The release augments the company's Kubernetes management platform with free, user-friendly insight on security postures, along with cost monitoring and observability.

Cloud cost management platform provider Cast AI has released Cloud Security Insights, a free security analysis tool that integrates into an organization's AI-driven cloud optimization platform.

The platform, which is free for all users, aims to help DevOps and DevSecOps teams manage cloud resources, cloud optimization, and Kubernetes security.

It represents the second pillar of Cast AI's autonomous Kubernetes management platform, adding to the suite of tools for automating Kubernetes cost reduction, cloud resource provisioning, and security monitoring across Google Cloud, Amazon Web Services (AWS), and Microsoft Azure.

The vendor-independent platform provides users with fully automated reports containing Kubernetes configuration checks, which help ensure clusters are configured according to best practices for pods and workloads. The user interface provides details on individual checks and resources.

The platform also offers vulnerability scans for an overview of potential issues that might appear due to container images downloaded from public registries, as well as 24/7 visibility into Kubernetes cluster configurations.

In addition, container image vulnerability detection and security recommendations can be arranged and presented in order of priority. Other features help users achieve security and regulatory compliance and provide a common platform for security and development team integration and collaboration.

"In addition to comprehensive cost monitoring, you're now provided with individually tailored security recommendations to mitigate cloud native workload security issues," explains Cast AI co-founder and CPO Laurent Gil. "You just need to create an account and connect your AWS, Google, or Azure Kubernetes apps."

Gil adds that Cloud Security Insights can be used for multicloud or single-cloud environments, providing the same security alerts and insights regardless of which cloud providers the organization uses viaa common and simple control plane.

Native tools can handle these tasks, of course. Microsoft offers Microsoft Defender for Containers, for example, which covers more but costs $7 per CPU per virtual machine. It also requires customers to install an agent on their resources.

Google Cloud runs a vulnerability assessment service for images at a price of 26 cents per scanned container image, while security for Kubernetes includes this service and vulnerability assessment in the pre-general release.

"However, we already see that we are able to detect many more best practices violations," Gil asserts. "The value is in the platform — Security Insights and cloud optimization makes your applications secure and autonomous at the same time, with an instant position ROI."

In short, Gil says users get a "powerful and complete" insight on Kubernetes security monitoring, plus an instant ROI where the cost of Cast AI is always a fraction of the savings benefits.

"Applications now run securely and autonomously, with instant rightsizing and one of the fastest autoscalers on the planet," he adds.

**Kubernetes Environments Pose Multiple Challenge**

Mike Parkin, senior technical engineer at Vulcan Cyber, a provider of SaaS for enterprise cyber risk remediation, points out that Kubernetes (aka k8s) environments have several specific challenges.

"These include compromised images, visibility into the environment, establishing and maintaining secure configurations, and a range of other problems related to securing containerized images in the cloud," he explains.

Anything that can help a security operations team consolidate their tools and give them more context and clarity helps, he adds.

"That's the case whether it's in the form of a single focused tool that covers multiple aspects of a deployment or a risk management tool that brings other tools together," Parkin says.

As a deployment orchestrator, Kubernetes will dominate an organization's alignment challenges, whether hybrid/multicloud or data center-based, says John Steven, CTO at automated threat modeling provider ThreatModeler.  

"Indeed, the point of Kubernetes is to abstract away the underlying infrastructure management, replacing it with its own scheme," he says. He explains that managed Kubernetes solutions simplify scale out because the cloud service provider's (CSP) control of underlying infrastructure makes it appear infinite.

Managed solutions also make incorporating key CSP-specific services, such as Directory Services, Persistence Solutions, or Learning APIs, into a Kubernetes application easier and more secure, he says.

"However, organizations can also feel like managed k8s is shackling — tying them to a particular provider through configuration, service, and administration idiosyncrasies," Steven says.

He notes that organizations with exceptionally high uptime requirements may struggle to provide multicloud resilience against failure of a single CSP availability zone or region.

"In practice, managed k8s trades the complexity of multicloud k8s for the idiosyncrasy and lock-in of managing a single cloud," Steven says. "Given the above, it's strategic for security solutions to target k8s. Providing visibility into clusters meets a crucial need."

