Each business day MSSP Alert delivers a quick lineup of news, analysis, and chatter from across the MSSP, MSP and cybersecurity world.
Reaching Our Inbox:
Send news, tips and rumors to Managing Editor Jim Masters: [email protected]
Today’s MSSP Alert Market News:
1. Bugcrowd Acquires Informer: Bugcrowd, a crowdsourced cybersecurity provider, has acquired Informer, an external attack surface management and continuous penetration testing specialist. This is technology M&A deal number 138 that ChannelE2E and MSSP Alert have covered so far in 2024. See more than 2,000 technology M&A deals for 2024, 2023, 2022, 2021, and 2020 listed here.
2. Zero Trust Collaboration: Illumio, a zero trust segmentation company, and Netskope, a secure access service edge (SASE) specialist, have formed a zero trust partnership to protect against breaches and build cyber resilience. The partnership combines Illumio ZTS with Netskope ZTNA Next via the Netskope Cloud Exchange platform to enable network and security teams to create zero trust policies that consistently secure access at an organization's perimeter and within its hybrid, multi-cloud infrastructure, the companies said.
3. Security Partnership: Code42, a data loss and insider threat protection specialist, is partnering with Mimecast, a global cybersecurity company, to release Mimecast for Incydr Flows. The integrated solution helps to protect organizations from data leaks and theft by giving users visibility into risky user activities across email, web and cloud while providing controls to stop and remediate exfiltration events, Code42 said.
4. MSP Service Offering: CompassMSP has brought to market Secure Path (formerly NetGarde), an enhanced suite of managed cybersecurity and compliance services. The CompassMSP portfolio includes managed and co-managed services solutions, AutoPilot and CoPilot, along with Secure Path. In tandem, the company unveiled a new logo and web design that "exemplifies its commitment to providing customers peace of mind via managed IT and cybersecurity," the company said.
5. Ransomware Alert: Kaspersky has identified ransomware attacks using Microsoft’s BitLocker to attempt encryption of corporate files. According to researchers, the threat actors remove the recovery options to prevent the files from being restored and use a malicious script with a new feature that can detect specific Windows versions and enable the BitLocker. The “ShrinkLocker” ransomware and its variants were observed in Mexico, Indonesia and Jordan. The perpetrators targeted companies in steel and vaccine manufacturing, as well as a government entity, Kaspersky said.
6. Funding Round: SOCRadar, a provider of enterprise-grade, end-to-end threat intelligence and brand protection, has completed its Series B funding round, raising $25.2 million. The round was led by PeakSpan Capital, with participation from Oxx. The funds will primarily be used to drive the company's expansion in the US market, invest in the EU market and continue to penetrate MSP and MSSP markets, the company said.
7. Cybersecurity Company Sold: Private equity firm Lightview Capital has sold CyberSheath to BV Investment Partners. CyberSheath helps sub-contractors comply with complex Department of Defense (DoD) cybersecurity regulations, including the Cybersecurity Maturity Model Certification (CMMC) paradigm to ensure its contractors align with DoD's information security requirements and measures are taken to protect sensitive data from cybersecurity attacks.
8. Fine Paid Over Cyber Breach: Intercontinental Exchange Inc. (ICE) will pay a $10 million penalty to settle charges its subsidiaries failed to immediately alert the Securities and Exchange Commission (SEC) of a cybersecurity incident. In April 2021, ICE discovered someone had installed a code into a VPN device used to remotely access the corporate network, but the personnel did not notify subsidiaries for several days. That delay meant the subsidiaries, including the New York Stock Exchange, violated agency rules that require immediate notification to the SEC. (Source: Reuters)
9. Device Security Solution: Addigy has unveiled extended compliance benchmarks for iOS and iPadOS devices and enhanced customization capabilities for all Apple devices. With this announcement, "Addigy offers the easiest, fastest, and most flexible way for IT admins and MSPs to secure Apple devices, at any scale," the company said. MSPs can also modify pre-built policies and create and manage unique rule sets for each individual client from one portal.
10. AI Security Report Writing Tool Debuts: PlexTrac, a specialist in penetration testing, offensive security reporting and data management, has brought to market Plex AI. The AI-powered offensive security report writing tool offers real-time team collaboration to enable simultaneous report editing by multiple team members and a scheduler to help security teams keep assessments and engagements on track, the company said.
