Category Archives: Cloud Computing
Cloud computing grows but agencies lacking resources, auditor general hears – The Mandarin
As government agencies increase cloud computing usage in South Australia, some are claiming they dont have the resources or expertise to support the needs.
In a random review of seven government agencies, South Australias auditor generalfound most were not doing annual independent assessments of the technology, and some were failing to do risk assessments.
The review found most of the agencies planned to increase their use of cloud services in the next two years but four agencies claimed there were not enough internal resources and expertise to support current and future needs.
This is despite six of the agencies individually spending more than $1 million on cloud services annually, and some more than $8 million.
The resourcing issues included insufficient budget funding, difficulties attracting skilled ICT staff, retaining them or providing specialist training.
The report highlights risks of cloud computing including the loss of confidentiality or data leakage, accidental exposure, reliability issues, and lack of transparency from cloud providers as concerns public servants should be highly aware of when adopting a new service or change.
Agencies need to consider these risks in their initial and ongoing cloud computing risk assessments, the report says.
It found three of the seven agencies did not have a formal procedure for procuring and managing cloud computing services, and three agencies were not engaging their ICT team before procuring cloud computing services.
Three agencies said there were a small number of security incidents or disruptions to their cloud services in the past three-to-four years.
Across the seven agencies, there were 178 different cloud computing environments, and 16% of these stored data outside of Australia.
Most of the cloud models were publicly owned, and 30% were private and 8% were public-private models. The report notes most administration and management of cloud services were outsourced but security risks remained with the agency.
Auditor-general Andrew Richardson said the states approach to cloud computing could be strengthened through more collaboration and a centralised point of reporting to either the department of premier and cabinet or an inter-agency forum.
The aim would be to help agencies while they move their services to the cloud by providing guidance, risk mitigation strategies, a more consistent approach to managing cloud computing and the integration of security governance, Richardson said.
The report recommended all agencies should develop a cloud computing policy and description of their procurement and ongoing control requirements for cloud services.
READ MORE:
Comparing clouds: which government is winning?
Read the original post:
Cloud computing grows but agencies lacking resources, auditor general hears - The Mandarin
Why cloud bugs don’t get CVEs, and why it’s an issue – TechTarget
A key difference in the way cloud computing and on-premises security bugs are handled is creating a rift between researchers and cloud service providers.
First issued in 1999, Common Vulnerabilities and Exposures (CVE) entries are public notices that are issued when a security flaw is patched or made public. The entries contain details about a vulnerability and the possible consequences of exploit, as well as the name of the researcher who is credited with the discovery.
Intended to provide administrators with the necessary information for prioritizing and deploying patches, the CVE system was devised at a time when nearly all enterprise software was running on premises.
Enter cloud services in the 2010s. As the vendors themselves remotely host and manage the applications and data, there is no need for patches to be kicked out to end users.
"Our vulnerability research ecosystem comes from a time when virtually all versions of software were packaged and delivered to customers and executed independently on potentially millions of computers, and the goal has been to have all of those individual computers running uniform code with bug fixes," Cloud Security Alliance CEO Jim Reavis told SearchSecurity.
"With cloud you have millions of customers mashing up an infinite number of internal and SaaS applications and likely introducing a massive number of unreported vulnerabilities directly through compiled code and indirectly through the use of APIs."
Because of this, the CVE Numbering Authorities (CNAs) opt not to issue security vulnerabilities on cloud services with CVE designations, due to the fact that in many cases there simply is nothing for administrators or end users to do about the problem.
"One of the biggest differences for that community is who takes action," Dustin Childs, communications director of the Trend Micro Zero Day Initiative, said in an email.
"CVEs are designed to let recipients know that they may need to take action to fix or mitigate. In the case of cloud software vulnerabilities, the user generally has no actions and couldn't take any actions if they wanted to (other than in rare cases where they can mitigate by disabling some functionality, etc.)"
While this is not an issue for most administrators and end users on its surface, the practice has caused some problems for researchers and could have an impact on user data for a number of reasons.
