Microsoft seizes the start-up company Aorato, which is specializing in the management of identity and access, to prevent advanced attacks.
Microsoft announced on its corporate blog about the acquisition of start-up company Aorato. The latter was created in 2011 by former executives of the technological unit of the Israeli army. The company enjoyed raising $10 million funding from Accel Partners and funds Innovation Endeavors for a total capital of 11 million. No financial information was given on the acquisition, but sources familiar with the matter mentioned in the Wall Street Journal claims, the sum is near about $200 million. This is a confirmation of interest by the Redmond Company for start-ups. The press mentioned advanced discussion last July.
Google recently released open source Nogotofail to uncover vulnerabilities in SSL and TLS in applications and terminals.
Google encourages webmasters to generalize the use of HTTPS, connections using an encryption protocol. If this exchange provides security at an additional level of privacy, it is not infallible. HTTPS connections are particularly exposed to attacks called the middle man (man-in-the-middle).
To reassure users, Google is now introduced a testing tool called as Nogotofail. Software released as an Open source project on GitHub, which means that it is open to outside input. “It works with Android, iOS, Linux, Windows, Chrome OS, OS X and any device to connect to the Internet”, said Google in a blog contribution. Purpose of the tool: verifying that application and devices do not contain known vulnerabilities of SSL / TLS (encryption protocols used with HTTPS connections) or bad configuration.
Ansible, a solution provider for infrastructure management of servers put on front simplicity. Only SSH and Python are thus required to make it work.
You might have not heard about Ansible before so FYI it is a platform for configuration and administration of servers, available under an open source license. This platform allows you to manage inventory and configuration of servers, software deployment and launching tasks.
Other options also available in this sector: Chef relies on automation of infrastructure tasks to configure machines. Puppet labs offer a powerful approach driven by modules; SaltStack leverages its high-speed communication bus.
Cisco improves security by adding NextGen Firewall to identify and avoid advanced threats. This is a further step in the integration of Sourcefire technologies.
Cisco is no stranger to security, but it is changing and especially focusing on reliability. As a proof, the launch of the range of Firewall NextGen ASA 5500X with the implementation of technology FirePower Sourcefire. Cisco acquired this company for $2.7 billion in July 2013, which is specializes in adaptive cyber security.
With NextGen Firewall, Cisco claims it’s focused to launch product against potential cyber threats. The concern of the RSSI (received signal strength indicator) is to find solutions before, during and after the attack. This is very good step because we all see a lot demand on the management for real-time threat and after attack the establishment of processes for regaining control of the network. Previously, companies firewall solutions were focused on security policies and application control.