 security talks at VMware Explore, the global multi-cloud industry event taking place August 29 – September 1, 2022 at Moscone Center in San Francisco. <a href="https://www.vmware.com/explore/us.html">Register today</a> to begin building your agenda.

core/image

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit www.vmware.com/company. 

VMware and VMware Contexa are registered trademarks or trademarks of VMware, Inc. in the United States and other jurisdictions. This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Kerry Tuttle, VMware Global Communications, ktuttle@vmware.com

The Global Incident Response Threat Report takes a deep dive into the challenges faced by security teams amid pandemic disruptions, burnout, and geopolitically motivated cyberattacks.

https://news-editor.vmware.com/wp-content/uploads/2022/08/Global-Incident-Response-Threat-Report-FB.jpg

Posts

https://secure.gravatar.com/avatar/4d948efc2db683c0cb4aa50361a076f7?s=96&d=mm&r=g

ktuttle@vmware.com

VMware Carbon Black Workload for AWS delivers comprehensive visibility and security across on-premises and cloud environments for AWS customers

PALO ALTO, Calif. – VMware, Inc. (NYSE: VMW) today introduced <a href="https://www.vmware.com/products/carbon-black-cloud-workload.html">VMware Carbon Black Workload</a> for Amazon Web Services (AWS) to deliver advanced protection purpose-built for securing both traditional and modern workloads. Using a single unified console that integrates into existing infrastructure, security and information technology (IT) teams can reduce attack surface and strengthen security postures, while achieving consistent and unified visibility for workloads running on AWS, VMware Cloud and on-premises.

“Security and IT teams lack visibility and control in highly dynamic and distributed environments,” said Jason Rolleston, vice president of product management and co-general manager for VMware’s Security Business Unit. “VMware Carbon Black Workload for AWS improves collaboration between these teams via a single consolidated platform for all workloads, regardless of where they’re running, to help defenders see and stop more threats. This real-time visibility into workloads helps prevent attacks on your most valuable assets and provides AWS customers a finite surface area to protect.”

By enabling security teams to see workloads that are ephemeral and transient in nature, VMware Carbon Black Workload for AWS provides authoritative context to help AWS customers better secure modern applications. Automatic gathering and listing of vulnerabilities help identify risk and harden workloads, further shrinking the attack surface, while CI/CD packages for sensor deployment further simplify agent lifecycle management. Additionally, by onboarding their AWS account, AWS customers can achieve more complete, comprehensive, and deeper visibility into the workloads that extend beyond when the VMware Carbon Black Workload sensor was first deployed.

VMware Carbon Black Workload for AWS combines foundational vulnerability assessment and workload hardening with next-generation antivirus (NGAV) to analyze attacker behavior patterns over time and help stop never-seen-before attacks. With enterprise threat hunting for workloads that includes behavioral endpoint detection and response (EDR), AWS customers can turn threat intelligence into a prevention policy to avoid hunting for the same threat twice. This telemetry feeds into <a href="https://www.vmware.com/security/contexa.html">VMware Contexa</a>, a full-fidelity threat intelligence cloud that shrinks the gap between attackers and defenders while enabling greater visibility, control, and anomaly detection for workloads.

Learn more about VMware Carbon Black Workload for AWS on our <a href="https://blogs.vmware.com/security/2022/08/vmware-announces-advanced-workload-security-for-aws.html">blog</a>, view the listing in <a href="https://aws.amazon.com/marketplace/pp/prodview-ujkl2cjbg5xsw">AWS Marketplace</a>, and register for <a href="https://www.vmware.com/explore/us.html">VMware Explore</a> to attend hands-on labs and workshops demonstrating VMware’s advanced workload protection capabilities.

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="http://www.vmware.com/company">www.vmware.com/company</a>.

VMware and Carbon Black are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and other jurisdictions. This press release may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Kerry Tuttle, VMware Global Communications, <a href="mailto:ktuttle@vmware.com">ktuttle@vmware.com</a>

VMware Carbon Black Workload for Amazon Web Services (AWS) delivers advanced protection purpose-built for securing both traditional and modern workloads.

https://news-editor.vmware.com/wp-content/uploads/2022/08/VMware-Carbon-Black-Workload-for-AWS-FB.jpg

UPDATED July 27, 2022

The following announcement has been updated. The release of VMware Carbon Black Cloud on AWS GovCloud (US) is delayed, the offering is now  expected to be available in August 2022.