Recently, several infosec experts have said the lack of cloud CVEs is a detriment to enterprise security teams, users and the security research community. Concerns about the discrepancy emerged this summer following the disclosure of the "ChaosDB" bug in Azure's Cosmos DB, which was discovery by cloud security vendor Wiz.
While Microsoft publicly disclosed the ChaosDB bug along with Wiz, other cloud providers with similar critical flaws might not. Experts such as independent security research Kevin Beaumont noted on Twitter that the "massive gap in cloud security" leaves external researchers as the only reliable source of information about cloud vulnerabilities.
For many security researchers, getting credited in a CVE vulnerability report is a major positive for their careers. Having a list of CVE credits acts as a sort of resume for bug hunters, allowing them to get public recognition and as a result boost their reputation within the community and improve their chances of finding more lucrative work.
That is not to say that every person who hunts for bugs is simply seeking to gain fame and fortune, experts note.
"While some are incentivized by the award of CVEs, security researchers have differing motivations for reporting vulnerabilities," Childs said.
"Public recognition and financial compensation also provide significant incentives for those disclosing bugs to vendors."
What should be more concerning to enterprises, however, is the possibility that the lack of designation can allow companies to sit on bugs. With the cloud providers being able to sit on bugs that are not being reported by a third party, patches can potentially be put off, placing researchers in a tough position.
"Sometimes a vulnerability requires a user's action, and there is no way to discuss it," said Nir Ohfeld, a senior security researcher with Wiz.
"If there is not a name to a vulnerability, you have no way to communicate it verbally, and you don't ever know if you are exposed."
The lack of public disclosure with vulnerabilities is not unique to cloud services. For years now, on-premises software vendors have also been frustrating researchers by using various methods to delay patches or get out of public acknowledgement.
The issue has gotten so bad that some bug hunters have considered simply selling their vulnerability finds to third parties who could end up using them for zero-day attacks.
"No vendor has an obligation to disclose bug details regardless of the product or service being on prem or in the cloud," says Childs.
"However, our experience is that transparency wherever possible is best for all involved. Vendors who do not publicly disclose flaws or publicly acknowledge researchers will likely find themselves worse off than those who do."
While there remain a number of issues with the way cloud flaws are reported and disclosed, there are already efforts being made to remedy the issue, both in the form of updates to the CVE system and work on a new cloud-friendly vulnerability disclosure method called a Universal Vulnerability Identifier.
The UVI system looks to be a faster, more accessible system that would also cover the unique circumstances that open source and cloud computing services present when it comes to security flaws. During a Black Hat 2021 session, Wiz researchers also called for a new cloud CVE system.
The hope is that by reworking disclosures to better take into account the cloud compute model, vendors and researchers can both be appeased, resulting in more transparency and clarity for their admins and security professionals.
"We believe that in order to tackle this problem we need to have standards and systems that enable rapid issuance of trusted vulnerability identifiers on demand that can be expanded upon 'wiki-style' over time," Reavis explained.
"These discovered vulnerabilities will be enhanced with richer information as we learn more, cross-referenced with other vulnerabilities, even linked to actual CVEs or proprietary vulnerability databases."
SearchSecurity writer Alexander Culafi contributed to this story.
Excerpt from:
Why cloud bugs don't get CVEs, and why it's an issue - TechTarget
Top Hybrid Cloud Computing Companies to Watch in 2021 – Analytics Insight
The digital transformation has drastically transformed the IT sector with the introduction of cloud computing in the existing system. There is ample scope for cloud computing to thrive in tech companies through public cloud, private cloud, multi-cloud, as well as hybrid cloud. Cloud computing has created multiple different job opportunities for human employees such as cloud architects, cloud security architects, cloud engineers, and many more with lucrative salary packages. The global hybrid cloud computing market is set to reach US$380 billion in 2028 with a CAGR of 22.5%. Thus, lets explore some of the top hybrid cloud computing companies to watch in 2021 for efficient services.
