RunSafe Security’s Cyberhardening Platform Earns Iron Bank Approval, Boosting Embedded Defense for DoD

Posted in Commentary with tags on November 20, 2025 by itnerd

RunSafe Security today announced that the RunSafe Security Platform is now available on Iron Bank, the Department of Defense’s (DoD) hardened repository of pre-assessed and approved development, security, and operations (DevSecOps) solutions. As a verified Iron Bank publisher, RunSafe Security’s platform will provide DoD teams with access to Software Bill of Materials (SBOM) generation, supply chain risk management (SCRM), and code protection within a trusted ecosystem.

Iron Bank is built to help defense programs quickly deploy new tools without spending months navigating approval processes. Every product listed on Iron Bank goes through rigorous security assessments, container hardening, and compliance validation. Because the containers are scanned daily for vulnerabilities, DoD teams gain access to resilient tools that keep the software supply chain secure and allow software to be deployed faster. With RunSafe listed as a verified publisher, DoD teams and integrators can now access the company’s platform directly from Iron Bank, making it easier for defense programs to integrate.

The RunSafe Security Platform addresses some of the toughest challenges in embedded software security. Through the company’s platform on Iron Bank, organizations can access:

  • C/C++ SBOM Generation – RunSafe provides the authoritative build-time SBOM generator for embedded systems and C/C++ projects. Automating SBOM generation is critical for meeting DoD requirements, especially for unstructured C/C++ code where traditional SBOM tools fall short.
  • Supply Chain Risk Management – SCRM capabilities enable DoD teams to take action, not just generate a static SBOM. Teams can monitor for new vulnerabilities and check license enforcement and provenance. Additionally, RunSafe’s binary analysis identifies potential zero-day risks, helping organizations to rely not only on CVEs but also to quantify the risk of future weaknesses that attackers could target.
  • Runtime Code Protection – RunSafe hardens binaries against exploitation through moving target defense, such as Runtime Application Self Protection (RASP), defending weapons systems at runtime to increase resilience. This resilience applies to future zero days as well, providing fielded weapon systems protection between software upgrade cycles that can be two years apart.

For organizations working to modernize DevSecOps practices, automate SBOM generation, or secure embedded systems without code rewrites, RunSafe containers are available on Iron Bank by logging in and accessing the Iron Bank repository here.

To request a consultation to learn more about the RunSafe Security Platform and Iron Bank, please visit https://runsafesecurity.com/consultation-request/.

RunSafe Security Attending 2025 Alamo Cybersecurity Exposition (ACE) in December

Additionally, RunSafe Security is attending the 2025 Alamo Cybersecurity Exposition (ACE), an annual conference produced by the Alamo Armed Forces Communications and Electronics Association (AFCEA). The Exposition will take place from December 2–5, 2025, at the JW Marriott San Antonio Hill Country Resort & Spa in San Antonio, Texas. Alamo ACE is an annual event that supports the military community and provides access and insight into key senior leaders’ perspectives on current developments in cyberspace. To arrange a meeting with a member of the RunSafe Security team, contact: staci@runsafesecurity.com.

Health Standards Organization (HSO) and Kyndryl Partner to Accelerate AI and Advance Global Health Care Quality

Posted in Commentary with tags on November 20, 2025 by itnerd

Kyndryl and Health Standards Organization (HSO), a global not-for-profit organization dedicated to improving health care quality and patient safety, today announced a collaboration to build an enterprise data platform on Microsoft Fabric hosted on Azure. This transformative initiative will enable HSO to unify its vast data resources, dramatically improving the speed and accuracy of reporting, analytics and decision-making to help it to expand its reach and support more people. 

HSO develops evidence-informed, consensus-based standards across more than 100 areas of health and social services around the world. These standards are shaped by input from patients, providers and policymakers and are supported by tools that help organizations implement and improve care delivery. Today, HSO’s standards have been adopted by 14,000 care sites globally, such as hospitals, care homes and social services sites.

The new platform will automate data workflows and enable faster, more trusted insights. It will also support advanced analytics, better forecasting, and improved visibility across the organization, so that HSO can spend more time working on activities that directly support improving health care quality.

