Tag: Proofpoint

Russian hackers target Zimbra

A Russian-based threat group Winter Vivern or TA473 has been targeting a flaw in the Zimbra webmail client to exfiltrate emails from officials in European countries.

Security outfit Proofpoint said the attackers exploit a vulnerability tracked as CVE-2022-27926 on unpatched internet-facing Zimbra Collaboration servers, which it discovered using a vulnerability scanner.

CVE-2022-27926 is described as a “Reflected cross-site scripting (XSS) vulnerability of Zimbra Collaboration 9.0” that “allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.” It was patched by Zimbra in April 2022.

Security bosses focus on cloud

Enterprise security leaders in the UK are focused on cloud security, building up resilience against threats and aligning cybersecurity strategies with overall business goals.

A new research report The 2022 ISG Provider Lens Cybersecurity report from Information Services Group (ISG) claims cloud security is an enterprise manager’s top priority.

The growing use of cloud models such as infrastructure-as-a-service (IaaS) and platform-as-a-service (PaaS) is forcing companies to adapt their cybersecurity approaches, with a focus on holistic resilience that requires more communication and training for employees and outside stakeholders, the report says.

Steel takes over Splunk

Proofpoint CEO Gary Steele is leaving security outfit to take over as Splunk’s new CEO.

Steele was the founding CEO of Proofpoint and has overseen the company’s growth from a startup to a publicly-traded security-as-a-service provider.

He will take over as permanent CEO on 11 April following Doug Merritt’s decision to step down in November last year, just five months after Splunk received a billion dollars of private equity funding from Silver Lake Investment.

“Splunk has built one of the most respected brands in tech and is at the forefront of security and observability. I’m honoured to join the company at such an important moment – for both Splunk and the industry. I’ve dedicated my career to helping companies around the world safeguard their data, systems and infrastructure, and know first-hand how critical Splunk’s products and solutions have become to customers as they navigate hybrid, multi-cloud environments with increasingly complex attacks and threat actors.”

Proofpoint appoints Rose Resident CISO for the EMEA

Proofpoint has appointed Andrew Rose as its Resident CISO for the EMEA region. Rose was previously Chief Security Officer of Mastercard subsidiary Vocalink.

In his role as Resident CISO, EMEA, Rose will focus on driving Proofpoint’s security plans, strategy and initiatives amongst its customer base.

Rose brings with him industry expertise from a number of other CISO roles including at the UK’s Air Traffic Control provider, NATS, where he oversaw a security transformation and contributed to the design of the next generation air traffic control system.

Rose has held CISO roles at top tier global law firms Allen & Overy LLP and Clifford Chance LLP and was a Principal Analyst at Forrester Research where he covered the role of the CISO and Security Culture and Awareness as two of his specialty areas.

Palo Alto Networks gets high with a little help from its friends

ST-605Cyber security company Palo Alto Networks reported higher than expected second quarter results thanks to its partnerships which have been getting its foot in the door with companies and governments.

Palo Alto, which went public in 2012 and provides internet security and malware analysis products, has been grabbing market share from traditional firewall suppliers. Palo Alto recently boogied with Honeywell to protect industrial facilities and also signed a deal with peer Proofpoint to jointly provide security services to customers.

Palo Alto forecast a third quarter profit of 41-42 cents per share and revenues of $335 million-$339 million. Analysts thought the figure would be about $334.6 million.

The outfit is still running at a net loss of $62.5 million from $43 million. Revenues rose to $334.7 million from $217.7 million, above analysts’ expectation of $318.3 million.

Office workers threaten businesses

old_officeA survey conducted by YouGov suggests the biggest security threat to business is the enemy within.

That’s the employees.

The survey, conducted on behalf of security as a service company Proofpoint shows that while pilfering stationery may be a thing of the past, office workers are endangering security.

A quarter of the 2,076 people surveyed sent work emails using their personal email account – especially if files are too large to send.  A fifth sent emails with confidential information including names, ages and home addresses.

And when working out of the office, 20 percent used a file transfer service like Dropbox to their personal email addresses.

And 45 percent of people received emails that weren’t meant to arrive in their inboxes.

Organisations can’t cope with the idiosyncratic nature of business, it appears. While 43 percent were trained on data and privacy, a third of them didn’t get any training.

Needless to say, Proofpoint has an axe to grind because it sells security as a service.