Dell Technologies today announced the general availability of Omnia, its open source platform for managing high-performance computing (HPC) and artificial intelligence (AI) workloads.

Omnia is an open source set of Ansible Playbooks developed by Dell’s HPC and AI innovation team in partnership with Intel and the broader HPC community. If this sounds familiar, Dell quietly released Omnia on Github earlier this year.

The platform automates the process of downloading and installing open source software for things like cluster management, application execution, accelerator drivers, frameworks, applications and platforms, and it manages systems running Slurm or Kubernetes, explained Caitlin Gordon, VP of product management at Dell Technologies.

“It’s all about simplifying and easing the development and the management of high-performance clusters for not just HPC but AI,” she said.

And because these automations are built on Ansible Playbooks, “you can compose and recompose the stack, based on what you need,” Gordon said. “We’re really taking an infrastructure as code approach here.”

This, she added, allows users to compose HPC deployments around a wide variety of workloads and hardware from multiple vendors. “Of course, because its open source, it can be shaped to whatever your needs are,” Gordon said. “We’ll continue to integrate the latest open source tools, but we also, even more importantly, have the collective power of the HPC community already working behind this.”

Arizona State University, one of Dell Technology’s HPC and AI centers for excellence, is among the first to deploy Omnia and begin contributing to its development, according to Gordon.

Dell HPC Nabs VMware Support, PowerEdge Gets Nvidia Upgrade
Dell Technologies also extended support for VMware to its HPC on-Demand program, which launched last year.

“Being able to consume things as a service be able to access resources as you need them, be able to move faster and simply pay for what you’re using. That’s really what HPC on demand is all about,” Gordon said. “It’s really about being able to support our customers who may not have the resources, or may not want to invest in their own infrastructure and people, because their HPC workloads maybe are inconsistent, and/or maybe they need to complement what they already have in their environment with a secondary environment to burst to.”

With support for VMware Cloud Foundation, VMware Cloud Director, and VMware vRealize Operations, customers can now extend these capabilities beyond single-tenant environments to include multi-tenant use cases.

Meanwhile, Dell Tech is adding Nvidia A10 and A30 GPUs to its PowerEdge server portfolio. “These are really ideal for things like VDI inferencing and interactive rendering,” Gordon said.

SAN FRANCISCO–(BUSINESS WIRE)– Zettaset a leading provider of data protection solutions, today announced that XCrypt Kubernetes Encryption is available on the VMware Marketplace.

VMware Marketplace enables customers to discover and deploy compatible, validated third-party solutions to VMware environments. Once validated, partners can easily publish their solutions for VMware customers across platforms. Customers will be able to access these third-party partner solutions directly from their cloud environments, while also being able to experience the convenience of features such as notifications, reporting, and analytics.

According to a recent study from the Cloud Native Computing Foundation (CNCF), 78% of organizations leverage Kubernetes within their environments. The rapid adoption of containerized environments has created new data protection challenges that security teams need to address. Zettaset’s XCrypt Kubernetes Encryption product is a first-of-its-kind, software-defined encryption solution that protects data-at-rest across Kubernetes environments. The solution provides a transparent, high performance layer of security that protects customers’ data no matter where it is stored, helping organizations efficiently transition from DevOps to DevSecOps.

“Leading organizations are finding that integrating security into the technologies and processes required to power DevOps cultures is a difficult and complex task to accomplish,” said Tim Reilly, CEO of Zettaset. “With our XCrypt Kubernetes Encryption solution, customers are able to expand their data protection efforts to containers with ease. This enables them to move at the speed required for innovation, without worrying about the security of their data within these new environments.”

“We are pleased to see Zettaset’s XCrypt Kubernetes Encryption on the VMware Marketplace,” said Ramya Sarangarajan, Director, Product Marketing and Strategy, VMware. “Validated technologies, such as XCrypt Kubernetes Encryption, enable our customers to build, run, manage and secure their applications effectively and efficiently. We’re excited to work with partners such as Zettaset to empower customers to derive the most value from their technology investments.”

Zettaset

Zettaset is a leading provider of data protection solutions. Its software-defined encryption solutions can be transparently deployed across all physical and virtual enterprise environments. Unlike traditional solutions that are appliance-based, Zettaset is a cost-effective, software-only solution that is easy to deploy, does not impact performance, and scales with your business from on premise to the cloud,

Accedian is working with VMware to provide CSPs with near-real-time decisioning and intelligence so they can enable the appropriate quality of experience (QoE) for a variety of applications, announced Accedian on Wednesday.

As a VMware Ready for Telco Cloud partner, Accedian’s Skylight performance analytics solution can be used in conjunction with VMware Telco Cloud Platform. This solution will create an opportunity for CSPs to build out a reliable and high-performing RAN and edge infrastructure to support new, high-bandwidth oriented application workloads that require low latency and assured communications.

CSPs around the world rely on VMware Telco Cloud Platform to deploy and manage virtualized and containerized network functions across their 5G networks. CSP customer can leverage Accedian Skylight to get both continuous and on-demand measurements for the core to RAN, and deliver QoE assurance across all the control plane silos. This is a critical component for data portability and interoperability at hyper scale as it traverses disaggregated RAN infrastructure.

Running on the VMware Telco Cloud Platform, Accedian Skylight component installation is easily orchestrated, tests are easily provisioned, intelligent in-context analysis is easily accomplished, and dashboards are insightful and easily consumed.

Global Software Defined Data Center Market: Introduction
A research study on the demand for Global Software Defined Data Center Market examines market share, scale, patterns, and growth prospects in great depth. The analysis includes a valuation of the sector based on the articles exact calculation. In comparison to the industrys specific competitors, Software Defined Data Center market analysis is a substantial set of significant findings. Similarly, the report covers the various fields in which the multinational Software Defined Data Center market has established itself. A global Software Defined Data Center industry study is based on detailed contextual perspectives, verifiable forecasts, and historical evidence on the market volume of Software Defined Data Center.

Key Market Player Analysis: Global Software Defined Data Center Market:
VMware, Microsoft, IBM, Dell EMC, HPE, Huawei, Cisco, NEC, RedHat, Oracle

This report contains main industry information as well as credible market forecasts. This research analyses the growth rate of demand and the valuation of the market by focusing on growth-inducing trends, company patterns, and other related findings. In addition, the report provides an extensive overview of the market and providers pattern using the SWOT analysis of major providers. The information for this study was gathered by new market reviews, expansions, and growth opportunities. The study also measured the industrys scale based on the profiles of the sectors major players. A quantitative review of major new innovations, business strategies, and market positions of leading industry players is also included in the Software Defined Data Center market study.

Segmentation by Type:
by Solutions (Software-Defined Networking (SDN), Software-Defined Computing (SDC), Software-Defined Storage (SDS)), Data Center Type (mid-sized data centers, enterprise data centers, large data centers)

• Segmentation by Application:
By Application (BFSI, telecom & IT, healthcare, retail, manufacruting, government, others)

The key regions covered in the Software Defined Data Center market report are:
North America (U.S., Canada, Mexico)
South America (Cuba, Brazil, Argentina, and many others.)
Europe (Germany, U.K., France, Italy, Russia, Spain, etc.)
Asia (China, India, Russia, and many other Asian nations.)
Pacific region (Indonesia, Japan, and many other Pacific nations.)
Middle East & Africa (Saudi Arabia, South Africa, and many others.)

