Rackspace fortifies APAC footprint with new acquisition


Zach Marzouk

19 Jan, 2022

Rackspace has agreed to acquire cloud-based data, analytics, and AI firm Just Analytics as it aims to strengthen its APAC footprint.

Just Analytics was founded in 2011 and has over 100 employees headquartered in Singapore with others based in Vietnam and India. The company helps clients to design and create scalable data pipelines using its proprietary data platform Guzzle, paired with cloud-based data and analytics services that give customers a unified view of their information assets.

Rackspace said the acquisition brings strong regional ties into the Microsoft Azure ecosystem, as Just Analytics was recently awarded four regional Microsoft partner of the year awards.

The data platform is on the Microsoft Azure Marketplace and automates the movement and transformation of any volume, variety, and velocity of data from a range of sources to data pipelines at scale for production. Just Analytics AI also uses Guzzle to deploy predictive capabilities and business intelligence to analyse data from critical business and operational functions for business end-users.

“The acquisition of Just Analytics ties into our growing professional services focus and brings market-leading cloud-based data, analytics and AI capabilities that are in demand from our customers and prospects,” said Kevin Jones, CEO of Rackspace Technology. “In addition, we will benefit from the company’s strong APJ regional ties, talented employee base, and natural evolution up the IT services stack. These benefits will provide a clear tie between our services and important customer business metrics.”

For now, Rackspace will keep the Just Analytics brand for the foreseeable future as it said the company has built a well-known and respected brand among the leaders and customers of Microsoft Azure Data Analytics.

The APAC region continues to garner interest from technology companies, with Google Cloud opening a new region in Melbourne last July. This was the firm’s second region in Australia and its 11th in APAC overall, stating that its customers operating in Australia and New Zealand would now be able to benefit from low latency and high performance of their cloud-based workloads and data.

This was followed in September by AWS saying it would launch its first New Zealand data centre by 2024 by investing around £3.9 billion over the next 15 years and creating 1,000 jobs. The Auckland region is set to be made up of three availability zones and joined the existing 81 zones across 25 geographic AWS regions.

Windows Server admins agree to forgo broken patches


Connor Jones

19 Jan, 2022

Microsoft has released an emergency out-of-band (OOB) update full to address an array of issues found in last week’s Windows Server patch, but IT administrators are in agreement that they will not apply them.

Last week’s Patch Tuesday fixed a host of issues across Microsoft products, including a number of zero-day vulnerabilities, but Windows Server administrators have complained that some of the patches released have created even more problems.

Because of the issues introduced by the most recent cumulative patches, IT administrators discussing the issues on Reddit are mostly in agreement that forgoing the patches and waiting for the next cumulative update in February is the best course of action to minimise operational disruption and complexity.

The patches issued last week have been breaking a number of key components in business environments and the solution many administrators have turned to is to uninstall the updates entirely. 

Four main flaws

The latest out-of-band update from Microsoft issued this week aims to address the issues faced by businesses running Windows Servers but in some cases, it first requires administrators to install the broken patch from last week.

The issues businesses are currently facing include domain controllers unexpectedly restarting and entering boot loops every few minutes. The issue is thought to affect all supported Windows Server versions and the failure in the LSASS.exe process means Windows cannot run correctly.

Microsoft Hyper-V is also affected by the patches, with enterprise virtual machines (VMs) failing to start on some Windows Servers. In addition, ReFS-formatted removable media is failing to mount post-patch, which has caused issues for administrators thinking their external drives were corrupted. Numerous reports of experts formatting their drives after applying last week’s patches, only to realise it was in vain, have appeared on social media, too. 

To cap off a bug-laden release of patches, some L2TP VPN connections are also failing across Windows 11Windows 10, and certain Windows Server versions. 

Microsoft has issued fixes the all of the aforementioned issues and aside from the ReFS-formatted media issues, they are cumulative updates which means they do not require administrators to install the broken patch from last week first. 

The updates are available in the Microsoft Update Catalogue which also has instructions on how to install the updates manually into Windows Server Update Service (WSUS).

A risky response?