Steven adds that more than one startup has suffered multiday outage because k8s misconfiguration knocked a critical business function offline or because storage, memory, or compute allotment claims defined too low a ceiling for peak usage during heavy use.

"If businesses begin to view k8s as an unreliable platform — even if \[it's\] because they don't have the expertise to wield it — they will move to simpler solutions," he says.

Cast AI Introduces Cloud Security Insights for Kubernetes

It's called "spell-jacking": Both browsers have spell-check features that send data to Microsoft and Google when users fill out forms for websites or Web services.

Spell-checking features present in both the Google Chrome and Microsoft Edge browsers are leaking sensitive user information — including username, email, and passwords — to Google and Microsoft, respectively, when people fill in forms on popular websites and cloud-based enterprise apps.  

The issue — dubbed "spell-jacking" by researchers at client-side security firm Otto JavaScript Security (Otto-js) — can expose personally identifiable information (PII) from some of the most widely used enterprise applications, including Alibaba, Amazon Web Services, Google Cloud, LastPass, and Office 365, according to a blog post published Sept. 16.

Otto-js co-founder and CTO Josh Summit discovered the leakage — which occurs specifically when Chrome's Enhanced Spellcheck and Edge's MS Editor are enabled on browsers —  
while conducting research on how browsers leak data in general.

Summit found that these spell-check features send data to Google and Microsoft that's entered into form fields — such as username, email, date of birth, and Social Security number — when someone fills out these forms on websites or Web services while using the browsers, the researchers said.

Chrome and Edge also will leak user passwords if the "show password" feature is clicked when someone enters a password into a site or service, sending that data to Google and Microsoft's third-party servers, they said.

**Where the Privacy Risk Lies**

Otto-js researchers, who posted a video on YouTube demonstrating how the leakage occurs, tested more than 50 websites that people use daily or weekly that have access to PII. They broke 30 of those into a control group spanning six categories — online banking, cloud office tools, healthcare, government, social media, and e-commerce — and selected websites for each category based on the top ranking in each industry.

Of the 30 control group websites tested, 96.7% sent data with PII back to Google and Microsoft, while 73% sent passwords when "show password" was clicked. Moreover, the ones that did not send passwords had not actually mitigated the issue; they just lacked the "show password" feature, the researchers said.

Of the websites that the researchers investigated, Google is the only one that already had fixed the issue for email and some services. Otto-js found that the company's Web service Google Cloud Secret Manager remains vulnerable, however.

Meanwhile, Auth0, a popular single sign-on service, was not in the control group that the researchers had investigated but was the only website other than Google that had correctly mitigated the issue, they said.

Google's Enhanced spell-check feature, which requires an opt-in from the user, handles the data in an anonymized way, according to a Google spokesperson.

"The text typed by the user may be sensitive personal information and Google does not attach it to any user identity and only processes it on the server temporarily," he tells Dark Reading. "To further ensure user privacy, we will be working to exclude passwords proactively from spell check. We appreciate the collaboration with the security community, and we are always looking for ways to better protect user privacy and sensitive information."

Users of a number of enterprise cloud-based applications also are at risk when entering forms while using the apps on Chrome and Edge if the spell-check features are enabled. Of those aforementioned services, security teams from Amazon Web Services (AWS) and LastPass responded to Otto-js and already have remedied the issue, the researchers said.

**Where Does the Data Go?**

One big question that arises is what happens to the data once it's received by Google and Microsoft, which the researchers said they can't clearly answer.

At this point, no one knows if the data is being stored on the receiving end or, if this is the case, who is managing its security, the researchers noted. It's also not clear if the data is managed with the same level of security as known sensitive data such as passwords, or if it's being used by product teams as metadata for refining models, they said.

Either way, researchers observed that the issue once again raises the concern about technology companies such as Google and Microsoft having so much access to sensitive information about customers, employees, and companies, particularly when it comes to passwords.

"Passwords are meant to be a secret you share with the party you intended, and no one else," they wrote in the post. "A shared secret should be hashed and irreversible, but this feature violates a fundamental security principle of 'need-to-know' and could be considered a violation of privacy."