VMware Government Services helps agencies accelerate innovation across data centers, cloud and the edge for mission success

PALO ALTO, CA -- VMware Inc. (NYSE: VMW), a leading innovator in enterprise software, today announced that it has achieved Federal Risk and Authorization Management Program (FedRAMP) High Authorization through the Joint Authorization Board (JAB) for VMware Government Services, which includes VMware Carbon Black Cloud and VMware SD-WAN on AWS GovCloud (US). These cloud services are designed to empower US government agencies and customers supporting the US government to migrate, manage, and operate sensitive workloads in the cloud. VMware Government Services is now available on the <a href="https://marketplace.fedramp.gov/#!/product/vmware-government-services-vgs?sort=productName&productNameSearch=vmware">FedRAMP Marketplace</a>.

Across the public sector, agencies are laying the groundwork for multi-cloud-adoption. With expanded FedRAMP Authorized offerings at the High Impact Level, VMware can help agencies accelerate their digital transformation timelines. VMware Government Services provides software-as-a-service, platform-as-a-service, and infrastructure-as-a-service capabilities, delivering modern applications at the speed that government agencies demand and enabling them to operate across data centers, the edge, and cloud. VMware Carbon Black Cloud, VMware SD-WAN and VMware Cloud on AWS GovCloud (US), are cost-effective, more secure and compliant offerings that government agencies can now seamlessly leverage to modernize their infrastructures and accelerate multi-cloud initiatives.

“VMware continues to invest to help government agencies leverage the power of the cloud and evolve IT infrastructures,” said Jennifer Chronis, vice president, public sector, VMware. “Achieving expanded FedRAMP authorizations enables us to meet our customers wherever they are on their digital transformation journeys to help them innovate faster and create resiliency while adhering to the highest security and compliance standards. These additional accreditations further our commitment to our public sector customers to help them better serve and meet mission demands.” (<a href="https://twitter.com/jenniferchronis">Twitter</a>,<a href="https://www.linkedin.com/in/jennifer-chronis-4a11745/"> LinkedIn</a>)

Empowering the Public Sector to See and Stop More Threats

VMware Carbon Black Cloud on AWS GovCloud (US) has received FedRAMP High authorization amid an increasing demand by federal agencies for cloud-delivered security. Public sector customers can now deploy the modern endpoint security and advanced workload protection required to stay one step ahead of adversaries as geopolitically fueled cyberattacks increase. This authorization underscores VMware Carbon Black Cloud’s ability to prevent, detect, and respond to threats on endpoints and server workloads from a single console for improved visibility and simplified operations. Powered by VMware Contexa, VMware Carbon Black Cloud delivers authoritative intelligence that enables federal customers to correlate threats across their environments.

This designation solidifies VMware Carbon Black Cloud’s position as a trusted security platform helping the US government protect its most critical assets. As a founding member of the Cybersecurity and Infrastructure Security Agency’s Joint Cyber Defense Collaborative, VMware is also a trusted national security partner participating in public-private sector collaboration, threat intelligence sharing and cyber defense planning. In addition, VMware Carbon Black Cloud is pursuing authorization to operate at Department of Defense (DoD) Impact Level (IL-4) to expand its federal footprint to U.S. DoD and Defense Industrial Base customers.

Secure, Reliable Access to Cloud Apps & Services from Anywhere

VMware SD-WAN is an industry-leading software-defined WAN solution, that connects users across distributed locations more safely, reliably, and efficiently to cloud-based applications, cloud services and agency data centers. The anywhere workforce has become the new normal for many government agencies. Modernizing agency networks with VMware SD-WAN on AWS GovCloud will improve remote employee productivity with more secure and optimized application access while simplifying operations and maximizing ROI. VMware SD-WAN is the only SD-WAN solution today to receive FedRAMP High Authorization that complements government agencies’ cloud-smart adoption with assured performance for mission-critical applications in the cloud. In addition, VMware SD-WAN is a key enabler for agencies to deliver on their vision of 5G and edge compute by eliminating IT complexity while delivering greater efficiency and faster deployment. Agencies can leverage VMware SD-WAN as a critical component of a multi-layered security strategy to help accelerate their journey towards a zero-trust architecture.