Furthermore, the predictions made in this research were derived using tried and true research theories and methodologies. This research report sets out the business climate for the leading players with an overview of the industry, revenue, product portfolio by segment, and geographic perspective. This research also provides for a detailed examination of the main tactics used by service providers in order to establish a market position in comparison to competitors. The study report focuses on a general overview of the industry, as well as market leader practices such as alliances, mergers and acquisitions, negotiations, collaborations, and others, to provide a better picture of their current competitive situation.

The global Software Defined Data Center industry report includes a detailed overview of value and volume at the global, business, and regional levels. Similarly, through an analysis of past evidence and future outcomes, the report provides a full market scale Software Defined Data Center from a global perspective. Geographically, the research offers the number of regions and their sales disparities. On a company-by-company basis, the Software Defined Data Center industry research reflects on ex-factory prices, production value, market share, and revenue for each producer. This study examines the global Software Defined Data Center industrys primary and secondary drivers, leading economies, market share, trends, and regional market conditions.

With unfailing market gauging skills, has been excelling in curating tailored business intelligence data across industry verticals. Constantly thriving to expand our skill development, our strength lies in dedicated intellectuals with dynamic problem solving intent, ever willing to mold boundaries to scale heights in market interpretation.

The Worldwide Global Software Defined Data Center Market is deliberately investigated in the report while to a great extent focusing on top players and their business strategies, geological extension, market sections, serious scene, assembling, and estimating and cost structures. Each segment of the exploration study is exceptionally set up to investigate key parts of the Software Defined Data Center market. For example, the market elements area dives profound into the drivers, limitations, patterns, and chances of the Software Defined Data Center market. With subjective and quantitative investigation, we help you with exhaustive and thorough examination on the Software Defined Data Center market. We have likewise centered around SWOT, PESTLE, and Porter’s Five Forces investigations of the Software Defined Data Center market.

The report incorporates an itemized division investigation of the worldwide Software Defined Data Center market, where the entirety of the sections are dissected regarding market development, share, development rate, and other crucial elements. It likewise gives the allure file of portions so players can be educated about worthwhile income pockets of the Software Defined Data Center market. The broad assessment of fragments gave in the report will assist you with coordinating your ventures, methodologies, and groups to zero in on the correct territories of the Software Defined Data Center market.

The analysts have segmented the global market on the basis of raw materials, type, application, sales, and region. The study also analyzes the current landscape of the ever-evolving business sector and the present and future of the market. It covers critical insights related to the established companies operating in the global Software Defined Data Center market. The report gives in-depth information by segments of the market that helps monitor performance & make critical decisions for growth and profitability. The report also suggests considerable data with respect to the marketing channel development trends and market position.

The Software Defined Data Center Industry research report will also study market share for major stakeholders in their global capacity as transformers of the global scale. This qualitative and quantitative analysis will include key product offerings, key differentiators, revenue share, market size, market status, and strategies. The report will also cover key agreements, collaborations, and global partnership soon to change dynamics of the market on a global scale.

The pandemic of Coronavirus (COVID-19) has affected every aspect of life globally. This has brought along several changes in market conditions. The rapidly changing market scenario and initial and future assessment of the impact is covered in the report. The Software Defined Data Center market report puts together a concise analysis of the growth factors influencing the current business scenario across various regions. Significant information pertaining to the industry analysis size, share, application, and statistics are summed in the report in order to present an ensemble prediction. Additionally, this report encompasses an accurate competitive analysis of major market players and their strategies during the projection timeline.

Based on application, the market has been segmented into:

By Application (BFSI, telecom & IT, healthcare, retail, manufacruting, government, others)

The facts and figures given in this report are based on the consumption and demand quantity across the type of material and end-user. The Software Defined Data Center market value and volumes are obtained by making a bottom-up approach and considering the prevailing price trends. The data pertaining to leading market players and their strategic moves have been taken through blogs, press releases of companies, and primary calls to the industry experts.

Key Insights covered in this Report:
* Performance of the global Software Defined Data Center Market in recent years and its likely growth rate in the coming years
* Key regional markets in the global Software Defined Data Center industry
* Key insights produced from Porters Five Forces analysis
* Various stages in the value chain of the Software Defined Data Center market
* Key driving factors and challenges in the Software Defined Data Center Market
* Impact of COVID-19 pandemic on the industry
* Major distribution channels in the industry
* Existing key players in the industry, along with their SWOT analysis and the market size in the forecast period.

Extracts from Table of Content:
Chapter 1: Market Overview, Drivers, Restraints and Opportunities, Segmentation overview
Chapter 2: Market Competition by Manufacturers
Chapter 3: Production by Regions
Chapter 4: Consumption by Regions
Chapter 5: Production, By Types, Revenue and Market share by Types
Chapter 6: Consumption, By Applications, Market share (%) and Growth Rate by Applications
Chapter 7: Complete profiling and analysis of Manufacturers
Chapter 8: Manufacturing cost analysis, Raw materials analysis, Region-wise manufacturing expenses.
Chapter 9: Industrial Chain, Sourcing Strategy and Downstream Buyers
Chapter 10: Marketing Strategy Analysis, Distributors/Traders
Chapter 11: Market Effect Factors Analysis
Chapter 12: Market Forecast
Chapter 13: Software Defined Data Center Research Findings and Conclusion, Appendix, methodology and data source.

Adroit Market Research is an India-based business analytics and consulting company incorporated in 2018. Our target audience is a wide range of corporations, manufacturing companies, product/technology development institutions and industry associations that require understanding of a market’s size, key trends, participants and future outlook of an industry. We intend to become our clients’ knowledge partner and provide them with valuable market insights to help create opportunities that increase their revenues. We follow a code – Explore, Learn and Transform. At our core, we are curious people who love to identify and understand industry patterns, create an insightful study around our findings and churn out money-making roadmaps.

Three weeks after releasing patches for a critical vulnerability in VMware vCenter, thousands of servers that are reachable from the internet remain vulnerable to attacks. VMware vCenter is used by enterprises to manage virtual machines, the VMware vSphere cloud virtualization solution, ESXi hypervisors, and other virtualized infrastructure components.

Remote code execution and authentication bypass
On May 25, VMware published a critical advisory and released patches covering two serious vulnerabilities that stem from the use of VMware vCenter plug-ins. The first vulnerability, tracked as CVE-2021-21985, is caused by improper input validation in the Virtual SAN (vSAN) Health Check plug-in that’s enabled by default in vCenter Server.

VMware vSAN is used for storage virtualization, but even if the plug-in is not actively used, the presence of the plug-in on the server is enough to enable attacks. A hacker with access to the server over port 443 (HTTPS) can exploit this issue without authentication to execute commands with unrestricted privileges on the operating system that hosts vCenter Server versions 6.5, 6.7 and 7.0, as well as VMware Cloud Foundation 3.x and 4.x, which include vCenter Server.

The second vulnerability, tracked as CVE-2021-21986, is rated as medium severity and impacts the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager and VMware Cloud Director Availability plug-ins. Attackers with access to a server over port 443 can perform actions allowed by the affected plug-ins without authentication.

