Longtime Cybersecurity Partners Leveraging Each Other’s Strengths to Protect Enterprise Customers Against This Widespread Zero-Day Attack
NetWitness, an RSA business, and globally trusted provider of cybersecurity technologies and incident response services, today announced that it is collaborating with longtime partner, Datashield, an ADT company and provider of Managed Detection and Response (MDR) services, to help customers identify the critical, zero-day security vulnerability in the Apache Log4j Java library and to take action to mitigate the impact of this vulnerability. NetWitness Network Detection and Response (NDR) technology provides Datashield with the visibility of where Log4j vulnerabilities exist, insight through a customized Packet Parser to identify if this vulnerability is being exploited within their monitored environment, and the ability to take prompt action to remediate.
“The Apache Log4j security flaw has the potential to have a major impact on enterprises around the world, and it’s critical that security teams take immediate action to patch the vulnerability,” said David Norlin, CISO of Datashield. “Through our long and successful partnership with NetWitness, we were able to use NetWitness Network Detection and Response (NDR) technology to identify which of our customers were impacted and take immediate action. The awareness and visibility that NetWitness delivered is critical in situations like this.”
Rohit Ghai, CEO of RSA Security and NetWitness, said, “Zero-day exploits like the Log4j vulnerability are a threat to the majority of users around the globe. We’re proud that our NDR solution is enabling Datashield to take fast action to protect its customers.”
NetWitness has released an advisory notice to help customers mitigate the threat to their NetWitness systems, which can be found here. More information on the vulnerability can be found in our Background and Detection Rules and in our recent blog post. Any customers who need assistance should contact NetWitness immediately.
Datashield customers who have been impacted or need assistance in determining if they have been affected should contact Datashield.
For more such updates and perspectives around Digital Innovation, IoT, Data Infrastructure, AI & Cybersecurity, go to AI-Techpark.com.
