Articles from Venafi

Venafi, a CyberArk (NASDAQCYBR) company, today announced the findings of its latest research report: The Impact of Machine Identities on the State of Cloud Native Security in 2024. Surveying 800 security and IT decision-makers from large organizations across the U.S., U.K., France and Germany, this second annual report examines the top machine identity security trends and challenges impacting the state of cloud native security today.

Venafi, the leader in machine identity management, today released a new research report, Organizations Struggle to Secure AI-Generated and Open Source Code. The report explores the risks of AI-generated and open source code and the challenges of securing it amidst hyper-charged development environments.

Machine Identity Security Summit 2024 -- Venafi, a CyberArk (NASDAQCYBR) company1, today introduced new product capabilities in its Control Plane for Machine Identities during the 2024 Machine Identity Security Summit. This latest version of the Venafi Control Plane will enable security and platform teams to address the most critical machine identity security challenges and help future-proof their organizations, including post-quantum readiness, cloud-to-cloud connectivity and workload identity security.

Venafi, the leader in machine identity management, today announced its first-ever Workload Identity Day Zero event on November 12, 2024, co-located with KubeCon + CloudNativeCon North America 2024 in Salt Lake City, UT. The event will bring together platform engineers, cloud security architects and CTOs to explore unique workload identity challenges in complex cloud native environments, share best practices for effectively securing workloads in their organizations and network with the leaders shaping workload identity management.

Venafi, the leader in machine identity security, today announced its agenda and lineup of speakers for Machine Identity Security Summit 2024, taking place October 1-3 in Boston, MA. The sixth annual Summit will bring together future-focused CISOs, InfoSec leaders, PKI administrators, platform engineers and other industry leaders to explore the latest trends shaping machine identity security, including AI, post-quantum threats, 90-day certificate lifecycles, workload identity management and software supply chain security.

Venafi, the leader in machine identity security, today released a new research report, Organizations Largely Unprepared for the Advent of 90-Day TLS Certificates. The report examines organizations’ current state of preparedness to transition to new machine identity standards, including shorter certificate lifecycles and post-quantum cryptography.

Ahead of RSA Conference 2024, Venafi, the inventor of machine identity management, today launched its new 90-Day TLS Readiness Solution to help organizations comply with Google's proposed 90-day TLS certificate standard, improving security posture while reducing the risk of certificate-related interruptions.

(KubeCon + CloudNativeCon Europe 2024) — Venafi, the inventor of machine identity management, today introduced SPIFFE (Secure Production Identity Framework For Everyone) support for Venafi Firefly, Venafi’s industry-first lightweight workload identity issuer uniquely designed to support modern, highly distributed cloud native workloads. As workload identity plays an increasingly fundamental role in cloud native architectures, today’s modern applications require an automated way to scale and secure heterogeneous workloads that are short-lived. By leveraging SPIFFE’s open source framework of identity standards, Venafi Firefly customers can now easily secure and govern workload identities across complex, dynamic development environments such as Kubernetes without slowing down innovation.

Venafi, the inventor of machine identity management, today introduced its new Stop Unauthorized Code Solution, uniquely designed to help security teams proactively prevent unauthorized code across any operating environment. By leveraging the combined power of Venafi’s CodeSign Protect product, trusted team of security experts and expansive technology ecosystem, the end-to-end solution enables organizations to significantly reduce their attack surface, prevent potential malware and cyber attacks, and minimize security breaches through improved application control.

Venafi, the inventor of machine identity management, today announced that Patrick Dennis has joined the executive team as chief executive officer (CEO). Patrick’s appointment comes on the heels of Venafi’s more than 150% year-over-year growth in its global Software as a Service (SaaS) business and recognition on Inc.’s 2023 Best in Business List, underscoring the company’s mission to future-proof leading organizations by delivering cutting-edge SaaS solutions that secure the heart of their digital infrastructure: machine identities.

Venafi, the inventor of machine identity management, today announced a staggering 164% year-over-year growth in its global Software as a Service (SaaS) business. This phenomenal growth underscores Venafi's mission to future-proof leading organizations by delivering cutting-edge SaaS solutions that secure the heart of their digital infrastructure: machine identities. Venafi’s strong year is also highlighted by a key appointment to its executive team, enhanced product offerings and more.

