Hacker Lifts Millions of User Credentials from Webmail Providers: Report

Hacker Lifts Millions of User Credentials from Webmail Providers: Report

A hacker recently attempted to sell hundreds of millions of stolen records to Hold Security for less than one US dollar, the information security firm said on Wednesday.

The “kid from a small town in Russia” has collected 272 million unique stolen credentials, according to Hold Security, and even more disturbing, the company has never seen 42.5 million of them before, meaning they may be from previously unreported breaches.

While most of the data Hold Security initially recovered from the hacker was unattributed data which had been passed around the Dark Web, some was originally stolen from a major Eastern European communications company, and medium-sized online service providers.

SEE ALSO: Organizations Feel More Confident in their Security Than a Year Ago: Report

When the full data set was recovered, Hold found millions of credentials from Mail.ru, Google, Yahoo, and Microsoft email accounts. All four companies told the BBC they were aware of the stolen credentials, and Mail.ru said that its investigation has initially suggested that the credentials may not still be active.

Email address and password combinations that have gone stale can still be useful to cybercriminals, however, for instance in targeted phishing attacks.

“This information is potent. It is floating around in the underground and this person has shown he’s willing to give the data away to people who are nice to him,” Hold Security founder and chief information security officer Alex Holden told Reuters. “These credentials can be abused multiple times.”

Hold Security has an established track record of uncovering breaches, including the theft of 1.2 billion credentials by the “Cybervor” gang in 2014.

Hold Security came into contact with the hacker as part of its regular interaction with the cybercriminal underworld, which supplements its automated information harvesting. The hacker claimed to have 900 million credentials in one batch, and after a protracted period of negotiation and refusing to pay the 50-rouble asking price, Hold managed to exchange “likes/votes to his social media page” in return for a compressed database containing a total of 1.17 billion stolen credentials from various breaches.

Source: TheWHIR

IMN's Provider Forum On Data Centers & Cloud Services Infrastructure Set For June

IMN's Provider Forum On Data Centers & Cloud Services Infrastructure Set For June

IMN’s Provider Forum On Data Centers & Cloud Services Infrastructure will be held June 9-10 at the Mandarin Oriental, Washington D.C.

Executives from Netflix, Facebook, Pinterest, Google, DuPont Fabros Technology, Oracle, Amazon and Geico are just some of those already confirmed to attend along with the former CIO of the Defense Information Systems Agency and the former CTO of the U.S. Department of Energy.

Focusing on the critical business issues that C-level executives face, attendees include enterprise end-users; public/private data centers; colocation, managed, and cloud service providers; and investors in the industry.

Issues addressed include The Future of Federal Procurement of Federal Data Center Infrastructure and Cloud Services; Edge Data Centers: Pushing the Boundaries into Non-Core Markets; Positioning for Competitive Advantage Within an Evolving Data Center/Cloud Environment; and Case Studies in Reducing Operating Costs.

Reserve your place by this Friday, May 13th, and save $200 with the early bird rate!

Register online http://bit.ly/1J9zfxq or contact Andy Melvin at amelvin@imn.org or (212) 901-0542.

Complimentary passes are available for qualified data center tenants (corporate enterprise users). The complimentary pass is limited to those corporate end-users who are exclusively data center tenants. Data center facility owners, colocation companies, web hosts and suppliers of services to data centers are not eligible. Please contact Oscar Salazar at oscar.salazar@imn.org to see if you qualify. All requests are subject to final IMN approval.
 

Source: CloudStrategyMag

ABB And TSO Logic Partner

ABB And TSO Logic Partner

ABB Inc. and TSO Logic have announced a new business alliance that will provide their joint clients with an in-depth view of data center facility infrastructure along with the physical and virtual compute that is running inside. The combined solution delivers critical insight necessary to better manage cloud infrastructure, such as interfacing with cloud delivery platforms, for improved capacity planning and deeper efficiency gains across the data center.

