Archive for May 8, 2024

Cisco Unlocks AI-Powered Intelligence for Self-Hosted Observability

Posted in Commentary with tags on May 8, 2024 by itnerd

Cisco today announced a new virtual appliance for its AppDynamics On-Premises application observability offering, enabling customers to use a self-hosted observability solution built on AI-powered intelligence for anomaly detection and root cause analysis, application security, and SAP monitoring. The latest innovations allow IT operations teams to detect application performance anomalies faster and with greater accuracy, protect against security vulnerabilities and attacks, and maintain the performance of SAP applications and business processes, all while retaining full control of their observability deployment. Cisco also announced AppDynamics Flex, a new licensing model that provides optionality for customers to choose between self-hosted and Software-as-a-Service (SaaS) observability offerings and support them through the transition from self-hosted to SaaS when the time is right for their business.

While there has been a significant increase in demand for SaaS observability solutions in recent years, for many organizations, self-hosted observability solutions remain in high demand. Self-hosted observability – also referred to as customer-managed observability – includes on-premises deployments or cloud-based deployments where the customer retains control of all the data and associated operations. These needs are typically driven by regulations for data residency and sensitive data protection, and in geographies without a local SaaS point-of-presence. For companies in industries including the public sector, finance, manufacturing, healthcare and retail, the option to have cutting-edge, self-hosted application observability solutions ensures that they can continue to provide end-to-end monitoring of their most critical business systems, in turn, enabling them to deliver market-differentiating digital experiences to their customers and users.

The new innovations include:

  • AI-Powered Detection and Remediation with Cognition Engine: Improve the accuracy of anomaly detection by leveraging dynamic baseline performance to understand what normal looks like against historical trend data, in turn reducing the mean time to identify (MTTI) for application performance issues. Performance issues can then be resolved faster with root cause analysis and automated transaction diagnostics – analyzing a continuous stream of transaction snapshots that capture events used in proactive performance troubleshooting. This enables IT operations to home in on the problem area and make use of intelligent suggestive issue identification.
  • Application Security: Cisco Secure Application allows customers to locate and highlight application security vulnerabilities with application context, and then leverage an automated business risk score that combines application intelligence and security intelligence, allowing them to prioritize their response by business impact. The addition of Runtime Application Self-Protection (RASP) enables organizations to defend the business from exploits that target application vulnerabilities.
  • A Resilient SAP Landscape: Customers can ensure service availability and performance with full-stack observability for on-premises SAP and non-SAP environments, surfacing insights to address performance issues before they impact the business. Cisco brings resiliency into the SAP landscape with application performance, augmented by AI-powered intelligence for the Java stack, enabling SAP developers and BASIS admins to ensure service availability, align performance with SAP business outcomes, and discover SAP related security vulnerabilities to mitigate risk.
  • Self-Hosted Offerings in Amazon Web Services (AWS) and Microsoft Azure: In addition to on-premises deployments, customers can manage their own observability deployments in AWS or Microsoft Azure by using the Amazon Machine Instance (AMI) or Virtual Hard Disk (VHD) images of the virtual appliance. This is valuable when a SaaS instance is not available in the country where a sensitive workload needs to be monitored, or when a customer wants to retain full control of the observability solution.

The Transition to SaaS
As digital transformation strategies mature and the nature of observable workloads change, some IT teams will find themselves looking to garner operational efficiency by moving some or all of their observed workloads from the purview of a self-hosted observability solution to a SaaS solution. To help customers on this journey, Cisco is introducing AppDynamics Flex Licensing, designed to simplify the transition to AppDynamics SaaS. Cisco AppDynamics Flex Licensing allows organizations to value-shift their chosen on-premises observability investments to the corresponding SaaS offer as their requirements evolve, while reusing the same agent fleet.

Availability:

  • The virtual appliance for Cisco AppDynamics On-Premises will be generally available in May 2024.
  • The Automated Transaction Diagnostics feature will be available in Q3 CY2024.
  • The AMI and VHD packages for self-hosted cloud-based deployments will be available in Q3 CY2024.
  • Please refer to the pricing guidelines or contact them for more information.

Additional Resources:

Leave a comment »

Sage launches two new integrated suites in Canada and the UK  

Posted in Commentary with tags on May 8, 2024 by itnerd

Sage, the leader in accounting, financial, HR, and payroll technology for small and mid-sized businesses (SMBs), has launched two new suites in Canada and the UK, to transform how SMBs and accounting practices operate and grow their business.  

Bringing together Sage’s award-winning accounting, HR, and business management tools into two scalable solutions, Sage for Accountants and Sage for Small Business, marks a significant step forward in Sage’s commitment to championing SMBs, accountants and bookkeepers. 

The new suites are purpose-built to meet the changing needs of accountants, bookkeepers and SMBs, helping them to get more done by freeing up time, whilst boosting efficiency and productivity. With Sage for Accountants and Sage for Small Business, users can focus on what matters most, from growing their business and providing great service to pursuing their passions outside of work. 