**Easily Overlooked Issue**

Moreover, the data leakage can be widespread for users or enterprises for a number of reasons, the researchers noted. One is that because the browser features that expose the data are actually helpful to users, they are likely to be turned on and exposing data without a user's knowledge.

"What's concerning is how easy these features are to enable and that most users will enable these features without really realizing what is happening in the background," Summit says.

The password exposure also occurs as an "unintended interaction" between browser spell-check and a website feature, making it something that might easily fly under the radar, notes Walter Hoehn, vice president of engineering at Otto-js

"The enhanced spell-checking features in Chrome and Edge offer a significant upgrade over the default dictionary-based methods," he says. "Likewise, websites that provide the option of displaying passwords in cleartext are more usable, especially for those with disabilities."

**Path of Mitigation**

Even if a website or service has not fixed the issue from its side, enterprises can mitigate the risk of sharing their customers' PII entered into forms by adding "spellcheck=false" to all input fields, although this could create problems for users, researchers acknowledged.

Alternatively, enterprises can just add the command only to form fields with sensitive data to remove the risk, or they could take away the "show password" feature in their forms, they said. This won't prevent spell-jacking, but it will prevent passwords from being sent, the researchers said.

Companies also can mitigate internal exposure of company-owned accounts by implementing endpoint security precautions that disable enhanced spellcheck features and limiting employees from installing unapproved browser extensions, according to Otto-JS.

Consumers can mitigate their own risk of having their data sent to Microsoft and Google without their knowledge by going into their browsers and disabling the respective spell-check culprits, the researchers added.

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

Despite an 86% surge in budget resources to defend against ransomware, 90% of orgs were impacted by attacks last year, a survey reveals.

An annual survey of CISOs from Canada, the UK, and US reveals that security teams are starting to lose hope that they can defend against the next ransomware attack.

The survey was conducted by SpyCloud, and it showed that although budgets to protect against cyberattacks have swelled by 86%, a full 90% of organizations surveyed said they had been impacted by a ransomware over the past year.

"Additionally, more organizations have implemented 'Plan B' measures this year, from opening cryptocurrency accounts to purchasing ransomware insurance riders," the SpyCloud ransomware report said. "These findings suggest that organizations realize threats are slipping through their defenses and a ransomware attack is inevitable."

The survey did show some bright spots on the cybersecurity front — nearly three-quarters of those organizations surveyed are using multifactor authentication (MFA), with an increase from 44% to 73% year-over-year. The report added that respondents said they are focused on stopping credential-stealing malware, particularly on unmanaged network devices.

Keep up with the latest cybersecurity threats, newly-discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Subscribe

Survey Shows CISOs Losing Confidence in Ability to Stop Ransomware Attacks

The evolving tactics increase the threat of ransomware operators, but there are steps organizations can take to protect themselves.

Cybercriminals are becoming more strategic and professional about ransomware. They increasingly are emulating how legitimate businesses operate, including leveraging a growing cybercrime-as-a-service supply chain.

This article describes four key ransomware trends and provides advice on how to avoid falling victim to these new attacks. 

**1\. IABs on the Rise**

Cybercrime is becoming more profitable, as evidenced by the growth of initial access brokers (IABs) that specialize in breaching companies, stealing credentials, and selling that access to other attackers. IABs are the first link in the cybercrime-as-a-service kill chain, a shadow economy of off-the-shelf services that any would-be criminal can purchase to construct sophisticated tool chains to execute almost any digital offense imaginable.

IABs' top customers are ransomware operators, who are willing to pay for access to ready-made victims while they focus their own efforts on extortion and improving their malware.

In 2021, there were more than 1,300 IAB listings on major cybercrime forums monitored by the KELA Cyber Intelligence Center, with nearly half coming from 10 IABs. In most cases, the price for access was between $1,000 and $10,000, with an average sale price of $4,600. Of all of the offerings available, VPN credentials and domain administrator access were among the most valuable.

