Rogers Awarded Canada’s Most Reliable 5G Network by Umlaut

Posted in Commentary with tags on April 22, 2025 by itnerd

Rogers Communications announced today that it has been ranked the most reliable 5G wireless network in Canada by umlaut, solidifying the company’s longstanding leadership in network reliability. 

The study shows Rogers wireless customers enjoy the best network performance in the country, winning umlaut’s “Best in Test” wireless benchmark award for the seventh consecutive year, as well as top performance in voice, data and reliability for wireless networks. Rogers has led on umlaut’s reliability testing since it was first introduced in 2021.

Umlaut, a global leader in independent benchmarking, measures network performance on smartphones based on extensive drive tests throughout Canada and crowdsourced data. The independent benchmarking organization tests over 200 mobile networks in over 120 countries. 

Rogers has invested over $40 billion in its networks over the last decade and will invest $4 billion in capital investments this year. Rogers is committed to bringing Canadians the biggest and best wireless networks. The company continues to invest to expand the country’s largest and most reliable 5G network, which now reaches more than 2,500 communities. 

OVHcloud announces General Availability of its Data Platform: an all-in-one, ready-to-use solution to unleash the full value of data

Posted in Commentary with tags on April 22, 2025 by itnerd

OVHcloud today launches its enterprise grade Data Platform solution. Centered on the importance and value of data, the innovative end-to-end PaaS platform helps organizations maintain a competitive advantage addressing the growing challenges around data such as volume, complexity and the rise of Generative AI.

The OVHcloud Data Platform enables users to collect, store, process, analyze, and visualize data in a trusted cloud environment. Being designed for and with data teams, the platform is a turnkey solution that democratizes access to analytics and data science. With a combination of services managed by OVHcloud (such as data streaming, storage, pipeline orchestration, advanced visualization and exploration tools), organizations can effortlessly focus on the value of their data without worrying about the underlying infrastructure. 

Improved operational efficiency in decision making

Answering organizational needs for Business Intelligence and Data Analytics, OVHcloud Data Platform helps to speed up and simplify the data journey in a number of verticals, including highly regulated industries. Examples of use cases can include: 

  • For retail & e-commerce, identifying customer groups based on their purchasing habits to tailor marketing campaigns and predict inventory needs.
  • For the Financial industry, the Data Platform provides the tools to assess portfolio risks, performs fraud detection and help in credit scoring use cases.
  • For healthcare, the Data Platform can assist use cases in clinical trials by analyzing patient data to speed up drug development and strengthen trial effectiveness.
  • In Media and Entertainment, the Data Platform can support in measuring KPIs from advertising campaigns and performing audience sentiment analysis.
  • Industry 4.0: the Data Platform can support use cases including supply chain optimization, predictive maintenance and quality control.

Utilizing AI and open-source standards in a full data journey

Featuring a range of services from data collection through the Lakehouse manager from external sources (including Object Storage, Apache Kafka, ClickHouse, MongoDB, MySQL, Oracle, HTTP/FTP, Google Analytics, Google BigQuery, Snowflake, X, OVHcloud API, etc.) to processing and storage, the Data Platform offers dashboards and insights to be shared via dedicated built-in apps or APIs.

Leveraging 10 years of ForePaaS technology, an OVHcloud acquisition, the OVHcloud Data Platform is perfectly tuned and optimized to operate within the OVHcloud portfolio. It relies on standard ANSI SQL or Python, and a number of open-source modern standards for data: Apache Iceberg, Spark, Pandas, Jupyter notebooks, Trino, SuperSet, Prometheus or Kubernetes.

An end-to-end solution tailored to all data experts

Unlike other data platform solutions, the OVHcloud Data Platform is a fully integrated solution that is easily accessible through a unique interface. It suits not only large and highly regulated organizations but also smaller and mid-size companies so they can benefit from advanced analytics services. Supporting data engineers, analytics engineers, data analysts, data scientists and dataops teams, the OVHcloud Data Platform acts as a complete data stack provided with a single pane of glass UI aimed at facilitating inter-departmental work.

The Data Platform workflow can further be enhanced using OVHcloud’s newly available AI Endpoints solution for multiple use cases like document data extraction, multi-modal transcription, automated data cleansing or anomaly detection. The service can also be used to accelerate the data-to-model lifecycle combined with serverless GPU-powered OVHcloud AI Training and AI Deploy services.

A sovereign and trusted cloud for the Data Platform

The OVHcloud Data Platform benefits from the Group’s open, trusted and sustainable cloud. Data is hosted in OVHcloud’s state-of-the-art cloud meeting the highest security standards, giving peace of mind to organizations that may have been hesitant to move sensitive data to the cloud because of security concerns. Data is hosted in Europe, providing protection against non-European regulations and giving organizations technical and strategic autonomy. The platform is also based on open-source technologies, providing users with superior data portability, control and freedom of choice.

