All about Virtualization and Cloud Security | Recent Articles:

• Windows DNS server remote code execution vulnerability permits full takeover of infected systems
• Wormable exploits can spread via malware between vulnerable computers without user interaction
• SIGRed vulnerability impacts nearly all versions of DNS in Windows Server dating back over 17 years
• Hypervisor Introspection (HVI) prevents zero-day code execution from suspicious memory regions

On July 14, Microsoft published Security Vulnerability CVE-2020-1350 describing a longstanding, broad-based Windows DNS server remote code execution vulnerability whereby Windows Domain Name servers fail to properly handle malformed DNS requests, allowing an attacker to corrupt memory and run arbitrary code in the context of the Local System Account. All Windows servers that are configured as DNS servers are at risk from this critical (CVSS 10) vulnerability—which Microsoft acknowledges dates back at least 17 years—putting directly at risk multiple versions of Windows Server 2008, 2012, 2016, and 2019 in widespread production worldwide.

• Managed Detection and Response is one of the fastest growing areas of cybersecurity with a 30.4% CAGR
• Huge revenue opportunity with MDR for MSPs to help customers that lack security extended teams
• Opportunities involving MDR tend to be larger, stickier, and foster deeper customer relationships than tools
• MDR solves key customer gaps in alert response management, technical skills, and overall security outcomes

MSPs, are you thinking about jumping into managed security services?

• Managed detection and response programs vary widely so carefully evaluate service provider competencies
• Beware of buzzwords in MDR vendor claims that provide little insight into their true service capabilities
• Focus your MDR goals on achieving superior security outcomes, not just on managing the flow of alerts
• Effective MDR integrates people, processes, and technology to provide wide coverage at an affordable cost

• Linux Server security historically pales in comparison to what has long been available for Windows Servers
• Transient containers frequently run the most sensitive business workloads yet are blind to security teams
• Security often breaks when upgrading server OS or changing multi-distro Linux configurations
• Server Security for Linux and Containers Beta Evaluation Program enrolling now

• EDR alerts require rapid and thorough investigation and response to deliver beneficial security outcomes
• Your business may be at risk and attackers can sneak in and remain if you don’t keep on top of your alerts
• Upgrading to MDR lets you quickly and painlessly add network security analytics visibility to your defenses
• MDR brings critical security response capabilities found at Fortune 500 companies to midmarket customers

Raising defenses to meet the demands of the changing threatscape

• Managed detection and response services vary widely so carefully evaluate competencies against your needs
• MDR delivery and execution success depends on the service provider’s people, processes, and technology
• Effective response requires game-planning pre-approved actions and escalations for foreseeable events

• Security’s challenge is matching awareness of external threats to internal goals and the ability to execute
• Managed Detection and Response addresses key customer gaps in visibility, alerts, skills, and outcomes
• Outsourcing security operations to a managed SOC allows internal teams to focus on higher-value projects

• New remote memory corruption vulnerability in Internet Explorer browsers allows for full takeover of infected systems
• Bitdefender has confirmed exploitation in the wild of CVE-2020-0674 with analysis of 2 distinct executable payloads
• Hypervisor Introspection delivers true zero-day protection by preventing all common memory exploit techniques

• Bitdefender announces the general availability release of GravityZone Sandbox Analyzer On-Premises
• Automates suspicious file submission from standard ICAP clients including web, email, and cloud gateways
• Improves targeted attack detection through Golden Image management and parallel sample detonation

• Virtual data center security must be agile and mapped in real-time to virtual infrastructure management tools
• Offloading of anti-malware scanning improves user experience, reduces redundant scans, and provides high availability
• Born-secure VM instantiation ensures compliance, improves virtualization density, and minimizes application latency

• Bitdefender announces controlled availability release of GravityZone Sandbox Analyzer On-Premises 
• Improves targeted attack detection across multiple vectors with enhanced data security and privacy 
• Integrates with Bitdefender and third-party solutions for complex workflows and automated response