Publicly exposed VMware servers
Researchers from security firm Trustwave recently performed a scan using SHODAN and identified 5,271 instances of VMware vCenter Server that are configured to be accessible from the internet. The vast majority of them (5,076) operate over port 443.

The researchers managed to connect to 4,969 of those servers and download information from their greeting banner, which includes more details about the specific version of the server such as build number and underlying operating system. The collected information revealed that 4,019, or 80.88%, of the scanned servers had not yet been patched for these flaws and that most of the remaining ones are running much older versions of the software that are considered end-of-life and are likely vulnerable to a variety of older issues.

If the ratio of unpatched servers is so high among publicly accessible servers, which are generally easier to attack and should be carefully monitored, it’s fair to assume that many vCenter Servers remain unpatched on private networks. However, attackers have many ways of gaining access to corporate networks, so attacking such servers would not be hard.

Proof-of-concept exploits and urgent need to patch
Since the patches were released in May, security researchers have developed and published proof-of-concept exploits for these issues, so potential attackers don’t have to spend much effort to start exploiting these issues in the wild. VMware warned users from the start that these vulnerabilities need to be patched as soon as possible and even published manual workarounds that involve editing the compatibility-matrix.xml file to disable the vulnerable plug-ins.

“If you ARE a vSAN customer, disabling the vSAN plugin will remove all ability to manage vSAN,” VMware said in a blog post. “No monitoring, no management, no alarms, nothing. This might be fine for your organization for very short periods of time but we at VMware cannot recommend it. Please use caution.”

“In this era of ransomware it is safest to assume that an attacker is already inside the network somewhere, on a desktop and perhaps even in control of a user account, which is why we strongly recommend declaring an emergency change and patching as soon as possible,” the company said.

VMware updates VMware SASE with VMware Cloud Web Security, a cloud-hosted security service that can be delivered via a global network of VMware SASE and partner points of presence.

VMware Cloud Web Security is designed to protect users and infrastructure accessing SaaS and Internet apps. It says the new platform can respond quickly to changing threats, encryptions, and business needs. Removing scaling difficulties while providing insights to help reduce the attack surface

According to Dell’Oro Group, the SASE market size is estimated to grow by 5X over the next five years. There are a number of factors driving this growth, including:

Applications moving to the cloud and edge.
Employees accessing apps from anywhere as they adopt different work styles.
Data processed, analysed, and stored at the edge is multiplying at a rapid rate.
In order to adapt to these changes, organisations need to adopt both a cloud-centric and an edge-native model, support a hybrid workforce, while protecting against emerging security threats. SASE is becoming a common approach for networking and security across this distributed environment.
“We introduced VMware SASE at VMworld 2020. Since then, we’ve been building a platform that converges industry-leading cloud networking and cloud security services,” says VMware senior vice president and general manager for Service Provider and Edge, Sanjay Uppal.

“At the same time, VMware and our partners have created more than 150 SASE points of presence, which are strategically distributed around the world and serve as an on-ramp to SaaS and other cloud services.”

“VMware SASE combines SD-WAN capabilities with cloud-delivered security functions, including cloud web security, cloud access security broker, zero-trust network access, and AIOps, among others. These capabilities are delivered as-a-service from a global network of PoPs (partner points of presence). VMware Cloud Web Security launched today. We are proud of the progress we’ve made.”

VMware SASE is positioned between the service provider underlay and the application overlay. The platform is able to draw on 5G services to improve latency or performance, while at the same time deliver these capabilities to applications running in the cloud or workloads moving to the edge.

VMware uses drone fleets as an example. It says many logistics companies use drones in large warehouses to help with inventory and restocking. It says there’s no room for error with flight paths as drones fly above employees working on the floor. VMware says low latency and reliable networks are crucial, and SASE platforms can use a 5G underlay service, such as a multi-access edge computing service, to improve the performance of drone management applications delivered as an overlay service.

“If you think about it from this angle, what we are really creating is an extensible service edge platform in the cloud,” says Uppal.

“Businesses can consume services on-demand in a subscription-based model. The pandemic proved we never really know when we’ll have to make a quick pivot in the name of business continuity. An extensible service edge platform would help customers deploy the services they need on the turn of a dime.”

VMware updates VMware SASE with VMware Cloud Web Security, a cloud-hosted security service that can be delivered via a global network of VMware SASE and partner points of presence.

VMware Cloud Web Security is designed to protect users and infrastructure accessing SaaS and Internet apps. It says the new platform can respond quickly to changing threats, encryptions, and business needs. Removing scaling difficulties while providing insights to help reduce the attack surface

According to Dell’Oro Group, the SASE market size is estimated to grow by 5X over the next five years. There are a number of factors driving this growth, including:

Applications moving to the cloud and edge.
Employees accessing apps from anywhere as they adopt different work styles.
Data processed, analysed, and stored at the edge is multiplying at a rapid rate.
In order to adapt to these changes, organisations need to adopt both a cloud-centric and an edge-native model, support a hybrid workforce, while protecting against emerging security threats. SASE is becoming a common approach for networking and security across this distributed environment.
“We introduced VMware SASE at VMworld 2020. Since then, we’ve been building a platform that converges industry-leading cloud networking and cloud security services,” says VMware senior vice president and general manager for Service Provider and Edge, Sanjay Uppal.

“At the same time, VMware and our partners have created more than 150 SASE points of presence, which are strategically distributed around the world and serve as an on-ramp to SaaS and other cloud services.”

“VMware SASE combines SD-WAN capabilities with cloud-delivered security functions, including cloud web security, cloud access security broker, zero-trust network access, and AIOps, among others. These capabilities are delivered as-a-service from a global network of PoPs (partner points of presence). VMware Cloud Web Security launched today. We are proud of the progress we’ve made.”

VMware SASE is positioned between the service provider underlay and the application overlay. The platform is able to draw on 5G services to improve latency or performance, while at the same time deliver these capabilities to applications running in the cloud or workloads moving to the edge.

VMware uses drone fleets as an example. It says many logistics companies use drones in large warehouses to help with inventory and restocking. It says there’s no room for error with flight paths as drones fly above employees working on the floor. VMware says low latency and reliable networks are crucial, and SASE platforms can use a 5G underlay service, such as a multi-access edge computing service, to improve the performance of drone management applications delivered as an overlay service.

“If you think about it from this angle, what we are really creating is an extensible service edge platform in the cloud,” says Uppal.

“Businesses can consume services on-demand in a subscription-based model. The pandemic proved we never really know when we’ll have to make a quick pivot in the name of business continuity. An extensible service edge platform would help customers deploy the services they need on the turn of a dime.”

The latest research report on DevOps Platform market lends a competitive head start to businesses by revealing the future growth patterns of the industry through a thorough an analysis ofstorical data as well as the latest market trends. This report also assesses how the COVID-19 pandemic has affected the regional markets to help stakeholders identify the key areas for business expansion.

Moreover, the study describes the growth drivers as well as the restraints that will shape the market dynamics over the analysis timeframe 20XX-20XX. It also provides insights into the growth opportunities, along with other quantitative & qualitative data sourced from primary and secondary sources for a holistic understanding of this business sphere.