Venafi, the inventor of machine identity management, today released its predictions for the cybersecurity and cloud native landscape in 2024. AI is introducing new threats and amplifying existing risks, machine identity lifespans are shrinking, and the provenance of code is under increased scrutiny. As a result, next year promises to be a challenging one for the security industry.

(KubeCon + CloudNativeCon North America) – Venafi, the inventor of machine identity management, today released findings of its latest research report, The Impact of Machine Identities on the State of Cloud Native Security in 2023. The report examines the top threats and challenges impacting the state of cloud native security at organizations today, including their approach to cloud native security, challenges faced, ownership among security and development teams, and the foundational role machine identities play within cloud native security.

Machine Identity Management Summit 2023--Venafi, the inventor of machine identity management, today unveiled Venafi Athena at its fifth annual Machine Identity Management Summit. As the new underpinning AI technology for the Venafi Control Plane – made possible only by Venafi's modern software-as-a-service architecture built on decades of in-depth expertise and innovation – Venafi Athena combines the powers of machine learning, large language models and Venafi’s industry-leading data capabilities to make machine identity management easier and faster for security and platform teams.

Venafi, the inventor of machine identity management, today launched a suite of groundbreaking innovations within its Control Plane for Machine Identities. Unveiled at the Machine Identity Management Summit 2023, these innovations expand Venafi's software-as-a-service (SaaS) machine identity management platform, equipping security and platform teams to accelerate modernization and safeguard their organizations against the challenges of cloud native adoption, the rise of AI, the post-quantum era and more.

Venafi, the inventor of machine identity management, today announced that the United States Patent and Trademark Office (USPTO) has implemented Venafi’s TLS Protect solution to automate the entire lifecycle of digital certificates and other machine identities to meet cybersecurity requirements.

Venafi, the inventor of machine identity management, today unveiled its initial lineup of featured speakers and sessions for Machine Identity Management Summit 2023, taking place September 18-19 at Illuminarium in Las Vegas. Building upon the enormous success of its previous editions, this year’s fifth annual Summit is set to be the preeminent gathering of industry thought leaders, experts and visionaries focused on addressing the critical security trends and challenges in modern machine identity management, zero trust, AI, post-quantum cryptography, cloud native and more.

Venafi, the inventor of machine identity management, today announced that Machine Identity Management Summit 2023 will take place on September 18-19 at Illuminarium in Las Vegas. This fifth annual summit will bring together future-focused CISOs, InfoSec leaders, security architects, cloud native architects, PKI experts and industry thought leaders once again to explore groundbreaking security trends in modern machine identity management, zero trust, AI, cloud native and more.

(KubeCon + CloudNativeCon Europe 2023) – Venafi, the inventor of machine identity management, today introduced Venafi Firefly, the only lightweight machine identity issuer that supports highly distributed, cloud native environments. Part of the Venafi Control Plane for Machine Identities, Firefly enables security teams to easily and securely meet developer-driven machine identity management requirements for cloud native workloads by issuing machine identities, such as TLS and SPIFFE, locally at high speeds across any environment. By delivering added speed, reliability and security for machine identities in modern architectures, it helps organizations ensure identities adhere to corporate security policies, while accelerating application development and digital transformation.

Venafi®, the inventor and leading provider of machine identity management, today introduced TLS Protect for Kubernetes. As part of the Venafi Control Plane for machine identities, TLS Protect for Kubernetes enables security and platform teams to easily and securely manage cloud native machine identities, such as TLS, mTLS and SPIFFE, across all of an enterprise’s multi-cloud and multi-cluster Kubernetes environments. By delivering increased visibility, control and automation over machine identity management within more complex cloud native infrastructures, it helps enterprises improve application reliability and reduce development and operational costs.

Venafi®, the inventor and leading provider of machine identity management, announced that VMware has integrated Venafi’s machine identity control plane into its Tanzu Service Mesh. The Venafi integration enables Tanzu users to integrate their Service Mesh with a trusted certificate authority (CA) of their choice to support mutual Transport Layer Security (mTLS) between Kubernetes clusters.