With Kyndryl’s support, HSO is rolling out a comprehensive data governance program to strengthen data quality and support compliance, coupled with a change management strategy that encompasses stakeholder communications, skills assessments and upskilling initiatives. Together, they will create multiple proof-of-concept projects to validate AI, machine learning and business intelligence use cases.

The Kyndryl Vital team played a key role in the engagement, working side-by-side with HSO and multiple data & AI experts from Kyndryl Consult to define challenges, prototype solutions and co-develop strategies aligned with HSO’s vision. This designer-led, collaborative approach supported tailoring the platform to HSO’s needs and goals.

Outpost24 named Challenger and Fast Mover in GigaOm Radar for Penetration Testing as a Service (PTaaS) 

Posted in Commentary with tags on November 20, 2025 by itnerd

 Outpost24, a leading provider of cyber risk management and application security solutions, today announced that it has been named a Challenger and Fast Mover in GigaOm’s Radar for Penetration Testing as a Service (PTaaS). GigaOm is a global practitioner-led analyst firm that provides research, analysis, and advisory services for IT and security decision-makers. 

Outpost24 advanced its position in the 2025 Radar, moving from the Feature Play quadrant in 2024 to the Maturity and Platform Play quadrant. This significant progression reflects continued investment in scalable, integrated testing capabilities and the company’s commitment to delivering effective security validation for modern digital environments. 

The GigaOm Radar for Penetration Testing as a Service provides a comprehensive evaluation of vendors based on platform capabilities, testing methodologies, customer experience, and alignment with emerging market needs. The report highlights the industry shift from point-in-time penetration tests to continuous validation delivered through unified platforms. It also notes the growing adoption of flexible consumption-based models that help organizations optimize testing coverage while controlling cost,  a trend reflected in Outpost24’s own approach through CyberFlex’s pay-as-you-go credit model.

 GigaOm recognized the following Outpost24 strengths: 

  • Robust API access   
  • Customizable testing methodologies  
  • Streamlined procurement and onboarding  
  • Flexible consumption capabilities.  

Outpost24’s Penetration Testing as a Service solution, CyberFlex, combines expert-led penetration testing with continuous attack surface visibility to give organizations a unified and streamlined experience. By integrating automated discovery with testing workflows, CyberFlex provides continuous visibility across an organization’s external application attack surface, seamless access to results, and actionable guidance for faster remediation. The solution uses automatic data gathering, enrichment, and AI-driven analysis to identify vulnerabilities and attack paths across both known and unknown internet-facing assets. 

To download a complimentary copy of the 2025 GigaOm Radar for Penetration Testing as a Service (PTaaS), please visit this link

For more information on Outpost24’s CyberFlex solution, visit https://outpost24.com/products/cyberflex/

Transportation provider notifies 123,000 people of a data breach

Posted in Commentary with tags on November 20, 2025 by itnerd

Comparitech has reported that Transportation provider WEL Companies this week confirmed it notified 122,960 people of a January 2025 data breach that compromised names, SSNs, and state-issued ID info. 

Rebecca Moody, Head of Data Research at Comparitech, provided the following commentary. 

“Large data breaches following ransomware attacks on the transport sector are unusual. This is likely due to these companies not often being in possession of large datasets and/or highly sensitive information, and hackers being more focused on causing disruption by encrypting systems. 

However, this breach on WEL Companies demonstrates how, if the data’s there to steal, hackers are going to try and make the most of their attack in a bid to increase their chances of securing a ransom payment. As WEL Companies deals with a multitude of companies (including Fortune 500 businesses) and has hundreds of drivers, RansomHub seized the opportunity of data theft and caused widespread disruption by doing so. It is the third-largest data breach on a transport company following a ransomware attack since we started recording data in 2018.”

The fact that a new sector is being targeted by threat actors is likely not a good thing because it illustrates that threat actors are running around doing whatever they want. And that needs to stop.