Microsoft Azure is one of the top hybrid cloud computing companies in 2021 with multiple hybrid cloud Azure products and services. The products and services include Azure hybrid cloud solutions, Azure Arc, Azure Stack, Azure hybrid benefit, Azure VMWare solution, Azure sentinel, Azure defender, Azure express route, and Azure VPN gateway. This tech company offers hybrid cloud solutions to provide the consistency and flexibility to innovate at any place with a holistic as well as secure approach in cloud computing. Azure helps to build and deploy a truly consistent app experience in a hybrid cloud with unified hybrid security management and advanced threat protection for all kinds of workloads. It helps to build hybrid cloud solutions through some example solution architectures.
VMware is a popular hybrid cloud computing company that offers consistent infrastructure and operations with VMware hybrid cloud solutions. This tech company helps to shift the existing workload with better speed and confidence with VMware tools without cost, complexity, as well as the risk of refactoring apps in cloud computing. It offers consistent hybrid cloud management while modernizing the data center. There are multiple products in this hybrid cloud computing company such as VMware cloud foundation, VMware Cloud on AWS, VMware Cloud on Dell EMC, HCI powered by VMware vSAN, and VMware vRealize cloud management.
Rackspace Technology offers to harness the power of a hybrid cloud with its VMware-based hybrid cloud solutions. It provides the benefits of consumption-based pricing and multi-tenancy, self-service, rapid provisioning, as well as automation. As a leading end-to-end multi-cloud technology solutions company, this tech company has started a collaboration with Dell Technologies for delivering a seamless path to hybrid cloud and an optimized experience with VMware Cloud Foundation in the cloud computing domain.
IBM is a well-known hybrid cloud computing company that offers smarter architecture speed transformation of multiple leading tech companies across the world. The foundation of adopting hybrid cloud solutions is the top hybrid cloud container platform known as the Red Hat OpenShift. There is an artificial intelligence-based software portfolio known as IBM Cloud Pak solutions that run on the Red Hat OpenShift. This tech company provides the most experienced practitioners in this hybrid approach to enhance business transformation. The hybrid cloud software helps to implement intelligent workflows in a business by unlocking the intelligence of AI and the agility of hybrid cloud through cloud computing.
Hewlett Packard Enterprise is popular for being a hybrid cloud computing company with its own hybrid cloud solutions to implement a cloud experience for all kinds of workloads efficiently and effectively. It helps to navigate cloud complexities and speed the process of digital transformation through hybrid approaches. A business can build hybrid cloud solutions with leading cloud providers to create an enterprise-ready hybrid cloud. HPE container platform brings the cloud experience to non-cloud native apps while building a business case for a hybrid cloud.
Cisco is one of the top hybrid cloud computing companies with Cisco HyperFlex solutions for hybrid cloud across the world. It works with different hybrid cloud and container management services with multiple choices. This tech company has started working with public cloud providers and the open-source community to develop hybrid solutions for a production-grade experience. A business can seamlessly shift applications from HyperFlex on-premises environment to various public clouds with hi-tech companies.
Continue reading here:
Top Hybrid Cloud Computing Companies to Watch in 2021 - Analytics Insight
We’re still just scratching the surface of the cloud’s potential – TechCrunch
Battery Ventures released its State of the OpenCloud report today, providing a set of data points that clearly outline the accelerated growth of cloud services in recent quarters.
The report helps explain the race to invest capital into startups that weve been observing over the past 18 months.
The pandemic pushed companies to start using cloud services infrastructure, platform or SaaS earlier and quicker than they might have otherwise. That resulted in big investments, eye-popping IPOs and tremendous revenue growth for software companies of all stripes, especially those built atop open source code.
Consider this tidbit from the report: The average infrastructure-software IPO valuation has increased 10 times over the last 10 years, and there are more infrastructure-software companies valued at $10 billion or more than ever before. Whats more, the data implies a healthy pipeline of major cloud IPOs.
Battery believes that the cloud market could eventually be worth $1 trillion. When you consider that the vast majority of work, development and computing will be done in the cloud at some point, the investment groups round-number projection may prove modest.
Thats our takeaway. While the digital transformation is evident and startling, this report makes it clear that despite the nigh-incredible growth numbers we have seen recently, we are still just scratching the surface of the clouds potential.
