Amazon’s AWS re:Invent event is this week in Las Vegas, and the company has issued a series of announcements around cybersecurity. That’s important, because there’s more of today’s IT estate in the public cloud than there ever has been before. Cloud computing is pervasive and it’s complex. That means opportunities for MSSPs and MSPs in securing the work. And AWS is offering its own security solutions, too.
Amazon introduced AWS Security Incident Response and Amazon GuardDuty Extended Threat Detection. Amazon is also now offering AWS Verified Access support for secure access to resources over non-HTTP(S) resources to provide secure access to corporate applications and resources without a VPN.
Security insights are also a focus. The company announced Amazon OpenSearch Service zero-ETL integration with Amazon Security Lake for enabling insights from security data.
Got news or tips to share with us? Please send them to [email protected].
Today’s MSSP Update
1. Threat hunting for AWS - In conjunction with AWS re:Invent, Druva announced new threat hunting capabilities for Amazon EC2 and Amazon RDS Air-Gapped Backups, enhancing data protection and security for AWS workloads.
2. GenAI API security – APIs can be a major source of vulnerability, and generative AI is among the hot technologies organizations are adding. To meet the challenge Rubrik is integrating its API service for GenAI with Amazon Bedrock.
3. Cybersecurity tools integration, part 1 - Unified vulnerability management company Nucleus Security is partnering with cybersecurity rating company SecurityScorecard to load scoring data into the Nucleus Security platform, proving a view of company risk.
4. Cybersecurity tools integration, part 2 - Breach and attack simulation vendor AttackIQ’s Flex 3.0, agentless security control validation is now integrating natively with Splunk.
5. Risk dashboard - Zero trust cybersecurity company Keeper Security has launched its Risk Management Dashboard to give administrators with broad visibility into security practices and compliance posture.
6. A look back, a look forward - Akamai’s new year-in-review reportincludes reflections from six cyber experts on trends and events of the past year. These experts also provide perspective on what we might expect in 2025. Topics include Mirai botnet updates and DDoS, supply chain attacks, nation-state actors, hacktivism, and threat actor and skill evolution.
