Rezilion Expands Dynamic SBOM Capability To Support Windows Environments

Posted in Commentary with tags on November 9, 2022 by itnerd

Rezilion has announced today the expansion of its Dynamic Software Bill of Materials (SBOM) capability to support Windows environments. Through this expansion, Rezilion will provide organizations with a first-of-its-kind toolset to efficiently manage software vulnerabilities and meet new regulatory standards, for the 56% of software today that’s built for Windows OS.

While many tools exist for organizations to manage vulnerabilities in their software, the vast majority of these were initially built for use with Linux OS, resulting in gaps in functionality when they’re used for Windows. A dearth of “Windows-first” tooling also affects organizations’ preparedness to comply with new regulations such as the President’s Executive Order (EO) 14028, which will require teams to provide regulators with a thorough inventory of their software environments and related vulnerabilities.The market has been alarmingly slow to respond to this increasingly urgent need for better solutions. As evidence of this, Microsoft itself released its first, basic, open source “Windows-first” SBOM generation tool as recently as July of this year.

As a result of these gaps, for organizations with large, legacy Windows environments (including critical infrastructures), a new threat on the scale of the “Y2K” scare of the late 1990’s is emerging. Be it attackers or regulators, these organizations must modernize their security standards, or suffer consequences of looming risks ahead.

First released in May, Rezilion’s Dynamic SBOM can be deployed in all software environments – both Windows and Linux simultaneously – and provides a real-time versus static inventory of all software components in a single graphical UI. Rezilion’s solution also integrates dynamic runtime analysis to not only detect software vulnerabilities, but validate their actual exploitability, helping teams to clear away “false-positive” scan results and avoid wasteful patching work that shifts resources away from build activity.

Other key features and capabilities include:

Dynamic Identification – Instantly search and pinpoint vulnerable components such as Log4J across millions of files and onthousands of hosts, containers, and applications.

Holistic Insight & Control – View Windows and Linux risk side by side in one UI, to get a complete picture of your attack surface,manage risk efficiently and comply with auditors

Tackle Legacy Vulnerability Backlogs Efficiently – Aggregate detected vulnerabilities, filter out false-positives and prioritize what matters to address risks quickly and meet modern remediation SLAs as defined by CISA with a fraction of the effort

Learn more about Rezilion’s Dynamic SBOM at https://www.rezilion.com/platform/dynamic-sbom/.

Book a demo today to learn more about Rezilion’s Windows software security solutions at https://www.rezilion.com/lp/windows-security-demo/.

What A Shocker…. Twitter Took Zero Action Against Election Posts That Were Problematic

Posted in Commentary with tags on November 9, 2022 by itnerd

We all wondered what would happen to content moderation on Elon Musk’s Twitter during last night’s election. And now we have our answer:

A watchdog group has said Elon Musk’s Twitter took little action against high-profile election posts they flagged as problematic, Reuters reported.

Common Cause, a nonpartisan group that monitors social media for voter suppression, told Reuters that posts from some Republican candidates should have included warning labels under Twitter’s current policy.

False claims and conspiracy theories have already been emerging around Maricopa County in Arizona, where voting machines experienced a “technical glitch” that led to some votes not being correctly tabulated, CNN reported. Some people took to social media to blame Democrats for the technical difficulties.

Common Cause said tweets by candidates such as Rep. Marjorie Taylor Greene, who also publicized the glitch on Twitter, should have been marked with a warning under Twitter’s civic integrity policy, per Reuters. 

The watchdog also told the news outlet that Twitter’s response time had decreased since mass layoffs last Friday saw 50% of staff axed.

The group said Twitter’s response time used to be around one to three hours, but now the company was “hopeless” and “going dark on it for days.”

This I believe is proof positive that Twitter under Elon Musk is becoming the hellscape that he promised it would not be. You cannot simply fire the people who are responsible for stopping this sort of thing from happening, and not expect anything bad to happen. It’s just another sign that Musk’s “Ready, Fire, Aim” mentality is going to kill Twitter.

