Each business day MSSP Alert delivers a quick lineup of news, analysis, and chatter from across the MSSP, MSP, and cybersecurity world.
Reaching Our Inbox:
Send news, tips and rumors to Managing Editor Jim Masters: [email protected]
Today’s MSSP Alert Market News:
1. AI Risk Scoring Release: Invicti, a provider of application security testing solutions, has unveiled its new AI-enabled Predictive Risk Scoring capability. The feature assigns predicted risk to applications and helps organizations gain a strategic view of their overall application security risk. Predictive Risk Scoring is currently available to Invicti customers using both Acunetix and Invicti (formerly Netsparker) product lines.
2. MSP Product Launch: Produce8, a work analytics vendor, has delivered a new release of its flagship app, designed to give MSPs and their customers' insight into the impact of meetings on productivity and wellbeing. New features include the ability to capture employee sentiment, integrations for video call data, calendar and schedule integrations and organizational metrics to measure the financial impact of time spent in calls and meetings, the company said.
3. Ransomware Research Report: ExtraHop, a specialist in cloud-native network detection and response (NDR), has released its third annual Global Cyber Confidence Index, which found organizations are generally ill-equipped to manage and mitigate their cyber risk following a significant increase in ransomware attacks and cybersecurity incident downtime. Although an overwhelming majority (88%) of IT and cybersecurity decision makers said they are confident in their organizations’ ability to manage cyber risk, most acknowledged that they are frequently the victim of ongoing threats and are falling behind when it comes to identifying and remediating threats. In fact, 91% of organizations made ransomware payments last year, ExtraHop reported.
4. Cyber Defense Release: Cybersecurity software and services provider Fortra recently added high-fidelity threat intelligence with timely, curated data to level the playing field and provide cybersecurity analysts the edge needed to stay a step ahead of modern threat actors, the company said. Intelligence from these technologies is fed into the Fortra Threat Brain, where it is used to enrich its solutions and deliver intelligence services to customers.
5. MITRE ATT&CK Coverage Release: Stellar Cyber, an Open XDR specialist, has brought to market its MITRE ATT&CK Coverage Analyzer, enabling users to quickly visualize the impact of data source changes on their ability to detect threats in their specific environments. With this new tool, free of charge to all existing customers, security teams can baseline their existing MITRE ATT&CK coverage and then run various data sourcing scenarios, getting real-time feedback. This instant ability to model data sourcing options ensures security teams make the right decisions to get the desired security coverage, the company said.
6. Security Partnership: Trustwave, a cybersecurity and managed security services specialist, has formed a strategic partnership with Telarus, a technology services distributor. Telarus technology advisors can now leverage Trustwave’s comprehensive offensive and defensive cybersecurity portfolio, including managed detection and response (MDR), managed security services (MSS), cyber advisory, penetration testing, database security and email security, to keep their clients secure and reduce cyber risk, the companies said.
7. Bug Bounty Program: Portnox, a provider of cloud-native, zero trust access control solutions, announced it will soon launch a private bug bounty program with Bugcrowd, a specialist in crowdsourced security. The Portnox bug bounty program will offer a bounty for ethical hackers to uncover and report software security vulnerabilities within Portnox's production services. Bugcrowd will manage the submission and reward process, which is designed to ensure a streamlined experience for all participants.
8. Threat Detection Advancement: Secureworks now offers the ability to integrate vulnerability risk context with threat detection to prevent attackers from exploiting known vulnerabilities and expedite response times, improving an organization's security posture. The integration between Taegis XDR and Taegis VDR enables customers and partners to view known vulnerabilities in the context of threat data to accelerate investigation and remediation plans. Taegis is the first security platform to link risk-based vulnerability management with threat detection and response, Secureworks said.
9. Cyberattack Report Released: Mandiant, part of Google Cloud, has released the findings of its M-Trends 2024 report. The 15th annual report provides expert trend analysis based on Mandiant frontline cyberattack investigations and remediations conducted in 2023. The report reveals that organizations globally have made meaningful improvements in their defensive capabilities, identifying malicious activity affecting their organization more quickly than in previous years. The report also takes a look at notable threat actors and campaigns, providing a focused look at threat activity by region.
10. M365 Security Release: Trellix, a cybersecurity company and XDR specialist, has brought to market Trellix Email Security for Microsoft Office 365. Combining threat detection, threat intelligence and security expertise, Trellix offers Microsoft Office 365 customers a more cost-effective alternative to Microsoft Defender for Office, the company said.