Amazons AWS public cloud platform is big business. Amazon breaks out its results on a quarterly basis, showing the world exactly how much cloud revenue it generates, as well as the resulting operating profit. Microsoft also breaks out growth for its Azure service, but with other services included in the reporting category, the exact number is harder to nail down.
Batterys report gives us per-platform data. In Q2 2021, the venture capital firm reckons that AWS reached a $59 billion run rate, while Azure hit $37 billion and Google Cloud reached $19 billion and this was before the companies reported Q3 results.
Image Credits: Battery Ventures
Critically, Batterys Q2 figures were up an aggregate 44% compared to a year earlier the growth has accelerated from an early-pandemic low of 36% in Q2 of last year. Indeed, since the second quarter of 2020, public cloud growth has either held steady or risen.
Given the sheer amount of dollars involved in these figures, the acceleration of growth from 36% to 44% is incredibly material: The three cloud platforms closed Q2 2021 on a combined run rate of $115 billion.
View original post here:
We're still just scratching the surface of the cloud's potential - TechCrunch
Cloud-fuelled European IT outsourcing spend hits record high – ComputerWeekly.com
European organisations have mirrored the global spending trend, with record levels invested in IT outsourcingdriven by cloud service investments.
In Europe, the value of contracts signed during the third quarter of this year reached a record 4.7bn, 36% higher than the same quarter last year and 4% higher than the previous quarter this year.
The increase was driven by heavy spending on cloud services, which totalled 2.4bn, 59% higher than last year. In Europe, infrastructure-as-a-service (IaaS) and software-as-a-service (SaaS) deals were both up 59%, to records of 1.75bn and 677m respectively.
Demand for IaaS and SaaS solutions remains robust as European companies pick up the pace in their adoption of cloud-based technologies and services, said Steve Hall, partner and president of ISG EMEA. The region has been slower than others to move to the cloud due to privacy and security concerns, but that appears to be abating as companies accelerate their digital transformations.
ISG, which measures contracts with a value of 3.6m or more, last week published record global spending figures with $21.8bn spent on IT and IT-enabled business services during the past quarter, with cloud computing accounting for $13.4bn of this. Itexpects global cloud-based IaaS and SaaS contracts to be worth 25% more in 2021 overall, compared with 2020, and expects firm-managed services contract values to increase by just over 10% during the same period.
While the value of traditional IT outsourcing contracts in Europe, including IT outsourcing and BPO, increased 19% to 2.3bn of total spend, UK organisations invested 61% less on them during the third quarter, with a total of 296m spent, making this its weakest since the third quarter 2002.
ISG said that despite the drop in the latest quarter, the first half of the year was robust, and the fourth quarter is expected to see the UK back in line with previous years. The UK had a weak third quarter compared with the past several years, but the first six months were very robust and there remains a strong pipeline of deals. Infrastructure spend in the UK was down significantly, but cloud spend was up, said Hall. Traditional datacentre and ITO deals remain weak in the UK market as organisations continue to shift spend to cloud hyperscalers.
But the UK IT services sector still faces challenges, with spending expected to remain flat in the financial services sector in 2021/22 compared with 2019, with a 23% drop in spending in the energy sector, a 9% reduction in the travel, transport and leisure segment, and a 1% fall in Telecoms and Media predicted.
There will, however, be a 17% rise in the amount manufacturers spend on IT services, with the business services and retail sectors increasing spending by 7%.
The DACH region, which includes Germany, also recorded a decline in spending on these services, with an 8% drop to 379m, but France saw a 201% increase with a total of 552m spent.
Hall put this down to a traditionally slow quarter due to the holiday season and its impact on deal flow. Volume is in-line when normalised for seasonality, so we dont see a long-term trend or broader concern with the DACH market, he said.
On traditional IT services in Europe, Hall said: Deal flow remains active, but we saw a number of them move to later stages in financial services, and we continue to see weakness in the manufacturing sector, as the economic recovery in Europe remains choppy.