Venafi®, the inventor and leading provider of machine identity management, today released its predictions for the cybersecurity landscape in 2023, indicating that this will be one the most challenging years yet for the cybersecurity industry.

Venafi®, the inventor and leader of machine identity management today announced that the open source cert-manager project has graduated to the Cloud Native Computing Foundation® (CNCF) incubation program. The incubation program will help cert-manager widen its community of contributors, expand to new use cases, improve extensibility and advance developer and user experience.

Venafi®, the inventor and leading provider of machine identity management, today unveiled the Venafi Control Plane for Machine Identities. The Venafi Control Plane unifies machine identity management across all identity types: in data centers, cloud, hybrid environments and at the edge. The Venafi Control Plane enables customers to accelerate digital transformation, increase development speed, reduce security risk and eliminate business disruptions.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of new research that evaluates the complexity of cloud environments and its impact on cybersecurity. The study found that 81% of organizations experienced a cloud-related security incident over the last 12 months, with almost half (45%) suffering at least four incidents during the same time frame. The underlying issue for these security incidents is the dramatic increase in security and operational complexity connected with cloud deployments. And, since the organizations in this study currently host two fifths (41%) of their applications in the cloud but expect increase to 57% over the next 18 months, this complexity will continue to increase.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of new research that evaluates the security impact of the increasing number of nation-state attacks and recent shifts in geopolitics. Venafi research into the methods used by nation-state threat actors shows the use of machine identities is growing in state-sponsored cyberattacks.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of a dark web investigation into ransomware spread via malicious macros. Conducted in partnership with criminal intelligence provider Forensic Pathways between November 2021 and March 2022, the research analyzed 35 million dark web URLs, including marketplaces and forums, using the Forensic Pathways Dark Search Engine. The findings uncovered 475 webpages of sophisticated ransomware products and services, with several high-profile groups aggressively marketing ransomware-as-a-service.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of a new crawler report from security researcher and TLS expert, Scott Helme. The report, which Venafi sponsored, evaluates the use of encryption across the world’s top one million sites over the last six months and reveals the need for a control plane to automate the management of machine identities in increasingly complex cloud environments.

Venafi®, the inventor and leading provider of machine identity management, today announced that cert-manager, the open source standard for cloud native machine identity management created by Jetstack, a Venafi company, has been downloaded more than 1 million times a day for the last 18 months. This data brings into sharp relief the critical importance of machine identity management to the security of containers in cloud native environments.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of a global study of 1,000 CIOs, in which 82% say their organizations are vulnerable to cyberattacks targeting software supply chains. The shift to cloud native development, along with the increased speed in development brought about by the adoption of DevOps processes, has made the challenges connected with securing software supply chains infinitely more complex. Meanwhile, adversaries, motivated by the success of high-profile software supply chain attacks on companies like SolarWinds and Kaseya, are stepping up attacks against software build and distribution environments.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of a global study of 1,000 CIOs, which shows that digital transformation is driving an average of 42% annual growth in the number of machine identities. Because CIOs often have limited visibility into the number of machine identities on their networks and these critical security assets are not prioritized in IAM and security budgets, CIOs should expect to see a sharp increase in machine identity related outages and security breaches.

