#SecureAccess

Citrix goes shopping in Europe and returns with gifts for security-conscious customers

by

December 12, 2024 at 12:09AM Citrix has acquired two European companies, deviceTRUST and Strong Network, enhancing its security and cloud development capabilities. deviceTRUST focuses on secure device context management, while Strong Network offers customizable cloud development environments. Both will integrate into Citrix’s platform to enhance its zero trust tools and developer support. Pricing details remain … Read more

Ivanti Patches 50 Vulnerabilities Across Several Products

by

November 13, 2024 at 08:03AM Ivanti has addressed numerous vulnerabilities by releasing fixes for Endpoint Manager, Avalanche, Connect Secure, Policy Secure, and Secure Access Client, enhancing security across these products. **Meeting Takeaways:** 1. **Release of Fixes:** Ivanti has issued fixes addressing multiple vulnerabilities. 2. **Affected Products:** The vulnerabilities were found in the following products: – … Read more

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

by

October 25, 2024 at 07:27AM AI impersonation fraud poses a significant threat to organizations, outpacing traditional defenses. A secure-by-design identity platform, like Beyond Identity’s RealityCheck, offers robust defenses against such attacks by ensuring strong identity assurance, device compliance, and real-time risk assessments. This platform is essential for combating emerging identity-based threats effectively. **Meeting Takeaways – … Read more

Reframing the ZTNA vs. SASE Debate

by

August 13, 2024 at 10:01AM Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) have both proven their value over the past five years, with ZTNA focusing on granular access control and continuous authentication, while SASE offers a converged networking and security architecture. They are more complementary than competing, with SASE filling the … Read more

Microsoft Melds Identity & SSE With Entra Suite

by

July 11, 2024 at 11:20AM Microsoft introduces new SSE offerings as part of the Entra Suite, providing secure access to cloud and enterprise applications. These include Entra Internet Access for SaaS applications and Entra Private Access for enterprise applications. The suite integrates with network security controls, offering a unified approach to conditional access. Microsoft plans … Read more

Research From Claroty’s Team82 Highlights Remote Access Risks Facing Mission-Critical OT Assets

by

May 24, 2024 at 02:16PM Claroty, a cyber-physical systems (CPS) protection company, has released proprietary data revealing security risks in mission-critical operational technology (OT) assets due to insecure internet connections and known vulnerabilities. To address this, they launched the Claroty xDome Secure Access, which balances secure control and frictionless access for enhanced productivity and reduced … Read more

Norway recommends replacing SSL VPN to prevent breaches

by

May 16, 2024 at 03:08PM The Norwegian NCSC advises replacing SSLVPN/WebVPN with more secure options due to repeated vulnerabilities exploitation in network devices. The transition deadline is 2025, with critical infrastructure entities expected to switch by the end of 2024. The recommended alternative is IPsec with IKEv2, aiming to decrease the attack surface for secure … Read more

Zscaler to Acquire Network Segmentation Tech Startup Airgap Networks

by

April 11, 2024 at 12:42PM Zscaler announced the planned acquisition of Airgap Networks, a startup focusing on network segmentation and secure access technologies. Financial details were not disclosed. Zscaler intends to combine Airgap’s technology with its Zero Trust SD-WAN suite to protect east-west traffic in various environments without the need for additional hardware or disruption. … Read more

3 Strategies to Future-Proof Data Privacy

by

March 28, 2024 at 10:04AM To comply with evolving privacy regulations, regularly assess data storage strategies, secure external network access, and implement data plane security measures. Based on the meeting notes, the key takeaways are: 1. Regularly review data storage strategies to meet changing privacy regulations. 2. Ensure secure access to external networks to comply … Read more

Identity Alone Won’t Save Us: The TSA Paradigm and MGM’s Hack

by

November 7, 2023 at 10:04AM The recent cyberattack on MGM Resorts resulted in widespread outages and the compromise of various systems, such as slot machines and payment systems. The attack highlighted the importance of properly managing access and authentication controls. Simply adding more identity products is not the solution. Instead, organizations should focus on authentication, … Read more