Astro Malaysia Ensures 99.99% Uptime for Critical SAP and Oracle Operations with SIOS High Availability Solution

Posted in Commentary with tags on November 20, 2025 by itnerd

 SIOS Technology Corp today announced that Astro Malaysia Holdings Berhad has achieved 99.99% uptime and ensured uninterrupted availability for its critical SAP and Oracle operations in the AWS cloud using SIOS LifeKeeper for Linux. With SIOS, Astro has strengthened business continuity and operational efficiency across its enterprise systems while gaining confidence in the resiliency of its cloud infrastructure.

Astro, Malaysia’s leading content and entertainment provider, serves 5.2 million homes, 8,900 businesses, 16.3 million weekly radio listeners, and 13.5 million monthly digital visitors. As the company migrated its core SAP and Oracle database systems to AWS, it required a robust HA solution certified by SAP, AWS, and Oracle Linux capable of delivering seamless uptime, protecting against failures, and minimizing management complexity.

After extensive evaluation, Astro selected SIOS LifeKeeper for Linux, the only SAP-certified HA solution supported by AWS for Oracle Linux, for its proven reliability, ease of administration, and performance assurance.

SIOS made it possible to move the most important business systems to AWS with complete confidence. Their team provided excellent support and regular communication, helping us maintain a high-performing HA environment every step of the way.

Reliable Results and Operational Efficiency

Since implementing SIOS, Astro has achieved measurable success, including:

  • 99.99% uptime: Downtime has been effectively eliminated, allowing Astro to maintain low recovery time (RTO) and recovery point (RPO) objectives.
  • Operational efficiency: Minimal administrative effort is required, freeing IT staff to focus on higher-value strategic projects.
  • Confidence in resilience: The IT team no longer worries about outages or data loss, ensuring critical SAP applications remain continuously available.
  • Cost avoidance: By preventing unplanned downtime, Astro has avoided significant financial and operational disruption across the company.

With SIOS providing reliable HA and DR protection on AWS, Astro continues to enhance its cloud-based infrastructure and expand services with confidence in its ability to maintain continuous availability and performance.

Black Friday Tech Deals from Anker — Up to 61% Off

Posted in Commentary on November 20, 2025 by itnerd

With Black Friday around the corner, Anker Innovations is rolling out some of our biggest tech savings of the year — up to 61% off across mobile charging, home security, projectors, audio, and smart lifestyle tech.

This year’s lineup even includes Canada’s #1 best-selling smart security camera, now available at a rare Black Friday discount.

  • Anker Prime Power Bank (26K, 300W), $219.99 (21% off from $279.99). Available on Amazon and Anker.com
  • Anker Prime Power Bank (26K, 300W), $219.99 (21% off from $279.99).  Available on Amazon and Anker.com
  • Anker Prime Docking Station(14-in-1, Triple Display, DisplayLink), $314.99 (30% off from $449.99). Available on Amazon and Anker.com.
  • Anker Prime Docking Station (14-in-1, 8K, Thunderbolt 5), $419.99 (30% off from $599.99). Available on Amazon and Anker.com.
  • Anker Nano Charger (45W), $34.29, (30% $48.99). Available on Amazon and Anker.com.
  • Anker Nano Power Bank(5K, MagGo,Slim), $48.99 (30% off from $69.99). Available on Amazon and Anker.com.
  • Anker Nano 5-Port Fordable Travel Charger, $31.99 (20% off from $39.99). Available in black and white on Amazon and Anker.com
  • Anker Power Bank (25K, 165W, Built-In and Retractable Cables), $113.99 (33% off from $169.99). Available on Amazon and Anker.com
  • Anker Laptop Charger (140W, 4-Port, PD 3.1) with USB-C Cable, $71.99 (28% off from $99.99). Available on Amazon and Anker.com
  • eufy X10, $499.99 (61% off from $1299.99). Available on Amazon and eufy.com
  • eufy E25, $749.99 (46% off from $1399.99). Available on Amazon and eufy.com.
  • eufy Wearable Breast Pump S1, $179.99 (33% off from $269.99). Available on Amazon and eufy.com
  • eufy Security SoloCam S340, $159.99 (37% off from $259.99). #1 best seller on Amazon. Available on Amazon and eufy.com.
  • eufy PoE NVR Security System S4 Max, $1249.99 (30% off from 1799.99). Available on Amazon and eufy.com.  
  • Nebula X1 Projector, $2999.99 (30% off from $3999.99). Available on Amazon and nebula.com
  • soundcore AeroClip, $129.99 (27% off from $179.99)
  • Available in Blue, Champagne Mist, Midnight, and Rosy Brown on Amazon and soundcore.com.
  • soundcore AeroFit 2, $79.99 (38% off from $129.99). Available in Black, White, Minty Green, and Midnight Blue on Amazon and soundcore.com
  • soundcore Space One Pro, $169.99 (37% off from $269.99). Available on Amazon and soundcore.com.
  • soundcore Liberty 5, $99.99 (28% off from $139.99). Available on Amazon and soundcore.com.
  • soundcore Boom 2, $119.99 (38% off from $179.99). Available on Amazon and soundcore.com.

