Platform9, Swimlane, SonicWall 0-Days, & Fortinet – ESW #214

"Platform9 now allows all DevOps teams complete freedom to run multiple versions of managed Kubernetes across staging, production, and development environments. Users can also decide which upgrades and patches to perform and time them at their convenience."

"According to the company, the additional cash injection will be used to accelerate partnerships and alliances, expand research and development, and fuel global expansion. The total amount raised by the company is now $75 million."

"There is still no news about the potential zero-day in the SMA 100 Series, but SonicWall let us know that the guidance to disable Virtual Office and the HTTPS administrative interface no longer applies."

Root9B has a very weird history, e.g. https://krebsonsecurity.com/2017/11/r-i-p-root9b-we-hardly-knew-ya/ "In mid-June 2015, an anonymous researcher who’d apparently done a rather detailed investigation into root9B’s finances said the company was “a worthless reverse-merger created by insiders with [a] long history of penny-stock wipeouts, fraud allegations, and disaster.”"

"FortiXDR is the only solution of its kind to leverage artificial intelligence (AI) for the investigation effort critical to incident response." - Okay, that's a stretch (maybe even a flat out lie). Dear marketing teams, don't do this! "Fortinet says that FortiXDR is AI-powered by a patent-pending Dynamic Control Flow Engine and continually trained by the threat data and research of FortiGuard Labs as well as the frontline expertise of its incident responders. The solution starts by leveraging the diverse security information shared across the Fortinet Security Fabric for correlation and analysis, converting them into high fidelity security incidents."

"Enable secure deployment of micro-segmentation in complex hybrid networks A32 automates identifying and mapping of the attributes, flows and rules that support business-critical applications across hybrid networks with the built-in AutoDiscovery capability. This accelerates organizations’ ability to make changes to their applications across the enterprise’s heterogeneous on-premise and cloud platforms, and to troubleshoot network or change management issues - ensuring continuous security and compliance."

"By acquiring HyTrust, Entrust adds a critical management layer for encryption, cryptographic keys, and cloud security policy to its digital security solutions, serving the data protection and compliance needs of organizations accelerating their digital transformations."

"The acquisition will allow LogRhythm to deliver intelligent, machine-learning based detection and response capabilities that incorporate network detection, user and entity behavior analytics (UEBA), endpoint detection and response data (EDR), and additional MITRE ATT&CK detections to solve current and emerging security and risk problems."

"As part of the acquisition, Level Effect co-founders Greg Ake and Robert Noeth will join the Huntress team to support the initial integration and ongoing development of the Recon software. Like the founding team at Huntress, both Ake and Noeth have strong backgrounds in the U.S. intelligence community, having worked within the National Security Agency, Air Force and other institutions."