Product types: DevOps Ready , DevOps Enabled and DevOps Capable
Revenue garnered and market share accumulated by each product segment
Approximations for the growth rate of every product type over the analysis timeframe
Application gamut

Application range: IT , BFSI , Retail , Telecom , Education and Others
Insights on the product demand share as well as the market share of each application segment
Each application segment’s growth rate over the estimated timeframe
Regional landscape

Regional bifurcation: North America, Europe, Asia-Pacific, South America, Middle East & Africa, South East Asia
Total sales generated and revenue accumulated by each region
Yearly growth rate of each region over the forecast duration
Competitive arena

Major companies: Puppet Labs , Chef , Docker Inc. , Red Hat (Ansible) , Atlassian , Saltstack , CA Technologies , Rackspace , XebiaLabs , VersionOne , Cisco , CollabNet , HP , IBM , Microsoft , Spirent Communications plc , Vmware and DBmaestro
Market concentration ratio assessment
Company product portfolios, with specifications and top applications
Key metrics like pricing model, returns, sales amassed, and market share of each company
Latest developments, comprising of mergers, acquisitions, and expansion plans
In conclusion, a highly structured and comprehensive outlook of DevOps Platform market is provided by examining the different industry segments at a granular level. Further, it extends through analysis of of the sales channel and supply chain, comprising of critical datapoints pertaining to raw materials suppliers, distributors, and buyers in the industry.

Key Highlights from DevOps Platform Market Study:

Income and Sales Estimation –

Historical Revenue and deals volume is displayed and supports information is triangulated with best down and base up ways to deal with figure finish market measure and to estimate conjecture numbers for key areas shrouded in the DevOps Platform report alongside arranged and very much perceived Types and end-utilize industry. Moreover, macroeconomic factors and administrative procedures are discovered explanations in DevOps Platform industry advancement and perceptive examination.

Assembling Analysis –

The DevOps Platform report is presently broken down concerning different types and applications. The DevOps Platform market gives a section featuring the assembling procedure examination approved utilizing essential data gathered through Industry specialists and Key authorities of profiled organizations.

Demand and Supply and Effectiveness –

DevOps Platform report moreover gives support, Production, Consumption, and (Export and Import).

Major Points Covered in Table of Contents:

DevOps Platform Market Overview
Market Competition by Manufacturers
Production Market Share by Regions
Consumption by Regions
Global DevOps Platform Production, Revenue, Price Trend by Type
Global DevOps Platform Market Analysis by Applications
Company Profiles and Key Figures in DevOps Platform Business
DevOps Platform Manufacturing Cost Analysis
Marketing Channel, Distributors, and Customers
Market Dynamics
Global DevOps Platform Market Forecast
Research Findings and Conclusion
Methodology and Data Source
In a word, the DevOps Platform Market report provides major statistics on the state of the DevOps Platform industry with a valuable source of guidance and direction for companies and individuals interested in the market. In the end, DevOps Platform Market report delivers a conclusion which includes Research Findings, Market Size Evaluation, Global Market Share, Consumer Needs along with Customer Preference Change, Data Source. These factors will raise the growth of the business overall.

AttackIQ partners with VMware to enable VMware NSX customers to improve the way they validate the efficacy of their network security controls.
Using the AttackIQ Security Optimisation Platform with the Mitre Att&ck framework, AttackIQ says mutual customers can now leverage the power of automation to emulate realistic attacks and prove that controls are working as expected to help protect them from breaches and attacks.

“As we have seen from supply-chain and ransomware intrusions, organisations need to assume breach and adopt advanced security capabilities to prevent successful attacks,” notes Carl Wright, AttackIQ chief commercial officer. “VMware is excited to work with the VMware team to elevate our mutual customer’s security program performance.

While traditional penetration testing and red teaming can provide useful insights into security control effectiveness, their infrequent scheduling and limited scope fail to provide holistic, up-to-the minute data during security proof of values,” says Chad Skipper, VMWare global security technologist. “AttackIQ will enable VMware NSX customers to validate NSX Advanced Threat Prevention controls against emulated adversary behaviours, with the end result being increased confidence in their cybersecurity performance.”

AttackIQ conducts automated security testing to improve program performance
AttackIQ operates under the assume breach mindset, recognising it is not a question of if but when an intruder will break past an organisation’s perimeter defence.

Aligned to the Mitre Att&ck framework, AttackIQ’s Security Optimisation platform contains a deep library of adversary emulation scenarios to emulate post-breach adversary behaviours and validate an organisation’s defences. The Security Optimization Platform tests and validates security controls continuously, safely, at scale and in production.

By combining AttackIQ with VMware NSX, teams are said to gain comprehensive data-driven control over their security program through continuous testing. With clear performance data generated from AttackIQ’s automated testing capabilities, security teams identify program challenges, adjust their security program operations, and make data-informed decisions about their security investments.

The outcome: the organisation’s security controls work as intended, resources are aligned to address the most important threats, and the organisation will be able to maximise its return of investment.

AttackIQ says VMware simplifies network security by leveraging the infrastructure to protect apps and data from endpoint to cloud. By virtualising the network security stack, companies are said to gain better protection built into the infrastructure to help mitigate risks and enable compliance, lower costs, and simplify operations.

The VMware NSX security family includes the VMware NSX Service-defined Firewall, a distributed, scale-out internal firewall purpose-built to protect east-west network traffic, and VMware NSX Advanced Threat Prevention for network detection and response capabilities with network traffic analysis, distributed IDS/IPS, and advanced malware analysis.

These solutions, AttackIQ says, provide deep visibility into network traffic regardless of whether it is north-south or east-west and are coupled with advanced machine learning techniques. As a result, cybersecurity teams can respond to advanced threats by providing alerts with a very low rate of false positives, plus visualise the entire attack chain.

VMware and Vapor IO today announced plans to build a Multi-Cloud Services Grid, the first fulfillment of the Open Grid Alliance. This re-architected internet revealed by a group of vendors in April envisions a shared platform for distributed compute, data, and intelligence at the edge.

The pair of vendors, which formed the alliance with support from Dell Technologies, DriveNets, MobiledgeX, and PacketFabric, intend to integrate the VMware Telco Cloud Platform with Vapor IO’s Kinetic Grid platform. This blending will allow developers and operators to initialize grid services on demand, according to the companies.

Vapor IO simultaneously activated the Kinetic Grid platform, an expansion of its Kinetic Edge architecture that supports applications operating between distributed sites riding on Zayo’s dark fiber network, which uses pulse amplitude modulation level 4 (PAM4) optics in market and coherent opticss for its backbone connectivity between Kinetic Edge markets.

VMware and Vapor IO said the Multi-Cloud Services Grid will be available in Las Vegas, Pittsburgh, and Dallas later this year.

“To unleash truly transformative innovations at the edge, what we need is a fungible edge. One that stitches together the right level of compute resources, in the right place, at the right time, driven by application intent,” Kaniz Mahdi, VMware’s VP of advanced technologies, explained when the Open Grid Alliance was announced.

Multi-Cloud Services Grid Catalyzes ‘Fungible’ Edge
Those resources traverse the entire network stack, including infrastructure hardware, SDN, virtualization, automation, and applications. The group contends that cloud providers, developers, vendors, network operators, and service providers all have a role to play in assembling the specialized needs that must be addressed to deliver on the full promise of edge computing.