Action1 Expands to Linux

Posted in Commentary with tags on November 20, 2025 by itnerd

Action1 today announced the launch of its most significant product update to date: the expansion of its platform to include Linux patch management and AEM. With this release, Action1 becomes a unified cross-platform solution for autonomous endpoint management and patching across Windows, macOS, and now Linux.

This milestone reflects Action1’s ongoing strategy to help enterprises and MSSPs automate patch management and secure diverse IT environments with greater simplicity and control. The new capabilities cut patching time and costs, enabling organizations to refocus resources on strategic projects. Enterprise IT and MSSPs benefit from uniform, cross-platform, and autonomous patch management capabilities that keep all endpoints – regardless of operating system or application – up to date, secure, and compliant.

Purpose-Built for Enterprise IT and MSSPs: Unified Management at Scale

With this release, Action1 strengthens its ability to meet the demands of modern enterprise IT, offering:

  • Autonomous patch management across all major operating systems.
  • A single pane of glass for software vulnerability assessment across diverse environments in real time.
  • Automation, control, and compliance capabilities built for large-scale, hybrid enterprises and MSSPs.

What’s New in This Release

  • Linux Support for Unified Patch Management: A new Linux agent extends Action1’s platform to all major operating systems, enabling uniform patching, management, and automation across Windows, macOS, and Linux.
  • Enterprise-Wide Visibility: Consolidates reporting and dashboards across multiple enterprise business units or MSSP clients, giving IT teams unified real-time insight and faster vulnerability remediation at scale.
  • Enhanced Update Rings: Refined logic improves patch validation accuracy and rollout tracking, ensuring well-tested, more reliable patch deployments that don’t cause outages.
  • PowerShell Script Signing: Optional enforcement for trusted, digitally signed scripts helps compliance-driven organizations enforce security policies.
  • Simplified Connectivity: Agent communication now occurs over port 443 by default, reducing firewall configuration complexity in enterprise networks.
  • Expanded Software Repository: With 27 new Windows and 10 new macOS packages, Action1 broadens coverage for third-party application patching and software deployment, while leveraging the security of a privately maintained software repository not reliant on less-secure community-maintained alternatives such as Winget.

This release reaffirms Action1’s focus on organizations that demand secure, scalable, and autonomous endpoint management across mixed environments. By delivering unified cross-platform support, real-time enterprise-wide visibility, and advanced controls, Action1 continues to simplify vulnerability remediation, patching, and compliance on a global scale.

For more information, please visit www.action1.com.

Ericsson Mobility Report: differentiated connectivity services gaining momentum

Posted in Commentary with tags on November 20, 2025 by itnerd

5G Standalone (5G SA) deployments have triggered a notable 2025 growth in the number of communications service providers (CSPs) offering differentiated connectivity commercial models based on 5G SA Network Slicing – where CSPs guarantee quality of service for customer use cases through the allocation of slices of the network. The statistic is part of in-depth reporting, analysis and forecasting in the November 2025 Ericsson (NASDAQ: ERIC) Mobility Report (EMR).

More than 90 CSPs have now launched/soft-launched 5G Standalone (5G SA) networks – an increase of about 30 CSPs from the same period last year and 20 from the June 2025 EMR report.

