How Key Management, PKI Controls, and Zero Trust Principles are Applied to Thwart Advanced Persistent Threats (APTs)

For years, cybersecurity professionals argued the importance of “zero trust networks” and their concerns have been fully validated in the wake of the SolarWinds incident. Hacking techniques likely used in the SolarWinds Sunburst attack include mapping of sIDHistory, Primary Group ID, as well as AdminSDHolder to help identify and obtain cached Active Directory credentials. The compromised SAML keys and cryptographic materials were then likely used to execute administrative control and exfiltrate data over an extended duration.

FREDERICK, MARYLAND – Fornetix, LLC. today announced it has joined forces with Micron to offer a solution that provides secure and simple trusted Internet of Things (IoT) service delivery. The new solution combines Fornetix’s advanced encryption key management platform, VaultCore with Micron’s Authenta™ Key Management Service (KMS) to accelerate the massive deployment of IoT services, a global market predicted by ABI Research to reach $410 billion in revenue annually by 2026. VaultCore is expected to extend Authenta KMS’ reach through its highly scalable, high-performance and secure platform that supports the operational technology lifecycle from manufacture through deployment, and ultimately until device end-of-life.

'tis the season to lose data

Overall consumer spending online remains dramatically elevated thanks to the pandemic, and no one is predicting a decline in post-holiday online sales. The sweet spot between Christmas and New Years that brings a frenzy of shoppers searching for year-end bargains isn’t just for those looking to use their gift cards. It’s also a special time of year for cybercriminals who ramp up efforts to phish, scam and hack their way into companies to gain access to valuable data.  

FREDERICK, MARYLAND — Fornetix, LLC. today announced their technology partnership with ThinkOn Inc., Canada’s largest wholesale provider of cloud storage, compute, and networking resources. The VaultCore™ Key Management Solution will be deployed as an integral part of the ThinkOn suite of Infrastructure as a Service Offerings (IaaS), and will provide a critical layer of encryption management to ensure that sensitive data will remain secure wherever it resides.

Let us consider a scenario in which an organization, a general contractor utilizing at least one subcontractor, implements a production chain security strategy powered by encryption, but NEGLECTS the addition of a key management system. You’re the CISO, responsible for the cybersecurity strategy that ensures your organization’s information assets and technologies are adequately protected.

FREDERICK, MARYLAND - Fornetix, a Nutanix partner, announced today that they will host a booth at Nutanix’s Global .NEXT Digital Experience conference September 8-11. Visit Fornetix’s digital booth and learn how Fornetix’s patented key encryption management technology, VaultCore™ integrates with the Nutanix platform to help companies:

• Reduce Costs by Executing & Scheduling Key Management Operations in Seconds
• Meet Compliance & Security Concerns with a Validated Solution
• Incorporate Key Management in Organizational Log Management Strategies
• Encrypt Virtual Machines Through Interoperability with vSphere 6.5
• Manage Keys Consistently Across Heterogeneous Environments

FREDERICK, MARYLAND - Fornetix, LLC today announced it has commenced the launch of a central project with ADD-Bulgaria, a technology company providing intelligent solutions for remote data transfer, analysis of information, and management of smart meters in Eastern Europe. Fornetix’s VaultCore was chosen as it is the only key management solution to meet all the requirements needed for securing millions of smart meters. VaultCore not only provides the scalability needed, but also meets compliance requirements as directed by the Prime Alliance who oversees the interoperable standards for advanced meter management and smart grids in Europe. VaultCore will be deployed for encryption key management of over 2.5 million smart meters.

FREDERICK, MARYLAND - Fornetix, LLC today announced the selection of Dell Technologies Design Solutions to deliver its VaultCore™ encryption key management system on Dell Technologies storage and hyperconverged infrastructure platforms. VaultCore is a 1u or 2u appliance that slots into the management pod rack providing an integrated system for enterprise key policy and automation.

FREDERICK, MARYLAND – Fornetix, LLC and D360 Technologies jointly announced today that they formed a partnership to bring Fornetix VaultCore™ to the Japan market. Fornetix VaultCore is an advanced encryption key management solution that automates the full key lifecycle across the entire enterprise from infrastructure to end-point, allowing organizations to easily manage encryption keys and secure critical data assets. This partnership will be focused on introducing the VaultCore solution to the medical, smart IoT, telecommunications, and automotive industry sectors.
 
The COVID-19 crisis has created a significant need for  telework and the distributed networks to support it. This has enabled an increase in the attack surface area for bad actors uncovering major vulnerabilities throughout the enterprise. According to a recent Gartner report, only 18% of IT leaders believe their businesses are highly prepared for the impact of coronavirus. It is clear that this requires the immediate establishment of an encryption security solution that protects data seamlessly wherever it resides, and enforces consistent security policies throughout the data life cycle.
 
“We are excited to bring Fornetix VaultCore to the Japan market and help companies protect themselves from the increase of vulnerabilities due to the current pandemic. Implementing VaultCore is a smart decision for any IT administrator who is looking for a security solution to protect critical data, now and for the future.”  – Mark Gilroy, CEO, Fornetix, Inc.

VaultCore provides simple scale encryption management for public, private, on-premise, virtual, and cloud environments. VaultCore's detailed policy tools, user access controls, and robust automation make it easy to manage the entire encryption key lifecycle across the enterprise. VaultCore is the only encryption management solution capable of providing, processing and supporting hundreds of millions of keys for large distributed environments with minimal performance impact. Easy integration with KMIP and non-KMIP using Fornetix’s Orchestration Gateway™ allows companies to leverage their existing technology investments. The Fornetix VaultCore appliance is a FIPS 140-2 Level 2 validated solution (with NIST Certification pending) that employs an HSM for a FIPS 140-2 Level 3 root of trust.
 

The latest best practices in enterprise data security include utilizing KMIP AND an encryption key management solution. While most security conscious companies are mindful of the latest advancements in storage encryption, there is a lack of attention to the requirements necessary to managing the thousands of keys generated from multiple data centers, storage devices, and software — specifically, enterprise level encryption key management systems have been overlooked, leaving companies vulnerable.