OT Network Defenders Experience SynSaber’s ICS Visibility & Detection Software at RSAC

CHANDLER, Ariz.–(BUSINESS WIRE)–SynSaber, an industrial asset and network monitoring startup, will be demoing its OT visibility & detection software during the RSA Conference at Booth ESE17 in the Early Stage Expo area. While SynSaber’s 1.0 product offering launched just three months ago, it has already garnered significant traction and early recognition, joining the ranks of four industry veterans as an SC Awards finalist in the Best SCADA Security Solution category.

Protecting critical infrastructure and empowering industrial operators and asset owners are core to the company’s product & mission, and SynSaber founders are excited to demonstrate the key features of their 1.0 software release during RSAC.

• Small form factor “Saber” sensors deploy in any operating environment and within an organization’s existing infrastructure, including DIN-rail and edge devices, compute modules, or virtualized environments.
• Vendor-agnostic Sabers send data to any collection point, such as your SIEM, SOAR, MSSP, or wherever the data is needed most.
• The single codebase and flexible pipeline allow dynamic reconfiguration and scaling from large deployments to agent-like instances. The SynSaber pipeline offers scalable analytics, flexible deployments, and direct packet capture processing.

In addition to demonstrations at Booth ESE17, SynSaber founders Jori VanAntwerp and Ron Fabela are also available for private 1:1 meetings on an appointment basis. The founders would be delighted to speak with prospects, potential partners, and members of the media regarding SynSaber technology, critical infrastructure security trends, increased legislation and regulation, and any other topic of interest.

Here are some of the activities SynSaber will be participating in during the RSA Conference:

• Monday, June 6, 8:00 PM: Security Leaders Concert featuring Neon Trees — More information and registration link on SynSaber’s RSAC page
• Tuesday, June 7, 4:45 PM: CyBeer Ops Networking Reception — Opening reception for the innovative Early Stage Expo area; enjoy local California beverages and mingle with forward-thinking peers.
• Wednesday, June 8, 1:30 PM: Ron Fabela presents “Top 5 Myths about ICS Cybersecurity, Busted: What every CISO should know” in the Early Stage Expo area
• Visit Booth ESE17 during Early Stage Expo hours Tuesday – Thursday, or make an appointment to meet with SynSaber founders in our relaxed, private meeting space at Fogo de Chao, just steps away from Moscone South.

Learn more about these events and schedule an appointment to meet with SynSaber founders at https://synsaber.com/news-and-events/rsa-2022/. Not yet registered? The SynSaber RSAC page features a discount code and unique link that provides $150 off full conference registration.

If you’re not attending RSAC but would like to learn more about SynSaber or speak with our founders, we’d love to hear from you at info@synsaber.com.

About SynSaber

SynSaber is the simple, flexible, and scalable industrial asset and network monitoring solution that provides continuous insight into the status, vulnerabilities, and threats across every point in the industrial ecosystem, empowering operators to observe, detect and defend OT/IT systems and protect critical infrastructure. SynSaber is privately held with funding from SYN Ventures, Rally Ventures, and Cyber Mentor Fund. Learn more at SynSaber.com or contact us directly at info@synsaber.com.

The post OT Network Defenders Experience SynSaber’s ICS Visibility & Detection Software at RSAC appeared first on Cybersecurity Insiders.

May 27, 2022 at 09:09AM

Read More

SCYTHE Names Webster as Director of Federal Research & Development

ARLINGTON, Va.–(BUSINESS WIRE)–SCYTHE, a leader in adversarial emulation and breach and attack simulation, today announced that James “Jim” Webster has been appointed as Director of Federal Research and Development efforts. Webster will pursue and recommend ways SCYTHE can secure federal funding to advance the company’s R&D efforts.

“Jim has more than 30 years as a senior information assurance professional developing effective security programs that operate in concert with, and not against, organizational goals,” said Bryson Bort, CEO and founder, SCYTHE. “During the past 10 years, Jim served as the CISO of a large defense contractor building an information assurance program from the ground up. He will be instrumental in gaining consensus with business leaders to implement controls/services that effectively manage risk and protect critical information assets.”