Availability and pricing

OVHcloud Data Platform is now available in Europe from the Gravelines datacenter with a pay-as-you-go model. For a more predictable pricing, customers will soon be able to reserve capacity -depending on their needs- ensuring they stay in control of their cloud spendings.

KnowBe4 Marks 20-Quarter Leadership Streak in G2 Grid Spring 2025 Report and Named Leader in Two Categories

Posted in Commentary with tags on April 22, 2025 by itnerd

KnowBe4, the world-renowned cybersecurity platform that comprehensively addresses human risk management, today announced its PhishER product and its Security Awareness Training (SAT) software have been named the number one leader in the G2 Grid Spring 2025 Report for the 13th consecutive quarter and the 20th consecutive quarter, respectively.

The latest G2 Grid Report compares Security Orchestration, Automation, and Response (SOAR) software vendors and security awareness training (SAT) vendors based on user reviews, customer satisfaction, popularity and market presence.

Based on 2,026 G2 customer reviews, KnowBe4’s SAT remains the top ranked SAT product with 98% of users rating it four or five stars. The platform received the highest G2 score among products in the SAT category and is the only vendor with a score in the 90s. Additionally, 93% of users recommend KnowBe4 SAT to others. KnowBe4 also maintains the largest market presence among products in SAT and has been recognized as the #1 SAT vendor on G2 for over five years.

Based on 339 G2 customer reviews, KnowBe4’s PhishER is the top ranked SOAR software. PhishER has the highest satisfaction score among SOAR products in the category with 98% of users rating it four or five stars. Additionally, PhishER has been ranked as the number one SOAR software for three years and is recognized for “Best Results” and “Best Usability.”

For more information on PhishER, visit https://www.knowbe4.com/products/phisher-plus

To download a copy of the report on the SOAR market, visit https://www.knowbe4.com/g2-grid-report-for-security-orchestration-automation-and-response

For more information on KnowBe4’s SAT, visit https://www.knowbe4.com/products/security-awareness-training

To download a copy of the report on the SAT market, visit https://www.knowbe4.com/g2-grid-report-for-security-awareness-training

Boulanger’s 27 Million Records Data Breach Resurfaces for Free

Posted in Commentary with tags on April 22, 2025 by itnerd

The Safety Detectives Cybersecurity Team stumbled upon a forum post on the clear web where a threat actor posted a link to a database allegedly belonging to the French electronics retail store Boulanger Electroménager & Multimédia, which suffered a cyber incident in 2024. The data stolen is now being offered for free. 

The dataset is available in parsed and unparsed formats and contains 5 and 27+ million records from Boulanger’s customers. The data includes names, surnames, full physical addresses, email addresses, and phone numbers

This data is sensitive because it could be used by malicious actors to prepare and execute various types of attacks on the affected customers

The full report can be accessed here: https://www.safetydetectives.com/news/boulanger-leak-report/

SureStack AI Cybersecurity Platform Optimizes and Secures Cybersecurity Stacks in Real Time

Posted in Commentary with tags on April 22, 2025 by itnerd

SureStack today announced the launch of its AI-native cybersecurity platform, designed to help organizations ensure their cybersecurity stacks are optimally configured to prevent real-world attacks. Built on the company’s patent-pending “Resilient Intelligence” (RI), SureStack combines the power of Generative AI, years of human knowledge and expertise, and real-time environment analysis to give defenders a critical advantage against evolving threats. The platform delivers continuous validation, real-time alerts, and actionable insights to strengthen defense posture, eliminate cybersecurity stack misconfigurations, and ensure organizations get the best ROI from their security stack investments.

SureStack integrates directly with customers’ existing cybersecurity tools, including firewalls, endpoint protection, authentication, SIEM, ticketing, email security, and vulnerability management solutions. Once connected, the platform continuously monitors configurations for deviations, misconfigurations, vulnerabilities, and gaps, providing real-time alerts through an intuitive dashboard. Current integration partners include: CrowdStrike, Fortinet, Palo Alto, Sonic Wall, and Trellix, with more on the way.

In addition to continuous monitoring, SureStack features StackChat, a secure AI cybersecurity assistant tailored to each organization’s infrastructure. StackChat allows users to query their live environments, troubleshoot issues, and access detailed information about deployed tools, configurations, and policies. By serving as a unified knowledge base and troubleshooting assistant, StackChat significantly reduces training time, accelerates operational efficiency, and helps security teams resolve issues faster.