Enabling Accelerated Multi-Cloud Adoption

In April, VMware Cloud on AWS GovCloud (US) achieved FedRAMP High JAB authorization as well as DISA Impact Level 5 (IL5) provisional authorization. VMware Cloud on AWS GovCloud (US) supports critical public sector use cases, including data center extension, cloud migration, virtual desktops, disaster recovery, and application modernization. Now in its third year of operation, VMware Cloud on AWS GovCloud (US) is serving a wide range of mission owners with availability in both US-East and US-West.

VMware is committed to achieving FedRAMP authorization for additional services. VMware Government Services will help fast-track authorizations enabling agencies to accelerate innovation and multi-cloud adoption on VMware’s trusted digital foundation.

For more information on how VMware is helping agencies accelerate innovation across the public sector, please visit: <a href="https://www.vmware.com/products/trust-center/certificate.html?family=FedRAMP">VMware Cloud Trust Center</a>.

Additional Resources

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="http://www.vmware.com/company" target="_blank" rel="noreferrer noopener">www.vmware.com/company</a>.

VMware, Carbon Black and VMware SD-WAN are registered trademarks or trademarks of VMware, Inc. in the United States and other jurisdictions.

This press release may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

VMware achieves FedRAMP High Authorization for VMware Government Services to help agencies accelerate innovation across data centers, cloud and the edge for mission success

VMware Furthers Commitment to Public Sector

https://news-editor.vmware.com/wp-content/uploads/2022/07/Expanded-FedRAMP-High-Authorization-FB.jpg

VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization  - VMware News and Stories

https://secure.gravatar.com/avatar/ef7da3c5b02b380f4b9387286b0f030f?s=96&d=mm&r=g

smayowa@vmware.com

Tom Gillis explores how CISOs should invest in detecting and stopping lateral movement of threats on private and public clouds. 

Tom Gillis explores how CISOs should invest on detecting and stopping lateral movement of threats on private and public clouds. 

https://news-editor.vmware.com/wp-content/uploads/2022/06/Tom-Gillis.jpg

Comprehensive Mobile Security with VMware Workspace ONE Mobile Threat Defense

New Update Management Capabilities Helps Automate Windows Device Management

PALO ALTO, Calif. -- VMware Inc. (NYSE: VMW), a leading innovator in enterprise software, today unveiled innovations to its anywhere workspace platform, VMware Workspace ONE, that will make it easier for IT teams to manage and better secure all employee devices. New capabilities include:

“As the frequency and sophistication of threats continue to intensify, IT teams need a way to proactively detect threats across the entire device population and respond quickly. That is a tall order for taxed IT and Sec-Ops teams,” said Shankar Iyer, senior vice president and general manager, End-User Computing, VMware. “VMware Workspace ONE is ideally suited for the new security realities of enabling a hybrid workforce. Leveraging intelligence and injecting automation in every step of the process, it simplifies IT operations, improves security against modern threats, and empowers the best employee experience across any device, anywhere.”

Best In Class Security for Mobile Devices

Today’s mobile threat landscape is diverse, and mobile workstyles call for specialized protection from phishing and application, device, and rogue network originated threats. VMware Workspace ONE Mobile Threat Defense, a new add-on to the industry-leading Workspace ONE UEM platform, takes mobile protection to the next level. It incorporates mobile security technologies from Lookout, a leader in the space. The solution aims to address:

Application, device, and network protection via Workspace ONE Mobile Threat Defense can be activated within Workspace ONE Intelligent Hub. For IT, this means there are no separate apps or agents to download or deploy, and vital information – including alerts and suggested resolutions – is conveyed via a resource that employees use for daily work.

To learn more about Workspace ONE Mobile Threat Defense, <a href="https://blogs.vmware.com/euc/2022/06/announcing-workspace-one-mobile-threat-defense.html" target="_blank" rel="noreferrer noopener">read this blog</a>.

Simplifying Windows OS Update Management

As employees embrace hybrid workstyles, traditional network-based solutions are inadequate for securing PCs against vulnerabilities. Workspace ONE combines cloud-native Windows 10 and Windows 11 management with intelligent automation to help IT more seamlessly secure PCs alongside every other endpoint, from anywhere.

VMware is today introducing new Workspace ONE capabilities that will make managing updates/patches even easier and elevate the security posture of Windows devices. Workspace ONE flexibly extends to multiple content sources and unifies policy, deployment and lifecycle management of the OS from the cloud.