Prior to joining SCYTHE, Webster worked closely with the National Defense Information Sharing and Analysis Center (ND-ISAC) to share threat information and work to improve the security posture of the entire Defense Industrial Base (DIB). He has also served as the company representative on the DoD DIB Cyber Security Task Force to help improve DoD and industry cooperation.

About SCYTHE

SCYTHE provides an advanced adversary emulation platform for the enterprise and cybersecurity consulting market. The SCYTHE platform enables Red, Blue, and Purple teams to build and emulate real-world adversarial campaigns in a matter of minutes. Customers are in turn enabled to validate the risk posture and exposure of their business and employees and the performance of enterprise security teams and existing security solutions. Based in Arlington, VA, the company is privately held and is funded by Gula Tech Adventures, Paladin Capital, Evolution Equity, and private industry investors. For more information email info@scythe.io, visit https://scythe.io, or follow on Twitter @scythe_io.

The post SCYTHE Names Webster as Director of Federal Research & Development appeared first on Cybersecurity Insiders.

May 27, 2022 at 09:09AM

Read More

Security Compass Releases Report: 2022 Application Security in the Mid-Market

TORONTO–(BUSINESS WIRE)–Security Compass, a leading cybersecurity solution provider, today published the results of a new research report, “2022 Application Security in the Mid-Market”. The study was designed to provide a comprehensive look at the current state of application security and security maturity in the mid-market, including the challenges and opportunities growing companies face when trying to scale their secure development efforts. The report is available for download here.

Mid-market organizations face a variety of challenges when implementing DevSecOps within their organizations. Facing obstacles such as budget constraints, navigating legal and regulatory requirements, lack of organizational agility, and weak skill sets, companies are looking to automation and integration tools to speed up their security and compliance processes. According to the 2022 Application Security in the Mid-Market report, proactive application security, JITT and automation can provide significant benefits to organizations and demonstrates how organizations can increase their overall efficiency, without sacrificing security in the process.

Key takeaways from the report include:

• Over 90% of mid-market companies use internal consultants in the development and documentation of application security requirements. Nearly two-thirds (62%) of those using external consultants spend over $250,000 a year on these services.
• 96% of mid-market companies would be interested in a solution that automates proactive security and compliance processes; 90% of companies still don’t invest in toolsets for tracking, despite their benefits, and are instead using manual spreadsheets.
• Mid-market companies could benefit from tools integration: 66% employ five to nine tools in their software development pipeline, with another 23% using upwards of 10 tools.
• 35% of mid-market companies deliver secure coding practices through Google Docs and 24% do so over email. These methods are prone to error and are also at risk of not being up to date with security regulations and standards.
• 39% of respondents reported that their teams spent anywhere from seven to 13 days each year researching and maintaining knowledge of the latest cybersecurity standards and regulations, and 27% of respondents spent upwards of 14 days annually.

“There is a consensus among mid-market companies that tracking inherited security compliance can speed up the software development life cycle, yet the majority of these companies still rely on manual spreadsheets for their tracking,” said Trevor Young, Chief Product Officer, Security Compass. “We were surprised to learn through this study that developers at nearly half of the participating companies only spend 3-4 days per year focused on learning new secure coding practices or refreshing their general best practices. Our hope is that this report will shed light on the benefits of automation and ways to address the challenges of scaling security and compliance processes.”

For more information, and to view the full 2022 Application Security in the Mid-Market research report, click here. For more information about Security Compass, please visit www.securitycompass.com.

About the Survey

Security Compass commissioned Golfdale Consulting to conduct this survey research project. The survey was conducted in March 2022 and was based on 150 respondents from the US (85%) and Canada (15%). Respondents that were surveyed came from companies that ranged from $100 million to $1 billion in size, and produce their own software. Of these individuals, 80% were from the tech industry and 85% were employed as managers or above. All respondents must have had, or been included in, the process of building an application security program.

