Connect with us

Artificial Intelligence

Tenable Integrates AI-Fueled Identity Security into Exposure Management Platform

Published

on

Tenable has announced the addition of several new identity-aware features that harness the power of artificial intelligence (AI) and machine learning to provide a unified view of all user identities and entitlement risks, whether on-prem or in the cloud. Tenable Identity Exposure now gives customers the most advanced vulnerability and asset risk prioritization capabilities to identify and disrupt attack paths through Active Directory (AD). The solution is fully integrated within the Tenable One Exposure Management Platform.

According to a study conducted by Forrester Consulting on behalf of Tenable, half (50%) of surveyed IT and security professionals globally say they lack an effective way to integrate user privilege data into their vulnerability management practices. This is a problem, as AD is typically the central source of truth for most critical business applications and services within an enterprise. Compromising AD and abusing access are popular methods used in ransomware and other attacks.

Traditional AD security tools provide point-in-time scans and aggregate millions of event logs only to deliver out-of-date visibility into the security posture of directory services. Tenable Identity Exposure enables organizations to address the gaps that have existed in AD security for decades. It helps customers reduce the attack surface of their AD, providing continuous AD assessment, real-time attack detection, AI-driven exposure and risk prioritization, and detailed remediation instructions.

Tenable Identity Exposure now allows companies to manage their AD security posture across hybrid cloud environments at all times and visualize any active threats to their identities. New Tenable Identity Exposure features include:

  • Identity Unification and Identity Explorer – a view of entitlements across on-premises and cloud-based AD deployments. This provides the most accurate assessment of identity risk and unmatched intelligence to help prevent exploited identity exposures. This feature provides the most complete understanding of how to prevent identities from being used for privilege escalation or other attack vectors.
  • Identity Risk Score (powered by Tenable’s Artificial Intelligence and Data Science Engine) – a new capability that uses mature AI and machine language models to quantify the risk of an asset by combining the vulnerability, exposure and identity entitlements of an asset, leveraging Tenable’s industry-leading exposure management data.
  • Azure Active Directory support – extended support for protecting public and hybrid cloud Azure Active Directory deployments, so customers can unify identities across environments and manage cloud identity risk with Indicators of Exposure specific to Azure AD. With the shift of business applications to the cloud, alongside Active Directory, Azure AD has become a critical access control point.

Full integration of these capabilities within the Tenable One Exposure Management Platform includes single sign-on, data sharing and app switching between solutions, providing identity awareness for vulnerability, attack path analysis, cloud posture and web application security practices.

“Access misconfiguration and weak identities are at the heart of ransomware attacks and corporate data breaches. Threat actors are only one identity vulnerability away from breaking into SaaS applications and stealing data. By leveraging modern AI techniques, Tenable can now quickly identify and prioritize identity and entitlement-related problems across AD and Azure AD,” said Nico Popp, chief product officer. “The ability to safeguard identities both on-prem and in the cloud is essential for empowering customers to prevent attacks rather than just clean up the aftermath.”

Artificial Intelligence

ESET’s New AI Assistant Streamlines Threat Detection and Response

Published

on

ESET has introduced ESET AI Advisor, an innovative generative AI-based cybersecurity assistant that transforms incident response and interactive risk analysis. First showcased at RSA Conference 2024, the new solution is now available as part of the ESET PROTECT MDR Ultimate subscription tier and ESET Threat Intelligence.

Unlike other vendor offerings and typical generative AI assistants that focus on soft features like administration or device management, ESET AI Advisor seamlessly integrates into the day-to-day operations of security analysts, conducting in-depth analysis. Building on over two decades of ESET’s expertise in AI-driven endpoint protection, the offering provides detailed incident data and SOC team-level advisory. This is a game-changer for companies with limited IT resources who want to utilize the advantages of advanced Extended Detection and Response (XDR) solutions and threat intelligence feeds.