Flexibility is an inherent feature of the new Workspace ONE Updates Lifecycle, where critical updates can be automated via approval groups, while admins retain control to hand test patches more likely to create issues. Further enhancements include ability for IT admins to:

To learn more about these new update management capabilities, <a href="https://blogs.vmware.com/euc/2022/06/workspace-one-windows-patch-management-update.html" target="_blank" rel="noreferrer noopener">read this blog</a>.

IT Teams Enable Secure Anywhere Work with Workspace ONE

Accent Micro Technologies (AMTI) is a technology solutions and systems provider in the Philippines. Josefino "Bong" M. Paloma, executive vice president, Technology, Sales and Marketing, said, “We like Workspace ONE and Carbon Black Cloud for the simplicity and flexibility they offer. They automate many of the manual processes we used to have in provisioning our users, whether it’s installing software or enforcing security policies within the network as well as beyond the perimeter of our network.” Read the full <a href="https://www.vmware.com/company/customers/index/fullpage.html?path=/content/web-apps-redesign/customer-stories/2021/breaking-business-records-during-lockdowns-with-remote-work" target="_blank" rel="noreferrer noopener">case study</a>.

swisspro is a provider of electrical installation, information and communications technology (ICT), and automation services. Reto Marti, head of internal IT, said, “Under the old system, it took at least four hours to get a PC ready. But thanks to VMware, we have cut that to about 30 minutes, which makes life so much easier for the IT team.” Read the full <a href="https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/casestudy/vmware-swisspro-successstory.pdf" target="_blank" rel="noreferrer noopener">case study</a>.

Zoom provides a communications platform where people can connect, share ideas, make plans, and more. Aparna Bawa, Chief Operating Officer, said, “It was critical for our security posture to align with the prominence of this moment and the critical role Zoom played in business continuity for our customers. The collaboration with VMware delivers a more secure digital workspace and enables endpoints in our organization to be better safeguarded and compliant with IT security policies.”

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="http://www.vmware.com/company" target="_blank" rel="noreferrer noopener">www.vmware.com/company</a>.

VMware, Workspace ONE, Carbon Black, and Anywhere Workspace are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and other jurisdictions.

This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Angela Leaf, VMware Global Communications, +1 860 480 3367, <a href="mailto:aleaf@vmware.com" target="_blank" rel="noreferrer noopener">aleaf@vmware.com</a>

Heather Donner, VMware Global Communications, +1 925 482 4333, <a href="mailto:hdonner@vmware.com">hdonner@vmware.com</a>

VMware today unveiled innovations to its anywhere workspace platform, VMware Workspace ONE, that will make it easier for IT teams to manage and better secure all employee devices.

VMware today unveiled innovations to its anywhere workspace platform, VMware Workspace ONE. Learn more:

VMware Advances Its Anywhere Workspace Platform

https://news-editor.vmware.com/wp-content/uploads/2022/06/Mobile-Threat-Defense-1200x628-1.jpg

https://secure.gravatar.com/avatar/ff0b7b611905906b871b2c46c2d5efa8?s=96&d=mm&r=g

aleaf@vmware.com

Introduces VMware ContexaTM Threat Intelligence, Powering VMware Security to Stop Threats Others Simply Can’t See

PALO ALTO, Calif. – June 2, 2022 – VMware Inc, (NYSE:VMW) today announced significant enhancements to its unique lateral security capabilities to help customers achieve strong security for both modern and traditional applications, across multi-cloud environments. Ahead of RSA Conference 2022, VMware introduced <a href="https://www.vmware.com/security/contexa.html" target="_blank" rel="noreferrer noopener">Contexa</a>, VMware’s full-fidelity threat intelligence capability that observes the breadth of VMware’s network, endpoint, and user technologies. With Contexa, VMware is reframing traditional security analytics with enriched threat intelligence to enhance its security and management portfolio.

“Threat actors are increasingly deploying sophisticated infiltration tactics, including the use of stolen credentials in order to exploit vulnerabilities and hide in the noise of normalcy,” said Tom Gillis, senior vice president and general manager, Networking and Advanced Security Business Group, VMware. “In a world where the stakes in security continue to rise, lateral security has become the new battleground. Combining VMware Contexa with our architectural advantage, VMware exclusively sees every process running in an endpoint, every packet crossing the network, every access point, and the inner workings of both traditional and modern apps to identify and stop threats others can’t.” 