About Security Compass

Security Compass, a pioneer in application security, enables organizations to shift left and build secure applications by design, integrated directly with existing DevSecOps tools and workflows. Its flagship product, SD Elements, helps organizations accelerate software time to market and reduce cyber risks by taking an automated, developer-centric approach to threat modeling, secure development, and compliance. Security Compass is the trusted solution provider to leading financial and technology organizations, the U.S. Department of Defense, government agencies, and renowned global brands across multiple industries. For more information, please visit www.securitycompass.com.

The post Security Compass Releases Report: 2022 Application Security in the Mid-Market appeared first on Cybersecurity Insiders.

May 27, 2022 at 09:09AM

Read More

MDT Credit Unions Live with DeepTarget Integration into Jack Henry’s Banno Digital Platform

FARMINGTON HILLS, Mich.–(BUSINESS WIRE)–Member Driven Technologies (MDT), a CUSO that hosts the Episys^® core processing system from Symitar^® to provide a private cloud alternative for core processing and IT needs, today announced that the DeepTarget integration into the Banno Digital Platform is now available for their credit union clients.

The integration allows credit unions to uniquely engage members throughout their digital banking journey with personalized messaging and intelligent, immersive financial stories.

Billings, Mont.-based Altana FCU and Lansing, Mich.-based LAFCU are two early adopters capitalizing on this integration to engage their individual members with meaningful offers and messages combined with captivating content that compels responses.

“Leveraging DeepTarget to engage members and personalize interactions within our Banno digital banking environment allows us to be brand consistent,” explained Eva Urlacher, vice president of marketing for Altana FCU. “Our online and mobile banking is like an additional branch, which is why it’s so important to keep our messaging, communications, and the look and feel in digital banking aligned with the rest of our marketing. For example, the videos that members see with DeepTarget are the same that they see in our physical branches. DeepTarget is a valuable tool in our marketing arsenal – intuitive to use, allowing us to easily create, edit and publish campaigns.”

$960 million asset LAFCU has 70,000 members across Michigan. As a long-time partner of MDT, the credit union leverages various complementary solutions that the CUSO hosts, the latest being the DeepTarget integration with the Banno Digital Platform.

“LAFCU continues to enhance our digital deliverables to our membership through Banno and DeepTarget. This is an important mission for us given the perpetual increase in digital adoption by our membership,” said Kellie Swiger, creative director for LAFCU. “As a long-time DeepTarget user, we are excited to be leveraging 3D StoryTeller to bring to life meaningful and personalized offers to our members. Our goal is to infuse fun and a human connection into every digital engagement.”

DeepTarget’s Digital Experience Platform (DXP) simplifies digital marketing for financial institutions with a high degree of automation and ease of use. DXP, integrated with the Banno digital banking platform, delivers personalized experiences to credit union members with a proven track record of increasing product cross-sales and member loyalty.

“What an exciting time this is, as we work with MDT and Jack Henry to help institutions transform digital banking experiences with differentiation centered on the human connection. Our collaboration works so well because it was directly built on a foundation of openness and innovation,” said Jill Homan, president of DeepTarget. “Its success is exemplified by innovative customers like Altana FCU and their impactful implementation of 3D StoryTeller. They, along with LAFCU and many other Banno customers leveraging DeepTarget, push the envelope with technology to captivate and engage their members.”

Through DeepTarget and MDT’s long-standing relationship, mutual credit union clients are able to evolve their digital banking offerings, better catering to and engaging with today’s modern members.

“The digital experience has never been so important to credit unions as it is today; members across all ages and geographies are increasingly leveraging digital channels to interact with their credit unions and complete their regular banking tasks,” said Larry Nichols, CEO and president of MDT. “This integration of DeepTarget with the Banno digital banking platform allows credit unions to better personalize the experience and more effectively maintain their differentiators – human connection, empathy and exceptional service – within the digital network. We’re proud to work with technology providers like DeepTarget and Jack Henry as we continue to provide our credit union clients with the tools needed to compete.”