The Twitter Blue Dumpster Fire Has Just Become Bigger

Posted in Commentary with tags on November 9, 2022 by itnerd

This whole Twitter Blue which includes verification as part of the deal is turning out to be a gong show. In order to calm people down over having a whole bunch of verified people out there and the potential damage that can cause, Esther Crawford who is Director of Product Management at Twitter posted this series of Tweets hoping to clear up how verification will work under Twitter Blue:

Maybe I am looking at this wrong, but here’s what I see based on those Tweets:

  • Elon Musk says that he must democratize verification.
  • Elon Musk creates an unvetted blue check for all, with no ID verification.
  • Elon Musk creates a verification scheme for government accounts, commercial companies, business partners, major media outlets, publishers and some public figures that adds “official” label to those accounts.

So what’s the point of the checkmark exactly? It seems me that charging $8 a month for it gives me a blue checkmark that says that I paid Twitter $8 a month. That’s it. There’s zero semblance of clout or status or whatever that Twitter’s current verification system gave to one who got what I called “the blue checkmark of validity.” So why should I fork over $8 a month based on that? That makes no sense. Besides, with this scheme there’s nothing stopping a rogue nation who say, wants to spread misinformation, from giving a bunch of bot accounts Twitter Blue subscriptions to get the check mark and as a bonus their Tweets will show up on more timelines more often because that’s a feature of Twitter Blue. What could go wrong there?

This is half baked scheme cooked up by Elon Musk. In fact, I would go as far as saying that this is a farce at this point. Maybe someone should tell Musk to take a time out and come back when he has some real ideas that would stop people and advertisers from fleeting the platform. Or alternately, he could sell Twitter to a bunch of people who know how to run a business and simply get out of their way. I’m good with either option at this point.

Salesforce Apparently Cut “Hundreds” Of Employees On Monday

Posted in Commentary with tags on November 9, 2022 by itnerd

Even before the news that Meta has slashed thousands of jobs hit the wires, news filtered out on Tuesday that customer relationship management software provider Salesforce has cut jobs on Monday. CNBC has the details:

Salesforce on Tuesday confirmed that it cut some employees this week after the enterprise software maker saw demand lighten in some countries and industries.

Protocol reported earlier on the cuts, saying they could affect up to 2,500 employees. One person familiar with the matter said Salesforce let go of fewer than 1,000 people Monday. At the end of January it employed 73,541 people. In August Salesforce said in a filing that headcount rose 36% in the past year “to meet the higher demand for services from our customers.”

“Our sales performance process drives accountability. Unfortunately, that can lead to some leaving the business, and we support them through their transition,” a Salesforce spokesperson told CNBC in a statement.

With a looming recession, I’m expecting to be writing a lot of stories like this. And the thing is that I work with a number of people that are employed by Salesforce. I’ll be pinging them to make sure that they still have jobs because things are getting brutal out there.

Is Elon Musk Selling Tesla Stock To Keep The Lights On At Twitter?

Posted in Commentary with tags , on November 9, 2022 by itnerd

A reader pointed me towards a series of Tweets last night that make it look like that Elon Musk is selling a significant amount of Tesla stock all of a sudden:

Four billion dollars isn’t a small amount. Thus I have to assume that it’s one of two reasons that’s driving this stock purchase:

Perhaps it’s both at the same time. The fact is that we don’t know and can only speculate as a result. And chances are, Musk isn’t going to say. But I can say that selling this much Tesla stock is going to cause Tesla’s stock price to drop. In fact, it is down 3% as I type this which was early this morning while it was still dark. That will anger Tesla stock owners if it stays there or goes lower when the markets open. So he may end up having a new problem to deal with on top of Twitter. Which will make Wednesday a difficult day for Elon.

Meta To Axe 11,000 Employees

Posted in Commentary with tags on November 9, 2022 by itnerd

We were waiting for the axe to fall on Meta employees after rumours of thousands of job cuts surfaced. And now the axe has fallen:

Meta will lay off more than 11,000 employees, CEO Mark Zuckerberg told workers in a message on Wednesday. 