Read more here:
Cloud-fuelled European IT outsourcing spend hits record high - ComputerWeekly.com
Beginner computer classes online: What can you take, and where? – ZDNet
Computers are part of our schools, workplaces, and everyday lives. Whether you're a beginning or advanced learner, taking computer classes online can enhance your foundational, coding, and development skills.
This list provides a host of free and paid platforms offering beginner and intermediate classes in computing basics plus topics like Python, data analytics, and cloud computing.
Basic computer skills are foundational tools for navigating computers and software. These skills are essential for a technology-driven world. They include:
After mastering basic computer skills, consider learning advanced skills such as website design or application development.
Are you ready to improve your basic computer skills? This list of electronic learning platforms offers inexpensive and free online computer classes, training and learning activities, and self-paced tutorials.
Cost: Online courses and assessments are free, though certificates and diplomas are paid. The premium monthly package, which removes ads and gives discounts on certificates and diplomas, is $9.26.
Best for: Full-time students, busy parents, working professionals
Alison is an online learning platform offering courses in information technology and other workplace-specific categories. Learners may earn diplomas and certificates in a variety of industries.
Check out:
Cost: Free
Best for: Kindergarten through 12th-grade learners, homeschool children, college and university students, working professionals, career changers
Goodwill Community Foundation Global offers an online learning platform and self-paced distance learning tools for all ages, including free online computer classes for seniors. Learners can enroll in Mac OS, Linux, and creativity and design courses. Other tutorials build proficiency with social media, email, and Google.
Check out:
Cost: $6-18 per month per user
Best for: Colleges and universities, businesses, industry professionals
Google Workspace Learning Center offers training resources and tutorials for accessing the video conferencing platform, customizing business Gmail, and navigating word processing and cloud storage. Other courses cover specific products, roles, and industries.
Check out:
Cost: $29.99 per month, or $400 per year
Best for: College and university students, business and government employees, graduates seeking career opportunities
LinkedIn Learning provides an online learning platform with over 5,000 courses in business, technology, and creative skills. Learners can select technology and certification preparation courses in cloud computing, security, and CompTIA, among others.
Check out:
Cost: $11.99 to $199.99 per course
Best for: Young adult learners, college and university students, career changers, businesses, non-profit organizations, government employees
Udemy offers a variety of business and technical courses for young adults, college and university students, working professionals, and career changers. Learners may select courses in cloud computing, data science, and design along with development, IT operations, and project management and operations.
Read our Udemy review for more information.
Check out:
Are you proficient in basic computer skills? Consider enrolling in intermediate and advanced online computer classes. These online learning platforms can help industry professionals with career advancement and workforce development.
Cost: Verified-track course fees range from $50 to $300. MicroMasters programs may have higher costs.
Best for: All ages and learners
edX is an online learning platform with 2,400 global learning sites. Learners may enroll inmassive open online courses for college credit, MicroBachelors programs for undergraduate credentials, and MicroMasters programs for graduate-level courses.
Check out:
Cost: Guided projects begin at $9.99. Specializations and professional certificates range between $39 and $79 per month. MasterTrack certifications cost approximately $2,000. With Coursera Plus, learners can pay $59 per month or $399 annually.
Best for: College and university students and adults between 18 and 55
Coursera offers certificate and degree program options. Learners may access on-demand lectures and applied learning experiences in data science, information technology, and online computer science.
Learn more with our Coursera review.
Check out:
Cost: Free
Best for: Pre-kindergarten through college students
Khan Academy is a personalized and self-paced learning platform offering online computer classes for kids, adolescents, and young adults. Learners can access instructional videos and practice exercises in math, science, computing, and additional content areas such as arts and humanities. The platform provides test preparation for the LSAT, Praxis, and SAT.
Check out:
Cost: $399 per month per course; nanodegree programs are $1,000 to $1,500
Best for: Full-time working adults, degree-holders, government employees, technical workforce professionals
Udacity offers an online learning platform with courses in data science, programming and development, artificial intelligence, and related technical specialty areas. Courses are self-paced, interactive, and delivered in multiple formats.
Check out:
Basic computer skills are a necessity for today's workforce. Intermediate and advanced computer skills can boost career opportunities for industry professionals.