About Member Driven Technologies

Member Driven Technologies (MDT) provides a private cloud alternative for core processing and IT needs. The CUSO hosts the Episys^® core platform from Symitar^®, as well as dozens of seamlessly integrated solutions and supporting services to help run the entire institution, such as digital banking, payments, lending, cybersecurity and imaging. Rounding out its comprehensive suite, MDT also offers business continuity, disaster recovery and regulatory solutions as well as consulting, data analytics, email hosting and hardware purchasing services. By partnering with MDT, credit unions across the country are boosting efficiencies, enhancing security and reducing costs while maintaining a high level of control. Visit mdtmi.com or follow @memberdriven for more information.

About Jack Henry & Associates, Inc.

Jack Henry (NASDAQ: JKHY) is a leading SaaS provider primarily for the financial services industry. We are a S&P 500 company that serves more than 8,000 clients nationwide and goes to market through three distinct brands: Jack Henry Banking® provides innovative solutions to community and regional banks; Symitar® provides industry-leading solutions to credit unions of all sizes; and ProfitStars® offers highly specialized solutions to financial institutions of every asset size, as well as diverse corporate entities outside of the financial services industry. With a heritage that has been dedicated to openness, partnership, and user centricity for more than 45 years, we are well-positioned as a driving market force in cloud-based digital solutions and payment processing services. We empower our clients and consumers with the human-centered, tech-forward, and insights-driven solutions that will get them where they want to go. Are you future ready? Additional information is available at https://www.jackhenry.com/pages/default.aspx.

Statements made in this news release that are not historical facts are “forward-looking statements.” Because forward-looking statements relate to the future, they are subject to inherent risks and uncertainties that could cause actual results to differ materially from those expressed or implied by such statements. Such risks and uncertainties include, but are not limited to, those discussed in the Company’s Securities and Exchange Commission filings, including the Company’s most recent reports on Form 10-K and Form 10-Q, particularly under the heading “Risk Factors.” Any forward-looking statement made in this news release speaks only as of the date of the news release, and the Company expressly disclaims any obligation to publicly update or revise any forward-looking statement, whether because of new information, future events or otherwise.

The post MDT Credit Unions Live with DeepTarget Integration into Jack Henry’s Banno Digital Platform appeared first on Cybersecurity Insiders.

May 27, 2022 at 09:09AM

Read More

SentinelOne Global Culture Named To Leading Workplaces Lists

MOUNTAIN VIEW, Calif.–(BUSINESS WIRE)–SentinelOne (NYSE: S), an autonomous cybersecurity platform company, today announced the company has been recognized for its best-in-class global workplace culture, highlighting its commitment to maintaining a winning culture that’s rewarding and values-driven.

“As we work together to make the world a safer place, we are committed to creating an equitable and inclusive culture for our employees,” said Divya Ghatak, Chief People Officer, SentinelOne. “With flexible work schedules, unlimited time off and 16 weeks of paid parental leave to all parents, regardless of gender or sexual orientation, we are redefining what it means to enable employees to do their life’s best work.”

SentinelOne was named to Inc. Magazine’s 2022 Best Workplaces List, San Francisco Business Times and Silicon Valley Business Journal’s 2022 Bay Area Best Places to Work list, Great Place to Work’s UK’s Best Workplaces 2022 list, and Great Place to Work’s UK’s Best Workplaces for Wellbeing 2022 list.

