Young female engineer coding over laptop in IT startup company

Young female engineer coding over laptop in IT startup company - VMware News and Stories

https://news-editor.vmware.com/wp-content/uploads/2021/09/logo_media_thumbnail.jpg

VMware News & Stories

VMware News and Stories

Home

VMware Attends White House Summit on Open Source Software Security

Cybersecurity-Predictions-2022-TWIT_800x418 - VMware News and Stories

VMware: A Look Ahead at 2022

Cybersecurity-Predictions-2022-TWIT_800x418

Sylvenstein Lake Reservoir. Cycler biking over the bridge. Drone Shot. Bavaria Germany Alps

- VMware News and Stories

Securing the Future: 7 Cybersecurity Predictions for 2022

VMware News_Log4j Vulnerability Response - VMware News and Stories

VMware Responds to Log4j Vulnerability

VMware News_Log4j Vulnerability Response

Podcast Raghu Raghuram CEO with IDC President - VMware News and Stories

Podcast: VMware CEO Raghu Raghuram with IDC President Crawford Del Prete

Podcast Raghu Raghuram CEO with IDC President

SGB-Smit AoC_Still003[22] - VMware News and Stories

For This CIO, “Technology Is the Basis of Change”

SGB-Smit AoC_Still003[22]

High angle view of computer hacker with laptop sitting at desk in office

IDC MarketScape Positions VMware as a Leader in SD-WAN Infrastructure

Business men discussing plans in modern office

reInvent-Partnerships-NEWS-GettyImages-594203165-copy - VMware News and Stories

VMware Empowers AWS Customers with the Power of &#8220;AND&#8221;

reInvent-Partnerships-NEWS-GettyImages-594203165-copy

Lifestyle Warehouse and manual workers concepts.  Made in Barcelona.

Independent Research Firm Names VMware a Leader in Unified Endpoint Management

Pop Culture Tech podcast 2.5 explores remote work and where we all go from here. Featuring Zoom and Distribute Consulting

Sorry I Was On Mute_Remote Work Podcast_Pop Culture Tech_Alt - VMware News and Stories

Sorry, I Was On Mute!

Sorry I Was On Mute_Remote Work Podcast_Pop Culture Tech_Alt

Red and white lighthouse on the sea shore.

Red and white lighthouse on the sea shore. - VMware News and Stories

Fighting Back Against Cyberattacks: VMware Answers &#8216;SOS&#8217; of Understaffed Security Teams

VMware HCI Gartner Magic Quadrant MQ 2021 - VMware News and Stories

VMware HCI Gartner Magic Quadrant MQ 2021

Kit Colbert, Senior Vice President and Chief Technology Officer, VMware

Kit-Colbert-Headshot-Avatar - VMware News and Stories

Kit-Colbert-Headshot-Avatar

Kit-Colbert-Headshot - VMware News and Stories

Kit-Colbert-Headshot

core/paragraph

Today, Kit Colbert, VMware’s Chief Technology Officer, Alex Tosheff, VMware’s Chief Security Officer, and Michael Kennedy, VMware’s Vice President, Global Government Relations and Public Policy, attended the White House Open Source Software Security Summit.

Led by Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technology, the summit focused on ways to improve the security of open source software. As both a user of and contributor to open source software, VMware encouraged continued industry collaboration on issues from education and common standards to interoperability and distribution mechanisms.

“VMware commends the Biden Administration for convening this incredibly constructive discussion and for recognizing that collaboration is key to advancing the security of open source software,” said Kit Colbert, VMware’s Chief Technology Officer. “We look forward to continued engagement between the White House and industry as we work together to build trust and resiliency in this key building block for technological and economic progress.”

As part of its commitment to open source software and security, VMware is an active participant and contributor to open source-related industry consortia such as the Linux Foundation, Apache Software Foundation, Cloud Native Computing Foundation and Open Source Security Foundation (OpenSSF).

VMware encourages continued industry collaboration on issues from education and common standards to interoperability and distribution mechanisms.

VMware encourages industry collaboration on issues from education and common standards to interoperability and distribution mechanisms.

https://news-editor.vmware.com/wp-content/uploads/2022/01/WH-Summit-FACEB_1200x628.png

Posts

https://secure.gravatar.com/avatar/123c935f0dbf4f619f790c609e2b3fce?s=96&d=mm&r=g

druyak@vmware.com

Happy new year, 2022! It’s time to look deep into our enterprise-technology crystal ball to see what we might expect over the coming year. But first, some context: no psychic powers are required to predict that the trend towards a multi-cloud approach will continue. Multi-cloud gives the enterprise freedom to pursue a best-of-breed cloud strategy to accelerate business transformation and innovative app development. So, we’ll look through the lens of a multi-cloud environment as we consider VMware leaders’ 2022 predictions from cloud, security, apps, and anywhere workspace. I’ll share my own prediction near the end of this post, along with one from a customer.  

core/heading

corpnews-blocks/pull-quote-image

Most companies have already identified solutions for application portability across clouds (although some environments are more conducive to app migration than others). Data portability, however, remains the big challenge — and data is the fuel that propels apps. Traditional storage systems cannot deliver a cloud-like experience. They are defined by fixed hardware boundaries that confine resources. This can result in trapped data, stranded capacity, limited scalability and elasticity, complex placement decisions, and high sunrise and sunset costs. The industry’s march towards the multi-cloud/zettabyte era will only exacerbate these limitations. In the next two years, we predict that we will see the emergence of a cloud-agnostic federated data fabric, which will enable organizations to mitigate data gravity as a key inhibitor to successfully operationalizing a multi-cloud architecture. 

core/pullquote

As organizations implement network segmentation to stop the spread of ransomware, attackers have begun to leverage trusted credentials to move freely throughout the network. With a valid set of credentials, attackers can accomplish much of their nefarious activity without raising a single alarm.  