VMware Contexa Leaves Attackers with Nowhere to Hide

VMware Contexa is a full-fidelity threat intelligence cloud that sees what other solutions don’t and stops what other solutions can’t. With a privileged position in the infrastructure, Contexa observes and understands the inner workings of both modern and traditional apps every step of the way— from user, to device, to network, to run time, to data.  

VMware Contexa records and processes over 1.5 trillion endpoint eventsi and over 10 billion network flowsii daily, along with strategically curated threat intelligence data captured through technology partnerships. This rich context is further analyzed using machine learning and insights of over 500 researchers across VMware’s Threat Analysis Unit and incident response partners. Today, Contexa uncovers over 2.2 billion suspicious behaviors dailyiii, achieving zero touch detection and automated, graduated response for over 80 percent of these events.

Integrated into every VMware security product, Contexa will be available to all new and existing customers at no additional cost. The company that pioneered virtualization, now protects VMs like no other—and is driving innovation in modern application security. 

An Innovator in App Modernization Secures Apps at Scale

VMware Tanzu is a trusted partner for companies in their app modernization journey, helping them build, operate, and better secure modern applications at scale on any cloud. Today, VMware announced further enhancements to its Modern Apps Connectivity Services (MACS) solution that allows customers to build security into the full application lifecycle. With VMware Tanzu Service Mesh’s capabilities, customers now gain deep visibility and insights into the inner workings of application micro-services as they interact with each other via internal (East-West) APIs—and help to better protect them. VMware Contexa allows Tanzu Service Mesh to understand the context of the internal traffic flows, and therefore more accurately identify legitimate internal traffic from the internal movement of attacks such as ransomware. 

A Pioneer in Virtualization Protects VMs Like No Other

A leader in virtualization, VMware has introduced innovative and powerful distributed security capabilities for its multi-cloud platform over the years, allowing the company to make customer workloads more secure on VMware cloudsiv. As innovations in server virtualization have driven higher virtual machine densities on a single physical server, less lateral traffic is visible to a network tap. This makes it difficult for a Security Information and Event Management (SIEM) technology or security analytics solution to identify lateral security threats by analyzing sampled data such as network flow records or selected network traffic taken from taps.

VMware has introduced new capabilities to help customers identify and respond to malware and ransomware attacks in the network by integrating its advanced intrusion detection & prevention (IDS/IPS) and Network Traffic Analysis (NTA) directly into the virtualization layer with VMware NSX. These new enhancements, powered by VMware Contexa, now inspect and analyze every packet and every process to provide extremely high-fidelity alerts that other systems relying on sampled data cannot match. 

Anywhere Workspace Platform Advances Security for Employee Devices

New innovations to VMware Workspace ONE will make it easier for IT teams to manage and better secure all employee devices, while contributing to Contexa’s rich data set. VMware is today introducing Workspace ONE Mobile Threat Defense, which incorporates technologies from Lookout, a leader in the mobile security space. The new offering will help protect employees’ mobile devices from a wide range of application, device, and network-originated threats. Workspace ONE Mobile Threat Defense can be activated within Workspace ONE Intelligent Hub. For IT, this means there are no separate apps or agents to download or deploy, and vital information – including alerts and suggested resolutions – is conveyed via a resource that employees use for daily work. 

VMware is also introducing new Workspace ONE capabilities that will make managing updates/patches even easier and elevate the security posture of Windows devices. For instance, the new capabilities will enable IT to automate critical updates to pre-approved groups, hand test patches more likely to create issues, and pause or rollback patches if an issue is detected. Further Workspace ONE enhancements are detailed <a href="https://news.vmware.com/releases/anywhere-workspace-security" target="_blank" rel="noreferrer noopener">here</a>.

Joins the XDR Alliance to Modernize the SOC

VMware is announcing it has joined the <a href="https://www.xdralliance.com/" target="_blank" rel="noreferrer noopener">XDR Alliance</a>™, a partnership of leading cybersecurity industry innovators committed to an inclusive and collaborative XDR framework and architecture. VMware is well positioned with very mature endpoint and network offerings that offer a high level of insight and context for identifying and responding to threats. The mission of the XDR Alliance is to work in collaboration to make an open approach to XDR a reality for SecOps teams and help them effectively protect their organizations from cyberattacks.