Additional capabilities include:

  • Real-time stack validation against known threats and vulnerabilities.
  • Daily monitoring of the external threat landscape for emerging vulnerabilities tied to the customer’s deployed security tools.
  • Regular scraping of vulnerabilities specific to an organization’s security stack tools from security vendor websites, NIST, vulnerability databases, and more.
  • Automated grading system that highlights quick wins to help network defenders focus first on where they can improve their score and reduce risk.
  • Adversarial attack simulations, validating whether current configurations would stop common threat tactics and specific vulnerabilities SureStack has discovered, mapped to the MITRE ATT&CK framework.

Pricing and Availability

SureStack provisions a private tenant for each customer, supports flexible deployment and hosting options, including self-hosted environments for customers with strict compliance or sovereignty requirements.

SureStack is initially available with tiered pricing options for MSPs/MSSPs, mid-sized organizations, large enterprises, and government agencies.

Starburst Appoints Jitender Aswani as SVP of Engineering to Lead Innovation for Data Platform and Accelerate AI Deployment

Posted in Commentary with tags on April 22, 2025 by itnerd

Starburst, the data platform for apps and AI, today announced the appointment of Jitender Aswani as Senior Vice President of Engineering. Aswani brings more than two decades of experience building and scaling high-performance technical teams, with deep expertise in machine learning, data infrastructure, and cloud technologies. In his new role, Aswani will lead Starburst’s global engineering organization and drive innovation across its modern data platform for apps and AI. He will report directly to Starburst CEO and Co-Founder, Justin Borgman.

Aswani joins Starburst with a proven track record of engineering leadership at some of the world’s most innovative technology companies. Most recently, he was Vice President of Engineering at StarTree, where he led engineering strategy and execution for distributed, multi-cloud real-time analytics platforms. He also served as the acting Chief Information Security Officer (CISO), overseeing the company’s security strategy and operations.

Previously, Aswani was Head of Engineering at Moveworks, leading teams that built AI-powered enterprise solutions. He held leadership roles at both Netflix and Meta, where he specialized in data science, security, and infrastructure. At Meta, he was one of the first users of Trino (formerly Presto) at Facebook, giving him a unique and valuable perspective on Starburst’s core technology.

Aswani’s experience spans early-stage startups to global enterprises, giving him a thoughtful approach to scaling teams and applying the right amount of process at each stage of growth. He holds multiple patents in machine learning, data management, and graph optimization, and earned an MBA from the University of Chicago Booth School of Business.

Ericsson boosts NetCloud SASE with industry’s first fully integrated clientless ZTNA solution for Wireless WAN

Posted in Commentary with tags on April 22, 2025 by itnerd

Ericsson today announced an expansion of its NetCloud SASE with clientless Zero Trust Network Access. This innovation empowers organizations to securely connect third-party and BYOD users to authorized resources with enhanced security. Building on Ericsson’s existing client-based ZTNA, the new solution offers flexibility for lean IT teams navigating managed and unmanaged devices in dynamic, wireless-first settings. 

According to KPMG, 73 per cent of organizations have experienced at least one major disruption tied to third-party cyber incidents over the past three years. Ericsson’s clientless ZTNA solution enhances protection against these events with embedded isolation technology. Unlike other clientless solutions relying solely on access controls, NetCloud SASE activates application sessions in isolated cloud containers for unmanaged or BYOD device access. This air-gaps corporate systems from potentially insecure devices, preventing malware spread into the enterprise. 

Key features of NetCloud SASE with clientless ZTNA include: 

  • Clientless Secure Access: Contractors and BYOD users can access isolated applications via a secure URL, eliminating the need for VPNs, clients or special browsers. 
  • IoT/OT asset and corporate application protection: Interactions between unmanaged users and corporate systems are isolated in cloud containers, safeguarding applications from potential malware infections. 
  • Granular access based on least privilege: Access is controlled by detailed policies based on user roles, device types, and other factors, ensuring users receive only the necessary level of access. 
  • Continuous Risk Assessment: Real-time analytics and intrusion detection system/intrusion prevention system (IDS/IPS) allow for instant access revocation in response to changes in user context and risk levels. 
  • Zero-trust based: This unique architecture removes the need for static public IP addresses, hides all internal IPs, defaults to deny all, and enables micro-segmentation, which prevents lateral movement within the network. 
  • Single-platform Management: Integrated into NetCloud Manager for simplified deployment, visibility, and policy enforcement alongside 5G WWAN, SD-WAN, and other SASE security features. 
  • Seamless integration with Existing Identity Providers: Leverages existing enterprise Identity and Access Management (IAM) platforms for seamless user authentication and authorization, preventing identity sprawl. 

NetCloud SASE with clientless ZTNA is now available and included as part of the NetCloud ZTNA license. The solution will be showcased at RSA Conference on April 28, 2025, marking the first time an enterprise 5G router vendor has delivered a fully integrated, clientless ZTNA solution under fully unified management.  