Despite most of the updates being cumulative, IT admins are seemingly still in agreement that they will be waiting until February, or until a fully safe wave of patches arrives, to fix the Windows Server issues.

One user said: “I’ll be waiting on the cumulative… I’m not reinstalling a broken patch I just removed from a bunch of servers to then have to immediately apply a fix to said patch.”

Another user said installing the out-of-band update made matters worse: “[We] received the bad updates this morning, and Exchange wouldn’t see the Active Directory (AD) environment anymore. I saw the optional OOB update and installed that – [it] actually made the problem worse. I removed all of the updates and AD was back to being seen and Exchange was finally working.”

Weighing in on the matter, outside experts have said the idea of forgoing updates is one that shouldn’t be taken lightly and the risks of leaving environments open to known vulnerabilities need to be considered on balance with the potential disruption the updates themselves could cause an organisation.

“This is very much a question of risk management and risk assessment,” said Andy Norton, European cyber risk officer at Armis to IT Pro. “Clearly the risk from installing the patch is one of disruption to the organisation. If you balance that with the risk from a cyber attack stemming from the issues that are not addressed by failing to patch, you then have both sides of the equation and are able to make a decision. 

“There were six zero-day flaws addressed in the January patch, however, none of these zero-days are actively being exploited currently, and so it may appear that the consensus is to delay the patching process as it is riskier than being exposed to the zero days.”

Alan Calder, CEO at GRC International Group, added:  “If it were my business, and a sysadmin said they thought it might be ok to continue with critical vulnerabilities unpatched until Patch Tuesday in February, we would have had a very blunt conversation about taking cyber security seriously.”

In a statement given to IT Pro, Microsoft said: “We recommend customers install updates released on January 17.”

Safari bug lets websites track browsing activity and unique identifiers


Danny Bradbury

18 Jan, 2022

Researchers have found a bug in Apple’s Safari browser that allows websites to track a user’s browsing activities across other sites.

The bug, discovered by browser fingerprinting service FingerprintJS, also exposes a user’s unique ID for some websites to other sites that they visit.

The flaw, found in Apple’s WebKit browser engine, affects Safari 15 on macOS and all browsers on iOS and iPadOS 15. It lies in WebKit’s implementation of the Indexed Database API, commonly called IndexedDB, a JavaScript API that browsers use to access a database of objects, and it frequently stores data generated while interacting with a web application. This includes a user’s unique ID for interacting with web applications, such as their Google ID.

When properly implemented, IndexedDB follows the same-origin principle. This ensures that information stored from a web page is only available to web pages from the same domain. It stops over-inquisitive web pages from accessing other domain’s stored information, which could include sensitive user or session data.

FingerprintJS found that WebKit’s IndexedDB implementation fails to observe the same-origin principle, instead making stored information available to web sites from other domains.

FingerprintJS called the bug a privacy violation. “It lets arbitrary websites learn what websites the user visits in different tabs or windows,” the company said in its analysis of the bug. “This is possible because database names are typically unique and website-specific.”

The company found some websites using user-specific IndexedDB data such as ID numbers in their IndexedDB database names, making it easy for any other website to find out a user’s ID on other sites. Using this ID to look up the user’s assets (such as profile pictures) could allow identification of the user, the company warned. Google websites store ID numbers in this way, making it possible for other sites to harvest Google IDs using the bug.

The bug affects all browsers on iOS 15 because Apple mandates the use of WebKit on this platform in its developer guidelines. Section 2.5.6 says “Apps that browse the web must use the appropriate WebKit framework and WebKit Javascript.”

FingerprintJS said that it had notified Apple of this bug on November 28 but Apple had not not patched it. Apple’s engineers began creating a patch on Sunday February 17, the day that FingerprintJS published details of the bug.

UK businesses urged to join four-day working week trial


Sabina Weston

17 Jan, 2022

UK businesses are being urged to join a six-month trial of a four-day working week, as organisers aim to sign up at least 30 companies by June.

Organised by the 4 Day Week Global organisation and the Autonomy thinktank, the pilot programme will be monitored by Cambridge and Oxford Universities in order to measure the four-day working week’s impact on staff productivity and wellbeing, as well as the impact on the environment and gender equality.

