Hyper-Converged Infrastructure, Data Storage
businesswire | August 03, 2023
Ermetic, a leading cloud infrastructure security company, today announced CNAPPgoat, an open source project that allows organizations to safely test their cloud security skills, processes, tools and posture in interactive sandbox environments that are easy to deploy and destroy. CNAPPgoat supports AWS, Azure and GCP platforms for assessing the security capabilities included in Cloud Native Application Protection Platforms (CNAPP).
The CNAPPgoat project will be officially presented at DEF CON Demo Labs in Las Vegas on Friday, August 11 from 12:00pm-1:55pm by Noam Dahan, Research Lead and Igal Gofman, Head of Research for Ermetic. On Wednesday, August 16 at 10am PST/1pm EST, Ermetic will present a webinar on using CNAPPgoat, to register visit thislink.
Unlike projects that illustrate possible attack paths, CNAPPgoat provides a large and expanding library of scenarios that security teams can execute to create a customized cloud environment for simulating unsecured and vulnerable assets and validating their defenses. The ability to easily provision a vulnerable environment with a broad range of risk scenarios provides the following benefits:
Create a sandbox for testing an organization’s security posture by assessing security team capabilities, procedures and protocols
Use vulnerable environments for hands-on workshops to train team members on new skills and techniques
Provision a “shooting range” for pentesters to test their skills at exploiting the scenarios and developing relevant capabilities
Benchmark CNAPP tools against known environments to evaluate their capabilities
“Compared to existing open-source projects that create ‘capture the flag’ scenarios where participants are expected to follow a certain path, CNAPPgoat spans the leading cloud provider platforms and CNAPP capabilities while providing a modular and granular approach for provisioning specific categories of risks and vulnerabilities,” said Igal Gofman, Director of Research for Ermetic.
“This breadth and depth allows pentesters and defenders to precisely isolate the elements they want to explore for training, new skills acquisition, prevention and security posture assessments,” added Noam Dahan, Research Lead.
CNAPPgoat enables security teams, trainers and pentesters to provision and run vulnerable scenarios from the following modules that make up the CNAPP specification defined byGartner:
Cloud Infrastructure Entitlement Management (CIEM) - covers risks associated with identities and entitlements, such as the unintended ability of an identity to escalate its privileges
Cloud Workload Protection Platform (CWPP) - includes the exposure of workloads to vulnerabilities such as running vulnerable/end of life software or OS versions
Cloud Security Posture Management (CSPM) - spans the misconfiguration of cloud infrastructure components, such as publicly exposed storage resources
Infrastructure as Code (IaC) scanning - will be added soon for finding misconfigurations directly in the code
CNAPPgoat is an open community initiative designed to be used by anyone for commercial, technical and educational purposes. See today’sblogfor implementation details. Additional artifacts including deeper technical dives and guides will be released soon. Contributions are encouraged including new scenarios, scenario proposals, issues, suggestions, feature requests or simply sharing feedback. To learn more and access CNAPPgoat visit thislink.
About Ermetic
Ermetic reveals and prioritizes security gaps in AWS, Azure and GCP and enables organizations to remediate them immediately. The Ermetic cloud native application protection platform (CNAPP) uses an identity-first approach to unify and automate cloud infrastructure entitlement management (CIEM), cloud security posture management (CSPM), cloud workload protection and Kubernetes security posture management (KSPM). It unifies full asset discovery, deep risk analysis, runtime threat detection and compliance reporting, combined with pinpoint visualization and step-by-step guidance. The company is one of America’s Best Startup Employers according toForbesand led by proven technology entrepreneurs whose previous companies have been acquired by Microsoft, Palo Alto Networks and others. Ermetic has received funding from Accel, Forgepoint, Glilot Capital Partners, Norwest Venture Partners, Qumra Capital and Target Global.
Read More
Application Storage, Windows Server OS
prnewswire | August 02, 2023
Accelevation Holdings, LLC, a vertically integrated group of manufacturing companies serving the data center, electric vehicle, and robotic markets, has acquired Instor Solutions Ltd, a comprehensive, mission-critical solutions provider, for an undisclosed sum. Through the acquisition, Accelevation will integrate Instor's data center white space installation and project management expertise with its data center containment and caging solutions business, Conatech, to form the Accelevation Data Center Business Unit.
The acquisition has established a new, vertically integrated data center business unit comprising both brands to create a single, customer-facing entity and forming the USA's largest integrated data center services solutions provider. Together, the Accelevation Data Center Business Unit will solve key challenges for hyperscale, colocation, and enterprise customers, including faster product design, manufacturing, and supply chain capabilities, with dedicated white space integration, services, and project management expertise.