**2\. Fileless Attacks Fly Under the Radar**

Cybercriminals are taking a cue from advanced persistent threat (APT) and nation-state attackers by employing living-off-the-land (LotL) and fileless techniques to improve their chances of evading detection to successfully deploy ransomware.

These attacks leverage legitimate, publicly available software tools often found in a target's environment. For example, 91% of DarkSide ransomware attacks involved legitimate tools, with only 9% using malware, according to a report by Picus Security. Other attacks have been discovered that were 100% fileless.

This way, threat actors evade detection by avoiding "known bad" indicators, such as process names or file hashes. Application-allow lists, which permit the usage of trusted applications, also fail to restrict malicious users, especially for ubiquitous apps. 

**3\. Ransomware Groups Targeting Low-Profile Targets**

The high-profile Colonial Pipeline ransomware attack in May 2021 affected critical infrastructure so severely that it triggered an international and top government response.

Such headline-grabbing attacks prompt scrutiny and concerted efforts by law enforcement and defense agencies to act against ransomware operators, leading to the disruption of criminal operations, as well as arrests and prosecutions. Most criminals would rather keep their activities under the radar. Given the number of potential targets, operators can afford to be opportunistic while minimizing the risk to their own operations. Ransomware actors have become far more selective in their targeting of victims, enabled by the detailed and granular firmographics supplied by IABs.

**4\. Insiders Are Tempted With a Piece of the Pie**

Ransomware operators also have discovered that they can enlist rogue employees to help them gain access. The conversion rate may be low, but the payoff can be worth the effort.

A survey by Hitachi ID taken between Dec. 7, 2021, and Jan. 4, 2022, found that 65% of respondents said their employees had been approached by threat actors to help provide initial access. Insiders who take the bait have different reasons for being willing to betray their companies, although dissatisfaction with their employer is the most common motivator.

Whatever the reason, the offers made by ransomware groups can be tempting. In the Hitachi ID survey, 57% of the employees contacted were offered less than $500,000, 28% were offered between $500,000 and $1 million, and 11% were offered more than $1 million.

**Practical Steps to Improving Protection**

The evolving tactics discussed here increase the threat of ransomware operators, but there are steps organizations can take to protect themselves:

*   **Follow zero-trust best practices,** such as multifactor authentication (MFA) and least-privilege access, to limit the impact of compromised credentials and increase the chance of detecting anomalous activity.
*   **Focus on mitigating insider threats,** a practice that can help limit malicious actions not only by employees but also by external actors (who, after all, appear to be insiders once they've gained access).
*   **Conduct regular threat hunting,** which can help detect fileless attacks and threat actors working to evade your defenses early.  
    

Attackers are always looking for new ways to infiltrate organizations' systems, and the new ploys we're seeing certainly add to the advantages cybercriminals have over organizations that are unprepared for attacks. However, organizations are far from helpless. By taking the practical and proven steps outlined in this article, organizations can make life very tough for IABs and ransomware groups, despite their new array of tactics.

How to Dodge New Ransomware Tactics

What's it going to take to prod organizations to implement a post-quantum security plan? Legislative pressure.

What's it going to take to prod organizations to implement a post-quantum security plan? Legislative pressure.

Source: Deloitte

Security professionals might need a little help motivating themselves and their organizations to implement measures to counteract the threats inherent to quantum computing. According to a recent survey from Deloitte, enterprises say without external pressure, they won't be pushing forward their plans to implement precautions.

When asked what will drive their organizations to step up its quantum security risk management, over one-fourth (27.7%) said regulatory pressure, followed by one-fifth (20.7%) who cited pressure from the board of directors or the C-suite. The rest of the answers cascaded down accordingly: responding to competitors' pressure (15.1%), embarrassing internal incidents (11.7%), and customer or investor concerns (6.8%).

Because changing the way an organization handles data is a major decision, it makes sense that security staffs want the higher-ups to take responsibility for any change in direction. Perhaps to accommodate this desire, US President Joe Biden issued a pair of presidential directives in May 2022 to establish a national policy on what he called quantum information science, or QIS. Combined with NIST's recent approval of four post-quantum cryptography algorithms, these could provide the added push organizations need in order to get started combating a threat that is five to 10 years away.

