Connect with us

News

McAfee expands its MVISION portfolio

Published

on

McAfee, the device to cloud cybersecurity company,  announced new products expanding its McAfee MVISION portfolio, a first-of-its-kind solution that allows customers to deploy security on their terms as they move to the cloud. Joining McAfee MVISION ePO, McAfee MVISION Endpoint and McAfee MVISION Mobile, announced last July, the newly announced MVISION solutions, McAfee MVISION EDR and McAfee MVISION Cloud—unveiled today at McAfee MPOWER 2018—deliver comprehensive and integrated device-to-cloud data protection and threat prevention capabilities that give customers a simpler and faster approach to mitigating their risk of data loss.

“The MPOWER Cybersecurity Summit represents an opportunity for those attending to sharpen skills and chart a course to prepare for the future,” said Chris Young, chief executive officer, McAfee. “McAfee is delivering a cloud-native portfolio, designed to protect data and stop threats, from device to cloud. Digital transformation is inevitable; we urge our customers to utilize the MVISION portfolio to feel empowered against an expanding threatscape as they advance their organization.”

Digital transformation is driving the need for a cloud-first approach to security. For organizations to adopt the cloud with peace of mind, they not only need visibility into data and applications, but consistent data and threat protection policies across their data and applications wherever they reside. With the addition of MVISION EDR, MVISION Cloud and McAfee ePO-Unified Data Protection, McAfee is enabling organizations to mount a powerful threat and data-centric defense spanning from device to the cloud. These solutions are designed to give freedom and confidence to organizations that are accelerating their business through digital transformation initiatives.

McAfee MVISION EDR
McAfee MVISION EDR enables security teams to act faster and with higher precision so they can do more with their current staff and skill sets. Typically, organizations suffer from information overload when it comes to most EDR systems because they generate volumes of data and alerts that require skills—often in short supply—to interpret and investigate before action can be taken. MVISION EDR implements human machine teaming to enable analysts of all skill levels to be more effective and efficient. Integrated into the McAfee ePO management platform, analysts can identify threats, dive into context, review the results of automated investigations and take actions to respond.

McAfee MVISION EDR utilizes advanced analytics to identify and prioritize suspicious behavior from contextually rich endpoint data, helps guide and automate in-depth investigations to reduce the tactical strain on security analysts and enables rapid response with direct actions and broader integration to the security ecosystem. The solution delivers:

• Cloud-based analytics: Cloud analytics leverage the Mitre ATT&CK1 framework to uncover and prioritize a broad spectrum of suspicious behaviors, helping analysts quickly understand risk severity and take appropriate next steps: dismiss, respond or investigate.
• Artificial Intelligence (AI) driven investigation: Accelerates investigation and evidence gathering with dynamic investigation guides that address the cyber-skills gap by up-leveling junior analysts and improving senior analyst efficiency. In McAfee’s own internal security operations experience, the company was able to up-skill level-1 operators and achieve up to a 15x reduction in time to investigate.
• Rapid Response: Enables affected systems to be quickly contained with a single click, while ecosystem integrations support security team workflows and processes to increase operational efficiency.

“MVISION EDR approaches endpoint detection and response by providing automated investigation capabilities, making the tool more accessible to junior analysts and reducing the level of skill required for triage and investigations. This can help organizations maximize the value of EDR, accelerate processes, and improve analyst efficiency,” according to Jon Oltsik, Senior Principal Analyst, Cybersecurity with ESG

McAfee MVISION Cloud
As information moves from protected, on-premises corporate networks, to the cloud, it can be very difficult for organizations to ensure its protection. McAfee has solved this problem with MVISION Cloud, which brings together data protection and threat prevention across Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS). The McAfee MVISION Cloud platform enables enterprises to adopt cloud services while securing both sanctioned and unsanctioned cloud services, protect sensitive data across the cloud and stop the most advanced threats.

• Visibility into data, context and user behavior: Provides visibility and control across all cloud services, employing a combination of API- and proxy-enabled approaches, with DLP policy that can be extended from devices to the cloud. This includes content scanning, logging and activity monitoring and threat and malware detection.
• Centralized management: Delivers consistent and comprehensive management across public cloud services spanning the SaaS, PaaS, and IaaS spectrum, like Microsoft Office 365, Salesforce and Amazon Web Services (AWS).
• Advanced Threat Protection: Protects against malware and external and insider threats through UEBA (User and Entity Behavior Analytics) driven by machine learning built for the scale and elasticity of cloud environments.