Some of the stealthiest credential attacks use native, authorized tools like PowerShell to gain access by appearing as legitimate activity. Once an attacker can move laterally across an organization’s network, they have the “keys to the kingdom” and can access sensitive customer information and corporate proprietary data.  

Enter the double-extortion ransomware attack, in which an attacker quietly exfiltrates this sensitive information before encrypting a victim’s files and threatening to make sensitive data public. This ensures financial gain for cybercriminals who force organizations to not only pay to decrypt their files, but to prevent harmful data from being sold or publicly disclosed. 

While ransomware attacks like Kaseya and Colonial Pipeline made the nightly news this year, we think that threat actors will take this one step further in 2022 by using a double-extortion ransomware attack as a result of stolen credentials. 

The good news is that we can expect a cadre of tech companies, the open-source community, academia, cybersecurity institutions and government agencies around the world to unite to meet this challenge. We’ve done it before, and we will do it again.

We will see the emergence of tools that bring the Kubernetes (K8s) patterns to new domains —solving new problems and changing the intersection of development, security, and operations practices. K8s has proven to be successful for containerized infrastructure, but its embedded ideas have broader applicability. We will see an increasing number of systems (build systems, infrastructure management, and federated application-control planes) leverage the manifest-based model popularized by K8s. This will mean a transition to a manifest-based approach and will mark a shift from imperative DevSecOps practices to the consumption of intent-driven services that apply a declarative approach to management. This will lead to something of an inversion of IT — moving from systems that try to make sense of what is running and provide APIs to change what is running, to systems that consume manifests that represent intended state and then allow for reconciliation of actual state with intended state. This will allow them to tackle challenges in areas like AI/ML, stream-based processing, app integration and other areas without having to make significant 'full stack' investments in platforms. 

One of the major trends we predict in the end-user computing space is the broad adoption and general acceptance of password-less authentication — something we believe is a “must-have” moving forward. Most attacks can be avoided by using stronger methods of authentication. 

Password-less authentication is a type of multifactor authentication that replaces the user’s password with a different factor (typically a client-side certificate unlocked via biometrics). This would allow users to authenticate to corporate resources from a fingerprint or face scan throughout the course of a day, rather than having to remember a constantly rotating password or using an authenticator app. 

We see 2022 as the year where VPNs start to die off in huge numbers. During the course of the pandemic, companies realized that VPNs were one of their most vulnerable areas. They did not provide sufficient security for remote users who required broad access to the corporate network. Micro-perimeters, real-time security posture checks, and the wide availability of SASE offerings will be VPNs’ successors. 

Today’s multi-party enterprise workflows are fragmented and highly complex to maintain. This causes delays, increased costs and hinders innovation. Workflow data is often siloed within the enterprise — resulting in inefficient and costly steps to share and reconcile data across boundaries. This is where blockchain/digital ledger technology (DLT) enters the picture. While trendy cryptocurrencies and non-fungible tokens (NFTs) - which are also built on blockchain - capture memes and headlines, blockchain is quietly making waves in the enterprise driving real productivity. Blockchain’s real power lies in how it enables multiple parties to work together on a shared trustworthy source of data, fully and securely digitizing transactions. Maturing technologies, new delivery models, adoption of standards and the energy of an extensive and vibrant ecosystem are accelerating enterprise adoption. In 2022, we suspect that we’ll  see the value of enterprise blockchain becoming increasingly clear, as well as strong acceleration in production deployments across many industries (such as supply-chain use cases, for example), fundamentally changing the nature of doing business across organizational boundaries. In the financial-services industry, it is already meeting customers’ needs for high-frequency, complex business operations. We expect there will be an even broader enterprise blockchain adoption in 2022 and we’ll see major financial institutions more confident to deploy blockchain technology into production.  

A key area of focus for NKI will be applying AI and ML to cancer recognition through imaging and research models. It can support the automatic analysis of medical images for decision support of healthcare providers, as well as the analysis of cells to better understand the origin of cancer. 

To support researchers in conducting their work, we need a capable infrastructure for a wide variety of workloads. It must be a scalable and secure environment that supports data exchange with other institutions. We must work together to amplify our impact. Network virtualization, containerization, and sharing a single platform with workload isolation are all technologies we hope to leverage in the coming years. 

These new technological possibilities will allow researchers to work more flexibly and safely to help make our mission — a cure for every cancer — a reality in the near future.

core/separator

What do you think of the VMware leaders' predictions for 2022? Let us know and feel free to share your own predictions for the coming year.  