Three customizable membership plans — Essentials, Standard, and Premium — will scale to match the unique needs of businesses and accounting practices. Small businesses, accountants and bookkeepers are now able to self-manage users and subscriptions, all in one integrated solution that is paid for on a single monthly invoice. 

Introducing Sage for Accountants  

Designed to enhance the functionality and productivity of accounting practices, Sage for Accountants streamlines client management, simplifies operations, boosts efficiency and enhances client collaboration. Even for those not using Sage ledger tools, it enables continuous accounting with seamless integration between tools, so they can harness the value of every tool across all their clients, freeing up more time for client relations.  

With evolving market demands, Sage for Accountants is an integrated experience that will help practices to:  

  • Win and onboard more profitable clients: Attract high-value clients efficiently by leveraging access to one of the largest accountants’ communities worldwide and a comprehensive accounting directory. 
  • Boost productivity with efficient compliance services: Ensure regulatory compliance with ease and confidence using Sage for Accountants, saving valuable time and resources. 
  • Deliver a trusted advisory service: Provide clients with expert insights and guidance for business growth, enhancing their trust and fostering long-term relationships. 

Empowering SMBs with Sage for Small Business 

Making it even easier for entrepreneurs and small businesses to run and grow their business, Sage for Small Business simplifies the long list of jobs to be done from managing cashflow to engaging and managing a team of people. By bringing together critical business tools and expert advice designed for small businesses into a single suite, business owners can free up their time to focus on growing their business and what truly matters to them.  


The suite enables small businesses to start with what they need and will grow with them, helping them to: 

  • Streamline repetitive tasks: Enabling real-time data flow across accounting, payroll and HR from a single user interface, simplifying operations and saving small business owners’ valuable time.  
  • Gain enhanced business insights: With instant access to critical business and financial information, business owners can make smarter decisions, and collaborate closer with accountants on the same digital data. 
  • Remain confident with compliance: With over 40 years of experience building small business technology, offering a wealth of advice and award-winning support and services, Sage helps ensure small business owners have access to simplified tax, VAT and payroll compliance through the latest technology. 


Sage Copilot to be integrated into suites 

As part of the launch of the new suites, UK customers will be the first to get access Sage Copilot, a new generative AI powered productivity assistant.  

Integrated within Sage for Accountants and Sage for Small Business, Sage Copilot is designed to transform operations by automating routine administrative tasks and offering real-time business insights. This allows small businesses to operate more efficiently, and accountants and bookkeepers to make smarter, faster decisions, and focus more on strategic client management rather than administrative tasks.  

Sage Copilot will initially be launched in the UK in 2024. Canada is the next region Sage Copilot will be rolled out to and will be available at a later date. 

For more information, please visit Sage for Accountants and Sage for Small Business. 
 

Leave a comment »

Netcraft Announces New AI-Powered Innovations to Disrupt and Expose Criminal Financial Infrastructure

Posted in Commentary with tags on May 8, 2024 by itnerd

Netcraft announced its new Conversational Scam Intelligence platform at RSAC in San Francisco, which builds on Netcraft’s intentional approach to using AI to stay ahead of criminals and protect client brands and customers.

The FBI reports that US losses to investment and “pig-butchering” scams were $4.6 Billion in 2023, a 38% increase over 2022. Through carefully constructed generative AI, the Conversational Scam Intelligence platform enables Netcraft and its customers to disrupt these nefarious scam attempts at scale, uncovering the underlying financial account networks and deploying countermeasures against criminal infrastructure.

By engaging criminals identified through its proprietary threat intelligence in private message threads, Netcraft’s AI exposes the scam in its entirety, extracting critical insight that can be used to disrupt and prevent future attacks. This innovative approach helps protect against tactics like pig-butchering, where scammers leverage direct messages, a previously undetectable threat source, to lure victims into sending money to fraudulent schemes.

Early results show a significant impact, accurately identifying the hidden financial infrastructure used in pig-butchering scam attempts, including thousands of criminal-controlled bank accounts, mule accounts, crypto wallet addresses, etc. Leveraging this evidence, Netcraft’s customers can flag or block payments to and from compromised accounts before any transaction has occurred, mitigating risk exposure for banking providers around the globe.

The regulatory landscape is shifting: US senators are pushing for greater accountability for financial institutions, and the UK now requires institutions to bear a 50:50 financial risk for fraudulent push payments. In response, banking leaders must deploy new strategies to react to current threats and intercept criminal behavior. Critical interventions like the use of AI to increase visibility and deploy proactive countermeasures provide a valuable new tool for anti-fraud, payment risk, and security teams worldwide.

AI, machine learning, and 70,000+ human-written rules are at the core of Netcraft’s detection, disruption, and takedown services. Leveraging advances in generative AI to anticipate – and prevent – criminal behavior was a natural next step.