“As cybersecurity threats become increasingly sophisticated, ESET remains committed to providing cutting-edge solutions that address these challenges. The ESET AI Advisor module represents a significant leap forward in our mission to close the cybersecurity skills gap and empower organizations to safeguard their digital assets effectively,” said Juraj Malcho, Chief Technology Officer at ESET.

One of the primary benefits of this new solution is closing the cybersecurity skills gap. Security analysts of all skill levels can use ESET AI Advisor to conduct interactive risk identification, analysis, and response capabilities, which are provided in an easily understandable format. The user-friendly interface makes sophisticated threat data actionable even for less experienced IT and security professionals.

The ESET AI Advisor also excels in facilitating faster decision-making for critical incidents. Security analysts can simply consult the ESET AI Advisor to understand the specific threats their environment faces. Leveraging extensive XDR collected data, the ESET AI Advisor identifies and analyzes potential malware threats, providing intuitive insights into their behaviour and impact. It assists in recognizing phishing attempts and advising users on how to avoid falling victim to fraudulent emails or websites. By monitoring network traffic, the ESET AI Advisor can flag unusual or suspicious behaviour, helping security teams take appropriate action. Its ability to automate repetitive tasks is an additional advantage. Managing routine processes such as data collection, extraction, and basic threat detection, allows security teams to focus on more strategic initiatives.

In ESET Threat Intelligence, the new module will help researchers analyze vast quantities of unique APT reports and understand latest developments in world of cyber threats. With its conversational prompts and interactive dialogue, ESET AI Advisor empowers organizations to analyze and mitigate threats effortlessly and fortify their cybersecurity posture.

Continue Reading

Artificial Intelligence

VAST and CISCO Simplify AI Infrastructure for Enterprises

Published

on

VAST Data, at Cisco Live 2024, announced it is collaborating with Cisco and NVIDIA on a solution to offer enterprises simple, ​​high-performance AI infrastructure coupled with an Ethernet-based AI fabric to handle large volumes of data at an exabyte scale. Through this new relationship, the VAST Data Platform, which offers unified storage, database and data-driven function engine services built for AI, becomes the first data platform optimized and supported with Cisco Nexus HyperFabric.

VAST Data will join this ecosystem integrating with the first Cisco cloud-management solution for data center networking to orchestrate, deploy and manage the stack. Leveraging VAST APIs and pulling both network and storage telemetry back to Cisco Nexus HyperFabric, Cisco customers can now monitor and correlate performance and latency to optimize complex applications.

Cisco Nexus HyperFabric AI clusters are designed to help enterprises build AI data centres using NVIDIA accelerated computing – including NVIDIA Tensor Core GPUs, NVIDIA BlueField-3 DPUs and SuperNICs, and NVIDIA AI Enterprise software – with Cisco networking and the VAST Data Platform. The solution provides end-to-end visibility of compute, networking, storage and data management to allow organizations to seamlessly build and scale their AI operations.

The Cisco Nexus HyperFabric AI Cluster solution also seamlessly integrates VAST’s DASE (Disaggregated Shared Everything) architecture, which is also powered by NVIDIA BlueField DPUs, a collaboration recently announced with NVIDIA. Generative AI requires unprecedented scale and performance to provide incredibly fast access to data, driving enterprise IT buyers to invest heavily in Ethernet networking technologies.

According to IDC, the Ethernet switching market has been impacted significantly by the growing number of enterprise AI deployments, with the overall market rising 20.1% in 2023 to $44.2 billion. With NVIDIA and VAST Data, Cisco can consolidate compute resources, storage and data management capabilities with Ethernet-powered AI network fabrics to offer innovative connectivity with unparalleled programmability, performance, flexibility, and efficiency in order to meet the considerable demands of today’s AI/ML platforms.

“This is the year of the enterprise for AI. Traditionally, enterprises have been slower to adopt new technologies because of the difficulty of integrating new systems into existing systems and processes. This collaboration with Cisco and NVIDIA makes it simple for enterprises to implement AI as they move from proof of concept to production,” said Renen Hallak, CEO and co-founder of VAST Data. “It’s an honor to be selected by Cisco as their premier storage partner for their AI infrastructure and it’s even more exciting that this is because our customers advocated for this partnership.”