VMware leaders share their technology predictions for 2022 in cloud, security, apps, anywhere workspace, enterprise blockchain and more.

VMware leaders share their 2022 predictions in cloud, security, apps, anywhere workspace and enterprise blockchain.

https://news-editor.vmware.com/wp-content/uploads/2022/01/Cybersecurity-Predictions-2022-TWIT_800x418.png

VMware Leaders' 2022 Predictions - VMware News and Stories

Kit Colbert joined VMware in September 2003 (following an internship in 2002) and currently serves as senior vice president and chief technology officer. He is responsible for ensuring VMware’s long term technology leadership through research and innovation programs, with the primary goal of positively impacting and shaping the future of VMware, its ecosystem, and its customers. As CTO, Colbert’s will shape the technical vision for the company, and the transformation to a cloud and subscription-centric R&amp;D organization. His oversight includes advancing research and development efforts, overseeing the VMware Engineering Services team, the Design/UX team and the company’s ESG commitments. Prior to September 2021, Colbert served in multiple roles, including VMware’s Cloud CTO, General Manager of VMware’s Cloud-Native Apps business, CTO for VMware’s End-User Computing Business, and as the lead architect for the VMware vRealize Operations Suite. Colbert joined VMware as the technical lead behind the creation, development and delivery of the vMotion and Storage vMotion features in VMware vSphere. Colbert is a recognized thought-leader on application modernization and multi-cloud trends. He speaks regularly at industry conferences and serves as the multi-cloud voice for the VMware Office of the CTO blog. Colbert holds a bachelor’s of science in computer science from Brown University.

https://news-editor.vmware.com/wp-content/uploads/2022/01/Kit-Colbert-Headshot-Avatar.jpeg?w=150&h=150&crop=1

Kit Colbert

Check out VMware's 2022 tech predictions featuring CTO @kitcolbert on #enterpriseblockchain, @marcfleischmann on #cloud, @_tomgillis on #security, @patelajayp on #apps, and @brianmadden on #anywhereworkspace.

The past year has thrust cybersecurity into the spotlight and created a renewed focus on evolving security strategies for both the private and public sector. This month, we witnessed the <a href="https://news.vmware.com/security/vmware-responds-to-log4j-vulnerability">critical Log4j vulnerability</a>, which further revealed the fragility of the world’s digital infrastructure. 2021 also saw cyberattacks like Colonial Pipeline, JBS and Kaseya make mainstream headlines and impact everyday consumers.

With cybercrime <a href="https://cybersecurityventures.com/cybercrime-damages-6-trillion-by-2021/">predicted</a> to cost the world $10.5 trillion annually by 2025, up from $6 trillion in 2021, defenders are in a race to stay one step ahead of attackers. We interviewed VMware security experts to get their take on predictions heading into the new year as the threat landscape continues to evolve. Here are the attack trends and emerging threats that should be top of mind for all organizations as we approach 2022.

The Log4j Zero Day will motivate organizations to rapidly adopt a Zero Trust approach.

"In 2021, we saw a massive proliferation of hacking tools, vulnerabilities and attack capabilities on the Dark Web,” said Eric O’Neill, national security strategist at VMware. “Defenders caught the highest number of Zero Days ever recorded, including closing out the year with the severe Apache Log4j vulnerability being exploited in the wild. As a response, 2022 will be the year of Zero Trust where organizations 'verify everything' versus trusting it’s safe. We’ve seen the Biden administration mandate a Zero Trust approach for federal agencies, and this will influence other industries to adopt a similar mindset with the assumption that they will eventually be breached. A Zero Trust approach will be a key element to fending off new attacks in 2022, while also mitigating the fallout from the Log4j vulnerability.”

Supply chain attacks have just gotten started.

“In July 2021, as the world was still reckoning with the devastating SolarWinds breach, the REvil ransomware gang exploited a Zero Day in Kaseya VSA to launch a supply-chain attack on its customers,” said Tom Kellermann, head of cybersecurity strategy at VMware. “Neither of these attacks occurred in a vacuum, meaning security teams must pay closer attention to the threat of island hopping. In 2022, we can expect that cybercrime cartels will continue to seek ways to hijack the digital transformation of organizations to deploy malicious code, infiltrate networks, and gain persistence in systems all over the world. Defenders and organizations will need to monitor networks and services vigilantly for suspicious activities and potential intrusions. Implementing practices associated with Zero Trust philosophy like microsegmentation, threat hunting, and advanced telemetry capabilities can help ensure organizations are not the gateway to or victim of a severely damaging attack.”

Insider threats pose a new challenge for organizations as the job market continues to shift.

"As the Great Resignation took shape, we saw growing challenges associated with insider threats,” said Rick McElroy, principal cybersecurity strategist at VMware. “The sheer number of employees leaving their jobs and potentially still having access to the network or proprietary data has created a headache for IT and security teams tasked with protecting the organization. Insider threats have become a new, distinct challenge for organizations as they try to balance employee turnover, employee onboarding and the use of non-sanctioned apps and platforms. In 2022, I expect we’ll see the number of insider threat incidents increase. Attackers will also start targeting employees to carry out their attacks or plant ransomware. As a result, we’ll see new protocols and guidelines established as organizations work to keep networks and sensitive data protected.”