• Inc. Magazine’s 2022 Best Workplaces List features American companies that have excelled in creating exceptional workplaces and company culture. Honorees took part in an employee survey, conducted by Quantum Workplace, which included topics such as management effectiveness, perks, fostering employee growth, and overall company culture.
• The 2022 Bay Area Best Places to Work ​​presented by the San Francisco Business Times and the Silicon Valley Business Journal highlights Bay area companies that have created exceptional workplaces that their employees value highly. Honorees rated highest on values including fun, collaborative culture, solid compensation and benefits offerings.
• The UK’s Best Workplaces 2022 by Great Place to Work was determined through rigorous evaluations of hundreds of employee survey responses alongside Culture Audit submissions from leaders at each company. Great Place to Work then used these data insights to benchmark the effectiveness of companies’ employee value propositions against the culture their employees actually experience.
• The UK’s Best Workplaces for Wellbeing 2022 by Great Place to Work rewarded companies praised for people’s holistic experiences of wellbeing at work. The list was determined based on a survey asking employees to comment on how their company supports their work-life balance, sense of fulfillment, job satisfaction, psychological safety and financial security.

For more information about SentinelOne’s workplace and career opportunities, visit www.sentinelone.com/careers.

About SentinelOne

SentinelOne’s cybersecurity solution encompasses AI-powered prevention, detection, response and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform.

The post SentinelOne Global Culture Named To Leading Workplaces Lists appeared first on Cybersecurity Insiders.

May 27, 2022 at 09:09AM

Read More

Security First Initiative Gaining Momentum

SALT LAKE CITY–(BUSINESS WIRE)–Following a successful launch of the Security First Initiative in March, Whistic is pleased to announce the addition of more companies adding weight to the movement to proactively share their security documentation using a Whistic Profile. Companies endorsing the Security First initiative now include Cloud Security Alliance, Drata, RiskRecon, RFPIO, Tevora and more.

Whistic and other leading technology companies formed the Security First Initiative in response to the growing number of third-party security incidents impacting businesses of all sizes with the goal of proactively sharing security documentation including standard questionnaires, certifications, and audits. Founding members of the security first initiative include Okta, Airbnb, Zendesk, Asana, Atlassian, Notion, G2, TripActions, and Whistic.

“The desire for proactive vendor security is reaching a tipping point,” said Nick Sorensen, CEO at Whistic. “The threat of third-party security incidents isn’t going away any time soon, and a company’s security is only as strong as its weakest vendor. That’s why the collaborative approach to vendor security that’s baked into the Security First Initiative has resonated with so many companies and has helped this movement grow so quickly.”

To help companies meet this new Security First expectation, Whistic is offering vendors access to a free version of Whistic Profile, which includes the ability to proactively share their security information with their customers, streamlining and accelerating partner relationships and sales by eliminating the need to repeatedly complete security policy questionnaires.

Visit www.whistic.com/securityfirstinitiative to join the Security First Initiative and start building your Whistic Profile today.

Supporting Quotes

Drata

“At Drata, we are staunchly focused on easing the path to continuous compliance and guiding our customers with transparency. Joining the Security First Initiative furthers our ongoing commitment to building trust on the internet, starting with our own security posture.”

— Adam Markowitz, Cofounder and CEO of Drata

Cloud Security Alliance

“It’s no secret that the Cloud Security Alliance has always supported proactive vendor security. Through our STAR Registry, companies have been able to display security information to prospects and customers. Efforts like the Security First Initiative elevate proactive vendor security to another level, making it available to any business regardless of size or program maturity.”

— Jim Reavis, CEO, Cloud Security Alliance

RiskRecon

“RiskRecon’s longtime partnership with Whistic helps participants of Whistic’s Vendor Security Network accurately determine the risks associated with engaging with a particular vendor. RiskRecon applauds the guiding principles of Whistic’s Security First Initiative, and believes transparency helps drive the speed of business without compromising attention towards security.”

— Kelly White, Founder, RiskRecon, a Mastercard Company

Tevora

“As an organization that has helped small businesses, Fortune 500s, and state entities build and manage their third-party risk programs, Tevora can confidently say one of the biggest hurdles to developing an effective and secure third-party ecosystem is the lack of visibility into vendor’s security programs. We view the Security First Initiative as a much-needed investment that will allow organizations to fully realize the value proposition of vendors, without burdensome information chasing”

— Jeremiah Sahlberg, Managing Director Third-Party Risk Management, Tevora

RFPIO

Through our partnership with Whistic, we make it easy for companies to complete Whistic Profile questionnaires. Whistic’s Security First Initiative is excellent and our decision to join the initiative further strengthens our partnership.