The Multi-Cloud Services Grid doesn’t include that entire group of stakeholders, but VMware and Vapor IO claim it will enable “hypercomposing,” the automated delivery of real-time resources on demand for network functions, applications, and services.

The system will also allow users to stitch together workloads spanning edge and cloud infrastructure to enable latency-intensive applications and disaggregated 5G systems, according to VMware and Vapor IO.

“The Vapor IO and VMware teams will deploy bedrock capabilities that serve the entire community, growing opportunities for providers and consumers across the entire stack,” Vapor IO CEO Cole Crawford said in a statement.

“We want this to be the catalyst for other organizations to co-create and co-innovate with us, developing the new technologies and go-to-market business models that will enable us to collectively deploy the Open Grid at scale, worldwide,” he said.

The report explores the impact of cyberattacks and breaches on Australian organizations and details how security teams are adapting to these challenges.

Accelerated Digital Transformation has caused security teams to face evolving threats as cybercriminals seize the opportunity to execute targeted attacks exploiting fast-tracked innovation and the anywhere workforce. The report found that 89% of Australian organizations surveyed experienced cyberattacks due to more employees working from home, highlighting the vulnerabilities in legacy security technology and postures.

“The race to adopt cloud technology since the start of the pandemic has created a once-in-a-generation chance for business leaders to rethink their approach to cybersecurity,” said Rick McElroy, Principal Cybersecurity Strategist, VMware. “Legacy security systems are no longer sufficient. Organizations need protection that extends beyond endpoints to workloads to better secure data and applications. As attacker sophistication and security threats become more prevalent, we must empower defenders to detect and stop attacks, as well as implement security stacks built for a cloud-first world.”

The Australian Security Insights Report provides intelligence on the cybersecurity landscape, attack and defense trends, along with the security priorities for organizations this year to maintain resilience. The key findings include:

A lack of urgency despite surge in material breaches. 77% of respondents have suffered a breach in the last 12 months with eight out of 10 breaches (79%) considered material. Yet, security professionals have underestimated the likelihood of a material breach. Almost two-thirds (59%) of Australian organizations say they fear a material breach in the next year, with the financial services and government sectors highly concerned, with 66% and 65% of respondents, respectively, saying they fear a breach. Over one-third (46%) of organizations have updated their security policy and approach to mitigate the risk.
Resurgence of ransomware and remote work creates unpredictable attack surface. 72% of respondents said attack volumes had increased – with the majority pointing to employees working from home as the cause – and 80% said attacks had become more sophisticated. The leading breach causes were ransomware (26%), third-party apps (19%), process weaknesses (18%) and out-of-date security technology (16%).
Manufacturing sector hit hardest by cyberattacks. 66% of respondents in the financial services sector experienced attack increases at an average of 27%. A staggering 91% of manufacturing sector respondents experienced attack increases at an above average 40%. Respondents from the healthcare sector fared better than average, with 68% reporting attack volume increases.
Cloud-first security strategies are now universal. 98% of respondents already use or plan to use a cloud-first security strategy. But the move to cloud has expanded the threat surface. 56% of respondents agree they need to view security differently now that the attack surface has expanded and 46% of respondents said they plan to build more security into their infrastructure and apps and reduce the number of point solutions. A cloud-first strategy is prevalent among government and financial services companies, where 92% and 82%, respectively, say they are cloud-first already.
Applications and workloads are top CISO concerns.

Applications and workloads are viewed as the most vulnerable points on the data journey.

57% of respondents agree they need better visibility over data and apps in order to pre-empt attacks.

54% of respondents also shared that their senior leadership team feel increasingly worried about bringing new applications to market because of the growing threat and damage of cyberattacks.
Security concerns are holding back adoption of AI. The next frontier for business innovation may be Artificial Intelligence, but almost half of respondents (48%) say that security concerns are holding them back from embracing AI and Machine Learning.

The latest research report on Change and Configuration Management Software market intends to provide opportunities to organizations operating in this industry through a detailed analysis of historical data along with the latest developments. The report outlines the top-winning strategies of the leading players, as prevailing trends, and major prospects.

The report meticulously describes the growth catalysts and restraints that will influence the business dynamics over 2021-2026 It also provides actionable insights into the growth potential of the sub-markets over the estimate time frame. Moreover, it analyses the effect of COVID-19 pandemic across the various regional markets to impart a deeper understanding of the changing landscape to stakeholders.

Product terrain

Product gamut of the Change and Configuration Management Software market constitutes Cloud-based CCMS and On-premises CCMS.
Revenue garnered and market share grabbed by each product segment
Estimated growth rate of each product type over the analysis timeframe
Application gamut

The application scope of the Change and Configuration Management Software market is divided into Healthcare & Life Science , Government & Public Sector , Telecom & IT , Retail & Consumer Packaged Goods , Others , ,By Region , North America , United States , Canada , Europe , Germany , France , U.K. , Italy , Russia , Nordic , Rest of Europe and Asia-Pa.
Insights pertaining to the product demand share and market share held by each application segment.
Growth rate of the application segments over the estimated timeframe
Regional landscape

Regional bifurcation of the Change and Configuration Management Software market comprises North America, Europe, China, Japan, Southeast Asia, India and Other Regions.
Total sales recorded, and revenue amassed by each region
Yearly growth rate of each region during 2021-2026
Competitive arena

Leading companies in the Change and Configuration Management Software market size are HPE IBM Microsoft Oracle VMware BMC Software Broadcom Computer Sciences Corporation eG Innovations Oracle VMware LANDesk Software SAP Serena Software.
Market concentration ratio assessment
Company product portfolio, with specifications and top applications
Important metrics like pricing model, returns, sales graph, and market share of each company
Key development, including comprising of mergers, acquisitions, and expansion plans
In conclusion, the Change and Configuration Management Software market size has been examined deeply through multiple segmentations, and further extends through sales channel and supply chain analysis, which comprises of critical data regarding raw materials suppliers, distributors, and buyers in the industry.

Some of the key questions answered in this report:

What will the market growth rate, growth momentum, or acceleration market carry during the forecast period?

Which are the key factors driving the Change and Configuration Management Software market?

What was the size of the emerging Change and Configuration Management Software market by value in 2020?

What will be the size of the emerging Change and Configuration Management Software market in 2026?

Which region is expected to hold the highest market share in the Change and Configuration Management Software market?

What trends, challenges, and barriers will impact the development and sizing of the Global Change and Configuration Management Software market?

What is the sales volume, revenue, and price analysis of top manufacturers of the Change and Configuration Management Software market?

What are the Change and Configuration Management Software market opportunities and threats faced by the vendors in the global Change and Configuration Management Software Industry?

Cloud Computing Market research is an intelligence report with meticulous efforts undertaken to study the right and valuable information. The data which has been looked upon is done considering both, the existing top players and the upcoming competitors. Business strategies of the key players and the new entering market industries are studied in detail. Well explained SWOT analysis, revenue share and contact information are shared in this report analysis. It also provides market information in terms of development and its capacities.

Some of the Top companies Influencing in this Market includes:

PT Cyberindo Mega Persada (CBNCloud), Microsoft, Amazon Web Services, Telkom Indonesia, AGIT, VMWare, Infinys System Indonesia, Oracle, Joyent Cloud

Various factors are responsible for the market’s growth trajectory, which are studied at length in the report. In addition, the report lists down the restraints that are posing threat to the global Cloud Computing market. It also gauges the bargaining power of suppliers and buyers, threat from new entrants and product substitute, and the degree of competition prevailing in the market. The influence of the latest government guidelines is also analyzed in detail in the report. It studies the Cloud Computing market’s trajectory between forecast periods.