The layoffs will reduce the company’s workforce by about 13%, according to Meta, the parent company of Facebook, Instagram and WhatsApp. 

“I want to take accountability for these decisions and for how we got here,” Zuckerberg told employees. “I know this is tough for everyone, and I’m especially sorry to those impacted.” 

Zuckerberg said the development follows his decision to “significantly increase our investments” at the start of the pandemic. He told employees he made that decision based on the belief that e-commerce would continue to grow and provide a strong source of revenue post-pandemic — a prediction that turned out to be wrong, he said.

This is still a developing story so I will be interested to see where these cuts hit. For example, will this affect his Metaverse project? Or is that a sacred elephant that won’t be touched? Knowing details like that will give insight into where Meta is as a company, and what is important to them.

Stay tuned for more details as the come.

Someone Has Created A List Of Verified Twitter Users Who Are Now On Mastodon…. Cue The Temper Tantrum By Elon Musk

Posted in Commentary with tags on November 9, 2022 by itnerd

I’ve been on Mastodon for a couple of days now (my handle by the way is @The_IT_Nerd@noc.social). And while I figure out how this decentralized social media network works, I trip over some interesting pieces of information. Take this list for example that is created by Dr. Jorge Caballero (previously @DataDrivenMD on Twitter. It’s a list of verified people who have moved to Mastodon. And this list gets updated daily. Scrolling through the list I see many names that I recognize. Notable journalists, organizations like Human Rights Watch, and actors like Kathy Griffen among others.

The existence of this list should make Elon Musk either sweat bullets or lose his mind in a Tweet storm. It might be too much to ask that it also makes him reconsider what he’s doing to Twitter and then take action to make a better place before its too late. But I am likely expecting too much.

Soccer Commentator Voice Available On Waze

Posted in Commentary with tags on November 8, 2022 by itnerd

Soccer (or football) is a global sensation and the most widely viewed sport in the world. For the first time, Waze is giving drivers a way to represent their favourite team and country. 

Available now, drivers using Waze can activate a soccer experience in the app:

* Soccer-inspired voice navigation available in English, French, Spanish and Portuguese

* Your car icon on the Waze map can be changed to the Automoball, a car outfitted for the ultimate soccer fans

* Drivers can set a Mood representing their favourite country 

Samples of the on-road commentary experience include: 

ENGLISH:

Take the first exit! Then it’s onward to glory!

Hazard reported ahead. Getting through that defence could prove tricky.

FRENCH:

Nous sommes tous prêts à vous supporter. Ramenez-nous le trophée à la maison !

Bravooooo, vous l’avez fait : Vous avez ramené le trophée à la maison ! On se retrouve demain pour la parade en bus ?

Quel match ! Quel parcours sans faute ! Quel pied ! Merci de nous avoir suivi !

Danger signalé devant. On la joue simple.

SPANISH:

El árbitro está a punto de dar el pitazo inicial. Sabemos que este equipo tiende a arrancar a gran velocidad, pero no sabemos cuál será la estrategia de hoy… 

Todo listo. El jugador sale a la cancha con actitud ganadora.

El jugador ha llegado a su destino. Ha sido un partido extraordinario con lo mejor del fútbol. 

Accidente reportado más adelante. El jugador pisa la pelota y avanza con calma.

PORTUGUESE:

Pegue a primeira saída

Eita! Acidente reportado à frente.

Vai começar! O melhor do mundo não esquece o cinto.

Receeeba esse destino, véi! Chegou! Graças ao Waze

To activate the soccer experience, tap “My Waze” and “Drive with a commentator.” Users in Brazil can select “Drive with Luva de Pedreiro” and hear navigation directions from the fan-favourite influencer in that country. 

