Paul Cormier appointed CEO of Red Hat


Bobby Hellard

6 Apr, 2020

Red Hat, the open source technology giant, has appointed Paul Cormier as its chief executive officer (CEO). 

Cormier previously served as the company’s president of products and technology and will now replace Jim Whitehurst who left to become president of IBM following Ginni Rometty’s retirement in January. 

Since joining Red Hat in 2001, Cormier has been involved in more than 25 acquisitions, pushing the company beyond its roots with Linux.

He is credited with pioneering the subscription model that helped the company transform from an open source disruptor into an enterprise technology mainstay. Cormier was also ‘»instrumental» in helping the company combined with IBM following its $43 billion acquisition.

«When I joined Red Hat, it would have been impossible to predict how Linux and open source would change our world, but they are truly everywhere,» Cormier said in a statement. 

«The transformations I see happening in our industry are exciting, as they present new challenges and opportunities. The opportunity for Red Hat has never been bigger than it is today and I am honoured to lead the company to help our customers solve their challenges and to keep Red Hat at the forefront of innovation.»

Having worked with him at Red Hat for more than a decade, Whitehurst said that Cormier was the «natural choice» to lead the company. The IBM president called Cormier the driving force behind its product strategy and explained that he understands how to help its customers and partners make the most out of their cloud strategies. 
 
«He is a proven leader and his commitment to open source principles and ways of working will enable Red Hat not only to keep pace with the demands of enterprise IT, but also lead the way as emerging technologies break into the mainstream,» said Whitehurst. 
 
«It was my honour and privilege to lead a company filled with many of our industry’s best and brightest and I am excited to see what Red Hatters accomplish under Paul’s leadership.»​

Microsoft’s Edge now more popular than Firefox for the first time


Keumars Afifi-Sabet

3 Apr, 2020

​Fundamental changes to the Edge platform have seen Microsoft’s flagship browser swell in popularity to the extent it’s overtaken Mozilla’s Firefox as the second most widely-used browser.

Microsoft Edge crept up from a market share of 7.38% in February to 7.59% during March 2020, versus a slightly reduced 7.19% share for Firefox against 7.57% the previous month, according to NetMarketShare.

A steady rise in popularity for Microsoft Edge against the steady fall of Firefox’s market share over the last couple of years has seen a crossover moment occur for the first time.

The milestone follows a period of change for Edge, that comes pre-packaged with its Windows operating systems. Among these changes are a reangling towards business users, and an overhaul of its codebase to the extent it’s now based on the open source Chromium browser.

Another feature, known as Collections, allows workers in procurement to drag and drop items from search results into a list that can be shared with others, complete with image and metadata for all items.

The Chromium-powered Edge has also seen a brand redesign to distinguish itself from the previous iteration of Edge, which has languished for years, as well as Internet Explorer, which has sustained an organic month-by-month decline.

Although Chrome enjoys a near-monopolistic market share of desktop browsers, often hitting between 60% and 70% in market share over the last few years, the tussle for second has been closely fought between Firefox, Edge and Internet Explorer.

Firefox has, itself, undergone a series of key changes focused almost exclusively on protecting user privacy. The most recent step forward in its development, which typifies this trend, involves the launch of a paid-for virtual private network (VPN) that encrypts users’ connections across apps and devices.

Unfortunately for Mozilla, these efforts haven’t paid off in the way the developer may have hoped, given its market share has continued to fall over time, from 9.27% in March 2019, for example, to just above 7% last month. Comparatively, Edge held just 5.2% market share the same time last year.

The rise of Microsoft Edge has also coincided with the fall of Internet Explorer, which held a market share above 12% during 2018. This is largely due to the fact many businesses still rely on the web browser to run business-critical applications.

The fact the new Edge is powered by Chromium is also sure to attract a swathe of users simply curious as to how it compares against previous iterations, and whether this cleaner codebase leads to smarter functionality.

Cloud IT infrastructure spending stormed back in Q4 to secure modest yearly growth, says IDC

Total end user spending on IT infrastructure products for cloud environments recovered significantly in the most recent quarter bringing overall 2019 levels above the red line, according to IDC.