College and university students may select online college courses to develop a niche area.
Computer experts may explore the best online learning platforms and earn certificates and certifications.
With affordable or free online courses, busy parents and professionals can select courses that fit their schedules.
Learners can sign up for online introductory courses with online platforms like edX, Coursera, Khan Academy, Udacity, and Udemy.
Fundamental computing skills include messaging and video conferencing, troubleshooting, word processing, data entry, and web searching.
In 2019, Monali Mirel Chuatico graduated with her bachelor's in computer science, which gave her the foundation that she needed to excel in roles such as a data engineer, front-end developer, UX designer, and computer science instructor.
Monali is currently a data engineer at Mission Lane. As a data analytics captain at the nonprofit COOP Careers, Monali helps new grads and young professionals overcome underemployment by teaching them data analytics tools and mentoring them on their professional development journey.
Monali Mirel Chuatico is a paid member of the Red Ventures Education freelance review network.
View post:
Beginner computer classes online: What can you take, and where? - ZDNet
Ekinops acquires SixSq and steps up its presence in Edge Computing – PRNewswire
PARIS, Nov. 2, 2021 /PRNewswire/ -- EKINOPS (Euronext Paris - FR0011466069 EKI), a leading supplier of telecommunications solutions for telecom operators and enterprises, is announcing the acquisition of the start-up SixSq, a software-as-a-service (SaaS) provider for Edge Computing.
Based in Geneva, Switzerland, SixSq has developed an ultra-innovative solution allowing businesses to take full advantage of the added value of Edge Computing. Complementing Cloud computing, the SixSq solution enables smart data processing directly on the company's site.
The SixSq range comprises the Nuvla.io marketplace, which hosts all types of business applications in container format, and the NuvlaBox software, which converts enterprise routers or other open hardware platforms capable of processing data, into smart edge systems.
The Nuvla.io marketplace makes available to all NuvlaBoxes deployed in the field inside enterprises, allthe applications it hosts in the Cloud, similar to the App Store or Play Store for consumers. This way, SixSq makes it possible for all software vendors to reach the enterprise market and sell their innovative software applications.
With this acquisition, Ekinops is stepping up its strategy to provide greater added value to its customers. "After enriching OneOS6 middleware with SD-WAN and SBC solutions, it is now possible to extend it to alltypes of applications through the integration of NuvlaBox into OneOS6 and access to the Nuvla.io marketplace. The possibilities are infinite!" said Didier Brdy, CEO of Ekinops. "We are looking forward to presenting this opportunity to our telecom operator customers. It is a new way for them to monetize their presence at enterprise branch sites through our OneOS6 routers."
"Our solution, already productized, offers a unique value proposition to various verticals such as industry, mass retail and telecoms. For us, joining Ekinops is an enormous accelerator," said Marc-Elian Bgin, co-founder and CEO of SixSq. "Thanks to Ekinops' support, we now have the firepower to rapidly move into the B2B market focusing on large accounts and telecom operators. We have already identified opportunities. The market has been waiting for this type of solution, so the timing is perfect."
A key step in the development of Ekinops' software business
The alliance is a major step forward in Ekinops upscale and software business development strategy.
Ekinops and SixSq solutions are already integrated through the Ekinops virtualization offering (OneOS6-LIM). Next, the goal is to integrate NuvlaBox software directly into OneOS6 middleware. All OneOS6 routers will be able to run "container" business applications, downloaded via the Nuvla.io marketplace. Combined with its new 5G routers, Ekinops will make artificial intelligence available to all companies and use cases, particularly for the Internet of Things, Industry 4.0 and smart retail.
SixSq is expected to contribute 1m to 2m to revenue in 2022 from its software business. The company is targeting triple-digit growth in the coming years.
In three years' time, Ekinops aims to generate at least 20% to 30% of its revenue through software and services (vs. 12% in H1 2021).
Transaction details
The transaction consists of the acquisition by Ekinops of 100% of the capital of SixSq SA, which will be consolidated by the Group from November 1, 2021.