VMware Sessions at RSA Conference 2022

<a href="https://www.rsaconference.com/usa/agenda/session/The%20Next%20Disruption%20Security%20Beyond%20the%20Perimeter%20and%20Endpoint" target="_blank" rel="noreferrer noopener">Keynote - The Next Disruption: Security Beyond the Perimeter and Endpoint</a>  Monday, June 6 at 4:15 PM PST Tom Gillis, SVP & GM, Networking and Advanced Security Business Group, VMware

<a href="https://www.rsaconference.com/usa/agenda/session/What%20is%20Zero%20Trust%20What%20ISNT%20Zero%20Trust%20Lets%20Make%20Sense%20of%20This" target="_blank" rel="noreferrer noopener">What is Zero Trust? What ISN’T Zero Trust? Let’s Make Sense of This!</a>  Tuesday, June 7 at 8:30 AM PST  Evan Gilman, VMware (Panelist)

<a href="https://www.rsaconference.com/USA/agenda/session/How%20Modern%20Bank%20Heists%20Are%20Escalating%20to%20Hostage%20Situations" target="_blank" rel="noreferrer noopener">How Modern Bank Heists Are Escalating to Hostage Situations</a>  Tuesday, June 7 at 9:40 AM PST  Karen Worstell, senior cybersecurity strategist, VMware (moderator)  Tom Kellermann, head of cybersecurity strategy, VMware  Chad Skipper, global security technologist, VMware

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit www.vmware.com/company.  

VMware, Contexa, NSX, Tanzu, and Workspace ONE are registered trademarks or trademarks of VMware, Inc. in the United States and other jurisdictions.

This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

i. VMware Internal Analysis, May 2022 ii. VMware Internal Analysis, May 2022 iii. VMware Internal Analysis, May 2022 iv. SE Labs, “Breach Response Detection Test: VMware NSX Network Detection and Response,” August 31, 2021

Vivaan Gideon, VMware Global Communications, <a href="mailto:vgideon@vmware.com" target="_blank" rel="noreferrer noopener">vgideon@vmware.com</a>  Kerry Tuttle, VMware Global Communications, <a href="mailto:ktuttle@vmware.com" target="_blank" rel="noreferrer noopener">ktuttle@vmware.com</a>

VMware Inc, (NYSE:VMW) today announced significant enhancements to its unique lateral security capabilities to help customers achieve strong security for both modern and traditional applications, across multi-cloud environments.

https://news-editor.vmware.com/wp-content/uploads/2022/06/Global-Telemetry-1200x628-1.jpg

VMware Enhances Its Unique Lateral Security for Multi-Cloud  - VMware News and Stories

Palo Alto, Calif., April 27, 2022 - VMware Inc. (NYSE: VMW) today announced that the Defense Information Systems Agency (DISA) has added the Security Technical Implementation Guide (STIG) for VMware NSX® to the Department of Defense (DoD) Cyber Exchange.

The updated DISA STIG outlines the installation requirements, security policies and controls for deploying <a href="http://www.vmware.com/products/nsx">VMware NSX</a> within the Department of Defense and other federal agencies. The STIG will also help provide a vetted, more secure baseline for non-DoD entities to measure their security posture.

“Across the public sector, agencies are navigating accelerated innovation alongside the journey to Zero Trust security,” said Jennifer Chronis, vice president, public sector, VMware. “As the threat landscape evolves, the release of DISA's STIG for VMware NSX will empower agencies to leverage VMware's advanced network virtualization and security platform to better protect and manage their multi-cloud environments. With VMware NSX, we are helping customers modernize their cloud networks to deliver apps faster while also protecting against today’s threats.”

The STIG requirements confirm VMware NSX implementation is consistent with DoD cybersecurity policies, standards, architectures, security controls and validation procedures, when applicable NIST SP 800-53 cybersecurity controls are applied to all systems and architectures. The DISA STIG for VMware NSX provides guidance on configuring various components of an NSX environment, including the NSX Manager, Gateway Router, Distributed Firewall, and Gateway Firewall.

The latest version of NSX joins VMware vSphere and VMware vSAN for which DISA has previously released STIGs. To view the official STIG, visit the DoD Cyber Exchange Public <a href="https://public.cyber.mil/stigs/downloads/">website </a>and view the STIG <a></a><a href="https://public.cyber.mil/announcement/disa-releases-the-vmware-nsx-t-data-center-security-technical-implementation-guide/">release</a> memo for VMware NSX.