In 2022, accelerated delivery of the benefits of 5G infrastructure will highlight IoT security needs.

"The pandemic made it abundantly clear how important 5G infrastructure is for rural areas in the U.S.,” said Karen Worstell, senior cybersecurity strategist at VMware. “The rollout of 5G will enable better access to healthcare, educational innovations, and public services. The Biden administration’s infrastructure bill, which includes provisions for broadband delivery and access, provides the industry with another nudge in the right direction to roll it out. As 5G service delivery expands, there will be a growing demand for IoT security and engineering to ensure that network complexity does not become yet another security liability. We must also focus on securing the far edge much like we handle the data center edge today -- this will put new demands on incident detection and response. Future-ready capabilities like EDR (endpoint detection and response) will need to evolve in order to keep an expanding service level and constituency safe.”

Linux-based operating systems will become a key target for cybercriminals.

"Linux powers the majority of cloud workloads and 78% of the websites on the Internet,” said Giovanni Vigna, senior director of threat intelligence at VMware. “Because of this, the Linux-based operating system has become the key driver behind nearly all digital transformation projects undertaken by organizations. This makes the security of Linux environments critical, as bad actors have increasingly started to target Linux-based hosts with various threats – from RATs and web shells to cryptominers to ransomware. Many organizations focus their attention on Windows-based malware and might find themselves blind to this emerging threat until it's too late.”

Adversaries will move laterally and exfiltrate data from unsecure multi-cloud environments.

"With multi-cloud environments on the rise, the attack surface will continue to expand,” said Chad Skipper, global security technologist at VMware. “This will invite greater proliferation of common ports and protocols that will be used by the adversary to move laterally and exfiltrate data once inside an organization’s network. In 2022, we will see the adversary focus their efforts on living and hiding within the common noise of an organization’s networks. Having visibility into this noise to identify the adversary will become more essential than ever before when defending today’s multi-cloud environments.”

Copycat cyberattacks on critical industries will disrupt human lives.

"We are seeing cybercriminals adopt a style of attacks that seek to cause disruption to human lives,” said James Alliband, senior security strategist at VMware. “The attack on Colonial Pipeline that triggered a fuel shortage along the U.S. East Coast, ranging to the attack on Ireland’s healthcare system that effectively shut down the entire country’s hospitals, are only the beginning. There will be copycats as we see bad actors target critical industries such as energy, healthcare and finance with the intent to cause panic while cashing in on a ransom payment. The results of a successful attack can be expensive and dangerous, ranging from cancelled hospital surgeries and rerouted ambulances to people waiting hours at a gas station for fuel. This will be an area that is of real interest to nation-states looking to cause disruption abroad.”

To recap the year’s biggest cybersecurity stories, check out these additional blogs:

core/list

For the latest threat research, join the <a href="https://community.carbonblack.com/">VMware Carbon Black User Exchange</a> where more than 30,000 security professionals share best practices and threat intelligence to improve security postures.

core/image

Here are the attack trends and emerging threats VMware security experts are tracking that should be top of mind for organizations in 2022.

https://news-editor.vmware.com/wp-content/uploads/2021/12/MicrosoftTeams-image-9.png

https://secure.gravatar.com/avatar/4d948efc2db683c0cb4aa50361a076f7?s=96&d=mm&r=g

ktuttle@vmware.com

VMware’s <a href="https://news.vmware.com/c/agents-of-change/">Agents of Change</a> initiative celebrates technology leaders who challenge the status quo. By harnessing the power of digital transformation, they create unlimited possibilities for their businesses. Here’s the next leader in the Agents of Change series: Salvatore Cassara, Chief Information Officer at SGB-SMIT Group.

core/embed

CIOs Have “Unique Power” to Drive Change

“People in my position have a unique opportunity to be agents of change because a CIO has a clear view of an organization’s processes from start to finish. Technology is the basis of change for us. It allows us to innovate and collaborate with speed and agility so we can stay ahead. It’s fundamental,” said Salvatore Cassara, CIO at SGB-SMIT Group.

The European power transformers leader doubled its global footprint in five years. Its growth is supported by an IT infrastructure that unifies operations across four continents. Digital innovation also enables its 3,500-strong workforce to collaborate and access business-critical apps seamlessly and securely. 

Under Cassara’s guidance, SGB-SMIT Group’s digital foundation is now multi-cloud. This approach allows the company’s rapid expansion without compromising consistency across its regional production centers.

Innovation Powered by Efficient Knowledge Transfer

“We’re not just a multi-cloud company, we’re a multicultural company. We need to be able to share knowledge efficiently and securely across huge distances,” said Cassara. “Our engineers in Malaysia can design transformers using tools developed in Germany. Thanks to this infrastructure, we can adapt, act, and collaborate quickly and decisively. We opened our newest location in China—rolling out infrastructure, SAP, everything—without IT having visited the site. Our IT setup allows us to rise to these challenges.”