The Deloitte survey asked about attitudes among organizations that were already considering the benefits of quantum computing. Responses showed that just over one-quarter of respondents had conducted a quantum risk assessment, with another quarter planning one in the next five years. About half of the respondents considered their organizations at risk for harvest-now/decrypt later (HNDL) attacks, in which encrypted files are stolen and stored until the technology to crack the encryption comes to market.

The scale of the potential threat to current computing practices is reminiscent of the Y2K bug, a database shortcoming that stored years as two-digit fields instead of four digits, the implications of which created both a popular panic and concentrated effort across industries to head it off. The preemptive policies from the US, as well as activities in the European Union, may bear fruit in pressuring corporations and governmental entities to institute post-quantum cryptography (PQC) and other protective measures. Boards of directors and company executives might find reassurance as government efforts progress and less-disruptive ways to begin the switchover emerge.

Keep up with the latest cybersecurity threats, newly-discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Subscribe

No Motivation for Quantum Without Regulatory Push

**Woburn, MA, September 20, 2022 —** With the latest version of Kaspersky EDR Optimum, users can access an advanced automated detection mechanism and tailored incident response recommendations. The updated solution also ensures protection from damaged to crucial OS files, and provides information on file reputation from Kaspersky’s Threat Intelligence portal.

To help IT security workers deal with increased attack surfaces and complexities, Kaspersky presents the new edition of Endpoint Detection and Response Optimum. The updated version gives users the opportunity to gain highly sought-after skills in incident investigation and response, and helps them tackle their responsibilities under conditions of limited time and attention.

Kaspersky Endpoint Detection and Response Optimum provides information to get up to speed quickly. In addition to the previously available YouTube video instructions, the product now offers a Guided Response section in the alert card where IT security specialists can see the recommended steps for investigation and response.

In addition, Kaspersky Endpoint Detection and Response Optimum contains integrated "quality of life" improvements such as Threat Intelligence file reputation in the alert card. When a response is performed, a special check will help avoid making a mistake and blocking a crucial OS file, which can lead to ruining the whole infrastructure.

File reputation from Kaspersky Threat Intelligence Portal is available directly in the console allowing users to understand what files are harmless, malicious or suspicious, and also gives users insight into known or new threats in a faster and easier way. It also shows information such as which regions or countries the file was observed most frequently, and provides a link to the threat intelligence portal with additional information about the file.

“When our team was working on the Kaspersky Endpoint Detection and Response Optimum enhancements, one of the goals was to make all the solutions’ capabilities accessible for all types of our users, even for those who are making their first steps in investigation and response,” said Pavel Petrov, senior product manager at Kaspersky. “We believe the new features will allow our customers not only to ensure the protection of their company against multiple types of threats, but also increase the EDR expertise of the internal IT security team.”

During the last year, Kaspersky Endpoint Detection and Response was repeatedly recognized for its outstanding protective capacity. The product has shown superb results according to various independent evaluations including SE-labs, IDC, Radicati and others.

More information about Kaspersky Endpoint Detection and Response Optimum is available via this link.

New Kaspersky EDR Optimum Further Simplifies Protection Against Evasive Threats

Focused on bringing ease of use to IT security automation, ThreatQ TDR Orchestrator addresses industry needs for simpler implementation and more efficient operations.

**London, UK, September 20, 2022** — ThreatQuotient™, a leading security operations platform innovator, today announced a new version of ThreatQ TDR Orchestrator, the industry’s first solution for a simplified, data-driven approach to security operations. Built on the ThreatQ Platform, the continued innovation of ThreatQ TDR Orchestrator includes enhanced automation, analysis, and reporting capabilities that accelerate threat detection and response across disparate systems.

The latest research from ThreatQuotient, planned for full release later in 2022, shows signs that adoption of security automation is advancing, as budgets in this area are increasing for 98% of companies. The data also indicates that organisations have become more confident in automation itself, with over 88% of companies having some level of trust in automation outcomes compared to only 59% in the year prior. However, 98% say they have experienced problems during implementation. To support organisations with security automation solutions that are easier to use, cheaper than traditional automation tools and learn over time, ThreatQuotient has prioritised the development of ThreatQ TDR Orchestrator to enable more efficient and effective operations that can be directly measured by time savings and FTEs gained, improved risk management, and greater confidence when detecting and responding to an event.