Multi‑Cloud for Mission Success

Earlier this month, VMware announced the findings of a study on how government agencies are scaling the use of multi-cloud environments. The study, titled “Multi-cloud Is The New Frontier Of Government IT," conducted by Forrester Consulting, found that while the move to multi-cloud is a priority, agencies face challenges in supporting growing cloud environments, including compliance standards, data security and upskilling employees. The full study, complete with recommendations for a ‘cloud-smart’  and secure approach to the multi-cloud era can be downloaded <a></a><a href="https://www.vmware.com/learn/1380503_REG.html?src=wb_624ed0c315228&cid=7012H000001KaLSQA0">here</a>.

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a></a><a href="http://www.vmware.com/company">www.vmware.com/company</a>.

VMware, NSX, vSphere, and vSAN are registered trademarks or trademarks of VMware, Inc. in the United States and other jurisdictions. This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Vivaan Gideon, VMware Global Communications, <a href="mailto:vgideon@vmware.com">vgideon@vmware.com</a>

VMware today announced that the Defense Information Systems Agency (DISA) has added the Security Technical Implementation Guide (STIG) for VMware NSX to the Department of Defense (DoD) Cyber Exchange. 

DISA Releases VMware NSX STIG

https://news-editor.vmware.com/wp-content/uploads/2022/04/DOD_security_VMware_Facebook_1200x628.jpg

Defense Information Systems Agency Releases VMware NSX® Security Technical Implementation Guide - VMware News and Stories

https://secure.gravatar.com/avatar/75b84e07b783dfc0a64b994d71eb8ea9?s=96&d=mm&r=g

aspeagle@vmware.com

There has been a fundamental restructuring of cybercrime cartels thanks to a booming dark web economy of scale. Powerful cybercriminal groups now operate like multinational corporations and are relied upon by traditional crime syndicates to carry out illegal activities such as extortion and money laundering. Cybercrime cartels are more organized than ever before and enjoy greater protection and resources from the nation-states that view them as national assets.1

With this ground truth serving as the backdrop for the threats facing financial institutions, I interviewed 130 financial security leaders and CISOs from around the world for the fifth edition of the <a href="https://www.vmware.com/learn/security/1414485_REG.html">Modern Bank Heists report.</a> This year’s findings should serve as a warning to the financial sector that attackers are moving from dwell to destruction.

Geopolitical Tension Is Metastasizing in Cyberspace

Cybercriminals targeting the financial sector often escalate their destructive attacks in order to burn evidence as part of their counter incident response. Our report found that 63% of financial institutions experienced an increase in destructive attacks, a 17% increase from last year. Destructive attacks are launched punitively to destroy, disrupt, or degrade victim systems by taking actions such as encrypting files, deleting data, destroying hard drives, terminating connections, or executing malicious code. In fact, we’ve recently witnessed <a href="https://blogs.vmware.com/security/2022/03/shields-up-prepare-for-destructive-cyberattacks.html">destructive malware</a> like HermeticWiper being launched following Russia’s invasion of Ukraine. Notably, the majority of financial leaders I spoke to for this report stated that Russia posed the greatest concern to their institution.

Financial institutions were certainly not immune to the recent resurgence of ransomware. 74% of financial security leaders experienced one or more ransomware attacks in the past year, and 63% of those victims paid the ransom. This is a staggering statistic.

One of the reasons that traditional crime syndicates have become loyal dark web customers is because of the well-funded ecosystem of readymade and available ransomware kits. Cybercrime cartels, such as the Conti ransomware gang, have made it as easy as possible for their associates to launch ransomware attacks on critical industries like the financial sector.

A technical analysis in the VMware Threat Analysis Unit’s latest <a href="https://www.vmware.com/resources/security/exposing-malware-in-multi-cloud.html">threat report</a> provides a view into the proliferation of ransomware and how Remote Access Tools (RATs) help adversaries gain control of systems. Ransomware has a sinister relationship with these RATs, given these tools allow bad actors to persist within the environment and establish a staging server that can be used to target additional systems. Once an adversary has gained this limited access, they will typically work to monetize it by relying on the victim’s data for extortion (including double and triple extortion) or through stealing resources from cloud services using cryptojacking attacks.