The company’s multi-cloud approach enables individuals and teams across the company to come together across the world. This encourages the rapid exchange of expertise and the cross-fertilization of ideas. And ultimately, SGB-SMIT Group’s culture of collaborative innovation is flourishing.

Multi-Cloud Enables Seamless Collaboration

Of course, the success of any company ultimately lies in the skills, experience and creativity of its people. Diverse skill sets, backgrounds and passions help elevate SGB-SMIT to something greater than the sum of its parts.

Working with colleagues regardless of where they are is increasingly important as the world emerges from the COVID-19 pandemic, said Cassara. He added that the company’s multi-cloud approach was also crucial to its agile response at the beginning of the crisis.

“Because we already had the infrastructure, we simply had to turn the key and it was done. Our people could do everything they needed to do at home,” he said. “Of course, we put together a taskforce to make sure we responded to the crisis properly. But IT was not part of it, because our boss’ perception was that we’d get it done. That’s the best endorsement we could wish for.”

For anyone asking how they can deliver similar transformations at their own organization, Cassara offers three tips:

Salvador Cassara, CIO of SGB-SMIT Group, shares his outlook on how a diverse culture and multi-cloud approach drives innovation and growth.

This article shares CIO Salvador Cassara's outlook on how a diverse culture and multi-cloud approach drives innovation and growth.

For this CIO, “Technology Is the Basis of Change”

https://news-editor.vmware.com/wp-content/uploads/2021/12/SGB-Smit-AoC_Still00322.png

As with many software companies across the industry, VMware is working diligently to protect our customers, products and partner ecosystem from the impact of CVE-2021-44228. VMware Security Advisory <a href="https://www.vmware.com/security/advisories/VMSA-2021-0028.html">VMSA-2021-0028</a> has been published and will be updated continuously with new workarounds and fixes for impacted products. The <a href="https://via.vmw.com/vmsa-2021-0028-blog">VMware Security Blog</a> provides more information to help customers remediate. Protecting customers is our top priority at VMware, and we recommend all customers join VMware’s Security-Announce mailing list to receive the latest advisories.

VMware is working diligently to protect our customers, products and partner ecosystem from the impact of CVE-2021-44228. Learn more.

VMware is working diligently to protect our customers, products and partner ecosystem from the impact of CVE-2021-44228.

https://news-editor.vmware.com/wp-content/uploads/2021/12/VMware-News_Log4j-Vulnerability-Response_FB.jpg

VMware Responds to Log4j Vulnerability | News & Stories

Listen to Raghuram and Del Prete tackle digital resiliency, the workforce of the future, and the next big tech trends, like multi-cloud and edge.

corpnews-blocks/subhead

Want to listen to a shorter version? <a href="https://soundcloud.com/vmware/raghu-raghuram-crawford-del-prete-4-minute-version?si=057f6fc91dbf44549ee222b8e46fb6d0&utm_source=clipboard&utm_medium=text&utm_campaign=social_sharing" target="_blank" rel="noreferrer noopener">Check out this 4-minute excerpt</a>.

Raghuram: Hello, everyone. I'm <a href="https://news.vmware.com/author/raghu-raghuram" target="_blank" rel="noreferrer noopener">Raghu Raghuram</a>, CEO of VMware. I'm here today with <a href="https://www.idc.com/getdoc.jsp?containerId=PRF000086" target="_blank" rel="noreferrer noopener">Crawford Del Prete</a>, who's the president of IDC. Thank you for being here today with me, Crawford, to discuss the changes we see. Clearly, the future we thought we knew has been disrupted and transformed in a big way.

Del Prete: Thanks so much for the opportunity to share some perspectives with you around this extraordinary period that we're operating in.

Raghuram: What I see these days, especially driven by the pandemic, but even regardless of the pandemic, is a more fundamental rethink of, “How do I turn my entire enterprise into a digital enterprise?”

Del Prete: And what we're seeing more and more is companies need to even stop thinking about digital as something separate. They need to think about a new way of doing business.

Raghuram: It is the way of doing business. And that's also causing, I would say, the next wave of both interesting business models and technology innovations as digital meets physical. This is why our business is so fascinating every day. The dimensions constantly keep changing. So, let's look out a few years. What would be the distinct themes that you think we'll be talking about?

Del Prete: A few things. I think we're going to be still talking about the cloud. But we're going to be talking about companies with a level of more cloud interoperability and companies working across clouds. The level of application interdependency only continues to increase.

You're going to put your apps in different cloud instances. So, it's the ability to manage applications across these clouds, manage your data across these clouds, manage multiple cloud instances. This is going to be something we're going to be spending a lot of time talking about. 

Raghuram: So app interdependency is a key theme. <a href="https://www.vmware.com/cloud-solutions/multi-cloud.html" target="_blank" rel="noreferrer noopener">Multi-cloud</a> is a theme. And distributed data is a key theme. And another part is the distributed workforce, as well. So, where do you think we go from here with respect to distributed work?

Del Prete: I think that this idea of working from anywhere, this idea of being able to work in any instance is really very much the future. I think that work will be different, but it will also be oddly familiar in the future. I think what's really going to change here is the extent that we can apply automation to tasks that people aren't necessarily excited about doing. And the key here is to automate the mundane, and a future workforce needs to take on more sophisticated things. And I think we're going to be talking a lot about this in the future.