The latest version of ThreatQ TDR Orchestrator offers the following benefits:

*   **Prioritise automation on the most important events/alerts** with context from threat intelligence and other internal and external sources. A feedback loop captures results to improve the automation flow over time.

*   **Playbooks are easier to maintain** as a result of Smart Collections which are used to abstract automation logic. Atomic Automation allows for immediate action when a complex response is not needed; and Automation Packs for vulnerability prioritisation, indicator enrichment, XDR, and more use cases coming soon, help users get started with common use cases quickly.

*   **Less training is required up front** as a result of a no-code user interface which also delivers a lower total cost of ownership over time, and enables users to rely less on their organisation’s technical resources which can be a bottleneck (e.g. waiting for internal developers to work through their backlog and write the playbook automations requested).

“Leveraging automation to do the heavy lifting and cut through the noise is vital to helping cybersecurity teams thrive under pressure. ThreatQuotient continues to innovate in a way that drives meaningful operational benefits to customers,” says Leon Ward, Vice President of Product Management at ThreatQuotient. “Many process-based SOAR platforms are designed such that only security engineers and analysts have the skills necessary to use them directly; making these traditional platforms hard to implement and maintain which drives higher costs over time. This ThreatQ TDR Orchestrator release reinforces the need for no-code solutions that empower operators to adapt to dynamic threat landscapes faster, and focus their energy on security operations workflows that provide critical business context.”

In an environment where security operations employee turnover is high, ThreatQuotient’s platform is well suited for increasing the number of people who know how to develop and maintain automation playbooks. ThreatQ’s data-driven approach means that anyone with business context can understand and maintain workflows, making teams more nimble and resilient. Additionally, Atomic Automation works at the "atomic" or lowest level, allowing an analyst to automate a single action or string of a few simple actions without needing a complex playbook. This enables analysts to pull data or push actions without actually needing to pivot from UI to UI for each of the products involved.

To learn more about ThreatQ TDR Orchestrator, register for ThreatQuotient’s upcoming webinar, ThreatQ Cyber Forum on ROI, taking place live on Wednesday 21st September at 10:00 am GMT. For a first-hand look at how ThreatQ, ThreatQ TDR Orchestrator, and ThreatQ Investigations can support your organisation’s security goals, register for the ThreatQ Online Experience, a unique interactive tour.

**About ThreatQuotient**

ThreatQuotient improves security operations by fusing together disparate data sources, tools and teams to accelerate threat detection and response. ThreatQuotient’s data-driven security operations platform helps teams prioritise, automate and collaborate on security incidents; enables more focused decision making; and maximises limited resources by integrating existing processes and technologies into a unified workspace. The result is reduced noise, clear priority threats, and the ability to automate processes with high fidelity data. ThreatQuotient’s industry leading data management, orchestration and automation capabilities support multiple use cases, including incident response, threat hunting, spear phishing, alert triage and vulnerability prioritisation, and can also serve as a threat intelligence platform. ThreatQuotient is headquartered in Northern Virginia with international operations based out of Europe, MENA and APAC. For more information, visit www.threatquotient.com.

ThreatQuotient Enhances Data-Driven Automation Capabilities With New ThreatQ TDR Orchestrator Features

Overall SASE Spend on Pace to Top $6 Billion in 2022.

REDWOOD CITY, Calif., Sept. 20, 2022 /PRNewswire/ — According to a recently published report from Dell'Oro Group, the trusted source for market information about the telecommunications, networks, and data center industries, the strong enterprise appetite for network and security transformation drove robust growth in SASE related SD-WAN networking and security service edge (SSE) security technologies.

"Even in an environment of macro-economic angst, enterprises continued to strategically invest in SASE technologies to secure and improve connectivity for cloud-based apps and hybrid work," said Mauricio Sanchez, Research Director, Network Security, and SASE & SD-WAN at Dell'Oro Group. "Both SASE's components, SSE and SD-WAN, saw more than 30 percent growth, showing enterprises value SASE's network and security transformation benefits."

