With the popular Linux distro's acquisition of StackRox, Red Hat is taking a major step forward in securing not only its own Kubernetes distribution, OpenShift, but other Kubernetes distros as well. . In terms of money, Red Hat buying StackRox probably isn't that big a deal. Sources say it was just above $100 million. Big money to you and me, but peanuts for big tech companies. But, when it comes to securing Kubernetes , this is an enormous deal not just for Red Hat and its in-house Kubernetes distro, OpenShift , but for all Kubernetes distros and services. That's because StackRox's software does an exceptional job of providing visibility across Kubernetes clusters by deploying components for enforcement and data collection directly into the Kubernetes cluster infrastructure. StackRox also provides a policy engine that includes hundreds of built-in controls to enforce security best practices, industry standards, and configuration management. . By acquiring StackRox, Red Hat significantly boosts Kubernetes security for OpenShift, along with all other distributions, immensely.. Kubernetes Security, Container Security, Red Hat Acquisition, OpenShift Improvements, StackRox Features. . Brittany Day
Popular software hosting service GitHub has acquired Semmle , a code analysis platform that helps product developers and security researchers discover potential zero-days and critical vulnerabilities in large codebases. Learn more in a great The Next Web article: . The financial terms of the deal were not disclosed by the two companies.But GitHub intends to make Semmle’s automated code review products available via GitHub Actions . The San Francisco-based firm— founded in 2006 — counts Uber, NASA, Microsoft, Google, and Nasdaq as some of its clients. Semmle offers tools likeQLthat codifies logical programming errors as queries to spot mistakes, find variants of the same bug elsewhere in the code, and prevent them from occurring in the future. The link for this article located at The Next Web is no longer available. . GitHub purchases Semmle to improve automated code assessment and security flaw identification in software development processes.. GitHub, Semmle, code analysis, security tools, software development. . LinuxSecurity.com Team
Juniper Networks announced today it has bought virtual security vendor Altor Networks for $95 million. The acquisition builds on an existing relationship between the two companies, and Juniper actually invested in the company earlier this year. . Founded in 2007, Altor specializes in intrusion prevention, firewall and monitoring for virtual environments. With the purchase, Juniper seeks to deliver integrated, scalable security architecture protecting physical and virtual systems. "Juniper is excited to acquire one of the industry's leading virtualization security vendors and the extremely talented team that built it," said Mark Bauhaus, executive vice president and general manager of Service Layer Technologies at Juniper Networks, in a statement. "This acquisition will extend our leadership in data center and cloud security and will enable customers to deploy a consistent set of security services across their physical and virtual infrastructure, while delivering lowest total cost of ownership." The link for this article located at eWeek is no longer available. . CyberGuard Solutions is dedicated to cloud infrastructure security, emphasizing endpoint protection, data loss prevention, and threat detection services.. Virtualization Security, Network Monitoring, Cloud Security, Intrusion Prevention, Security Acquisition. . LinuxSecurity.com Team
In case your boss ever questions whether security is big business... Symantec will pay US$1.28 billion to acquire VeriSign's security business. The two companies confirmed the rumored acquisition, saying it would give VeriSign the opportunity to focus on its more-profitable domain name business, while allowing Symantec to broaden its growing portfolio of enterprise security products. l.. "There is a real need to be able to know who the user is and what they should have access to... but without the central theme of identity we weren't able to provide the total solution," Symantec CEO Enrique Salem said during a conference call to discuss the deal. "IT needs to be able to control the information, and identity matters to be able to provide that solution." Reports surfaced Tuesday that VeriSign had been shopping around its encryption technology and service business, and naming Symantec as the buyer. The VeriSign business unit sells SSL (Secure Sockets Layer) certificates -- used to authenticate secure Internet servers -- two-factor authentication tokens, fraud detection and public key infrastructure products for government and the enterprise. But the business has grown slowly of late, hurt by dropping SSL certificate prices, a fact that is reflected in the unit's low purchase price relative to its $371 million in annual revenue. "If you want to succeed in that market you have to have a lot of services, the platform, large and growing distribution channels -- a lot of things that Symantec has," Mark McLaughlin, VeriSign's president and CEO, said on the conference cal The link for this article located at Tech World is no longer available. . 'There is a real need to be able to know who the user is and what they should have access to... but . questions, whether, security, business, symantec, billi. . LinuxSecurity.com Team