EMR researchers identified 118 cases – across 56 CSPs – where network slicing is used to provide differentiated connectivity services.

Of the 118 cases – 65 have moved beyond proof of concept and into commercial services, across 33 CSPs. These are either subscription services or add-on packages for consumer or enterprise customers.

Twenty-one of the 65 commercial offerings – almost one third – were launched during 2025 alone.

The November 2025 EMR covers a new forecast timeframe, from 2025 through the end of 2031.

The new reporting EMR period also covers the first expected deployments of commercial 6G. Based on previous mobile generation cycles’ subscriptions uptake, EMR researchers expect the first commercial launches to be driven by leading service providers in front-runner markets – such as the U.S., Japan, South Korea, China, India, and some Gulf Cooperation Council countries.

Global 6G subscriptions are forecast to reach 180 million by the end of 2031, not including the early uptake of AI-enabled Internet of Things devices. The subscription uptake number could increase significantly if 6G launches earlier than previous cycles indicate.

Commercial 6G is expected to launch about a year later in Europe, compared to other countries, than was the case for 5G, primarily due comparably later deployments of 5G SA

As an ongoing major 5G use case, enhanced mobile broadband is forecast to top 6.4 billion 5G subscriptions by the end of 2031, comprising about two-thirds of all mobile subscriptions at the time. Some 4.1 billion of these subscriptions – about 65 percent – are forecast to be 5G SA.

In 2025 alone, 5G subscriptions are expected to top 2.9 billion by the end of the year – equating to about one third of all current mobile subscriptions – an increase of some 600 million subscriptions year-on-year.

In geographical coverage terms, 2025 saw an increase of 400 million people worldwide being able to access 5G. About 50 percent of the global population beyond mainland China is expected to have 5G coverage by the end of 2025.

Mobile network data traffic grew 20 percent between the third quarter of 2024 and the corresponding period in 2025 – a slightly larger than expected increase, driven by mainland China and India. Continued growth is forecast at an annual average of 16 percent through 2031.

5G networks are expected to manage 43 percent of all mobile data by the close of 2025 – up from 34 percent for the corresponding period last year. EMR experts forecast this to increase to 83 percent in 2031.

Fixed Wireless Access (FWA) broadband continues to grow as a 5G use case. The November 2025 EMR forecasts that about 1.4 billion people globally are expected to access FWA broadband by the end of 2031 – 90 percent via 5G.

EMR researchers have identified 159 providers that currently offer FWA services via 5G – amounting to approximately 65 percent of all FWA service providers. The number of service providers offering speed-based tariffs – a common monetization model for fixed broadband via fiber or cable – increased from 43 percent to 54 percent since the November 2024 EMR.

The 36-page November 2025 EMR includes three co-written use-case articles:

  • Singtel: 5G SA providing tailored experiences
  • Softbank: modernizing enterprise IT with 5G
  • SailGP: enhancing operations and viewer experiences with 5G

Ericsson will host related Ericsson Mobility Report online seminars at 09.00 (CET) and at 18.00 (CET) today, Thursday  November 20 . To join please register via this link.

Read the full November 2025 Ericsson Mobility Report via this link.

Based on unique Ericsson and partner network insights, the Ericsson Mobility Report has been the key industry reference for network data, performance, statistics, and forecasts since its launch in 2011.

Cayosoft Expands its Industry Recognized Hybrid Identity Protection Platform with New Guardian SaaS Offering 

Posted in Commentary with tags on November 20, 2025 by itnerd

 Cayosoft today announced a pivotal expansion in the deployment of its flagship platform–Cayosoft Guardian SaaS. Unveiled live at Microsoft Ignite 2025 (Booth #5332), this milestone marks a major evolution in identity security—empowering enterprises to detect, respond, and recover instantly, even when infrastructure is under attack.

The cloud delivery model builds on Cayosoft’s explosive business momentum and its continued recognition as a Representative Vendor in six Gartner reports over the past 12 months. For the first time, enterprises can now deploy the same award-winning Cayosoft Guardian hybrid-identity protection they trust as an always-on, maintenance-free service. Built for zero downtime and zero compromise, it brings continuous visibility, real-time threat detection, and instant rollback capabilities as a secure, fully managed cloud platform. The new SaaS deployment model will be generally available in Q1 2026.