Additional highlights from the 2Q 2022 SASE & SD-WAN Quarterly Report:

*   The SASE market has over 35 vendors, with the top 11 representing 80 percent of the market by revenue.
*   The top 4 overall SASE vendors, Broadcom/Symantec, Cisco, Palo Alto Networks, and Zscaler (in alphabetical order), represented 50 percent of the market by revenue.
*   The top 3 SASE security (also known as SSE) vendors, Broadcom/Symantec, Cisco, and Zscaler (in alphabetical order), represented 60 percent of the market by revenue.
*   The top 3 SASE networking (also known as SD-WAN) vendors, Fortinet, Cisco, and VMware (in alphabetical order) represented 50 percent of the market by revenue.
*   SSE use cases with the most vigorous growth were zero trust network access (ZTNA) and firewall-as-a-service.
*   SD-WAN hardware demand continued to outstrip supply.
*   Unified SASE grew twice as fast as disaggregated SASE.

**About the Report**

The Dell'Oro Group SASE & SD-WAN report includes manufacturers' revenue covering the SASE and Access Router markets. In addition, the report analyzes the SASE market from two perspectives, technology (SD-WAN networking and SSE security) and implementation (unified and disaggregated). The report also provides unit information for the Access Router market. To purchase this report, please contact us at \[email protected\].

**About Dell'Oro Group  
**Dell'Oro Group is a market research firm that specializes in strategic competitive analysis in the telecommunications, enterprise network, data center infrastructure, and network security markets. Our firm provides in-depth quantitative data and qualitative analysis to facilitate critical, fact-based business decisions. For more information, contact Dell'Oro Group at +1.650.622.9400 or visit www.delloro.com.

Keep up with the latest cybersecurity threats, newly-discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

Subscribe

SASE Bucks Economic Uncertainty With Over 30% Growth in 2Q 2022, According to Dell'Oro Group

The balance of deploying secure applications vs. time to market continues to be the biggest risk to organizations.

AUSTIN, Texas, Sept. 20, 2022 /PRNewswire/ — Invicti Security™, an application security leader for over 15 years, today released a new white paper, "Automated Application Security Testing for Faster Development," from independent industry analyst firm Enterprise Strategy Group (ESG). The report covers how Invicti customers are cost-effectively incorporating security into their development processes to secure their applications.

Organizations have been challenged in adapting their application security strategies and solutions as they undergo digital transformation for faster development cycles. As organizations migrate workloads to the cloud, they speed up development but also increase the risk of security vulnerabilities as application development and security teams clash on priorities. In fact, an earlier ESG study found that 48% of developers push vulnerable code in order to meet deadlines.

Traditional application security solutions haven't worked well to scale with modern development because they are costly to deploy and manage, they raise too many alerts and false positives, and they don't work in modern development workflows.

_Download the report to **view the full findings and insights.**_

**Join Invicti Chief Product Officer Sonali Shah and on October 13 for a live webinar to discuss the report findings and insights. Register here.**

The report describes how:

*   With the move to the cloud, organizations need a seamless solution that gives them protection and coverage for all of their applications, not just certain business-critical applications. Otherwise, simple coding mistakes can leave them vulnerable to attacks that could compromise company or customer data.
*   A leading television service network serving 26 million viewers has deployed Invicti to help them deliver secure applications on time, enabling them to innovate while protecting information collected online, particularly the personally identifiable information (PII) of viewers and staff, as well as its own company data and intellectual property.
*   A global travel and vacations company uses Invicti to cost-effectively automate security testing for applications across its portfolio of companies, enabling developers to fix security issues within their workflows.
*   Invicti customers also reported time and cost savings with fewer security incidents and teams working more efficiently with security integrated with developer workflows.

"With the increasing speed of development, companies need fast, seamless security solutions that integrate extremely well with developer workflows and tools, so they can bridge the gap between developer and security team priorities and needs," said Sonali Shah, Chief Product Officer at Invicti. "Dynamic application security testing (DAST) is the best-positioned tool to reduce the risk of pushing out vulnerable web applications without burdening developer teams or slowing them down."