Global Cloud Computing Market research report offers:

Market definition of the global Cloud Computing market along with the analysis of different influencing factors like drivers, restraints, and opportunities.
Extensive research on the competitive landscape of global Cloud Computing
Identification and analysis of micro and macro factors that are and will effect on the growth of the market.
A comprehensive list of key market players operating in the global Cloud Computing market.
Analysis of the different market segments such as type, size, applications, and end-users.
It offers a descriptive analysis of demand-supply chaining in the global Cloud Computing market.
Statistical analysis of some significant economics facts
Figures, charts, graphs, pictures to describe the market clearly.

Regions Covered in the Global Cloud Computing Market Report 2021:
• The Middle East and Africa (GCC Countries and Egypt)
• North America (the United States, Mexico, and Canada)
• South America (Brazil etc.)
• Europe (Turkey, Germany, Russia UK, Italy, France, etc.)
• Asia-Pacific (Vietnam, China, Malaysia, Japan, Philippines, Korea, Thailand, India, Indonesia, and Australia)

The cost analysis of the Global Cloud Computing Market has been performed while keeping in view manufacturing expenses, labor cost, and raw materials and their market concentration rate, suppliers, and price trend. Other factors such as Supply chain, downstream buyers, and sourcing strategy have been assessed to provide a complete and in-depth view of the market. Buyers of the report will also be exposed to a study on market positioning with factors such as target client, brand strategy, and price strategy taken into consideration.

What will be the market size and the growth rate by the end of the forecast period?
What are the key Cloud Computing Market trends impacting the growth of the market?
What are the potential growth opportunities and threats faced by the leading competitors in the market?
What are the key outcomes of Porter’s five forces analysis and the SWOT analysis of the key players functioning in the global Cloud Computing Market?
This report gives all the information regarding industry Overview, analysis and revenue of this market.
What are the market opportunities and threats faced by the vendors in the global Cloud Computing market?
Table of Content (TOC)

Global Cloud Computing Market Report 2021 – Growth, Trend and Forecast to 2027
Chapter 1 Cloud Computing Market Overview
Chapter 2 Global Economic Impact on Cloud Computing Industry
Chapter 3 Global Cloud Computing Market Competition by Manufacturers
Chapter 4 Global Production, Revenue (Value) by Region (2014-2021)
Chapter 5 Global Supply (Production), Consumption, Export, Import by Regions (2014-2021)
Chapter 6 Global Production, Revenue (Value), Price Trend by Type
Chapter 7 Global Market Analysis by Application
Chapter 8 Manufacturing Cost Analysis
Chapter 9 Industrial Chain, Sourcing Strategy and Downstream Buyers
Chapter 10 Marketing Strategy Analysis, Distributors/Traders
Chapter 11 Market Effect Factors Analysis
Chapter 12 Global Cloud Computing Market Forecast (2021-2027)
Chapter 13 Appendix

The A2Z Market Research library provides syndication reports from market researchers around the world. Ready-to-buy syndication Market research studies will help you find the most relevant business intelligence.

Our Research Analyst Provides business insights and market research reports for large and small businesses.

The company helps clients build business policies and grow in that market area. A2Z Market Research is not only interested in industry reports dealing with telecommunications, healthcare, pharmaceuticals, financial services, energy, technology, real estate, logistics, F & B, media, etc. but also your company data, country profiles, trends, information and analysis on the sector of your interest.

VMWARE SECURITY CONNECT — A new VMware security report shows a lack of urgency among security professionals despite the ongoing surge in material breaches.

The global security insights report was released during Thursday’s VMware Security Connect 2021. The report is based on an online survey of more than 3,500 CIOs, CTOs and CISOs in December 2020 from across the globe.

VMware also unveiled a new collaboration with Zoom.

The theme of Security Connect 2021 is redefining security. VMware’s vision is to make security simpler, faster and smarter. About 90% of VMware’s business transacts with partners.

More Opportunity for VMware Partners
Patrick Morley is senior vice president and general manager of VMware’s security business unit. He said the company’s partners play a significant role in redefining security.

There’s an opportunity for our partners to get engaged with the whole portfolio that we’re talking about,” he said. “And what we’ve seen is that you had a traditional group of partners that were very security-focused, and then you had broader-based business partners out there who are providing products and services to companies across the whole IT spectrum. Those organizations are all doing security now. VMware’s ability to partner with them, and to give them more products and capabilities to help their customers, is part of the strategy.”

One of the important communities that VMware services on the partner side is incident responders, Morley said.

“We have hundreds of incident responders that use our technologies to help go in and deal with breaches,” he said. “Back to the complexity and what we’re seeing right now, last quarter we saw a 100% increase in the number of breaches that our partners are involved in. That’s 100% on a quarter-over-quarter basis. We’ve never seen that. So security is so important right now for partners.”

The Global Private Cloud Services Market study describes how the technology industry is evolving and how major and emerging players in the industry are responding to long term opportunities and short-term challenges they face. One major attraction about Private Cloud Services Industry is its growth rate. Many major technology players – including IBM, Oracle, HPE, Dell EMC, Cisco Systems, Amazon Web Services, Microsoft, VMware, Atlantic.Net, Blackiron Data, BMC Switzerland, Citrix Systems, Datadirect Networks, Tibco Software, Salesforce.com, RightScale, Enomaly, Equinix, Red Hat, Google, Alibaba, Huawei, Rackspace, CenturyLink & Atos etc have been looking into Private Cloud Services as a way to increase their market share and reach towards consumers.

Major Highlights of Global Private Cloud Services Market Report

1) Why this market research study would be beneficial?
– The study guides Private Cloud Services companies with strategic planning to ensure they realize and drive business value from their plans for growth strategy.

2) How scope of study is defined?
– The Private Cloud Services market is composed of different product/ service offering type, each with its own business models and technology. They include:

Type: , Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS) & Platform-as-a-Service (PaaS);
Application: BFSI, IT and Telecom, Government and Defense, Healthcare & Media and Entertainment;

3) Why Global Private Cloud Services Market would define new growth cycle ?
– Analysis says that Private Cloud Services Companies that have continues to invest in new products and services including via acquisitions have seen sustainable growth, whereas one with slower R&D investment growth have become stagnant. Technology companies with annual R&D growth over 20% have outperformed their peer group in revenue growth.

Research shows that Global Private Cloud Services companies have increased R&D spend and accelerated merger & acquisitions. The industry has one of the fastest innovation cycles studied across industry/applications such as BFSI, IT and Telecom, Government and Defense, Healthcare & Media and Entertainment. To realize value they intend, companies like IBM, Oracle, HPE, Dell EMC, Cisco Systems, Amazon Web Services, Microsoft, VMware, Atlantic.Net, Blackiron Data, BMC Switzerland, Citrix Systems, Datadirect Networks, Tibco Software, Salesforce.com, RightScale, Enomaly, Equinix, Red Hat, Google, Alibaba, Huawei, Rackspace, CenturyLink & Atos etc need to continuously evaluate their governance, risks and control, infrastructure, and talent to aligned planned growth strategies with their operating business models.