Participating employees will receive 100% of their usual pay for only four days at work, in exchange for their commitment to maintain “at least” 100% productivity.

Autonomy co-director Kyle Lewis said that organisations taking part in the trial will benefit from “unparalleled access to the expertise, tools and resources they will need to run a smooth and successful trial”.

“This is a fantastic opportunity for organisations who want to be pioneers and trial a four-day week as a way of supporting and empowering workers, enhancing organisational productivity and having a positive impact on our society and the environment,” he added.

In 2019, prior to the mass shift to remote working, Autonomy authored a report which found “strong indications that reducing the working week can help reduce air pollution and our overall carbon footprint”.

According to Brendan Burchell, professor in the Social Sciences at Cambridge University, with the rise of technology allowing to maintain productivity, “the time has come for more organisations to take the leap and unravel the practicalities”

“This scheme has tremendous potential to progress from conversations about the general advantages of a shorter working week to focussed discussions on how organisations can implement it in the best possible way,” he added.

One of the businesses taking part in the pilot programme is the Edinburgh-based Canon, which found that the work-life balance of its 140 employees had changed “substantially” during the pandemic.

As a responsive employer we are always looking at how we can adapt our working practices to ensure that employees find their time with us is meaningful, fulfilling and productive. For this reason, we’re keen to pilot a four-day week to see if it can work for us,” said president Ken Sutherland.

Last year, UK-based fintech Atom bank garnered headlines for introducing a four-day working week for all its employees with no change in salary. Prior to that, UK supermarket Morrisons also announced plans to shift to a four-day working week, keeping employee pay the same. However, this was only made available to head office staff in Bradford, who also had to work one Saturday per month to recoup the lost time.

Businesses can sign up for the trial until the end of March. 

Google Drive accounted for the most malware downloads in 2021


Bobby Hellard

12 Jan, 2022

Google Drive accounted for the most malware downloads in 2021, taking the top spot from Microsoft OneDrive.

The cloud storage service accounted for 37% of all malicious downloads last year, according to the January edition of Netskope’s Cloud and Threat report. 

CloudPro contacted Google, Microsoft and Amazon for comment but had not received a response at the time of publication. 

Netskope, a US-based cyber security provider, noted that cloud storage apps gained even greater adoption in 2021, with 79% of customers analysed using at least one cloud storage app, which is up from 71% in 2020. The number of cloud storage apps in use also rose, with organisations with 500 to 2,000 employees using 39 different cloud storage apps last year.

What’s more, cloud-delivered malware is now more prevalent than variants are downloaded via the web. In 2021, cloud app malware accounted for 66% of all malware downloads, up from 46% at the start of 2020. 

Aside from its increasing popularity, there are other reasons why Drive surpassed other services when it came to malware downloads, according to Netskope. For example, the Emotet botnet that used Box to deliver malicious Office document payloads was taken down early in 2021 but ended up inspiring hackers to use Google Drive to share malicious Office documents.

“The increasing popularity of cloud apps has given rise to three types of abuse described in this report: attackers trying to gain access to victim cloud apps, attackers abusing cloud apps to deliver malware, and insiders using cloud apps for data exfiltration,” Netskope Threat Labs threat research director Ray Canzanese said. 

“The report serves as a reminder that the same apps that you use for legitimate purposes will be attacked and abused. Locking down cloud apps can help to prevent attackers from infiltrating them, while scanning for incoming threats and outgoing data can help block malware downloads and data exfiltration.”

IBM ramps up sustainability efforts with Envizi acquisition


Zach Marzouk

12 Jan, 2022

IBM has acquired Envizi, an Australian data and analytics software provider for environmental performance management, as it looks to help customers better measure their environmental impact.

The company said the acquisition adds to its investments in AI-powered software to help organisations create more resilient and sustainable operations and supply chains. It added that companies are under mounting pressure from regulators, investors, and consumers to progress towards more sustainable and socially responsible business operations while demonstrating these measures in a robust and verifiable way.

Financial terms of the deal were not announced. CloudPro contacted IBM for more information, but the company had not responded at the time of publication.