This transaction also includes financing from Ekinops to SixSq, which will allow the companyto significantly increase its sales operation and R&D activities at its Geneva headquarters.
The transaction will have a non-material impact on Ekinops' 2021 financial statements.
About Edge Computing
With the advent of our "all digital" society, the amount of data generated by individuals, employees, machines and everyday devices is experiencing exponential growth. These extensive data sets also need to be processed in near real time. Cloud computing, long used to store and process data, is no longer able to address all our needs.We need to process video in real time, take immediate decisions and process data with a lot less latency. And these requirements apply to numerous fields, including healthcare, smart cities and retail.
Supplementing the capacities of the Cloud, Edge Computing provides users with computing power as close as possible to data sources. This is true for points of presence of telecom operators closest to users (known as "near Edge Computing") and user sites ("Far Edge Computing", enabled by SixSq's technology).
Edge Computing has a host of advantages, including:
EKINOPS ContactDidier BrdyChairman and CEO[emailprotected]
Investors Mathieu OmnesInvestor relationTel.: +33 (0)1 53 67 36 92[emailprotected]
Press Amaury Dugast Press relationTel.: +33 (0)1 53 67 36 74[emailprotected]
SOURCE Ekinops
See the article here:
Ekinops acquires SixSq and steps up its presence in Edge Computing - PRNewswire
Microsoft Rides Cloud Computing Boost to Nearly Overtake Apple as Most Valuable Company | Technology News – Gadgets 360
A surge in Microsoft's shares nearly unseated Apple Inc as the world's most valuable company on Wednesday, a day before the iPhone maker reports its quarterly results.
Fuelled by strong quarterly growth in its Azure cloud-computing business, Microsoft's shares jumped 4.2 percent to end at a record $323.17 (roughly Rs. 24,225), elevating the software maker's market capitalisation to $2.426 trillion (roughly Rs. 1,81,86,020 crore), just short of Apple's $2.461 trillion (roughly Rs.1,84,45,070 crore)valuation, according to Refinitiv data.
Apple's shares dipped 0.3 percent ahead of its report due after the bell on Thursday, with investors focused on how the global supply-chain crisis is challenging the company's ability to meet demand for its iPhone models.
Microsoft's stock has rallied 45 percent this year, with pandemic-induced demand for its cloud-based services driving sales. Shares of Apple have climbed 12 percent in 2021.
Apple's stock market value overtook Microsoft's in 2010 as the iPhone made it the world's premier consumer technology company. The two companies have taken turns as Wall Street's most valuable company in recent years, with Apple holding the title since mid-2020.
In its report late on Tuesday, Microsoft forecast a strong end to the calendar year thanks to its booming cloud business, but it warned that supply-chain woes will continue to dog key units, such as those producing its Surface laptops and Xbox gaming consoles.
Analysts on average expect Apple to report September-quarter revenue up 31 percent to $84.8 billion (roughly Rs. 6,35,560 crore)and adjusted earnings per share of $1.24 (roughly Rs. 90), according to Refinitiv.
Secrets to success with cybersecurity hiring and retention – Healthcare IT News
There has been a dearth of cybersecurity professionals to protect healthcare provider organizations for some time and the problem is only getting worse.
That's one of the most pressing trends when it comes to recruiting and retaining cybersecurity talent. And it will also be a major topic addressed during "Team Building, Growing and Retaining Talent: The Secret to Success," a panel discussion at the HIMSS Cybersecurity Forum, a digital event coming December 6-7.
The panel will explore current trends in the information security job marketplace, culture cultivation strategies, assessing what future hiring and training requirements will look like, as well as challenges around retaining talent.
Healthcare IT News sat down with panelist James L. Angle, product manager, IT services, information security, at Livonia, Michigan-based health system Trinity Health, to get a preview of the discussion. Angle has a doctorate in business administration with a specialization in computer and information security.
Q. What are a couple trends you see in today's information security job marketplace?
A. First and foremost, the biggest trend in the cybersecurity marketplace is the lack of talented cybersecurity professionals. The gap keeps getting wider with each new threat that materializes.