Following two consecutive quarters of spending decline for server, enterprise storage and Ethernet switch for cloud, Q419 saw $19.4 billion (£x) in spending at a 12.4% year-over-year growth. Total spending for the year, at $66.8bn, saw 2.1% annual growth.

IDC noted that, aside from occasional swings, the IT infrastructure industry is now at a point where spending on cloud IT infrastructure 'consistently surpasses' spending on non-cloud IT. Non-cloud IT infrastructure spend dropped 4.6% in the most recent quarter to $18.7bn, with a 4.1% decline across the year.

The public cloud arena continues to drive the cloud IT infrastructure market but with only modest upswings: a 14.5% year-on-year growth for the most recent quarter but – thanks to a weak middle part of the year – only a 0.1% growth overall, at $45.2bn. Private cloud grew 6.6% in 2019 to $21.6bn.

When it came to specific companies, Dell Technologies was at the top of the pile for Q419, capturing 14.5% of market share. HPE and the New H3C Group saw second with 11.6% share, before a gap to Cisco and Inspur, both holding 5.9% of the market.

Kuba Stolarski, research director for infrastructure systems, platforms and technologies at IDC, said that the ongoing Covid-19 pandemic would lead to greater adoption of public cloud services once the crisis was passed. "As enterprise IT budgets tighten through the year, public cloud will see an increase in demand for services," said Stolarski. "This increase will come in part from the surge of work from home employees using online collaboration tools, but also from workload migration to public cloud as enterprises seek ways to save money for the current year.

"Once the coast is clear of coronavirus, IDC expects some of this new cloud service demand to remain sticky going forward," Stolarski added.

https://www.cybersecuritycloudexpo.com/wp-content/uploads/2018/09/cyber-security-world-series-1.pngInterested in hearing industry leaders discuss subjects like this and sharing their experiences and use-cases? Attend the Cyber Security & Cloud Expo World Series with upcoming events in Silicon Valley, London and Amsterdam to learn more.

Elon Musk’s SpaceX bans Zoom over security fears


Sabina Weston

2 Apr, 2020

Elon Musk’s SpaceX has banned its employees from using video conferencing app Zoom, citing concerns over the app’s ability to keep users secure.

A similar ban has been issued by one of SpaceX’s biggest customers, NASA, coming into force after the FBI issued a warning about “Zoom-bombing” – hackers disrupting video conferences with threatening language, hate speech and pornographic images.

Zoom has previously admitted that it is «currently not possible» to enable end-to-end encryption for its video meetings.

In an email seen by Reuters, SpaceX informed its staff that all access to Zoom had been disabled with immediate effect.

“We understand that many of us were using this tool for conferences and meeting support,” the message read. “Please use email, text or phone as alternate means of communication.”

It’s not known whether the ban also extends to Tesla, which is also owned by SpaceX CEO Elon Musk. The company was unable to respond to requests for comment at the time of publication.

Zoom has surged to more than 200 million daily meeting participants after employees around the world were asked to work from home to slow the pace of the fast-spreading coronavirus pandemic. On 5 March, Slack, Facebook, and Microsoft had all advised their employees to work remotely following the spread of the virus to the west coast of the United States. Over the course of the month, most tech giants had closed their offices, shifting all employee communications online.

Despite numerous security warnings, prime minister Boris Johnson is known to be using Zoom to hold cabinet video conferences. He was recently criticised for sharing a picture on Twitter in which a Zoom meeting ID was clearly visible.

A government spokesperson defended the PM, telling BBC News on Wednesday that “in the current unprecedented circumstances, the need for effective channels of communication is vital”.

The news comes days after a class-action lawsuit was filed against Zoom, the compliant alleging the service illegally shared user data with Facebook. Zoom’s founder and CEO, Eric S. Yuan, announced over a blog post that over the next three months, the company will work to “better identify, address, and fix issues proactively”.

How Ubisoft’s i3d.net onboarded Opengear to avert networking disasters


Keumars Afifi-Sabet

2 Apr, 2020

Downtime can prove a fiasco for any organisation, as can a sudden surge in demand, and it’s particularly true for companies wired into the heart of the online gaming scene. From EA Sports’ FIFA to the renowned Call of Duty franchise, millions of gamers across the globe have come to expect 24/7 network availability. 