To comprehend Global Private Cloud Services market dynamics, the market study is analysed across major geographical regions/country

• North America: United States, Canada, and Mexico
• South & Central America: Argentina, Chile, Brazil and Others
• Middle East & Africa: Saudi Arabia, UAE, Israel, Turkey, Egypt, South Africa & Rest of MEA.
• Europe: UK, France, Italy, Germany, Spain, BeNeLux, Russia, NORDIC Nations and Rest of Europe.
• Asia-Pacific: India, China, Japan, South Korea, Indonesia, Thailand, Singapore, Australia and Rest of APAC.

Important Years in Global Private Cloud Services Market Study Major trends of Global Private Cloud Services Market using final data for 2019 and previous years, as well as quarterly or annual reports for 2020. In general, Years considered in the study i.e., base year as 2020, Historical data considered as 2016-2020 and Forecast time frame is 2021-2026.

The Private Cloud Services study is a perfectly designed with mix of both statistically relevant quantitative data from industry, coupled with insightful qualitative comment and analysis from Industry experts and consultants. To ascertain a deeper view; Private Cloud Services Market Size by key business segments and applications for each of above listed region/country is provided along with competitive landscape that includes Comparative Market Share Analysis by Players (M USD) (2019-2021E) and market concentration rate of Private Cloud Services Industry in 2020.

In-depth company profiles for 15+ Private Cloud Services leading and emerging players that covers 3-years financial history, swot analysis and other vital information like legal name, website, headquarter, % market share and position, distribution and marketing channels and latest developments.

Driving and maintaining growth continues to be a top-of mind issue for Boards, CXOs, and investors in the Technology industry. Private Cloud Services companies and the chain of services supporting them are facing profound business challenges majorly from three factors:

1. The explosive rate at which competitors and Private Cloud Services industry is growing.
2. The amount of growth that is driven by innovation in technologies, value propositions, products and services.
3. The speed at which innovations needs to be furnished in order to drive growth in Private Cloud Services Market.

Thanks for reading Private Cloud Services Industry research publication; get customized report or need to have regional report like North America, Europe, USA, China, Asia Pacific, India etc then connect with us @ sales@htfmarketreport.com

HTF Market Intelligence consulting is uniquely positioned empower and inspire with research and consulting services to empower businesses with growth strategies, by offering services with extraordinary depth and breadth of thought leadership, research, tools, events and experience that assist in decision making.

DataIntelo has recently published a comprehensive report entitled Global IT Process Automation Market focusing to offer a complete overview of the market. This report provides a latest updated information regarding various crucial aspects of the market, which are expected to have a major impact on the market trend and performance during the forecast period. One key aspect is that the report is prepared in such a manner that it would surely assist the needs of clients. This report is a complete guideline for clients to arrive right decision in terms of business investment plans and strategies.

Few companies that are covered in this report:

By Players:

SMA Solutions
Advanced Systems
Concepts
VMware
Microsoft
ServiceNow
Micro Focus
CA Technologies
Cortex
Resolve Systems

The report involves an extensive study of the data available for the global IT Process Automation market during the historical period, 2015-2019 and makes a robust assessment of the market performance and trend for the base year, 2020. It is an in-depth analysis report of the market that offers vital insights on industry growth opportunities and development, drivers, challenges, and restrains for the global IT Process Automation market during the forecast period, 2021-2028.

According to analysis, the global IT Process Automation market was valued at USD XX million in 2019 and is projected to reach approximately USD XX million by the end of 2028, expanding at a CAGR of XX% during the forecast period (2020-2028).

COVID-19 impact on IT Process Automation market

This report provides a critical analysis of the global IT Process Automation market in respect to the COVID-19 pandemic and its adverse impact on the manufacturing and global sales of the product. It provides an extensive study on the impact of COVID-19 pandemic on the global market and explains how it would affect the business operations of the industry in the near future. In short, DataIntelo’s report provides a systematic information regarding the changing market scenario and the flow of the global supply and consumption in respect to the ongoing pandemic. In a nutshell, this report provides an in-depth information of the overall market structure of IT Process Automation and assesses the possible changes in the current as well as future competitive scenarios of the IT Process Automation market.

The market report offers a detailed explanation regarding the key segments and sub-segmentations including the product types, applications, and regions by describing the new products launched, innovative technologies, and other key factors. It evaluates the emerging market size, performance, and scope of each segment of the global IT Process Automation market. The report provides a lengthy analysis of various major players in the market and describes their recent major activities that help change the market positions of these companies. In short, it makes a concrete assessment on the key strategies and plans formulated by them over the recent years such as acquisition & merger, partnership, collaboration, and expansion of the production units abroad by some key players.

In terms of methodology, the report consists of a robust research tools by relying on both primary and secondary sources. The primary source includes interviews of the company executives & representatives and accessing official documents, websites, and press release of the companies related to the IT Process Automation market. It also includes comments and suggestions from the experts in the market especially the representatives from government and public organizations as well as international NGOs. Meanwhile, the report illustrates the estimation of market size for value (USD) and volume (K MT), with applying top-down and bottom-up approaches to estimate and validate the overall scope of the IT Process Automation market.

DataIntelo’s report is known for its data accuracy and precise style, which relies on genuine information and data source. The report is embedded with a group of precise graphical representations, tables, and figures that help to explain a clear picture of various developments of the products and its market performance over the last few years. With this precise report, it can be easily understood the growth potential, revenue growth, product range, and pricing factors related to the IT Process Automation market.

The report covers a detailed performance of some of the key players and analysis of major players in the industry in terms of segments, application, and regions. Moreover, the report also considers various governments’ policies of different regions that help illustrate the key opportunities as well as challenges of the market prevailed in each region.

By Applications:

Manufacturing
Retail
Financial
Government
Others

By Types:

Cloud-based
On-premises

The report covers a wider analysis of the emerging trend of the global IT Process Automation market in five main regions, including North America, Latin America, Europe, Asia Pacific, and Middle East & Africa. The report includes an in-depth analysis of the market performance in the respective regions by focusing on the key countries in these regions. This report can be customized and made available in a separate report for the specific region as per the need of the clients.

You can also go for a yearly subscription of all the updates on IT Process Automation market.

Why you should buy this report?

This report provides a complete guideline for the clients to arrive an informed business decision since it entails a comprehensive information, which will help the clients to understand better of the current & future market situation.

Apart from that, the report also answers some of the key questions given below:

Which end-user is likely to play a crucial role in the development of the IT Process Automation market?
Which regional market is expected to dominate the IT Process Automation market in 2020-27?
How is consumer consumption behaviour impacting the business operations of IT Process Automation market players due to the COVID-19 scenario?

DataIntelo

DataIntelo is a globally renowned market research company that provides a well-script and through research reports on several industries. We have an excellent group of long-year experienced team in the field of business research that are excel at customized report as per the clients’ requirement. We keep our priority to fulfil the needs of our customers by offering authentic and inclusive reports for the global market-related domains. With a genuine effort from a dedicated team of business experts, DataIntelo has been in the service for years by providing innovative business ideas and strategies for the current global market for various industries and set its benchmark in the market research industry. We have a large support of database from various leading organizations and business executives across the globe and offer updating research report on the daily basis with quality information.