“Business innovation is accelerating with AI applications, requiring efficient, high-speed access to massive data sets,” said Jonathan Davidson, Executive Vice President and General Manager, Cisco Networking. “With an ecosystem approach that now includes VAST Data and NVIDIA, Cisco helps our enterprise customers tackle their most difficult and complex networking, data and security challenges to build AI infrastructures at any scale with confidence.”

VAST has also certified Cisco Nexus Ethernet-based switches with the VAST Data Platform, delivering validated designs to ensure a seamless deployment experience with the highest levels of support for joint customers. The private cloud-managed Cisco Nexus Dashboard offers innovative congestion management with flow control algorithms and visibility with real-time telemetry. Through this collaboration and validation, and as customers implement the Cisco Nexus 9000 Series Switches into their storage fabric, Cisco and VAST deliver the scale, speed and efficiency necessary to support AI applications, and are simplifying network management and operations across all infrastructure endpoints.

Continue Reading

Artificial Intelligence

Microsoft Showcases AI for Secure Digital Transformation at GISEC 2024

Published

on

Microsoft is showcasing its commitment to leveraging the power of AI to empower digital transformation journeys while ensuring cyber resilience at GISEC 2024. “The AI revolution has been remarkable and exciting to witness, but it has also presented a growing amount of risk,” said Naim Yazbeck, General Manager of Microsoft UAE. “Increasingly, we are seeing attackers launch highly sophisticated cyberattacks, making it imperative for organizations to bolster their cybersecurity defences and stay vigilant to safeguard sensitive data and maintain operational resilience. At Microsoft, we believe that innovation in AI-powered cyber defence can help reverse the current rising tide of cyberattacks. We are committed to building an AI-based cyber shield that will protect customers and countries around the world, and at GISEC Global 2024, we are showcasing how our comprehensive portfolio of security solutions can achieve that while helping organizations stay ahead of evolving threats.”

Microsoft’s Hub at GISEC Global 2024 consists of a VIP Demo Area, a Surface Zone, a Glambot Activation, a Networking Area, and a Food & Beverage Area. The company is demonstrating alongside nine partners, including QuorumCyber, Trustwave, Wizard Group, 42Crunch, BPS, Commvault, Fortinet, Rubrik, and Github.

At the heart of Microsoft’s showcase is Copilot for Security, the industry’s first generative AI solution designed to help security and IT professionals protect their organizations at the speed and scale of AI while remaining compliant with responsible AI principles. Made generally available on April 1, 2024, users can ask Copilot for Security questions in natural language and receive actionable responses to common security and IT tasks in seconds.

Ahmad El Dandachi, Enterprise Commercial Director at Microsoft UAE, commented “AI greatly enhances our ability to detect and defeat cyberattacks. With Copilot for Security, we are shifting the balance of power by empowering defenders to optimize their defence approach and turn hours and days spent digging through data into minutes of quick analysis and strategic decision-making. The solution is informed by large-scale data and threat intelligence, including more than 78 trillion security signals processed by Microsoft each day, and coupled with large language models to deliver tailored insights and guide the next steps. With Copilot, security teams can confidently lead their organizations into the age of AI.”

In addition to Copliot for Security, Microsoft is also demonstrating Microsoft Defender, Sentinel, Purview, Entra, Priva, Intune, and other innovations designed to advance cybersecurity protection for organizations. All of Microsoft’s solutions are backed by the company’s aggressive commitment to responsible AI development, underpinned by its Responsible AI principles used to develop and deploy every solution.

GISEC Global 2024 is set to attract more than 20,000 attendees from over 130 countries to the Dubai World Trade Center. Taking place until April 25th, the event provides a platform for more than 750 brands to showcase their innovations.

Continue Reading
Advertisement

Follow Us

Trending

Copyright © 2021 Security Review Magazine. Rysha Media LLC. All Rights Reserved.