The growing demand for always-on services is akin to the way that organisations reliant on cloud-powered applications expect flawless and reliable connections on which to run their operations. Just look at the escalating COVID-19 pandemic that’s taken the cloud computing world by storm – with a surge in demand for data services, Wi-Fi networks and workplaces platforms like Microsoft Teams. The staggering work that goes into maintaining these networks as userbases swell, whether in the business or gaming worlds, is routinely overlooked; it’s often a case of missing crucial elements when things go wrong.

At games publisher Ubisoft, subsidiary i3D.net runs and maintains the networks that power widely-played AAA multiplayer games, like Tom Clancy’s The Division. While it had been successful managing with just 70 staff and servers based in 35 sites spanning 15 countries, in the mid-2010s, it became clear extra muscle was needed to continue to service a rapidly-swelling user base.

“The big thing in game hosting is the fact you need to be really flexible and very responsive to the fast-changing market,” i3D.net COO, Rick Sloot, tells Cloud Pro. “A game can be popular, or it can be a real flop. But as soon as the game is popular, and a lot of people are playing it, or maybe even more people are going to play it than you’re expecting, you need extra capacity within hours, or maybe, at most, in a matter of days.”

The pressures of an always-on world

In the past, i3D.net would factor networking issues as a business cost, but these started to become too frequent to sustain. The infrastructure was built to incorporate redundancy, though if any routers, switches or other equipment went down, i3D.net would be pressed to resolve these issues as soon as possible while game sessions across the world were put on hold. The firm sought to onboard a third-party network monitoring company in 2015 to bolster network resilience, once it became impossible to tolerate these problems. The need was especially pressing given how limited staffing levels were, combined with exponentially growing demand. Network management firm Opengear was recruited shortly before Ubisoft released its hotly-anticipated Tom Clancy’s The Division 2, to improve resilience and failover options should things get hairy.

“The way the 24/7 world is working currently, and everybody wants to be online 24/7, [network failure] was not an acceptable risk anymore,” Sloot continues. “Because the company, and everybody in the world, is demanding a 24/7 service, we needed to look for other solutions, and other ways of maintaining the flexibility but without adding a lot of overhead on us.”

The potential for demand to surge at any one time, and in any location across the world, was impractical given i3D.net would rely on its own network engineers to fly out to these sites should work need doing. Remote hands would be used where possible, but it would take crucial minutes or hours to establish a connection while networks were offline. Expansion at existing locations, or establishing new sites, also posed issues when demand for a game went “sky high”.

Going mobile

Opengear already formed a part of i3D.net’s infrastructure, but on a much smaller scale, Sloot says. The implementation phase, which spanned a year, involved heavily ramping up the company’s involvement, which, thanks to the existing relationship, was more straightforward than it could have been. The equipment was shipped to i3D.net, and its engineers spent the following year flying from location to location to install the infrastructure. As i3D.net harbours sufficient technical expertise, it primarily leant on Opengear for enhancements. Automatic failover to alternative networks, for example, would ensure games would continue running when things looked hairy. This operated through the installation of cellular friction, with communication running via 4G networks instead of traditional backup lines.

“Before, we would always try to have a backup line; for example, buy a backup line from a data centre and then connect that one. So this was a very good additional feature for us, which brought the service to a higher level,” Sloot continues. The implementation of cellular friction, however, brought its own challenges. 

“Maybe sometimes for us, from our side, it’s tricky because for cellular friction you need good quality of signal … which is always a challenge in a data centre, which is always a highly secure facility.”

As for how he’d advise other businesses to handle their networking infrastructure as they look to scale, he repeated that you would only miss the most crucial elements powering your networks behind the scenes when things go horribly wrong. 

“I always say to my guys here, what could be the worst that can happen?” he explains. “If you look at all those steps that could happen – what can you prevent, and if you can prevent them, what’s the best solution for it? 

“If there’s a solution, what are the costs versus the risks? Looking at this particular solution of Opengear, the costs of not having a network is, like, tens of thousands of Euros per hour. Buying the product is a small fraction of that, so, it’s a rather small investment for achieving high availability.”

Canonical launches Managed Apps for enterprise DevOps teams


Daniel Todd

1 Apr, 2020

Canonical has announced the arrival of Managed Apps, a service that will allow enterprises to have mission-critical apps deployed and operated by the firm as a fully managed service.