As the data center modernizes, the line of segmentation between compute, cloud and facility infrastructure has begun to dissolve. Professionals both inside and outside of data center operations are realizing that a holistic view of the data center is required to serve their business in the most cost effective manner, while also maintaining the strict levels of service agreements. The alliance between ABB and TSO Logic will assimilate real-time or near real-time data from across the various silos of data center operations to provide unparalleled efficiency gains with compute, cloud and facility infrastructure.  

 “For years the industry has been looking at the data center whitespace separately from the physical infrastructure that supports it,” explained Rich Ungar, ABB’s North America business manager for data center automation. “On top of that, cloud analytics have only recently entered the picture at all. With the TSO Logic platform, we now have combined analytics about what the physical and virtual infrastructure is doing. By using our two platforms we are providing an unprecedented level of insight and automation enabling more agile and efficient data center operations,” he added.

With the combined goal of delivering the most reliable, efficient and sustainable data center operations, ABB and TSO Logic can identify and resolve issues before they become bigger, costlier problems. For example, ABB Decathlon for Data Centers can identify critical events within a specific zone of the data center, such as a power threshold breech or hot spot. By layering this data with TSO Logic’s actionable analytics platform, it can quickly identify the applications and compute running inside that specific zone, along with proactive recommendations or automated processes to migrate workloads to a safer location. The key benefit with this partnership is bridging the gaps between what’s happening in the physical data center and connecting it with the applications and IT running inside.  

“Successfully delivering a reliable and efficient data center requires detailed analytics on how the facility and compute work together. You can’t just have a physical view, and you can’t just have an application view”, said Aaron Rallo, chief executive officer at TSO Logic. “With our partnership with ABB, customers can now quickly capture and analyze tens of thousands of data points from across the entire data center. With this robust view, the operation of data centers will be closely aligned with the applications and workloads that the facilities are ultimately designed to support,” Rallo added.

Source: CloudStrategyMag

Invenias Appoints Jim Duddy As VP Americas

Invenias Appoints Jim Duddy As VP Americas

Invenias has announced today that it has appointed Jim Duddy to head up its operations in the Americas. As VP Americas, Duddy will be responsible for ensuring that the company continues its impressive growth trajectory in the U.S., Canada, and Latin America, and growing the Invenias team located on both the East and West Coasts.

Duddy has over two decades of experience in building high performing sales teams capable of transforming market growth and share. He brings with him six years’ experience of working at LinkedIn, the world’s largest professional network. Prior to joining Invenias, Duddy worked with several early-stage companies in various sales-leadership roles. Most recently he was the VP of Sales for Pittsburgh-based start-up Nowait, a technology platform that helps eliminate the wait at busy restaurants.

Duddy has also worked at Jibe, a recruitment-marketing platform designed to transform the client and candidate experience. He started his career at Allegis Group, the largest privately held staffing company in the US. He will report directly into David Grundy, CEO and co-founder, of Invenias.

“What attracted to me to the role at Invenias was the company’s mindset of continuous innovation – it’s always looking to strive forward, ensuring that its platform remains one step ahead of the competition. But perhaps most importantly it does all of this by collaborating with its customers. The Invenias platform solves real customer problems because that’s the company’s starting point. It’s a unique and refreshing approach that’s really resonating within the market place and is the cornerstone of our growth. My remit is to build on that good work and help take the company to the next stage,” said Duddy.

Duddy’s appointment comes after Invenias recently announced a further $2.8 million in funding to be invested in the company’s infrastructure, scaling its core platform and supporting aggressive growth within the US market.

“Jim’s appointment underlines how serious we are about growing Invenias across the Americas. We see a massive opportunity for our platform within the region and Jim has the skills, focus and energy to help us realize our vision. His track record in being able to bring together people, technology, market knowledge and best practices means that in all his previous roles he’s been able to make a significant, positive impact on company performance. Without question I believe he has all the attributes to help Invenias sustain its rapid growth,” said David Grundy, CEO, Invenias.