Venafi®, the inventor and leading provider of machine identity management, today expanded its groundbreaking Machine Identity Management Development Fund to include the world’s leading universities including Carnegie Mellon University (CMU) and Oxford University. The new Development Fund initiative provides sponsorships for academic research and development into the critical controls and capabilities advancing state-of-the-art machine identity management. Launched in 2018 with $12.5 million, the Machine Identity Management Development Fund already provides organizations’ developers with direct sponsorship from Venafi to accelerate machine identity management research and innovation that futureproof customer and industry success.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of a global survey of IT decision makers on the use of double and triple extortion in ransomware attacks. The data reveals 74% of IT decision makers are so concerned about new extortion tactics that they believe ransomware should be considered a matter of national security. This data takes on a new urgency in light of the recent advisory from the U.K.'s National Cyber Security Centre (NCSC), Australian Cyber Security Centre (ACSC), Federal Bureau of Investigation (FBI), National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) that has detailed the growing risks posed by ransomware. Extortion tactics mean that ransomware defense strategies focused on data protection are no longer effective. Organizations need a more robust ransomware security program to protect against these risks.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of a global survey of more than 1,500 IT security decision makers that reveals that almost two-thirds (60%) of security almost two-thirds (60%) believe ransomware threats should be prioritized at the same level as terrorism. These opinions echo the U.S. Department of Justice, which raised the threat level of ransomware following the Colonial Pipeline attack earlier this year. The study also found that less than one-third of respondents have implemented basic security controls that break the ransomware kill chain.

Venafi®, the inventor and leading provider of machine identity management solutions, today announced the findings of a new crawler report from security researcher and encryption expert, Scott Helme. The report, which is sponsored by Venafi, provides an in-depth security analysis of the world’s top 1 million sites over the last 18 months. Driven by the acceleration of digital transformation and cloud migration during the pandemic, the analysis shows that in many ways, the internet is becoming more secure. Use of encryption is increasing and the adoption of newer TLS protocols is rising. However, despite the adoption of stronger encryption protocols, many companies continue to use legacy RSA encryption algorithms to generate keys, which in conjunction with TLS certificates, act as machine identities that authorize secure connections between physical, virtual and IoT devices, APIs, applications and clusters. RSA algorithms are significantly less secure than modern alternatives.

Venafi®, the inventor and leading provider of machine identity management, today published a new report analyzing attack patterns of the state-backed Chinese hacking group, APT41 (also known as the Winnti Group). The research, APT41 Perfects Code Signing Abuse to Escalate Supply Chain Attacks, shows that:

Venafi, the inventor and leading provider of machine identity management, today announced that the company’s Trust Protection Platform won the “Identity Management Platform of the Year” award in the 2021 CyberSecurity Breakthrough Awards. The Venafi Trust Protection Platform was recognized as the only solution on the market that provides full lifecycle machine identity management for all machine identity types from the data center to the cloud at internet scale. More than 3,500 of the most security-conscious brands in the world depend on Venafi to manage and secure their machine identities against today’s evolving threat landscape.

Venafi®, the inventor and leading provider of machine identity management, today announced survey results highlighting the challenges of improving software supply chain security. The survey evaluated the opinions of more than 1,000 IT and development professionals, including 193 executives with responsibility for both security and software development, and revealed a glaring disconnect between executive concern and executive action. While 94% of executives believe there should be clear consequences (fines, greater legal liability for companies proven to be negligent) for software vendors that fail to protect the integrity of their software build pipelines, most have done little to change the way they evaluate the security of the software they purchase and the assurances they demand from software providers.

Venafi®, the inventor and leading provider of machine identity management, today announced the findings of a global survey that evaluates the impact of software supply chain attacks like SolarWinds/SUNBURST, CodeCov and Kaseya/REvil on how development organizations are changing their approach to securing software build and delivery environments. The survey evaluated the opinions of over 1,000 information security professionals, developers and executives in the IT and software development industries.

North Korea is successfully pioneering a new model of state-sponsored cybercrime that could create a dangerous blueprint for other rogue states to follow, researchers from Venafi®, the inventor and leading provider of machine identity management, warned today. Venafi’s threat intelligence specialists analyzed publicly available information on North Korean-sponsored cybercriminal groups – such as Lazarus and APT38 – and their methods over the past four years to gain insights into how these groups operate – noting the differences between the actions of threat actors from a rogue state and those that are somewhat confined by international law.

Venafi®, the inventor and leading provider of machine identity management today announced a machine identity management solution that combines the powerful, machine identity lifecycle automation in the Venafi Trust Protection Platform with Intel Software Guard Extensions (Intel SGX) powered by 3rd Gen Intel Xeon Scalable processors. The combined, software-only solution protects private keys when they are distributed to cloud services or used in runtime, even in untrusted, shared cloud environments.