Covering ten of the world’s most widely used open source apps, Managed Apps removes the need for enterprises to contract with multiple vendors, Canonical explained, while customers also benefit from support for their underlying infrastructure.

The service will cover ten widely used cloud-native database and LMA (logging, monitoring and alerting) apps on multi-cloud Kubernetes and also on virtual machines across bare-metal, public and private cloud.

At launch, those managed databases include MySQL, InfluxDB, PostgreSQL, MongoDB, as well as ElasticSearch Open Source Mano and Kafka. The service will also cover demand-based scaling, high availability for fault tolerance, security patching and updates.

Managed Apps are also backed by SLAs for uptime, round-the-clock break/fix response, while businesses can monitor app health through an integrated LMA stack and dashboard, which includes Grafana, Prometheus and Graylog.

Ultimately, the initiative will allow DevOps teams to focus on delivering business value instead of typical time-consuming tasks thanks to the streamlined approach to infrastructure maintenance, the firm explained.

«As organisations increasingly move to a cloud-native approach, they can be slowed down by spending too much time on the underlying management of their cloud and its applications,» commented Stephan Fabel, director of Product at Canonical.

«Our Managed Apps give them the freedom to focus on business priorities, with the confidence that their apps are reliably maintained, secure and can scale to production needs.»

Managed Apps also offers full lifecycle management that includes resource-scaling based on changes in demand, as well offering high availability by default. Canonical’s managed services also have MSPAlliance CloudVerify certification, the firm said, which is equivalent to SOC 2 Type 2, ISO 27001/ISO 27002 and GDPR compliance.

The software firm also revealed that it plans to expand the number of open source apps covered by Managed Apps to further improve performance accountability.

UK government to launch coronavirus ‘contact tracking’ app


Sabina Weston

1 Apr, 2020

The UK government is reportedly preparing to launch an app that will warn users if they are in close proximity to someone who has tested positive for coronavirus.

The contact-tracking app will be released just before the lockdown is lifted or in its immediate aftermath, Sky News has reported and will use short-range Bluetooth signals to detect other phones in close vicinity and then store a record of those contacts on the device.

If somebody tests positive for COVID-19, they will be able to upload those contacts, who can then be alerted – via the app.

This means that the data will not be regularly shared with a central authority, potentially easing concerns around privacy violations.

If people with the app later test positive for coronavirus, they could allow all the folks they’ve been near to be informed, so those people could self-isolate.

Jim Killock, executive director of the Open Rights Group, told IT Pro that the new app, and similar developments, might “prove to be important tools in the fight against COVID-19”. However, he also raised concerns about the privacy of users.

“Nevertheless, we are concerned that [the] government needs to put more effort into helping people understand their approach to privacy more generally, and improve their communications vastly. Building a project like this at speed carries privacy, security and delivery risks, so the more information that is given out the better,” he said.

NHSX, the innovation arm of the UK’s National Health Service, will reportedly appoint an ethics board to oversee the development of the app, with its board members set to be announced over the coming weeks.

“It is good that they are thinking about the privacy of users – this is essential to build trust and confidence so people use it,” said Killock.

Questions might arise over the effectiveness of the app, as large numbers of people will be required to use it in order for it to work efficiently. The NHS is reportedly counting on the app being downloaded by more than 50% of the population.

«NHSX is looking at whether app-based solutions might be helpful in tracking and managing coronavirus, and we have assembled expertise from inside and outside the organization to do this as rapidly as possible,» an NHSX spokesperson said.

Only last week, the NHSX and Matt Hancock MP were urged to follow steps that would guarantee that new technologies used to tackle the coronavirus outbreak abide by data protection ethics.

In an open letter signed by numerous “responsible technologists”, they were asked to take urgent steps to ensure that the public’s trust in the NHS is not undermined by possible data breaches. 

IBM Call for Code starter kits focus on coronavirus


Sarah Brennan

31 Mar, 2020

IBM has officially deployed an accelerated timeline for its coronavirus Call for Code and published three coronavirus-related Call for Code starter kits.

Each starter kit includes a comprehensive guide to help developers create apps to alleviate the problems people and communities are facing during the COVID-19 pandemic.