Manipulation of Financial Markets

Cybercrime cartels have realized that the most significant asset of a financial institution is nonpublic market information. 2 out of 3 (66 percent) of the leaders I interviewed experienced attacks that targeted market strategies, and 1 in 4 (25 percent) stated that market data was the primary target for cyberattacks on their financial institution.

What exactly are these cybercrime cartels looking for? We’re witnessing an evolution from bank heist to economic espionage, where cybercriminals target corporate information or strategies that can affect the share price of a company as soon as it becomes public. This information can then be used to digitize insider trading and front-run the market. Our report also found that 44% of Chronos attacks targeted market positions. A Chronos attack involves the manipulation of time stamps – a concerning development considering how critical of a role the clock plays in the markets.

Defense Is the Best Offense

Security has become a top-of-mind issue for financial sector leaders. According to our report findings, the majority of financial institutions plan to increase their security budget by 20-30% this year and named extended detection and response (XDR) as their top security investment priority.

As security leaders, we know that a strong defense is the best offense. Modern threat hunting on a weekly basis should be adopted as a best practice to help security teams detect behavioral anomalies, as adversaries can maintain clandestine persistence in an organization’s system. Our report found that currently, only 51% of financial institutions are conducting weekly threat hunts. I am hopeful that this number will jump in next year’s report as threat hunting programs have multiple outputs beyond finding a cybercriminal, such as fueling threat intelligence.

In today’s evolving threat landscape, cybersecurity has become a brand protection imperative. Trust and confidence in the safety of financial institutions depends on effectively avoiding, mitigating, and responding to modern cyber threats.

Download the full report to learn more: <a href="https://www.vmware.com/learn/security/1414485_REG.html">Modern Bank Heists 5.0</a>

<a href="https://news-editor.vmware.com/wp-content/uploads/2022/04/MBH-5.0-Infographic.pdf" target="_blank" rel="noreferrer noopener">Click here</a> to download the full-size interactive infographic.

Modern Bank Heists 5.0 findings should serve as a warning to the financial sector that attackers are moving from dwell to destruction.

https://news-editor.vmware.com/wp-content/uploads/2022/04/Modern_Bank_Heists_Facebook_1200x628.jpg

Tom Kellermann

VMware Research Reveals Agencies are Navigating Compliance, Security and Upskilling Employees Amid Cloud Adoption

Today, at the <a href="https://upgather.com/vmware/public-sector-innovation-summit/">Public Sector Innovation Summit</a>, VMware announced findings from a study on how government agencies are scaling use of multi-cloud environments for mission success. The study, titled “<a href="https://www.vmware.com/learn/1380503_REG.html?src=wb_624ed0c315228&cid=7012H000001KaLSQA0">Multi-cloud Is The New Frontier Of Government IT</a>," conducted by Forrester Consulting, found while the move to multi-cloud is a priority, agencies face challenges supporting growing cloud environments, including compliance standards, data security and upskilling employees.

A ‘Cloud‑Smart’ Approach for the Public Sector

The survey captures responses from more than 500 agency leaders and IT decision-makers at federal, state, and local governments in the United States and Canada and discovered that while agencies are accelerating cloud adoption, multi-cloud environments are far more diverse, complex, and distributed than anything organizations have managed in the past. This can create barriers or force trade-offs between moving fast and managing risk. The challenge lies in finding the right tools and platforms to meet agency demands and keep data and processes safe and compliant. The study found when selecting cloud platform providers, the top priorities for agencies were: 

Security

VMware Report Warns of Deepfake Attacks and Cyber Extortion

VMware Introduces Advanced Workload Protection for AWS to Help Defend Against Emerging Threats

VMware Furthers Commitment to Public Sector, Achieves Expanded FedRAMP High Authorization

Why CISOs Should Invest More Inside Their Infrastructure

VMware Advances Its Anywhere Workspace Platform To Enable Intelligent, Proactive Security for All Employee Devices

VMware Enhances Its Unique Lateral Security for Multi‑Cloud

Defense Information Systems Agency Releases VMware NSX® Security Technical Implementation Guide

Modern Bank Heists 5.0: The Escalation from Dwell to Destruction

Multi‑Cloud for Mission Success

VMware Prevents 100% of Critical Attacks Tested During MITRE Engenuity ATT&CK® Evaluation

Innovating for the Future: 4 Public Sector Priorities for 2022

#BreakTheBias: Celebrating VMware’s Security Talent This International Women’s Day