By combining both leading brands, Accelevation has created the only organization within the U.S. market capable of providing fully integrated, data center infrastructure product manufacturing, with self-performing, fit-up solutions design, and project delivery. The companies comprehensive services offering will propel hyperscale, colocation, and enterprise data center operators to benefit from industry-leading speed and efficiency – offering enhanced value throughout the entire life cycle and delivering world-class data center environments at accelerated pace and scale.
Through its integrated sales, manufacturing, and operations teams, for example, Conatech's customers now have immediate access to the data center white space design, build, and integration services that Instor has built its world-leading reputation on. In turn, Instor has secured unparalleled access to the vertically integrated manufacturing capabilities used by Accelevation to produce its Conatech data center products.
"By combining Instor's white space design and services expertise with Conatech's manufacturing and product capabilities, the Accelevation Data Center Business Unit is uniquely positioned to serve and support the data center market as it fulfils its growth potential," said Sam Prudhomme, President, Data Center Business Unit, Accelevation Holdings. "Our customers recognize that together, we're better - empowering them to grow at unprecedented speed and scale, and at the pace the market demands. Importantly, our shared values and methodological approach will ensure we continue to treat our customers the way they want to be treated, setting a new standard for integrated data center solutions and services, globally."
Accelevation President and CEO, Michael Rubiera, said, "We are thrilled to welcome Instor to the Accelevation portfolio of innovative companies. Combining Instor's 40+ sales and project management professionals to our Accelevation portfolio creates one of the most comprehensive and all-encompassing solution providers of data center products and installations in the world. We couldn't be more excited about the possibilities and growth this acquisition provides."
About Accelevation, LLC
Accelevation is a vertically integrated group of manufacturing companies serving the data center, electric vehicle and robotic markets. The organization's mission is to build businesses and work cultures that positively impact employees, their families, their community and their customers. At its core, Accelevation understands that it is their responsibility to plot a course for a more mindful way of doing business.
Read More
Application Infrastructure, Windows Server OS
Adtran | August 04, 2023
Adtran today announced that Openreach, the UK’s largest wholesale broadband network, has deployed its FSP 3000 open optical transport technology to enable its new Optical Spectrum Access 100G Single enterprise service. Openreach’s new product offers a dedicated fiber link that empowers more UK businesses to harness point-to-point 100Gbit/s data transport. The solution also brings efficiency benefits that reduce capital and operational expenditure. The latest collaboration builds on more than a decade of successful partnership between Adtran and Openreach.
“Corporate cloud applications and other data-intensive tasks such as data centre backhaul are fueling a growing demand for bandwidth. Adtran’s scalable optical technology enables us to offer a managed, high-speed service that satisfies that demand at a highly competitive price point,” said Simon Williams, head of optical products at Openreach. “With no filters or amplifiers required, our Optical Spectrum Access 100G Single service offers secure and always-on optical services that can transport enormous amounts of data. We’re also making dedicated, uncomplicated and customizable access available in a slimmed-down package that’s even easier to manage.”
Openreach’s Optical Spectrum Access 100G Single offers a choice of point-to-point Ethernet links at 100Gbit/s or 10 separate channels at 10Gbit/s. Built on Adtran’s scalable, open FSP 3000 optical transport technology, the service empowers Openreach to meet the growing demand for data-intensive cloud-based applications. Engineered for operational simplicity, Adtran’s compact and highly efficient FSP 3000 platform offers a dedicated fiber link ensuring low latency, consistent service quality and unparalleled network reliability for Openreach’s customers.
“Our FSP 3000 technology gives Openreach a powerful optical transport solution that efficiently delivers high-bandwidth services for enterprise customers. Using the Optical Spectrum Access 100G Single service, businesses can now smoothly manage substantial data transfers, even during peak operational hours,” commented Stuart Broome, GM of EMEA sales at Adtran. “We have a great track record of partnering with Openreach to advance digital transformation across the UK. It’s a relationship based on trust and a shared dedication to deliver for customers. Together, we’re providing extra capacity and value for more businesses.”
About Adtran
ADTRAN Holdings, Inc. (NASDAQ: ADTN and FSE: QH9) is the parent company of Adtran, Inc., a leading global provider of open, disaggregated networking and communications solutions that enable voice, data, video and internet communications across any network infrastructure. From the cloud edge to the subscriber edge, Adtran empowers communications service providers around the world to manage and scale services that connect people, places and things. Adtran solutions are used by service providers, private enterprises, government organizations and millions of individual users worldwide. ADTRAN Holdings, Inc. is also the largest shareholder of Adtran Networks SE, formerly ADVA Optical Networking SE.
Read More