— Ganesh Shankar, Chief Executive Officer, RFPIO

About Whistic

Located in the heart of the Silicon Slopes in Utah, Whistic is the network for assessing, publishing, and sharing vendor security information. The Whistic Vendor Security Network accelerates the vendor assessment process by enabling businesses to access and evaluate a vendor’s Whistic Profile and create trusted connections that last well beyond the initial assessment. Make security your competitive advantage and join businesses like Airbnb, Okta, Betterment, and Atlassian who are leveraging Whistic to modernize their vendor security programs. For more information, visit Whistic.com.

The post Security First Initiative Gaining Momentum appeared first on Cybersecurity Insiders.

May 27, 2022 at 09:09AM

Read More

SentinelOne Pioneers Inaugural Deception MITRE Engenuity ATT&CK® Evaluation

MOUNTAIN VIEW, Calif.–(BUSINESS WIRE)–SentinelOne (NYSE: S), an autonomous cybersecurity platform company, today announced its results from the inaugural MITRE Engenuity ATT&CK® Deception Evaluation. As the first and only XDR vendor to participate, SentinelOne has the most comprehensive MITRE ATT&CK® analytic coverage, helping enterprises reduce risk across device, cloud, and identity attack surfaces. SentinelOne was recognized for its ability to defend against sophisticated identity-based attacks and insider threats.

The inaugural MITRE ATT&CK Deception Evaluation tested vendors’ ability to protect against the APT29 threat group. SentinelOne’s Singularity XDR platform – and specifically its Hologram deception solution – was recognized for its ability to:

• Provide Real-Time Protection Against Active Directory Compromise. Every time adversaries tried to gain access to Active Directory (AD), SentinelOne protected against theft with evasion techniques and decoy credentials.
• Secure Critical Assets. SentinelOne uses data cloaking to mislead adversaries, keeping file and account information across identity, data, endpoint, cloud and IoT secure to prevent data theft and destruction.
• Stop Lateral Movement and Privilege Escalation. SentinelOne blocked the use of Golden Ticket and Silver Ticket attack techniques, stopping adversaries from gaining access to endpoints on the network.
• Optimize Insight into Adversary Behavior. Taking a step beyond detection and response, SentinelOne provided detailed insight across adversary behavior, including ingestible, actionable TTP information and high-confidence, substantiated attack forensics.

“As attackers continue to evade security controls, enterprises need modern XDR solutions that protect against threats at every stage of the attack lifecycle,” said Raj Rajamani, Chief Product Officer, SentinelOne. “SentinelOne is the first XDR provider to natively include identity and deception. Our results in the inaugural MITRE ATT&CK Deception Evaluation confirm SentinelOne’s commitment to push the boundaries of autonomous technology as we help enterprises protect against identity-based attacks.”

SentinelOne was one of the first cybersecurity companies to correlate alerts in-product with the MITRE ATT&CK framework, embrace the MITRE ATT&CK Endpoint Protection Product Evaluation, and incorporate the MITRE ATT&CK framework as the new threat hunting standard. As a leader across MITRE Enterprise ATT&CK Evaluations for the third consecutive year and a leader in the inaugural MITRE ATT&CK Deception Evaluation, SentinelOne remains committed to supporting organizations through MITRE’s framework.

To learn more about SentinelOne’s results in the inaugural MITRE ATT&CK Deception Evaluation, visit: https://www.sentinelone.com/lp/mitre-deception/.

About SentinelOne

SentinelOne’s cybersecurity solution encompasses AI-powered prevention, detection, response and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform.

The post SentinelOne Pioneers Inaugural Deception MITRE Engenuity ATT&CK® Evaluation appeared first on Cybersecurity Insiders.

May 27, 2022 at 09:09AM

Read More