Raghuram: I think the combination of remote workforces and remote “everything” means that it's an explosion of concerns around <a href="https://www.vmware.com/security.html" target="_blank" rel="noreferrer noopener">security</a>, right? Where do you see that going?

Del Prete: Let's be very blunt about it. In security, the customer has been forced to be the systems integrator too much of the time. And when the customer is forced to be the systems integrator, they make mistakes, because they really don't understand it. And that complexity is exponentially growing with things like IoT and the distributed edge. So, I think there's a real opportunity for suppliers and integrators to come in and try to create a simplification layer in what's going to become a more and more distributed landscape. And frankly, we see this becoming more of a problem now than it was even a year ago.

Raghuram: The analogy that I use is that if you bought a car and whoever sold you the car said, “Hey, go find anti-lock brakes, alarm systems and theft devices. Go solve them for yourself.” So, that's really the state of where we are in the security business.

Del Prete: This is what people still think of today as something that only big companies can protect themselves from. But I think medium enterprises, government (and) education need to think much more broadly about their data protection strategy. Because your threat landscape is only going to become more complicated as you connect more people and more things.

Raghuram: Let's talk a few minutes about the edge. What do you see as you project out over the next five years?

Del Prete: The edge is exploding. We're seeing people invest in the edge at a very high rate. We think that 50% of new infrastructure that is deployed is deployed at the edge by 2023. You're going to see that this is how we move data closer to the point of decision. And I think what people aren't thinking about is how the edge, by definition, is going to need to be increasingly cloud agnostic.

We believe so much of the infrastructure that's going to be deployed over the next three years is going to have to be at the edge, because it's going to be required for competitiveness. And that's why the edge has to be agnostic. I mean, can you imagine a world where you have to dictate what cloud provider or what environment someone's working on if you want to deliver a service out to that edge? It has to be agnostic.

The podcast conversation and highlighted excerpts have been edited for length and clarity.

In this CEO podcast, leaders from VMware and IDC tackle digital resiliency, distributed workforces and tech trends like multi-cloud and edge.

Raghuram and Del Prete tackle digital resiliency, distributed workforces and tech trends like multi-cloud and edge.

CEO Podcast: VMware's Raghu Raghuram with IDC's Crawford Del Prete

https://news-editor.vmware.com/wp-content/uploads/2021/12/vmw-banner-podcast-conversation-1200x628-v1.png

CEO Podcast: Raghu Raghuram with IDC President Crawford Del Prete

We are officially in our third chapter as a company, but VMware’s mission remains the same: to deliver the trusted foundation to accelerate our customers’ innovation. We do this by providing the multi-cloud platform for all apps, enabling digital innovation and enterprise control. 

Our path to becoming the “cloud Switzerland” of the industry is resonating with customers and partners, and the journey began with our AWS partnership. It’s through this partnership that the power of “AND” first emerged as a North Star for our strategy. Could customers gain the agility, flexibility, and cost benefits of public cloud AND have the control required of enterprise apps? Turns out they can.

Four years into the partnership and things continue to accelerate. VMware Cloud on AWS is available in 19 global regions. There are now more and different options for consuming VMware Cloud on AWS. And, we’ve delivered new services specifically targeting Local Cloud, Government Cloud, and Telco Cloud environments. Best of all, customers have the choice to buy these services direct from VMware, or AWS, or one of our resellers. And this is just for the customers looking for the fastest path to migrate and modernize Tier 1 vSphere-based enterprise apps. In this same time, VMware Cross-Cloud services have grown into a portfolio of services that enable customers to modernize, optimize, connect and protect their native AWS environments.

The power of "AND" will be on display this week at AWS re:Invent, where we’re continuing to advance key initiatives that support AWS customers. Take a listen to VMware President Sumit Dhawan outline our strategy and the AWS partnership, and catch up on what's new at VMware for AWS customers at the show.

When organizations talk about digital services, often the conversation turns to “born in the cloud” apps. However, Tier 1 enterprise applications residing on premises are often the life blood of an enterprise. Regardless of where an app was created, all apps benefit from modern infrastructure. This is what VMware Cloud on AWS delivers enterprise-class infrastructure combined with public cloud scale and economics, delivered as a service almost anywhere in the world. At re:Invent, we will showcase new innovations and consumption options, as well as continued expansion of the VMware Cloud on AWS GovCloud service.

<a href="https://blogs.vmware.com/cloud/2021/12/01/vmware-cloud-on-aws-going-big-reinvent2021/" target="_blank" rel="noreferrer noopener nofollow">You can read about these advancements in this blog</a>.

VMware Tanzu Powers Developers on AWS

With a vast ecosystem of cloud native technologies to choose from, developers and operators alike can be overwhelmed and overburdened as they grapple with every step from iterative coding to applications running in production. VMware Tanzu simplifies the cloud native journey, enabling customers to accelerate their cloud adoption and consumption by efficiently evolving apps and infrastructure from on-premises to AWS, to deliver value faster with a streamlined developer experience for Amazon EKS more efficiently and securely. At re:Invent, VMware Tanzu will release several key new product updates to help customers make the most of the public cloud.