Envizi’s software automates the collection and consolidation of over 500 data types and supports major sustainability reporting frameworks. It helps companies analyse, manage, and report on environmental goals and identify efficiency opportunities while assessing sustainability risk. 

IBM said by using Envizi with its broader AI-powered software, companies will be able to automate feedback generated between their corporate environmental initiatives and the operational endpoints being used in daily business operations. Envizi is set to be integrated with IBM Maximo, IBM Sterling, IBM Environmental Intelligence Suite, and IBM Turbonomic and Red Hat OpenShift.

“To drive real progress towards sustainability, companies need the ability to transform data into predictive insights that help them make more intelligent, actionable decisions every day,” said Kareem Yusuf, general manager of IBM AI Applications.

“Envizi’s software provides companies with a single source of truth for analyzing and understanding emissions data across the full landscape of their business operations and dramatically accelerates IBM’s growing arsenal of AI technologies for helping businesses create more sustainable operations and supply chains.”

Envizi is available as a SaaS product and runs in multi-cloud environments, serving companies like Microsoft, Qantas, and Uber.

In February last year, IBM vowed to become carbon-neutral by 2030. It planned to procure 75% of its electricity from renewable sources and cut its greenhouse gas emissions 65% from its 2010 emission levels by 2025. By 2030, it plans to reach its carbon-neutral goal by obtaining 90% of its electricity from renewable sources and implementing tech to neutralise residual emissions.

IBM isn’t the only tech company helping customers to monitor their emissions. In October, Microsoft launched a preview of Microsoft Cloud for Sustainability to help organisations more effectively record, report, and reduce their carbon emissions on a path to net-zero. The SaaS product connects to data sources and centralises and organisations data in a common format to provide a more accurate system of record that enables more comprehensive sustainability management.

Nvidia acquires HPC cluster management firm Bright Computing


Sabina Weston

11 Jan, 2022

Nvidia has announced the acquisition of high-performance computing (HPC) systems management provider Bright Computing for an undisclosed sum.

The deal will see Nvidia open new markets for Bright Computing, which in turn will help expand Nvidia’s accelerated computing portfolio with its Bright Cluster Manager product.

The two companies had been collaborators for more than a decade, with Nvidia integrating Bright’s Cluster Manager with its CUDA parallel computing platform and programming model, and most recently its deep learning-focused DGX systems.

Commenting on the acquisition, vice president and general manager of DGX Systems at Nvidia, Charlie Boyle, said that Bright Computing’s software and expertise will enhance the company’s growing DGX and data centre businesses,

“Now we see an opportunity to combine our system software capabilities to make HPC data centres easier to buy, build and operate, creating a much larger future for HPC,” he added.

Bright Computing CEO Bill Wagner said that “Nvidia is changing the world as we know it”, adding that the company “couldn’t be more excited for our team and software to play a part in that”.

Founded in 2009 and based in Amsterdam, Bright Computing services are used by more than 700 organisations worldwide, including Microsoft,, Samsung, Boeing, NASA, and Tesla.

The acquisition will see Bright’s workforce transferred to Nvidia. The company wasn’t immediately available for comment regarding the future of Bright’s employees or its Amsterdam office and didn’t disclose the financial details of the deal. Nvidia’s current Netherlands headquarters are based in Delft.

The news comes weeks after the UK government ordered a “phase two” investigation into Nvidia’s $40 billion (£30 billion) acquisition of Cambridge-based ARM. Over a period of 24 weeks, the Competitions and Market Authority (CMA) will consider evidence whether the acquisition of the Cambridge-based semiconductor company by the US chip giant is a threat to competition and national security.

The first phase of the CMA’s investigation, which concluded in August and covered competition and jurisdictional issues, determined that the deal could lessen competition across four markets: data centres, Internet of Things, automotive, and gaming.

How to avoid corrupting your hybrid work strategy


Keri Allan

11 Jan, 2022

With businesses forced to close their offices for months on end, we’ve witnessed one of the greatest working arrangement shakeups in history. Companies implemented new systems and policies while embarking on digitally transform projects, as workers had to adapt to a completely new way of working. 