Symantec will acquire encryption specialist PGP and endpoint security vendor GuardianEdge Technologies for $300 million and $70 million respectively, the company said today.. Both are privately held companies. Symantec said the deals are subject to regulatory approval but are expected to close by June. Symantec said the companies' combined specialties in standards-based encryption for e-mail, file systems, removable media and smartphones will complement its security offerings, such as its gateway, endpoint security and data-loss prevention software. Encrypting information offers a higher level of security in case data is lost or stolen. Symantec said it will standardize its products on PGP's key management platform, which allows administrators to centrally manage encryption tasks. That platform will be integrated into the Symantec Protection Center, a management console for its products. The link for this article located at Computer World is no longer available. . The acquisition of PGP and GuardianEdge by Symantec bolsters their encryption capabilities and fortifies endpoint security, leading to enhanced safeguards for sensitive data.. Symantec Acquisition, Encryption Specialist, GuardianEdge Technologies, Data Security, Key Management. . LinuxSecurity.com Team
GFI Software has confirmed the purchase of sometimes controversial spam blocklist provider SORBS for a reported $451,000.. Spam and Open Relay Blocking System (SORBS) has maintained a list of email servers suspected of sending or relaying spam since 2002. Inefficiencies in its spam blocklist database removal procedure, a controversial fines policy and the aggressive blacklisting of shared IP addresses have drawn criticism even from those also looking to clamp down on junk mail on the internet. Citing an impending eviction by its University of Queensland web hosts, Australia-based SORBS publicly contemplated either selling or closing the service back in June. In the event the operation continued running as before until October when it found a white knight in the shape of GFI Security, a US based vendor of web and network security and management tools. The link for this article located at The Register is no longer available. . GFI Software announced the acquisition of the SORBS email blacklist provider, an initiative aimed at rectifying its debated policies.. Email Filtering, Spam Detection, Network Security. . LinuxSecurity.com Team
Network security specialist Sourcefire announced Friday that it has acquired ClamAV, an open-source gateway anti-malware project whose technologies are used in the products of a number of other vendors. After reading this article I find my self wondering how this will affect open-source security. We all know Sourcefire is behind the Snort project but after acquiring ClamAV how will it change Snort's development? . Sourcefire said that under the terms of the deal, it has purchased all of the project's technology and related trademarks, as well as the copyrights controlled by all developers involved in the effort, including its founder Tomasz Kojm. The link for this article located at InfoWorld is no longer available. . The acquisition of ClamAV by Sourcefire signifies a pivotal change in the realm of open-source malware defense and the path ahead.. Sourcefire Acquisition, ClamAV Future, Open Source Security. . Bill Locke
Earlier this month, San Jose-based Secure Computing Corp. announced plans to acquire privately held messaging security vendor CipherTrust Inc. of Alpharetta, Ga., for $273.6 million in cash and stock. The combined company will sell a range of enterprise gateway security appliances designed to help companies handle threats at the network edge and at the application level. John McNulty, CEO of Secure Computing, and Jay Chaudhry, founder and CEO of CipherTrust, spoke with Computerworld earlier this week about the deal. . The link for this article located at Computer World is no longer available. . Secure Computing's recent acquisition of a top cybersecurity firm is a strategic enhancement of its enterprise gateway security solutions to combat evolving threats globally. Enterprise Gateway Security, Threat Mitigation, Secure Computing, CipherTrust Acquisition. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.