A Significant Milestone in Hybrid Identity Protection
Modern enterprises face mounting risk from hybrid management complexity, misconfiguration, and cyber attacks. With Cayosoft Guardian SaaS deployment, organizations can maintain operational continuity and trust through continuous monitoring, automated alerting of misconfigurations and drift, and sustained resilience with instant rollback of unwanted changes, without maintaining on-premises systems.

Cayosoft Guardian SaaS Capabilities

  • Continuous Hybrid Change Monitoring: Real-time visibility of security drift and full audit trail across Active Directory, Entra ID, Teams, Intune, and Exchange Online, with instant rollback and recovery for any object or attribute.
  • One-Click Rollback & Automated Remediation: Reverses malicious or accidental changes in seconds to maintain uptime and compliance.
  • Fully Managed SaaS Delivery – Enterprise-grade protection with no infrastructure overhead, automatic updates, and built-in resilience.
  • Audit-Ready Reporting: Simplifies compliance for SOX, HIPAA, and GDPR, with detailed change history and evidence trails.
  • Zero-Trust Enforcement: Role-based access controls ensure privileged changes are authorized and verified.

Momentum and Market Validation
Cayosoft’s growth trajectory underscores the accelerating demand for hybrid identity continuity. Following triple-digit revenue growth in FY24 and 60% year-over-year growth in FY25, the company continues to expand globally across regulated sectors including healthcare, government, and financial services.

Reinforcing the credibility of Cayosoft’s solutions, the company has been recognized as a Representative Vendor in six Gartner reports within the last 12 months, including:

According to Gartner Peer Insights, Cayosoft Guardian received exceptional customer ratings, including 5/5 rating for Integration & Deployment and 4.8/5 rating for Product Capabilities and Support, further validating its ease of use, robust alerting, and operational reliability.

Cayosoft Guardian SaaS will be generally available in Q1 2026. Cayosoft will continue to develop and support on-premises versions of Cayosoft Guardian and Cayosoft Administrator.

Attendees at Microsoft Ignite 2025 can experience live demonstrations of hybrid identity monitoring and instant rollback at Booth #5332 or at the virtual booth.

To learn more or register interest in the SaaS deployment, visit www.cayosoft.com.

Vanderbilt Advanced Computing Center for Research and Education (ACCRE) Selects Hammerspace to Power Next-Generation Research Data Infrastructure

Posted in Commentary with tags on November 20, 2025 by itnerd

Hammerspace today announced that the Vanderbilt Advanced Computing Center for Research and Education (ACCRE) at Vanderbilt University has selected Hammerspace to modernize its research data infrastructure.

ACCRE, Vanderbilt’s campus-wide HPC resource and research support facility, provides advanced computing and storage services for faculty and students across disciplines ranging from genetics and physics to engineering and social sciences. With a mission to “explore and benefit from the new world of computing,” ACCRE enables researchers to run large-scale simulations, data analyses and machine learning models critical to advancing discovery.

To meet growing data demands across hundreds of research projects, ACCRE sought a more flexible and cost-efficient approach to managing petabytes of research data. Historically, ACCRE has operated separate systems for primary and archive storage, including Panasas, GPFS and LStore. ACCRE wanted a solution that could unify its diverse storage tiers, leverage commodity hardware and dynamically provision storage resources across compute and GPU nodes.

After evaluating many vendors, ACCRE selected Hammerspace to deploy a 10-petabyte environment integrating CPU/GPU server-local storage for Tier 0 performance, newly purchased commodity storage servers for Tier 1, and multi-petabyte archival capacity from its existing LStore environment, all under a single global namespace.

By adopting Hammerspace in combination with LStore, ACCRE expects to reduce its average cost of storage by 48% while providing faster, more flexible data access to the Vanderbilt research community. The Hammerspace Data Platform’s open architecture aligns with LStore’s key characteristics to use commodity hardware instead of proprietary storage appliances, improving flexibility and reducing vendor lock-in.