Source: CloudStrategyMag

LockPath Joins Cloud Security Alliance

LockPath Joins Cloud Security Alliance

LockPath® has announced that it has joined the Cloud Security Alliance (CSA), a not-for-profit organization with a mission to promote the use of best practices for providing security assurance within cloud computing, and to provide education on the uses of cloud computing to help secure all other forms of computing.

LockPath’s Keylight® GRC Platform is used to manage IT and enterprise risk and demonstrate regulatory compliance. With its fully integrated suite of applications designed to manage all facets of GRC programs, including compliance frameworks, risk assessments and control libraries, Keylight brings order to information governance, risk management and IT security.

“LockPath offers a comprehensive approach to GRC in the cloud,” said Jim Reavis, CEO of the CSA. “We look forward to the company’s contributions to our initiatives and research, as we continue on CSA’s mission to promote secure computing, both in and by leveraging the cloud.”

LockPath will work with CSA to provide the Cloud Controls Matrix (CCM), a controls framework that gives detailed understanding of security concepts and principles. The CCM is designed to guide cloud vendors and to assist prospective cloud customers in assessing the overall security risk of a cloud provider. The CCM is based on industry security standards, regulations, and controls frameworks, such as the ISO 27001/27002, ISACA COBIT, PCI, NIST, Jericho Forum and NERC CIP. As a framework, the CSA CCM provides organizations with the structure, detail and clarity required for tailoring information security to the cloud industry.

LockPath will also provide CSA’s Consensus Assessments Initiative Questionnaire (CAIQ), which was launched to perform research, create tools and create industry partnerships to enable cloud computing assessments. This initiative is focused on providing industry best practices for documenting security controls in IaaS, PaaS, and SaaS offerings, providing security control transparency.

“As one of the industry’s most respected organizations, the Cloud Security Alliance is making strides in establishing and promoting best practices for security in cloud computing,” said Chris Caldwell, LockPath CEO and founder. “LockPath is proud to collaborate with the CSA on developing cloud security best practices to further the cloud computing industry.”

Source: CloudStrategyMag

Google Cloud Dataflow vs. Apache Spark: Benchmarks are in

Google Cloud Dataflow vs. Apache Spark: Benchmarks are in

On Tuesday, my company, Mammoth Data, released benchmarks on Google Cloud Dataflow and Apache Spark. The benchmarks were primarily for batch use cases on Google’s cloud infrastructure. Last year, Google contracted us to implement some use cases and extract user experience data points from people experienced in this field. As a follow-on, we did a benchmark for Google to see how its technology stacked up.

Benchmarks are often a black art of vendor-driven deception. I’ve never worked with a company more concerned with avoiding that. The benchmarks we released were constructed around Google Cloud Dataflow and Spark’s batch processing capabilities. They don’t address the more rapidly developing parts of both engines: the streaming portion.

We also wanted to avoid a “best SQL predicate pushdown” comparison. Because some queries don’t distribute well, Spark and Google Cloud Dataflow push the SQL to the underlying datastore. Benchmarking that would largely be a database-tuning exercise and, in my opinion, not very productive.

What is Google Cloud Dataflow?

Google Cloud Dataflow is closely analogous to Apache Spark in terms of API and engine. Both are also directed acyclic graph-based (DAG) data processing engines. However, there are aspects of Dataflow that aren’t directly comparable to Spark. Where Spark is strictly an API and engine with the supporting technologies, Google Cloud Dataflow is all that plus Google’s underlying infrastructure and operational support. More comparable to Google Cloud Dataflow is the managed Spark service available as part of the Databricks platform.

How to monetize the fuzzy narratives of social listening

How to monetize the fuzzy narratives of social listening

Marketing professionals, such as yours truly, use social-listening analytics tools in the hope that they reveal whether customers are likely to stay loyal, buy more stuff, and say nice things about our companies and products. What these tools reveal is how people might or might not be leaning in the aggregate, under the questionable assumption that social media users are a cross-section of the target population you’re trying to engage.