A blog post with details can be found here:

https://blog.google/waze/goal-take-your-next-drive-with-a-soccer-commentator/

Guest Post: US military veterans lost over $560 million to scams in the last 5 years

Posted in Commentary with tags on November 8, 2022 by itnerd

Military veterans and their families have special government resources available to them. Unfortunately, scammers perceive these benefits as easy prey.

According to the data presented by the Atlas VPN team, US army veterans lost $563 million to scams in the last 5 years. In total, military retirees reported 556,807 cases of fraud.

Miscellaneous investment scams have cost veterans $105.5 million since 2018. Former military members reported a total of 4,206 instances of scammers offering fake investments.

Business impostors stole $71.2 million from veterans in the last 5 years. Military retirees reported 49,617 cases of scammers impersonating businesses. Fake prizes, sweepstakes, and lotteries resulted in $62.1 million in losses to veterans. FTC received 11,635 reports of such scams taking place.

Government impostors scammed $60.9 million out of veterans in the last 5 years. These types of scams were the most popular among fraudsters, as FTC received 55,449 reports of fraud.

Romance scams have cost $53.5 million to veterans since 2018. Military retirees reported 3,766 instances of such fraud. Furthermore, tech support scams cost veterans $41.7 million. In total, the FTC received 15,726 reports about romance scams.

To read the full article, head over to:

https://atlasvpn.com/blog/us-military-veterans-lost-over-560-million-to-scams-in-the-last-5-years

Cradlepoint Announces Availability Of 5G-Optimized SD-WAN That Is Network Slicing-Ready

Posted in Commentary with tags on November 8, 2022 by itnerd

Cradlepoint today announced the availability of the first 5G-optimized SD-WAN solution, designed to close the gap between enterprises and network operators to make network slicing a reality. The solution is part of NetCloud Exchange (NCX), an extension of Cradlepoint’s NetCloud solution that integrates security, SD-WAN, and Zero Trust into a single Wireless WAN architecture.  

5G is quickly emerging as essential WAN infrastructure, enabling agile connectivity for vehicles, IoT devices, remote workers, and more. One of the most anticipated 5G features across enterprises is network slicing, offering organizations distinctive levels of end-to-end performance across cellular networks. With mass 5G deployments on the horizon, SD-WAN plays a critical part in the successful rollout and adoption of 5G Standalone networks with network slicing, the availability of which will accelerate through 2023. 

Cradlepoint’s NetCloud Exchange allows organizations to create multiple modem WAN interfaces aligned to slice instances defined by 5G SA networks. Organizations can then apply application-based policies to steer traffic to unique network slices, whether it is a type of ultra-reliable low latency slice, an enhanced mobile broadband slice, a machine-to-machine slice, or a custom slice defined by the operator. 

Cradlepoint has also made some critical adaptations to traditional SD-WAN technology so that it performs effectively across 5G WANs. Key enhancements include:

  • Consideration of cellular-specific attributes when steering traffic: NCX’s SD-WAN solution considers cellular-centric attributes such as available bandwidth and data usage when steering traffic, enabling more cost-effective and reliable 5G networking. 
  • Preservation of bandwidth across metered links: The solution uses in-line traffic to calculate WAN performance metrics, preventing impacts on data plans and eliminating the administrative burden of manually scheduling measurements.
  • Integration of Cradlepoint Cellular Intelligence to provide better insights and visibility of 5G networks: Incorporates comprehensive cellular insights that include cellular service provider visibility, the ability to view cellular signal strength and the ability to plot the location of both SD-WAN routers and the serving cell towers on a map for optimal placement of devices. 

NetCloud Exchange’s SD-WAN solution leverages the NetCloud Exchange Service Gateway, the Secure Connect solution, and select Cradlepoint routers for deployment. It is fully managed through NetCloud Manager, Cradlepoint’s comprehensive cloud management and orchestration platform, and is generally available this month.  

For more information on Cradlepoint’s NetCloud Exchange SD-WAN solution, including details on availability, please visit the following: https://cradlepoint.com/products/sd-wan/.