<a href="https://tanzu.vmware.com/content/blog/streamlined-devx-amazon-eks-aws-apps-vmware" target="_blank" rel="noreferrer noopener">Check out what’s new in this VMware Tanzu in this blog</a>.

Cloud transformation has become a business imperative for Communication Service Providers eager to increase agility, build digital resilience, foster innovation, and deliver new 5G services. Operators are increasingly looking to multi-cloud environments, recognizing the benefit of having their public clouds integrate and work seamlessly with their on-premises infrastructure and taking advantage of their existing skillsets, tools and processes. VMware has simplified this process for our customers with VMware Cloud on AWS and our Telco Cloud Platform.

<a href="https://telco.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/vmw-telco-cloud-platform-tcp-datasheet.pdf" target="_blank" rel="noreferrer noopener">Read more about the VMware Telco Cloud Platform.</a>

VMware Cross-Cloud Services in AWS Marketplace

VMware Cross-Cloud services offer distinct advantages to both IT operators and developers working in AWS. These advantages include accelerating application modernization, migrating workloads faster to the cloud, adopting a cloud operating model for their entire organization, and more securely and efficiently connecting a distributed workforce to cloud-based resources. VMware recently announced the company is making it easier for AWS customers to purchase and deploy VMware Cross-Cloud services to support their AWS environments. Our expanded presence in AWS Marketplace is another proof point of our focus on meeting customers where they are at by delivering value for the strategic cloud environment of their choice.

<a href="https://news.vmware.com/releases/vmware-cross-cloud-services-aws-marketplace" target="_blank" rel="noreferrer noopener">Read about VMware Cross-Cloud services in AWS Marketplace.</a>

This article may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

At AWS reInvent, VMware advances key initiatives that deliver the trusted foundation to accelerate AWS customers' digital innovation.

This week at AWS reInvent, VMware continues to advance key initiatives that support AWS customers.

https://news-editor.vmware.com/wp-content/uploads/2021/12/reInvent_FB_1200x628.png

VMware Empowers AWS Customers with the Power of "AND"

Roger Fortier

PALO ALTO, Calif. -- VMware, Inc. (NYSE: VMW), a leading innovator in enterprise software, today announced it has been positioned as a leader in the IDC MarketScape: Worldwide SD-WAN Infrastructure 2021 Vendor Assessment (November 2021, IDC #US47279821). The solution, VMware SD-WAN, is a cloud-delivered solution that optimizes application performance over any WAN link, simplifies WAN management, and enables security from branches to data centers and cloud locations.

The inaugural assessment that evaluated 12 SD-WAN Infrastructure providers states, “VMware SD-WAN is a strong offering in the market and is also a good fit for customers that already use any number of VMware's popular IT management tools. Furthermore, many communications SPs already work with VMware, so customers that are looking for integrated connectivity and SD-WAN could look to VMware SD-WAN.”

VMware is taking SD-WAN to the next level with secure access service edge (SASE). VMware SASE brings together the network performance benefits of SD-WAN, integrated security services delivered from the cloud, and the ability to support modern distributed applications. In doing so, it allows enterprises to build a platform that provides branch, home, and remote users more secure, optimized, and reliable access to modern applications deployed in public and private clouds, SaaS, or at the enterprise edge. These capabilities are delivered as a service from a global network of over 150 points of presence (PoPs).

“VMware, through its acquisition of VeloCloud, has a strong heritage in the SD-WAN space. We believe recognition from reports like the IDC MarketScape validate VMware as a leader for businesses of all sizes,” said Abe Ankumah, vice president of product management, SASE, VMware. “But what got us here won’t get us there. Customers want their security services delivered as seamless as their networking services. That’s why we continue to bolster our VMware SASE offering featuring our SD-WAN capabilities.”

To access an excerpt of the IDC MarketScape: Worldwide SD-WAN Infrastructure 2021 Vendor Assessment (November 2021, IDC #US47279821), click <a href="https://sase.vmware.com/content/dam/digitalmarketing/vmware-sase/pdfs/idc-marketscape-worldwide-sd-wan-infrastructure-2021-nov.pdf" target="_blank" rel="noreferrer noopener">here</a>.

IDC MarketScape vendor assessment model is designed to provide an overview of the competitive fitness of ICT (information and communications technology) suppliers in a given market. The research methodology utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each vendor’s position within a given market. IDC MarketScape provides a clear framework in which the product and service offerings, capabilities and strategies, and current and future market success factors of IT and telecommunications vendors can be meaningfully compared. The framework also provides technology buyers with a 360-degree assessment of the strengths and weaknesses of current and prospective vendors.  

VMware is a leading provider of multi-cloud services for all apps, enabling digital innovation with enterprise control. As a trusted foundation to accelerate innovation, VMware software gives businesses the flexibility and choice they need to build the future. Headquartered in Palo Alto, California, VMware is committed to building a better future through the company’s 2030 Agenda. For more information, please visit <a href="http://www.vmware.com/company" target="_blank" rel="noreferrer noopener">www.vmware.com/company</a>.