Even if your entire target market were on social media, you’d be ill-advised to accept social intelligence as an indicator of how individuals truly feel about your brand. As I’ve stated, few customers declare their feelings in the form of tweets or Facebook updates that represent their semiofficial opinion on the topic. Even if people aren’t lying, everyday speech is full of ambiguity, vagueness, situational context, sarcasm, elliptical speech, and other linguistic complexities that may obscure the full truth of what they’re trying to say. 

What we truly want from social listening is what we simply aren’t getting. What we’re actually getting is a blizzard of aggregated social metric data that measure any or all of the following:

  • Social buzz: Many listening tools specialize in measuring aggregated social buzz by keywords, topics, hashtags, and conversations. The metrics might also show how the buzz shakes out into sentiment and “share of voice” by brand. It might even show difference in the buzz by social channels, geographies, demographics, influencers, day of week, and other such dimensions.
  • Social reach: Listening tools might help you assess the followership of your specific social channels and impressions of your social postings across geographies, demographics, influencers, and so on.
  • Social engagement: The tools might indicate the extent to which your social postings have driven shares, likes, replies, clickthroughs, and other indicators of customer involvement and sentiment with your brands, campaigns, and products.

When presented individually or in various visually compelling formats, those numbers can tell a wide range of stories. However, what social listening tools rarely present is a statistically validated causal narrative that we can use to predictively recalibrate our social marketing tactics. In the abstract, such a narrative might be structured as follows: “Social listening metric A showed that marketing tactic B created conditions C under which customer D expressed positive sentiments about, actually purchased, or recommended that others purchase product E under circumstances F and are highly likely to cause them or customers like them do so again under similar circumstances.”

nGenx Spinoff CloudJumper Launches to Workspace as a Service Market

nGenx Spinoff CloudJumper Launches to Workspace as a Service Market

talkincloudBrought to you by Talkin’ Cloud

Workspace as a service platform CloudJumper launched on Monday with its hosted workspace offering, CloudJumper nWorkSpace.

CloudJumper is based on the platform its sister company nGenx built, and “many of the key personnel” from nGenx have joined CloudJumper, including CEO John Helms, according to a statement.

nWorkspace includes software, infrastructure, services, and support, offering partners and customers a choice of licensing models including named user and concurrent user licensing options, CloudJumper said. The concurrent user model virtualizes or “floats” a fixed number of licenses across the network as opposed to device-specific license allocation.

CloudJumper is working with strategic service providers, a “relatively new channel partner classification” to deliver the WaaS platform.

“Managed services have evolved to the point where providers no longer have to deal with the assembly of complex solutions, unwieldy configurations, or a combination where difficulties in management are par for the course,” JD Helms, president, CloudJumper said in a statement. “Our organization represents a new era in plug-and-play business IT where ease of operation and an unmatched customer experience scales without limits.”

Read more on The WHIR’s sister site, Windows IT Pro.

Original article appeared here: nGenx Spinoff CloudJumper Launches to Workspace as a Service Market

Source: TheWHIR

After Gorging for Years, Endurance International Group Appetite for Hosting Acquisitions Slows

After Gorging for Years, Endurance International Group Appetite for Hosting Acquisitions Slows

In its Q1 2016 earnings call on Tuesday, Endurance International Group (NYSE: EIGI) CEO and founder Hari Ravichandran said that the company, which is known for its rapid pace of acquisitions, will slow down its M&A activity and other investments as it focuses on the integration of Constant Contact, the email marketing platform it acquired for $1.1 billion last year and closed in February.

The acquisitions it does will be “less focused on the hosting space and more focused on product and technology space,” he said.

Endurance International Group reported a net income of $21.8 million or $0.16 a share for Q1 2016 on Tuesday, but fell short of analysts expectations, precipitating a significant sell-off of the Nasdaq-listed company’s shares. EIG’s share price had fallen over 46 percent from $20.01 a year ago to $10.72 at the close of trading on Tuesday.