"The development lifecycle is an intricate process that requires many pieces and technologies to be successful. Adding security as an afterthought to this process is proven to create points of exposure for organizations," said Melinda Marks, Senior Analyst at ESG. "With Invicti's approach to application security, security experts can help developers infuse secure practices into their development processes so that security enables innovation instead of slowing things down or blocking it."

**About Invicti Security**

Invicti Security – which acquired and combined respective DAST leaders Acunetix and Netsparker – is transforming the way web applications are secured. An AppSec leader for more than 15 years, Invicti enables organizations in every industry to continuously scan and secure all of their web applications and APIs at the speed of innovation. Invicti provides a comprehensive view of an organization's entire web application portfolio, and powerful automation and integrations enable customers to achieve broad coverage of thousands of applications. Invicti is headquartered in Austin, Texas, and serves more than 3,600 organizations of all sizes in more than 70 countries. For more information, visit our website or follow us on LinkedIn.

Invicti Security and ESG Report on How Companies are Shifting for Higher Quality, Secure Application Code

Assessment tool instantly generates a detailed report breaking down a company’s current network security maturity and recommended next steps.

**HALIFAX, NOVA SCOTIA — September 20, 2022 —** Byos (www.byos.io), the edge microsegmentation company dedicated to helping organizations protect themselves from the risk of ubiquitous remote, guest, and internet of things (IoT) network connectivity, announced today the release of the Byos Network Security Maturity Assessment: a free tool that details actions and technologies to improve an organization's security posture. Developed by a team of network security industry veterans and consultants, the tool scores a company's current network security maturity via a 15-minute survey and provides a tailored set of recommendations that can be used to develop priorities, action plans, long-term budgets, and more. The Assessment tool can be found at: https://www.byos.io/network-security-maturity-assessment-welcome.

“We saw a real need for a way to get a baseline set of recommendations without having to bring in outside consultants,” said Matias Katz, founder and chief executive officer at Byos. “That process can be long, expensive, and difficult to justify. We wanted our tool to give companies access to actionable advice without all the costs and distractions of the traditional way of doing it. Because that meant that it almost never got done.”

The Byos Network Security Maturity Assessment uses a 29-question survey covering general network security, managing access, lateral movement, and risk/threat assessment. Respondents rate their agreement with each question on a five-point scale, and the tool uses this data to calculate their network security maturity level across each category. The Byos Network Security Maturity Assessment then leverages its extensive recommendation database — built on NIST and CIS recommendations and insight from the network security veterans who developed the tool — to generate a report tailored to the company's strengths and weaknesses and suggest actionable next steps.

“Byos was committed to building a high-quality tool from the very start,” said Caston Thomas, lead consultant on the Assessment and chief executive officer at InterWorks, LLC. “I am amazed a vendor could be so confident in its technology that it would release a free tool without any bias toward its products. We developed the assessment to help any size organization gain perspective to improve their network security without having to hire expensive consultants.”

The launch of the Byos Network Security Maturity Assessment continues this legacy, using technology to allow companies to rapidly evaluate the strength of their cybersecurity strategy.

To learn more about Byos Network Security Maturity Assessment — or to start using the tool today — visit https://www.byos.io/network-security-maturity-assessment-welcome.

**About Byos**

IoT, mobile devices, “the cloud,” working-from-home, and video streaming have all radically changed how the internet works. That growth and complexity is accelerating. Yet there is little difference in how internet security operates from the time when it was originally built almost 50 years ago.

Byos is stepping up the challenge to create a new way of securing “the net,” and in doing so, is proving that network security can be simpler and, at the same time, fundamentally more secure. Simply stated, Byos makes all devices, and the network itself, invisible. Byos communicates ON the network without being connected TO the network by isolating each device on its own network of one. Even if a device is compromised by some other means, like malware from an email, Byos limits the spread.

Byos is backed by Silicon Valley investors and advisors and based in Nova Scotia. We serve customers across all industries and governmental institutions. For more information, visit www.byos.io.

Source

DARKReading