“We have learned how passionate developers are about solving the world’s most pressing issues, and how Call for Code’s infrastructure gives developers, data scientists, students, and subject matter experts the infrastructure they need to move from ideation through implementation,” said Daniel Krook, CTO of Call for Code. “Publishing developer-friendly starter kits has been key to help get developers up-and-running fast.”

Introducing three coronavirus starter kits

IBM has officially deployed an accelerated timeline for its coronavirus Call for Code and published three coronavirus-related Call for Code starter kits.

Each starter kit includes a comprehensive guide to help developers create apps to alleviate the problems people and communities are facing during the COVID-19 pandemic.

“We have learned how passionate developers are about solving the world’s most pressing issues, and how Call for Code’s infrastructure gives developers, data scientists, students, and subject matter experts the infrastructure they need to move from ideation through implementation,” said Daniel Krook, CTO of Call for Code. “Publishing developer-friendly starter kits has been key to help get developers up-and-running fast.”

Introducing three coronavirus starter kits

Crisis communication: Coronavirus has prompted many people to seek answers about symptoms, testing sites and the status of their communities. This starter kit comes equipped with a preloaded virtual assistant that understands and responds to common COVID-19 questions and scans COVID-19 news articles using Watson Discovery.

Remote education: While we may be in the midst of a pandemic, the edification of our youth must continue. Many schools and universities nationwide have shifted to online instruction to ensure the safety of themselves and their students. The remote education kit provides a set of IBM Cloud- and Watson Services-backed open-source tools related to remote education.

Community cooperation: We may be practising social distancing, but there is a growing interest in enabling cooperation among communities. More than ever, neighbours are offering to combine grocery runs and assist those around them. This kit enables the rapid deployment of applications that empower communities to continue working together.

IBM is continuing to develop a wide ecosystem of partners and tech providers in hopes of helping participants round out their solutions. Some of these partners include Altran and Bank of China.

Tarush Verma, client leader and AVP at Altran, said: “Altran will help fight this pandemic by creating innovative solutions for the Call for Code Global Challenge including chatbots and other applications based on the new COVID-19 developer starter kits.”

IBM reported it’s received upward of 1,000 registrations in a single day. Many of those applicants were individuals on the front lines, at-risk individuals and experienced coders who want to share their experiences and contribute to creating meaningful solutions. 

The initial submission deadline for this year’s Call for Code is now April 27. IBM will announce the three best solutions on May 5. Those teams will then work alongside IBM to have their solutions released into the “real world.”

To participate in this year’s Call for Code, visit the Call for Code site here. 

AWS launches Amazon Detective for investigating security incidents

1 Apr, 2020

AWS has announced the general availability of Amazon Detective, the company’s automated security service. 

Amazon Detective works with machine learning and statistical analysis to build visualised maps of security threats in a customer’s cloud. Rather than a security team compiling all the relevant data to analyse and conduct a lengthy investigation, it automatically pulls data from services like CloudTrail and customer logs. 

The information is then run through AWS GuardDuty which compiles a graph that details all interactions across the customer’s infrastructure. Everything is run from the Amazon Management Console and, according to AWS, in just a few clicks your IT team can have a detailed report of the problem and where it has come from. 

The graph model is also continuously updated as new data becomes available from the customer’s AWS resources, allowing security teams to spend less time looking through constantly changing data sources and freeing them up to work on remediation. 

The service is being offered with no upfront fees but customers will pay if they need to upload data from AWS CloudTrail and other AWS services they use. 

«Even when customers tell us their security teams have the tools and information to confidently detect and remediate issues, they often say they need help when it comes to understanding what caused the issues in the first place,» said Dan Plastina, VP for security services at AWS. 

«Gathering the information necessary to conduct effective security investigations has traditionally been a burdensome process, which can put crucial in-depth analysis out of reach for smaller organisations and strain resources for larger teams. Amazon Detective takes all of that extra work off of the customer’s plate, allowing them to focus on finding the root cause of an issue and ensuring it doesn’t happen again.»

The service is available from today in Europe, the US, South America and parts of Asia, with more regions coming soon, the company confirmed. 

Marriott reported another data breach: Why cyber risk assessment is important

Marriott International — the multinational hospitality company behind the third-largest hotel brand in the world — reported a major data breach on March 31 2020, marking its second major data breach in the last two years. This data breach is expected to leak the information of 5.2 million guests worldwide.