While many thrived, others struggled, and almost everyone agrees the old ways won’t work any longer. As such, hybrid work has become a central tenant in the marketing campaigns and portfolios of countless vendors, with promises of trust, empowerment and flexibility rampant. With several concerns mounting, though, especially around application overload and employee monitoring, there’s a risk the reality of hybrid work won’t match these early ambitions.

The evolution of hybrid work

The evolution of hybrid work started before the pandemic, with forward-thinking businesses fundamentally changing how they use space – introducing hot-desking, breakout rooms and collaboration spaces, alongside increased digitisation.

“This was well underway before the pandemic, with progressive organisations embracing a plethora of digital tools from virtual work environments like Slack and Microsoft Teams to shared cloud storage and SharePoint sites,” says Matt Hancocks, senior director at Gartner.  

When the pandemic hit, remote working was becoming more accessible, and many tech companies were quick to jump on this trend, directing their product development to further amplify it. 

“Since many tech companies had been quick to adapt, there’d also been a gravitation towards using the company’s products to support their own hybrid set-ups,” adds Alok Alstrom, founder of the Future of Work Institute. “Instead of developing products for ‘someone else’, they viewed themselves as the first users of their products.”

Most organisations were reluctant to embrace remote working prior to COVID-19. Fully remote employees comprised less than 5% of the global workforce, rising to 10% if you included employees who occasionally worked from home, Gartner figures show. When lockdowns led to approximately 70% of the world’s knowledge workers working remotely, however, 75% of businesses discovered that productivity was the same, if not better.

Hybrid work – help or hindrance?

Now many organisations see hybrid work wasn’t a barrier to productivity, they’ve been happy to embrace various models, but the explosion of technologies and systems might actually be more oppressive than liberating.

When governments mandated working from home, for instance, many organisations implemented new tools to monitor employee productivity, including screen capture, measuring keystrokes, webcam photography and web monitoring. This was considered heavy-handed by many, and not suitable for all work environments, such as those roles revolving around thinking time and creativity. 

Maintaining an online presence actually become the main source of stress for employees, according to IDC’s Meike Escherich, associate research director – future of work. Both Escherich and Hancocks agree the solution lies with moving away from measuring productivity by output, and towards focusing on business outcomes. Organisations that implement this mentality shift will sustain greater benefits from today’s hybrid working world, whereas businesses that focus on monitoring their employees risk alienating workers.

Digital fatigue is another concern, Al Fox, Director and head of HR at B2B marketing firm Fox Agency, tells IT Pro. “We’ve always avoided micromanagement and surveillance, but digital fatigue is an issue when working online all day,” he says. “Creatives love working together in an office where they can share or draw ideas on paper or board, and that doesn’t work quite as well virtually. 

“For this reason, they try and meet in person when they can. For others, a day filled with Teams or Zoom meetings can be extremely tiring and lack the spontaneity of real-life meetings. The convenience of video meetings is amazing, but there are always downsides, it would be foolish to pretend there aren’t.”

Crafting a hybrid model for 2022

As the world reopens, hybrid work is being driven by employees’ desire to maintain the flexibility and empowerment remote working provided. Autonomy over one’s working day has become more important than remuneration to many, which has led to what’s become known as ‘The Great Resignation’. 

Roughly 65% of employees are prepared to quit and seek employment elsewhere if their company isn’t prepared to offer a degree of flexibility and remote working, Gartner figures show. With UK vacancies reaching an all-time high, therefore, businesses must consider genuine hybrid working options as a key tool in retaining talent.

Employers are also benefiting from workers realising they’re no longer tied to their location. “People in York or Inverness can now work for a London-based company or even one in San Francisco,” says Fox. “That’s a big change and one that’s worked for us as it’s opened the talent pool right up.”

Going forward, the most successful work strategies will be human-centric, Hancocks says, and organisations should rethink their relationships with employees. This journey is underway for many organisations, with businesses reducing how many days employees must be office-based. Others, meanwhile, are taking a more radical approach. 

“Virgin Money announced a new employee deal, consisting of several initiatives closely co-developed with employees,” he adds. “The main one is around a completely remote work offering, that allows employees to work remotely anywhere in the UK. It includes enhanced holiday leave and six welfare days. This exemplifies the emergence of the new employee value proposition we’re likely to start seeing from many organisations.”

