Cyware, the leading provider of threat intelligence management, low-code/no-code automation, and cyber fusion solutions, today announced that it has achieved Federal Risk and Authorization Management Program (FedRAM®) Ready status.
FedRAMP is the government-wide program supporting the adoption of secure cloud services across the federal government through a standardized approach to security and risk assessment for cloud technologies and federal agencies. FedRAMP Ready Status confirms that a third-party assessment 3PAO attests to Cyware’s readiness for the comprehensive, meticulous authorization process, having met additional recently introduced and rigorous requirements issued by The Joint Authorization Board (JAB).
Cyware’s threat-driven automation is designed to ensure that actionable cyber threat intelligence (CTI) promptly reaches individuals and teams who can act on it to swiftly identify, understand, and mitigate threats. Cyware’s Cyber Fusion Center (CFC) simplifies and substantially advances intelligence actioning – breaking through the barriers that have long prevented or delayed intelligence-sharing across entities.
Cyware delivers an innovative approach to cybersecurity that unifies threat intelligence, automation, threat response, and vulnerability management with data insights gleaned from assets, users, malware, attackers, and vulnerabilities. Cyware’s Cyber Fusion platform integrates SOAR and TIP technology, enabling collaboration across siloed security teams. Cyware is widely deployed by enterprises, government agencies, and MSSPs and is the leading threat-intelligence sharing platform for global ISACs and CERTs.
Horizon3.ai Launches NodeZero For Kubernetes
Posted in Commentary with tags horizon3.ai on November 12, 2024 by itnerdHorizon3.ai announced the release of NodeZero Kubernetes Pentesting, a powerful new capability available to all NodeZero users. Designed to deploy directly within Kubernetes clusters, this solution equips organizations with the unique ability to identify and exploit vulnerabilities from an attacker’s perspective, uncovering weaknesses that could jeopardize entire infrastructures.
Kubernetes has become foundational to modern environments, offering flexibility to scale containerized applications. However, as adoption of managed Kubernetes distributions like AWS Elastic Kubernetes Service (EKS), Google Kubernetes Engine (GKE), and Azure Kubernetes Service (AKS) grows, the risks from complex and distribution-specific weaknesses increases as well. NodeZero’s offensive approach prioritizes real-time security testing at the runtime level, revealing the “blast radius” attackers could achieve by chaining Kubernetes-specific vulnerabilities with cloud and on-premises infrastructure weaknesses.
NodeZero Kubernetes Pentesting differentiates itself through advanced runtime security testing and ease of deployment, allowing organizations to achieve the continuous security assurance demanded by today’s threat landscape. Unlike traditional security tools focused on compliance or control plane analysis, NodeZero tests in real time, uncovering vulnerabilities like container escapes and RBAC misconfigurations that attackers exploit to move laterally, escalate privileges, and compromise underlying infrastructures.
The release underscores a shift in cybersecurity toward offensive-based assessments that employ adversarial techniques. Traditional compliance-driven assessments often miss critical gaps that attackers could exploit, leaving organizations exposed. With NodeZero’s use of real-world tactics, techniques, and procedures (TTPs) that mimic attacker behavior within Kubernetes environments, security teams can prioritize the most pressing threats and address exploitable vulnerabilities before they become gateways for adversaries.
Designed for any Kubernetes distribution, including EKS, GKE, and AKS, NodeZero’s pentesting capabilities provide advanced protection across both cloud and on-premises clusters. This solution underscores Horizon3.ai’s commitment to proactive, high-impact cybersecurity innovation, helping organizations navigate and secure the complexities of Kubernetes at scale.
Leave a comment »