As threats like ransomware evolve and become more sophisticated, employers realize they need more help, and this puts a strain on the limited number of cybersecurity professionals. As demand goes up, so do salaries, and this makes it more difficult for small to mid-sized healthcare organizations to compete for available talent.
Another trend is the attack surface of healthcare organizations that is expanding and changing with the move to cloud computing. In the past, organizations built a strong perimeter defense to keep unauthorized people out.
James L. Angle, Trinity Health
This approach is no longer viable as cloud computing places the organization data outside the perimeter. This requires a different skill set to manage the threat, which means more cybersecurity professionals with these skills are needed. This exacerbates the problem.
These two issues are driving employers to ask for cybersecurity professionals with multiple skill sets to cover their requirements. If you look at job announcements, you will see employers asking for someone who is an expert with perimeter security, endpoint security, cloud computing, and governance, risk and compliance (GRC).
The problem is that most security professionals do not have multiple skill sets. While they have a basic knowledge of all these skills, they do not have the expertise in all of them.
Q. How do you cultivate a good information security culture in healthcare?
A. First, hire the right person for the right job. By that I mean don't hire someone with a soft skill like GRC to be your firewall administrator, or a firewall administrator to be your security architect. These are vastly different skills, and each takes training to become proficient.
You should cross-train all your personnel, but don't hire people for jobs they are not qualified for. You are only setting them up for failure.
Provide training for your cybersecurity staff. The threat is evolving and getting more sophisticated every day, so they must keep up with the changes.
Also, if you have people with IT skills who want to learn cybersecurity, encourage them by setting up in-house training and help them develop the skills. Most security people I know would like to help others develop cybersecurity skills, and could help train others.
Another important thing for developing good security practices is for leadership to talk about cybersecurity and lead by example.
Q. What are a couple challenges around retaining information security talent, and how do you overcome these challenges?
A. There are two big challenges around retaining cybersecurity professionals. The first is the shortage of cybersecurity professionals. This shortage means that some organizations will attempt to hire workers from other companies. This drives up salaries and makes it harder for healthcare organizations to hire and keep talent.
The second and most important aspect is how cybersecurity professionals are treated by their organizations. Let's face it, no one likes having to practice good security. Long passwords, blocked websites and many problems that arise are blamed on security. This leads to security professionals being treated as if they were an impediment to productivity, rather than an asset.
James Angle, along with Vugar Zeynalo, CISO at Cleveland Clinic Health Systems, and Steve Martano, partner in the cybersecurity practice at Artico Search, will explain more in the session, "Team Building, Growing and Retaining Talent: The Secret to Success." It's scheduled to air from 3:10-3:40 p.m. ET on Tuesday, December 7.
Twitter:@SiwickiHealthITEmail the writer:bsiwicki@himss.orgHealthcare IT News is a HIMSS Media publication.
See more here:
Secrets to success with cybersecurity hiring and retention - Healthcare IT News
Alibaba launches new server chip to boost its cloud business in challenge to Amazon and Microsoft – CNBC
Signage at the Alibaba Group Holdings Ltd. headquarters in Hangzhou, China, on Wednesday, March 24, 2021.
Qilai Shen | Bloomberg | Getty Images
GUANGZHOU, China Chinese e-commerce giant Alibaba launched a new server chip on Tuesday, as it looks to boost its cloud computing business and compete against U.S. rivals like Amazon.
The processor, called Yitian 710, will go into new servers called Panjiu.
The chip and servers will not be directly sold to customers. Instead, Alibaba's cloud computing clients will buy services based on these latest technology. These servers are designed for artificial intelligence applications and storage.
The company did not say when the services based on the latest chip and server will be available for customers.
Alibaba will not be manufacturing the semiconductor but will be designing it instead.
That's a trend among Chinese companies. Huawei designed its own smartphone chips and Baidu raised money this year for a standalone semiconductor business. U.S cloud computing rivals including Google and Amazon have also done the same.
Read more from the original source:
Alibaba launches new server chip to boost its cloud business in challenge to Amazon and Microsoft - CNBC