VMware, VMware SD-WAN and VMware SASE are registered trademarks or trademarks of VMware, Inc. or its subsidiaries in the United States and other jurisdictions.

This press release may contain hyperlinks to non-VMware websites that are created and maintained by third parties who are solely responsible for the content on such websites.

Angela Leaf, VMware Global Communications, Phone: +1 (860) 480-3367, <a href="mailto:aleaf@vmware.com">aleaf@vmware.com</a>

VMware has been positioned as a leader in the IDC MarketScape: Worldwide SD-WAN Infrastructure 2021 Vendor Assessment. Learn more:

IDC MarketScape Positions VMware As a Leader In SD-WAN Infrastructure

https://news-editor.vmware.com/wp-content/uploads/2021/11/SD-WAN-FACEB_1200x628.png

IDC MarketScape Positions VMware as a Leader in SD-WAN Infrastructure - VMware News and Stories

https://secure.gravatar.com/avatar/ff0b7b611905906b871b2c46c2d5efa8?s=96&d=mm&r=g

aleaf@vmware.com

@VMware has been positioned as a leader in the IDC MarketScape: Worldwide SD-WAN Infrastructure 2021 Vendor Assessment. Learn more:

Today, Security Operations Center (SOC) teams are understaffed and overwhelmed by cyberattacks that are increasing in both volume and sophistication. Amid the rapidly evolving threat landscape, security teams are spending too much time monitoring and validating alerts instead of gaining visibility and an understanding of the threats in their environment. A new VMware Carbon Black Cloud capability helps fill the gaps of understaffed security teams by providing 24/7/365 monitoring, alert triage, and threat analyst guidance on policy changes as well as assistance with threat containment in the event of an incident.

Introducing Managed Detection and Response for Endpoints and Workloads

VMware Carbon Black Cloud Managed Detection and Response (MDR) for endpoints and workloads provides critical insight into attacks along with recommendations for policy changes customers can take to remediate the threat. VMware Carbon Black Cloud MDR, supported by a world-class team of security experts, helps enterprises respond more quickly to cyberattacks. Our analysts monitor and analyze the data for our MDR customers in the VMware Carbon Black Cloud using advanced machine learning and algorithmic tool sets.

“As the threat surface expands and cyberattacks become increasingly destructive, our customers require a strong security posture that can be realized at speed,” said Kal De, vice president and general manager of VMware’s Security Business Unit. “VMware’s mission is to enable our customers to have the security required for the threats of today and tomorrow. Our MDR offering provides customers with the threat intelligence and the guidance required to help reduce the overall risk of security incidents.”

The new offering will provide security and IT teams with increased visibility and faster incident response, helping to reduce SOC staffing pressures and freeing up time for the security team to proactively hunt threats to better protect their organizations.

Threat Analyst Support to Stay One Step Ahead of Attackers

VMware analysts monitor MDR customer environments around the clock to protect the organization and provide critical threat intelligence. They can notify customer IT and security teams via email of threats and provide specific policy changes to address the threat via the VMware Carbon Black Cloud. In addition, analysts are available to provide customers with incident remediation guidance and assist with threat containment during an incident.

“We have over a million licensed endpoints on managed detection today and are exposed to different attacks across every vector, whereas an analyst sitting in a single SOC for an enterprise may not come across the same breadth and depth of threats,” said Taree Reardon, manager of MDR at VMware. “We’re able to give customers increased visibility into their environment because we can layer on that threat expertise which allows our analysts to identify and contain threats more quickly. By handling the first level of triage, this helps to reduce staffing pressures.”

As organizations defend against increasingly sophisticated and destructive attacks, VMware Carbon Black Cloud MDR will help bolster threat intelligence, expand incident response support, and provide expert alert triage and containment to reduce the time spent on an investigation. An example of the real-time analysis that supports VMware’s MDR offering is demonstrated in the dissection of the <a href="https://blogs.vmware.com/security/2019/11/wild-blue-yonder-vmware-carbon-black-threatsight-dissects-bluekeep-windows-exploit.html">BlueKeep Windows exploit</a> by VMware security experts. Providing this level of critical insight through VMware’s MDR offering opens up resources for SOC teams to focus on strategic initiatives and proactive threat hunting to better defend against cyberattacks.

Technologies

VMware Attends White House Summit on Open Source Software Security

VMware: A Look Ahead at 2022

Securing the Future: 7 Cybersecurity Predictions for 2022

For This CIO, “Technology Is the Basis of Change”

VMware Responds to Log4j Vulnerability

Podcast: VMware CEO Raghu Raghuram with IDC President Crawford Del Prete

VMware Empowers AWS Customers with the Power of “AND”

IDC MarketScape Positions VMware as a Leader in SD‑WAN Infrastructure

Fighting Back Against Cyberattacks: VMware Answers ‘SOS’ of Understaffed Security Teams

Sorry, I Was On Mute!

Independent Research Firm Names VMware a Leader in Unified Endpoint Management

VMware Named a Leader in Gartner Magic Quadrant for Hyperconverged Infrastructure Software for the Fifth Consecutive Time