McAfee Device-to-Cloud Unified Data Protection
The latest integration between McAfee Endpoint DLP and Skyhigh Security Cloud DLP offers the same data loss prevention (DLP) policy engine across endpoints, networks and the cloud. McAfee Unified Data Protection offers users a single-pane-of-glass to manage all DLP incidents and reporting via McAfee ePO leading to simplicity, increased business efficiency and improved security.

“The new MVISION portfolio of Enterprise products is designed to help our customers stay on top of the evolving security needs, from device to cloud, with a solution that is simple, flexible, comprehensive and fast, so that our customers can act decisively and mitigate risks” said Raja Patel, vice president and general manager of Corporate Security Products, McAfee.

McAfee MVISION ePO, MVISION Endpoint, MVISION Mobile and MVISION Cloud is currently available. McAfee ePO-Unified Data Protection will be available late October and MVISION EDR will be available in Q1 2019.

McAfee Cybersecurity Services
To fully maximize MVISION, along with other McAfee products and solutions, McAfee also announced the McAfee Essential Success Plan, the third tier of its customer success plan. The Essential success plan–along with Premier and Enhanced–provides:

• a personalized, structured plan that combines success and escalation management
• consulting and education services
• expert guidance in building out security success plan
• technical support

Plus McAfee introduced a new Incident Response (IR) Service that focuses on ensuring customers are able to plan, remediate, and minimize the impact of a cyberattack. This service consists of a readiness assessment, using a best-in-class methodology, that prepares customers with a strong, actionable IR plan. It also includes IR experts who help customers respond more effectively, remediate, and recover when the emergency occurs.

Continue Reading

Financial

Gold’s Rising Appeal in the UAE Amidst Global Economic Shifts

Published

on

gold rising UAE

James Campion, Popular Investor at eToro said, “Gold’s rally could be just beginning as it is an asset well positioned for almost any eventuality. It provides significant protection to a US Federal Reserve policy error, and hedges if inflation rises, and performs well if rates fall in the coming months.

“In the current global climate of heightened geopolitical risks, gold is not just a safe haven but a strategic asset. With central banks, including those in the Middle East, led by Qatar and Turkey, increasing their gold reserves significantly above average in the last two years, it is clear there is a concerted shift towards the asset.

“The dynamic of the gold market in Dubai reflects a broader trend where investors are increasingly looking to diversify their portfolios. The majority of investors remain historically underweight in gold, holding less than 1% of their portfolios in the metal, against a traditional recommendation of 5%. This trend comes at a time when the market volatility index (VIX) is hovering around a four-year low, suggesting a period of market complacency that could lead to increased volatility and further drive investors towards gold.

“Given the increased accessibility through online platforms to the GLD ETF and the ongoing economic indicators, we foresee a continued rise in gold investment globally and for some time, this could be the beginning of a gold super cycle.”

Continue Reading

News

ServiceNow acquires Raytion to enhance GenAI-powered search and knowledge management capabilities on the Now Platform

Published

on

ServiceNow VP

ServiceNow has announced it has acquired Raytion to enhance GenAI‑powered search and knowledge management capabilities on the Now Platform. Raytion’s industry‑leading information retrieval technology will enable unified real‑time access to business‑critical data across multiple enterprise sources for a more powerful, efficient, and personalized AI search experience, all on a single technology platform.

The complexity of modern enterprise environments will drive the need for more intelligence about the data, so that organizations can take control of highly distributed, diverse, and dynamic information. With Raytion technology combined with ServiceNow AI Search, users can find the answers they require without having to know exactly where the information is located. Raytion’s technology will integrate secure access to information from enterprise data sources and allow ServiceNow’s AI Search to provide users with an industry‑leading, intelligent search experience and the information they need, all from a single-entry point. This includes data within ServiceNow and from third‑party systems.

“ServiceNow is accelerating work, uniting fragmented data into a single, intelligent platform that helps customers access and share knowledge across their organizations,” said Jon Sigler, senior vice president, Platform and AI, at ServiceNow. “Raytion’s information retrieval technology will set us apart by making relevant data sources searchable so everyone—employees, customers, and agents—get the answers they need, when they need them.”