To learn more about Ericsson Enterprise Wireless Solutions security capabilities, please visit the Ericsson NetCloud SASE page. 

Gamers beware: Flashpoint Research Team Issues Blog Detailing The AgeoStealer Infostealer

Posted in Commentary with tags on April 22, 2025 by itnerd

Flashpoint just published a blog about AgeoStealer. Which is an Infostealer.

Infostealers have proven to be a gold mine for threat actors, responsible for stealing 75%—or 2.1 billion—of 2024’s 3.2 billion total credentials, fueling a constant cycle of account takeover attacksransomware, and high-profile data breachesIn our 2025 Global Threat Intelligence Report, we detailed their meteoric rise as a primary threat vector, with our analysts tracking over 24 unique stealer strains—such as RedLine, RisePro, and Lumma Stealer—being listed for sale on illicit marketplaces. Now, organizations will need to add AgeoStealer to their watch list as cybercriminals exploit the immense popularity of gaming.

You can read about this infostealer here: : https://flashpoint.io/blog/ageostealer-how-social-engineering-targets-gamers/.

Cloud Range and Cyviz Collaborate to Elevate Cybersecurity Curriculum in Higher Education through IBM’s Cyber Campus

Posted in Commentary with tags on April 22, 2025 by itnerd

Cloud Range, the industry’s leading cyber range solution, and Cyviz, a global leader in immersive collaboration technology, announced their initiative to enhance cybersecurity training within higher education institutions as partners for IBM’s Cyber Campus offering. Working together to deliver IBM’s Cyber Campus, Cloud Range, Cyviz, and IBM equip students with practical, hands-on experiential learning through an immersive, live-fire simulation platform—bridging the gap between academic knowledge and real-world job experience.

A dangerous shortage of cybersecurity workers in the United States puts digital privacy and the nation’s infrastructure at risk. ISC2’s 2024 Cybersecurity Workforce Study indicates a global cybersecurity workforce gap of 4.8 million, with a North American gap of 543,000, highlighting a stagnant workforce and a growing skills gap. This demand far outpaces supply, leaving 70% of businesses with open cybersecurity positions. With cybersecurity occupations projected to grow by 35% compared to 4% in other industries, the need for comprehensive, hands-on training has never been more critical. With IBM Cyber Campus, educational institutions can expand their investments in cybersecurity education and offer coursework that helps build the new cyber workforce with practical, hands-on experience.

Providing a risk-free, hands-on space to practice responding to real-world cyber threats, the IBM Cyber Campus, powered by Cloud Range and Cyviz, provides users across the U.S. with unparalleled access to advanced simulations and tools through a cutting-edge SaaS platform featuring specialized labs, live-fire exercises, and skill packs purpose-built for educational institutions. In addition, building a realistic Security Operations Center (SOC) environment provides individuals and teams an invaluable opportunity to develop, practice, and refine crucial human skills alongside technical expertise for effective cybersecurity operations. The flexibility of the IBM Cyber Campus experience ensures educational institutions can integrate comprehensive cybersecurity training into their curriculum without the need for extensive travel or infrastructure modifications.

To learn more about IBM’s Cyber Campus, visit: https://www.ibm.com/services/consulting-cyber-campus.

ASUS Discloses AiCloud Vulnerability And Says To Patch Your ASUS Routers NOW

Posted in Commentary with tags on April 22, 2025 by itnerd

People have often asked me why I am such an opponent of routers having the functionality of remote access. Well, this is why:

So basically, ASUS had an issue where if you had AICloud enabled on your ASUS router, someone could pwn you. But ASUS has released new firmware for a lot of their routers and fixed this. So all is fine now. Right?

Well, no it’s not. The thing is that when you open anything up to remote access via the Internet, you can get pwned. And a router is about the worst thing that you can open up remote access to. The reality is that nobody needs to remote access to their router. And I truly mean nobody. I for one have never utilized the on board remote access features of a router. And I have no plans on ever doing so as I would have to really trust the company that makes the gear that I am using. Which to be clear I do not have that level of trust in any company.

Next is the fact that while ASUS has fixed this, you know that threat actors will be figuring out if they can exploit this somehow. Whether it is via going after people who haven’t updating their firmware, or via finding an exploit that ASUS knows nothing about. Or both.

Finally, I have to give every consumer router company a free piece of advice. There zero need to include this functionality on your routers. It adds zero value and makes your products less secure. You would do yourself and the planet a favor by removing this functionality from your products.

In the meantime, ASUS router users should get about updating their firmware whether they use AICloud or not as there’s no harm in being as secure as you can be.