May 27, 2021 – The Department of Homeland Security Cybersecurity and Infrastructure Security Agency released an alert for a recent software update from VMware. A critical flaw in vCenter Server platforms could allow a remote attacker to take control of an affected system.

“In this era of ransomware it is safest to assume that an attacker is already inside the network somewhere, on a desktop and perhaps even in control of a user account, which is why we strongly recommend declaring an emergency change and patching as soon as possible,” VMware Technical Architect Bob Plankers, explained in the advisory.

“This advisory is only for vCenter Server, so that lessens the impact of patching (versus updating all hosts),” he added. “vCenter Server is the management interface for vSphere, and restarting it does not impact workload availability, just the ability to manage the workloads.”

With a severity ranking of 9.8 out of 10, the CVE-2021-21985 and CVE-2021-21986 vulnerabilities need immediate attention. The affected product versions include vCenter Server 6.5, 6.7, and 7.0.

The concern is that the impacted servers are in widespread use and used to administer the vendor’s vSphere and ESXi host products.

Specifically, a remote code execution flaw exists within the vSphere Client due to the lack of an input validation within the Virtual SAN Health Check plugin, enabled by default in the vCenter Server.

As a result, an attacker with network access to port 443 could exploit the vulnerability and execute commands through unrestricted privileges on the impacted operating system.

“This vulnerability can be used by anyone who can reach vCenter Server over the network to gain access, regardless of whether you use vSAN or not,” Plankers explained.

The second flaw exists in the vSphere authentication mechanism in the SAN Health Check, Site Recovery, vSphere Lifecycle manager, and Cloud Director Availability plugins. While given just a moderate severity ranking, a hacker with port 443 access could perform functions via the plugins without authentication.

The software update closes these security gaps and improves the plugin framework to improve enforcement of authentication. It may cause some third-party plugins to stop working, but VMware has reached out to its partners, which are working to test plugins and remedy the issues.

VMware officials warned that in light of the heightened threat landscape, patch management should be a top priority for enterprise organizations. Patching the flaw is the quickest way to resolve the security issue by completely removing the vulnerability from the server.

“These updates fix a critical security vulnerability, and it needs to be considered at once,”explained Plankers. “Organizations that practice change management using the ITIL definitions of change types would consider this an ‘emergency change.’”

“All environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so the decision on how to proceed is up to you. However, given the severity, we strongly recommend that you act,” he added.

Those entities that can’t immediately apply the patch should review provided mitigation and workaround strategies, which include disabling the impacted plugins by editing a file within the platform and restarting the device.

Other potential workarounds include using Site Recovery to disable the impacted plugin, or disabling the vSAN plugin altogether. However, VMware warned that in doing so, an entity will lose all monitoring, management, and alarms. As such, the method is not recommended by the vendor.

VMware also provided patch management recommendations to support with software updates. Given the healthcare sector’s struggles with patching, the insights can support safe patching processes.

The recommendations include making sure the time settings are correct on the appliance, as many patching issues can be tied back to incorrect time synchronization. Other suggestions involve reviewing file-based backup and restoration configurations, taking a snapshot of the platform before updating, and minimizing the number of plugins installed on the server.

“Most organizations employ good security strategies, such as defense-in-depth, zero trust and isolation, good password and account hygiene, etc., and these tactics help immensely when a security vulnerability is disclosed,” officials explained.

“Organizations who have placed their vCenter Servers on networks that are directly accessible from the Internet may not have that line of defense and should audit their systems for compromise,” they added. “They should also take steps to implement more perimeter security controls (firewalls, ACLs, etc.) on the management interfaces of their infrastructure.”

VMWare is urging users to apply a patch to address two critical vulnerabilities in VMware vCenter and VMware Cloud Foundation to fix remote code execution and authentication vulnerabilities.

According to the company’s advisory, multiple vulnerabilities in the vSphere Client were privately reported to VMware., including remote code execution vulnerability in the vSphere Client due to a lack of input in the Virtual SAN Health Check plug-in, which is enabled by default in the vCenter Server.

“VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8,” the company said in its advisory.

The company also published a blog on the vulnerabilities, saying users of vCenter Server version 6.5, 6.7 and 7.0 need to apply the updates immediately.

“These updates fix a critical security vulnerability, and it needs to be considered at once. Organizations that practice change management using the ITIL definitions of change types would consider this an “emergency change.” All environments are different, have different tolerance for risk, and have different security controls & defense-in-depth to mitigate risk, so the decision on how to proceed is up to you. However, given the severity, we strongly recommend that you act.”

With access to port 443, a malicious actor can exploit the vulnerability to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server, VMware said.

According to the company’s blog, the remote code execution vulnerability in the vSAN plugin – which ships as part of vCenter Server – can be used by anyone who can reach vCenter Server over the network to gain access, regardless of whether a vSAN is used or not.

A second vulnerability in the vSphere Client could allow a malicious actor with access to port 443 on vCenter Server to perform actions allowed by the impacted plug-ins without authentication.

The update also improves the vCenter Server plugin framework to better enforce plugin authentication. This could cause some third-party plugins to stop working, VMware says.

If your IT department can’t patch right away and don’t use vSAN, there are workarounds for disabling the plugins affected. That involves editing a text file on the VCSA and restarting services.

However, the company cautions putting off the patch – especially as ransomware attacks increase.

“In this era of ransomware it is safest to assume that an attacker is already inside the network somewhere, on a desktop and perhaps even in control of a user account, which is why we strongly recommend declaring an emergency change and patching as soon as possible.”

VMware will be enhancing its existing wellbeing benefits program, to equip employees to live a more healthy and balanced life. Under this program, all employees across offices in India will be eligible for an additional wellbeing allowance of 29,565 INR as equitable reimbursement. Employees can also choose to apply the wellbeing amount to help pay to vaccinate themselves and their family members.

This initiative is the latest offering in VMware’s unique wellbeing program portfolio. As the industry moved to a remote work model last year, VMware revisited some of its policies to ensure that teams had help and resources to help cope with the rigors of the new normal.
As the world embraced the new normal, VMware initiated a pandemic leave policy for its employees, a unique initiative where employees are entitled to 5 days of paid leave, to help employees take some time off during this unusual time. VMware also introduced EPIC2 days, declaring four company-wide holidays throughout the year to help employees switch off and spend time with their families. In addition, VMware introduced a new coaching, therapy, and work Life Services (ICAS) program that caters to the mental and emotional wellbeing of not just the employees but also their dependents.

“At VMware, we believe that true innovation is tied in with an environment where employees can bring in their best selves to work. Balance is key to employee happiness and enabling our employees to live healthy and balanced lives has always been an integral part of our work culture. Given the disruption of last year, we understand that our employees might need some additional support and we have revamped our wellbeing benefits program to do just that. Our people are our biggest strength. And we believe it is our responsibility to establish a work culture that is supportive and prioritizes employee health, both physical and mental,” said Ramkumar Narayanan, VP Technology & MD, VMware India.

VMware believes that people are the key to sustainable success. The company continuously strives to make it easier for its employees to pursue well-being on their terms while delivering excellence at work. At VMware, the focus remains on creating a culture where people are empowered to bring their best selves to work focusing on relevance, impact, and choice.