In Wednesday trading, EIG shares have fallen below $9, despite a refrain of optimism from both the company and analysts. The Associated Press reports that an average estimate of EIG’s earnings per share (EPS) from five analysts surveyed by Zack’s Investment Research was $0.26, and Risers & Fallers showed that five major investment firms weighing in since the start of the year had all reiterated prior neutral or positive ratings. Most recently among them, Credit Suisse maintained its “outperform” rating, and set its target price at $18.

SEE ALSO: Endurance International Group Appoints SVP of M&A Integration

“This quarter demonstrated a collective focus as we balanced our efforts between the initial integration of Constant Contact and the other initiatives we are simultaneously driving,” EIG CEO and founder Hari Ravichandran said in an earnings call.

Ravichandran maintained that EIG’s cloud and WordPress products “are doing record numbers.”

“In 2016, we will be investing in marketing to drive our growth products and initiatives,” he said. “Our framework for the incremental spend considers some essential elements. First, as products are initially launched, subscriber acquisition costs are higher than they are at scale. Second, we’re entering into products with subscriber profiles that are different than our traditional hosting subscribers.”

The stock price had declined slightly through the first quarter prior to the earnings announcement. With a 34 percent increase in GAAP revenues over Q1 2015, and nearly 5.5 million total subscribers, EIG is undeniably still experiencing growth. Further, adjusting for one-time gains and costs, including a large tax benefit, EIG’s earnings were $0.24 per share. Earnings were roughly in line with analyst expectations.

EIG acquired SMB marketing platform Constant Contact in November in a deal WHIR blogger Tom Millitzer called “a turning point” for the the company, suggesting the parent should adopt Constant Contact as its top-level brand name to draw together its portfolio of dozens of hosting and web services brands.

Source: TheWHIR

Unisys Releases Enhanced Enterprise Cloud Platform

Unisys Releases Enhanced Enterprise Cloud Platform

Unisys Corporation has announced that it has added new consulting and advisory services to its suite of service management offerings. The new services better enable its clients to deploy and manage the popular ServiceNow® enterprise cloud as the linchpin in automated, analytics-backed solutions that enable delivery of new business and IT services and serve as drivers of digital-business transformation.

The new Unisys services — available in any combination relevant to the client’s requirements — include:

  • Launch – Unisys installs and configures the ServiceNow enterprise cloud platform, creates a service catalog and dynamic end-user portal for service access, transfers operational data, trains end users on new features and functionality, and prepares the support organization for the solution going live; 
  • Optimization –  Unisys formally reviews and benchmarks the maturity of the client’s current  delivery and support processes, as well as the technical implementation of the current service-management platform, to drive a “maturity jump” from reactive help desk to proactive service desk, improve service desk productivity and streamline team resources;
  • Management – Using the ServiceNow ServiceWatch suite for dynamic discovery and mapping of the relationships among IT components for specific business services, Unisys rationalizes the client’s current investments and creates a software-defined support framework to manage new digital services and related cloud-based infrastructure;
  • Integration – Unisys accelerates  enterprise-wide connectivity between the ServiceNow platform and additional systems through either standard application program interfaces (APIs) or Unisys’ custom enterprise messaging bus; and
  • Analysis – Unisys sets up real time collection of service delivery and usage data for dashboards and reports that help streamline operational efficiency.
  •  

These new services complement the previously announced Unisys platform management service for ServiceNow, a subscription-based offering in which Unisys takes on the management and maintenance of an organization’s service-management environment to streamline and simplify operations.

“Service management solutions are a key enabler for digital business because they aggregate and integrate key elements – service catalog, data analytics, delivery channels and more — for successful deployment and management of a digital business model,” said Paul Gleeson, vice president, service integration and management, Unisys. “In our new services Unisys applies the expertise in consulting, management, analytics and cloud implementation that we have gained in hundreds of engagements to extend the value of the powerful ServiceNow platform for our clients. Our solutions enable organizations to integrate and manage IT assets from mobile to cloud so they can deliver increasingly automated services to their workers quickly and cost-efficiently.”

Source: CloudStrategyMag