Raytion’s GenAI‑powered search and knowledge management capabilities allow for cross‑enterprise data integration, pulling from the full universe of enterprise knowledge that exists in various knowledge repositories, rather than a subset. When combined with the ServiceNow Now Assist GenAI experience, data moves beyond disparate information to now providing users with more comprehensive, relevant search results in one centralized location, helping boost self‑service and case deflection. ServiceNow’s single data model – which seamlessly integrates people, services, and systems to empower AI capabilities – takes this even further, enabling a more personalized experience for users, drawing on employee history like previous searches and interactions so results are more relevant and tailored to their unique needs. 

“Enriching GenAI with the specific up‑to‑date information an employee has access to across all relevant data sources makes not only business processes smarter but the whole enterprise,” said Valentin Richter, founder and CEO of Raytion. “The combination of ServiceNow’s single platform with Raytion’s secure enterprise data integration technology gives businesses a competitive advantage, allowing employees to solve problems and take informed action faster. We’re bringing together business‑critical information with intelligent GenAI‑powered search and reliable data retrieval, all in one place.”

Continue Reading

News

Proofpoint warns of ticket scams as phony Paris Olympic Games 2024 sites proliferate

Published

on

Olympics proofpoint

Leading cybersecurity provider Proofpoint recently identified a fraudulent website purporting to sell tickets to the Paris 2024 Summer Olympic Games. The website “paris24tickets[.]com” claimed to be a “secondary marketplace for sports and live events tickets.” It was notably listed as the second sponsored search result on Google, after the official website, when searching for “Paris 2024 tickets” and related searches. Proofpoint confirmed with official sources in France that the site was fraudulent. Proofpoint’s Takedown Team worked with the registrar to suspend the domain quickly after its initial discovery.

Emile Abou Saleh, Senior Regional Director, Middle East, Turkey, and Africa at Proofpoint, said: “The buzz around mega-events like the Paris Olympics creates a feeding frenzy for cybercriminals. They exploit this excitement with social engineering – a sophisticated psychological manipulation tactic – effectively playing people, not technology. These same tactics fuel Business Email Compromise attacks, where they steal credentials, data, and money. Proofpoint’s 2024 State of the Phish report reveals a staggering 19% increase in BEC attacks last year. For fans in the Middle East, where social engineering is a dominant cybercrime weapon, remember to be vigilant and only trust verified sources. Don’t let your Olympic dreams turn into a security nightmare.”

The site that Proofpoint’s Takedown Team got suspended was sadly just one of many. According to the French Gendarmerie Nationale, their efforts in collaboration with Olympics partners have identified 338 fraudulent Olympics ticketing websites. Of these, 51 have been shut down, with 140 receiving formal notices from law enforcement.

On the website identified by Proofpoint researchers, the homepage listed many Olympic events, and if the user clicked on one of the sports icons, they were taken to a ticketing page that allowed the user to select tickets and provide payment data. The site also appeared to allow users to establish accounts to buy and sell tickets. 

The website design appeared similar to other well-known ticketing sites visitors would be familiar with, increasing the site’s perceived legitimacy.  

It is likely the threat actors managing this website were trying to steal money from people attempting to buy or sell Olympics tickets. It’s possible the site also collected personal information from people attempting to purchase tickets including names, contact information like email and mailing addresses and phone numbers, and credit card details.

The domain is believed to have been primarily distributed via ads in search results. While not observed in widespread email campaigns, the domain was observed in a small number of emails. In some cases, the bad actor sent emails claiming to provide “discounts” on tickets possibly of interest to the recipient. While researchers cannot confirm how the actor obtained the targets’ emails, it is possible the users included their email addresses when they signed up to the website or attempted to purchase tickets.  

Fraudsters will always capitalize on current events, and the Olympic Games is no exception. Unsuspecting users likely clicked on the website because it appeared to be a legitimate entity that specialized in the sale of Olympic tickets.  The website’s placement on the search engine under the official Paris Olympics ticket site could have further added to its legitimacy, convincing users that they were an authorized and safe source. While this specific domain should no longer be active, we expect other bad actors to take advantage of the event and create new fraudulent Olympics-related websites.

Continue Reading

Trending

Please enable JavaScript in your browser to complete this form.

Copyright © 2023 | The Integrator