Subscribe to Email Updates

Subscribe

Author: Michael Rosen

Michael is Director of Technical Product Marketing for Bitdefender’s Data Center and Network Security Products. He has an MBA in Information Systems, a JD in Law, and 20 years of experience bringing innovative enterprise security software systems to market. Michael enjoys diving deep into products and making technical content accessible to general audiences.

All about Virtualization and Cloud Security | Recent Articles:

HVI Blocks SIGRed, Prevents Zero-Day Execution from Suspicious Memory Regions

Jul 16 by Michael Rosen
  • Windows DNS server remote code execution vulnerability permits full takeover of infected systems
  • Wormable exploits can spread via malware between vulnerable computers without user interaction
  • SIGRed vulnerability impacts nearly all versions of DNS in Windows Server dating back over 17 years
  • Hypervisor Introspection (HVI) prevents zero-day code execution from suspicious memory regions

On July 14, Microsoft published Security Vulnerability CVE-2020-1350 describing a longstanding, broad-based Windows DNS server remote code execution vulnerability whereby Windows Domain Name servers fail to properly handle malformed DNS requests, allowing an attacker to corrupt memory and run arbitrary code in the context of the Local System Account. All Windows servers that are configured as DNS servers are at risk from this critical (CVSS 10) vulnerability—which Microsoft acknowledges dates back at least 17 years—putting directly at risk multiple versions of Windows Server 2008, 2012, 2016, and 2019 in widespread production worldwide.

Read More

MDR Creates New Revenue Opportunities for Managed Services Providers

Jul 16 by Michael Rosen
  • Managed Detection and Response is one of the fastest growing areas of cybersecurity with a 30.4% CAGR
  • Huge revenue opportunity with MDR for MSPs to help customers that lack security extended teams
  • Opportunities involving MDR tend to be larger, stickier, and foster deeper customer relationships than tools
  • MDR solves key customer gaps in alert response management, technical skills, and overall security outcomes

MSPs, are you thinking about jumping into managed security services?

Read More

Beyond the Hype – Putting MDR Service Providers to the Test with Forrester

Jun 15 by Michael Rosen
  • Managed detection and response programs vary widely so carefully evaluate service provider competencies
  • Beware of buzzwords in MDR vendor claims that provide little insight into their true service capabilities
  • Focus your MDR goals on achieving superior security outcomes, not just on managing the flow of alerts
  • Effective MDR integrates people, processes, and technology to provide wide coverage at an affordable cost
Read More

It’s Time to Step Up Linux Server and Container Workload Security

Jun 15 by Michael Rosen
  • Linux Server security historically pales in comparison to what has long been available for Windows Servers
  • Transient containers frequently run the most sensitive business workloads yet are blind to security teams
  • Security often breaks when upgrading server OS or changing multi-distro Linux configurations
  • Server Security for Linux and Containers Beta Evaluation Program enrolling now
Read More

Adding MDR Services to EDR is an Easy Way to Improve Security Outcomes

May 19 by Michael Rosen
  • EDR alerts require rapid and thorough investigation and response to deliver beneficial security outcomes
  • Your business may be at risk and attackers can sneak in and remain if you don’t keep on top of your alerts
  • Upgrading to MDR lets you quickly and painlessly add network security analytics visibility to your defenses
  • MDR brings critical security response capabilities found at Fortune 500 companies to midmarket customers

Raising defenses to meet the demands of the changing threatscape

Read More

How to Evaluate Competing MDR Service Providers

Apr 09 by Michael Rosen
  • Managed detection and response services vary widely so carefully evaluate competencies against your needs
  • MDR delivery and execution success depends on the service provider’s people, processes, and technology
  • Effective response requires game-planning pre-approved actions and escalations for foreseeable events
Read More

Are You Ready for Managed Detection and Response?

Mar 25 by Michael Rosen
  • Security’s challenge is matching awareness of external threats to internal goals and the ability to execute
  • Managed Detection and Response addresses key customer gaps in visibility, alerts, skills, and outcomes
  • Outsourcing security operations to a managed SOC allows internal teams to focus on higher-value projects
Read More

Hypervisor Introspection Thwarts Web Memory Corruption Attack in the Wild

Feb 10 by Michael Rosen
  • New remote memory corruption vulnerability in Internet Explorer browsers allows for full takeover of infected systems
  • Bitdefender has confirmed exploitation in the wild of CVE-2020-0674 with analysis of 2 distinct executable payloads
  • Hypervisor Introspection delivers true zero-day protection by preventing all common memory exploit techniques
Read More

GravityZone Sandbox Analyzer On-Premises Now Generally Available

Dec 04 by Michael Rosen
  • Bitdefender announces the general availability release of GravityZone Sandbox Analyzer On-Premises
  • Automates suspicious file submission from standard ICAP clients including web, email, and cloud gateways
  • Improves targeted attack detection through Golden Image management and parallel sample detonation
Read More

Implementing Security Best Practices in the Virtual Data Center

Nov 06 by Michael Rosen
  • Virtual data center security must be agile and mapped in real-time to virtual infrastructure management tools
  • Offloading of anti-malware scanning improves user experience, reduces redundant scans, and provides high availability
  • Born-secure VM instantiation ensures compliance, improves virtualization density, and minimizes application latency
Read More

Bitdefender Expands Sandbox Workflows and Use-Cases with On-Prem Deployment

Jul 11 by Michael Rosen
  • Bitdefender announces controlled availability release of GravityZone Sandbox Analyzer On-Premises 
  • Improves targeted attack detection across multiple vectors with enhanced data security and privacy 
  • Integrates with Bitdefender and third-party solutions for complex workflows and automated response  
Read More

Cloud Security




Subscribe to Blog Updates

Posts by Categories

Latest Tweets