Resources

Leave a comment »

Cado Security Introduces First-Ever Support to Perform Investigations in Distroless Container Environments

Posted in Commentary with tags on May 8, 2024 by itnerd

Cado Security, provider of the first investigation and response automation platform, today announced the world’s first solution to perform forensic investigations in distroless container environments. With Cado Security’s new offering, security teams can investigate the root cause, scope, and impact of malicious activity detected within distroless container environments to gain greater visibility into cloud risk.

Distroless containers are designed for efficiency and security, stripped of standard OS components like shell utilities and package managers. While these containers offer some security benefits by minimizing the attack surface, they actually leave a huge security blindspot when something malicious does indeed occur. Until today, it was impossible to perform an investigation in these environments, resulting in a significant visibility gap.

Cado Security delivers a first-of-its-kind solution that addresses the unique challenges distroless containers introduce for security teams. Cado’s unique patent-pending approach collects data from distroless and private clusters without impacting the target container to enable immediate investigation. The collected data includes running processes, crucial log files, and forensic artifacts. Cado also uses its previously open-sourced “varc” toolset to collect memory from individual processes for forensic analysis. This evidence is then seamlessly presented in the Cado platform for unprecedented visibility into cloud risk.

Join Cado Security at RSA 2024: Visit the team at Booth #4316 or schedule an on-site meeting during the RSA Conference in San Francisco from May 6-9. For more information about Cado Security’s Distroless Container Support, please visit https://www.cadosecurity.com/blog/cado-introduces-first-ever-support-to-perform-investigations-in-distroless-containers.

Leave a comment »

UK Military Payroll Provider Pwned… Military Members Data Accessed

Posted in Commentary with tags on May 8, 2024 by itnerd

Yesterday the BBC reported that a hack targeting a third-party payroll system used by the Ministry of Defence resulted in the unauthorized access of the personal information of an unknown number of UK military personnel.

In what is being considered a “significant data breach”, compromised data described as “personal HMRC-style information” includes names, bank details, and, in a very small number of cases, the personal addresses of both current and former members of the Royal Navy, Army and Air Force from over a period of several years.

The MoD is in the process of notifying those affected, including making veterans’ organizations aware of what has happened. 

Tomorrow, Defense Secretary Grant Shapps is due to update MPs about the hack in the Commons where he is expected to set out a “multi-point plan”, including actions to protect affected service men and women.

While it has not been disclosed who is behind this hack, it comes shortly after the government publicly accused China of the 2021 hack targeting millions Electoral Commission voters and the NCSC said Russian intelligence was behind a “malicious cyber activity attempting to interfere in UK politics and democratic processes”.

Dave Ratner, CEO, HYAS had this to say:

   “Third-party breaches like this one and others will unfortunately continue and likely increase in volume; our increasing reliance on Cloud services and various third-party relationships dramatically increases the attack surface and creates a venerable panacea of entry points that can be exploited.  Only with the rapid implementation of cyber resiliency solutions, capable of seeing the telltale signs of a breach early and shutting it down before data is stolen, will we actually be able to stem the tide.”

Third party data breaches are getting just as bad as ransomware attacks. It’s time for it to stop as this is a situation that has become insanely bad. Which is not good for any of us.

Leave a comment »

Wichita Kansas Has Been Pwned In A Ransomware Attack

Posted in Commentary with tags on May 8, 2024 by itnerd

On Monday, the City of Wichita, Kansas disclosed it was forced take portions of its network offline after suffering a ransomware attack on Sunday when IT systems were encrypted with ransomware.

At this time, it is not known whether data has been stolen. Currently, the online payment systems for the City are down, such as those used for paying water bills, court citations and tickets. The City says that emergency services are still available, with the police and fire departments switching to “business continuity measures as necessary”.

   “We are completing a thorough review and assessment of this matter, including the potential impact on data. Detailed assessments of these types of incidents take time,” government officials shared on the City of Wichita’s website. 

The city is not sharing what ransomware gang is behind the attack. But we’ll likely know soon enough.

Emily Phelps, Director, Cyware had this comment:

   “This ransomware attack reinforces the critical need to protect our urban centers and infrastructure. Threat intelligence sharing organizations and the adoption of a collective defense mindset can help public entities outpace adversaries by proactively safeguarding against known threats. By actively participating in these collaborative networks, municipalities can access shared insights and strategies, enabling them to respond more effectively and proactively to cyber threats. Implementing advanced cybersecurity measures and fostering a culture of collective defense are vital steps in ensuring that our cities remain resilient against persistent cyber attacks. This proactive approach not only helps in quicker recovery post-incident but also strengthens the overall security posture to prevent future attacks.”

Another day, another ransomware attack. It’s almost become background noise because it is so common. But it shouldn’t because the second that it does, it will take a situation that is already pretty bad and make it far worse because nobody is paying attention.

1 Comment »