Dropbox, meanwhile, is making a distinction between synchronous versus asynchronous work; when are people required to work together and when are they able to work alone? To do this, the firm uses blocks of time in calendars to distinguish between availability for either type of work. 

“Examples of work design are even emerging in the quite mundane, such as the PowerPoint presentation,” Hancocks continues. “Using tools like PowerPoint 365, people can record their presentation, upload it to a suitable site and make it available for colleagues to view at a time that suits them.”

There’s no silver bullet to designing the perfect hybrid work strategy. What’s certain, though, is that the businesses set to thrive are those that are agile, adaptive and use technology to empower employees, rather than monitor and control them.

LG Electronics joins the IBM Quantum Network


Praharsha Anand

10 Jan, 2022

LG Electronics has joined the IBM Quantum Network to expand industry applications of quantum computing.

IBM will give LG Electronics access to its quantum computing systems and Qiskit, in addition to the firm’s open source quantum information software development kit.

The resources will help LG electronics augment big data, artificial intelligence (AI), connected cars, digital transformation, the Internet of Things (IoT), and robotics applications.

Further, with IBM Quantum technology, LG can capture the latest advances and applications from quantum computing, in accordance with IBM’s quantum roadmap. 

Using IBM Quantum technology, LG will also train its employees, allowing the company to examine potential breakthroughs for its industry.

“Based on our open innovation strategy, we plan to use IBM Quantum to develop our competency in quantum computing,” said Byoung-Hoon Kim, CTO and executive vice president of LG Electronics. 

“We aim to provide customers with value that they have not experienced so far by leveraging quantum computing technology in future businesses.”

As part of the IBM Quantum Summit in November 2021, IBM unveiled its Eagle quantum computing processor with 127 qubits. Eagle uses IBM’s 3D packaging architecture designed to support advanced quantum processors, including its 1,126-qubit Condor chip scheduled to be released in 2023.

The LG partnership further strengthens IBM’s quest for Quantum Advantage.

“We’re happy to welcome LG Electronics to a growing quantum computing ecosystem in Korea at an exciting time for the region,” said Jay Gambetta, IBM fellow and VP of quantum computing at IBM. 

“The relationship between IBM and LG Electronics will permit LG to explore new types of problems associated with emerging technologies and will help strengthen the quantum capabilities in Korea.”

Financial regulators concerned about reliance on AWS, Azure and Google Cloud


Bobby Hellard

10 Jan, 2022

UK financial regulators are reportedly concerned about the sector’s reliance on a subset of cloud computing providers that leaves banks vulnerable to service outages and hacks. 

The Prudential Regulation Authority (PRA) is said to be exploring ways to access more data from the likes of Amazon, Microsoft and Google, according to the Financial Times.

Amazon Web Services (AWS), Microsoft Azure and Google Cloud are often listed as the three biggest providers in the world, with each company increasingly active in the financial sector.

All three have made extensive deals with UK banks in recent years, offering services to reduce IT costs by migrating firms away from on-premise to the cloud, where they can capitalise on new technologies such as AI.  

The use of cloud computing by UK banks is covered under the PRA’s operational resilience framework, however, the use of just a few larger companies is causing concern, particularly given recent outages

While the PRA declined to confirm the FT‘s report, a source with knowledge of the situation told IT Pro financial regulators in the UK are now looking at ways to tackle the financial system’s increasing cloud service providers, which could see the introduction of additional policy measures, some requiring legislative change. 

The PRA is a part of the Bank of England (BoE), which has also expressed concern in this area; in July 2021, the BoE warned that UK banks moving more and more of their administration and account online “could pose a risk to financial stability”. It also argued that the market for cloud services was highly concentrated with AWS, Microsoft and Google all enjoying heavy dominance. 

Sections of the UK’s government have also questioned how much it depends on the likes of AWS. In February 2021, Conservative life peer Lord Holmes said that AWS represented “the latest iteration of the biggest player”, adding that in regards to cloud procurement, it was being allowed to “eat the largest piece of pie”.