“Marriott said Tuesday approximately 5.2 million guests worldwide may have been affected. The information taken may have included names, addresses, phone numbers, birthdays, loyalty information for linked companies like airlines and room preferences. Marriott said it’s still investigating but it doesn’t believe credit card information, passport numbers or driver’s license information was accessed,” reported ABC News. In February-end, Marriott found a massive amount of guest information was being accessed using two of its employees’ user credentials.

After an initial investigation, Marriott believed that the data breach probably started in mid-January. It blocked those login credentials, and now, it is assessing the situation and assisting the relevant authorities for investigating the data breach. Though Marriott is doing everything to fix the problem now, it is no good news seeing it suffered two major data breaches in less than two years.

In November 2018, Marriott reported the first major data breach, which leaked the personal information of 383 million people. So, the combined amount of data that got leaked in these two data breaches totals to 388.2 million. Moreover, after the last major data breach, it was expected that Marriott will harden its cybersecurity infrastructure, train its security teams, and upgrade its systems. However, the latest data breach raises questions on its efforts to fight threats.

This brings us to the question: how does an organisation check and validate its security infrastructure? The answer: cybersecurity risk assessment.

Let’s learn more about it and how it helps organisations to test their security postures.

Cybersecurity risk assessment is the risk assessment of cyber or digital threats. It has become increasingly important since every organisation — nowadays — implements and relies on information technology and systems for running its business. Since it heavily relies on these digital systems, a small breach, hack, or malfunction may pose high risks.

As risk assessments are necessary for every organisation for getting informed and preparing for unexpected issues or risks like industrial malfunctioning and manufacturing defects and deaths, cybersecurity risk assessments are critical for knowing and preparing for unexpected cyber threats. The list of threats includes but is not limited to data breaches, insider or online attacks, etc.

“Risk assessments are used to identify, estimate, and prioritise risk to organisational operations (such as mission, functions, image, and reputation), organisational assets, individuals, other organisations, and the Nation, resulting from the operation and use of information systems. The purpose of risk assessments is to inform decision makers and support risk responses by identifying: (i) relevant threats to organisations or threats directed through organisations against other organisations; (ii) vulnerabilities both internal and external to organisations;(iii) impact (i.e., harm) to organisations that may occur given the potential for threats exploiting vulnerabilities; and (iv) likelihood that harm will occur,” according to NIST’s Guide for Conducting Risk Assessments.

Similarly, cyber risk assessment— is the term defining the process of assessing the cyber or digital risks facing your business or organisation. Its primary goal is to help the board members and decision-makers to understand the organisation’s cybersecurity infrastructure and install and support the best risk mitigation processes for fighting off — or at least decreasing the cyber risks of — both online as well as offline threats.

There are numerous examples and reasons that prove the importance of cyber risk assessments. The data breaches reported by Marriott International are great examples; if Marriott’s security infrastructure was attack-proof, it might not have suffered the data breach — at least the second one. Every customer (guest) making a reservation at Marriott after the first breach in November 2018 must have believed in its promise of hardening its security infrastructure. However, it failed — super hard — at keeping its promise. Though the investigation is still in progress for the second breach, Marriott had — probably — a gap in their security posture that led to the data breach. What could have been done?

Even if the two employees — whose login credentials were used for the second data breach — were involved in the breach, its security systems should have detected and reported massive data requests coming from systems at a single location or origin. And if detected and reported, its security teams should have checked the issue and identified the data breach earlier — ideally. However, it is evident that they did not detect or find the massive breach until recently.

That said, every organisation must perform cybersecurity risk assessments on a regular basis. It helps the organisation to identify its security weaknesses, inform the security teams as well as decision-makers, and harden or install the necessary cybersecurity processes and products to improve the overall security. Moreover, it reduces the long-term costs, provides awareness on the installed processes and systems, helps avoid data breaches and security incidents, and helps meet the legal and regulatory cybersecurity requirements. These, in turn, helps strengthen your brand and avoid unnecessary costs or risks. Also, it builds trust in your present and future customers for your organisation.

Picture credit: "Marriott Hotel", by José Carlos Cortizo Pérez, used under CC BY 2.0

The cloud news categorized.