Reports Archive

Still leading the DDoS protection market after all these years, NETSCOUT combines leadership in threat intelligence with portfolio innovation to adjust dynamically to changes in the DDoS threat landscape. Download the Briefing

NetQuest Corporation has launched a new product – a Packet Services Broker – to streamline SOC operations with high security efficacy and better cost efficiency. View the Briefing

Mandatory cyber incident reporting is being extended to many more organizations.. Here’s HardenStance’s guidance on preparing for these new rules – and making the best use of them.View the White Paper

Gamma, a European provider of Unified Communications as a Service, is implementing a new overlay cyber security strategy, covering its many recent acquisitions. Noetic Cyber, a provider of cyber asset management solutions, is a key partner.View the Cyber Security Innovator

Tidal Cyber makes it a lot easier to use and apply the MITRE ATT&CK Framework. Users and vendors alike should welcome the Threat Informed Defence this new start-up is enabling. View the Briefing

No time to listen to eight solid hours of HardenStance’s Telecom Threat Intelligence Summit (TTIS 2022)? This Briefing provides summary highlights of who said what. View the Briefing

Carried out live from the Moscone Centre in San Francisco, HardenStance’s 2022 RSA Survey found industry leaders pointing to education, authentication and operations to drive the biggest improvements in our cyber resilience. View the Briefing

Nation states have many more APTs at their disposal besides trying to hide backdoors in a telecom vendor’s software or in a chip. They rely on mundane threat vectors like SMS and email as well as APTs. View the White Paper

Changes in ransomware business models, new government interventions in the market, and more expensive cyber insurance premiums, should drive an urgent review of cyber risk exposure relative to ransomware.View the White Paper

Nokia has substantially enhanced the  DDoS protection and network layer encryption services it can offer from its 7750 SR router platform.View the Briefing

5G SA is an unforgiving environment for meeting stringent business service KPIs and SLAs. A service-based security posture is the framework for fulfilling 5G’s promise while mitigating risk.View the White Paper

How the specifications for 5G roaming have had to be revisited – and why we should pay as much attention to hardening the security of the legacy 2G, 3G, & 4G roaming ecosystem.  View the White Paper

The second question MSPs and MSSPs should ask about Zero Trust is “how can we sell it?” The first is “how can we deploy it ourselves?” View the White Paper

Over four hours of HardenStance’s “Telecom Threat Intelligence Summit” summarized in 5 pages.View the Briefing

Noetic Cyber is targeting the cyber asset management and continuous controls monitoring market (CCM) spaces. The three founders were all early employees of Resilient Systems Inc.View the Cyber Startup Briefing

ENEA is acquiring signaling and messaging security specialist, AdaptiveMobile Security. Customers should welcome this – they look like a good fit.View the Briefing

Oracle Communications has critical capabilities and expertise in building, operating and securing telecom network functions, cloud native development environments and public cloud infrastructure.View the Briefing

The heightened threat posed by SolarWinds-type cyber attacks, bans on using Huawei, and chipset shortages, point to the need for a revolution in telco supply chain management. View the White Paper

The pandemic has made us even more dependent on our home networks and even more vulnerable to cyber threats. This White Paper, sponsored by Allot, points to the unique contribution that ISPs can make to securing the home router.View the White Paper

Trustwave was a poor fit for Singtel right from the start. The parent company should move forward with a sale View the Briefing

The pandemic together with lockdowns triggered big changes in enterprise IT strategy. How should this change cyber security best practice? View the video

The pandemic’s legacy for cyber security should be a secure innovation culture; convergence of network and security at the edge; better segmentation of network domains at home; and concerted action against ransomware. View the White Paper

Vodafone Business is finally making a respectable commitment to security services. Trebling security revenues by 2025 looks achievable. View the briefing

Telekom Security is focusing on the Central European markets of Germany, Austria and Switzerland. M&A activity may even prioritize the U.S. before the big European markets like France and the UK.View the Briefing

Looking into some recent real world telco security incidents highlights just how unhelpful a myopic focus on APTs, Chinese vendor software and 3GPP features can be to telco security.

Facebook, YouTube and Twitter aren't going to reduce the risk posed by Fake News down to the minimal level needed on their own. It's time they collaborated to get this done - here's how.

ETSI is doing some excellent work to fill a glaring gap in cyber security standards - how you secure AI algorithms.

With the launch of the first 5G Stand Alone (5G SA) networks, mobile network security will never be the same again - here's why and what to do about it.

Will operators step up and support two enterprising individuals from Ericsson and Nokia in defining an ATT&CK-like Framework for the telecom sector?

All but the largest telecom operators should be looking at deploying the STIR/SHAKEN standard for blocking unwanted calls as a service, managed by a vendor partner, rather than building out their own infrastructure.

Managed Detection and Response (MDR) is a critical cybersecurity service category. Sponsored by AT&T, Secureworks, Fortinet and ElevenPaths, this White Paper guides users on what to expect both from their provider and themselves in an MDR partnership.

The new MITRE ATT&CK Evaluations offer free access to high quality, comparative data on EDR product detection capabilities against APTs on an unprecedented scale. Those that need to - and know how to - can make good use of this data.

The new open standard STIX and TAXII 2.1 releases have been approved by OASIS. A new self-certification program should help drive adoption and enable SOC teams to arrive at faster time to detection and time to mitigation.

Orange Polska has released Mixeway, an open source CI/CD security orchestration tool. It needs a lot more work but the GUI and aspiration to correlate vulnerability testing across security tools make it worth taking a look at.

By defining open and transparent network security testing specifications, the leading NGFW vendors supporting NetSecOPEN are looking to usher in a new era in trusted network security testing.

SKT is a world-leader in 5G. This HardenStance Briefing depicts the operator's strategy for 5G services and applications and the contribution A10 Networks is making to SKT's supporting network and network security infrastructure.

Cloud Native principles and tools are now the only way forward for telcos to achieve their digital transformation goals. This White Paper articulates what this means in terms of working practices, development and operations models and new security requirements.

80 hackers gathered in Oulu, Finland, over the last week-end of November 2019 to crawl all over Ericsson and Nokia's 5G network products and see what flaws they could find. HardenStance attended and published this Briefing on what happened and why it matters.

Some telcos are investing in deception technology. According to Attivo Networks, one telco customer found enough unauthorized and malicious behaviour by employees to warrant firing them on the spot. There are telecom infrastructure use cases too.

Research by the Delft University of Technology, carried out in partnership with KPN, the Dutch Ministry of Economic Affairs and others, suggests consumers may be more willing to engage in cleaning up IoT infections than they tend to be given credit for.  

T-Systems wants to become Europe's largest provider of cyber security services. This HardenStance Briefing looks at how growing market share in the UK is key to achieving that goal.

This White Paper, sponsored by The Cyber Threat Alliance, IBM Security, KPN and Nokia looks at the importance of using Defensive and Incident Response (IR) playbooks as a foundational building block of security automation.  

The OpenC2 Forum has approved its first specifications, putting the standard on a footing with which it can scale out into commercial deployments and increase speed and efficiency in cyber security operations.

The NSS Labs apology to CrowdStrike and resolution of their lawsuits is progress as far as it goes. But it still leaves outstanding the NSS antitrust suit against AMTSO.

After almost twenty years competing with Check Point, Fortinet today announced higher quarterly sales than its long-time rival for the first time. 

It's clear from the proof-points offered up in a recent webcast that IBM Security and Cisco are serious about their cyber security alliance. In the near future, though, the partners will disrupt the cyber security market at the margins rather than transforming it.

ETSI TC Cyber has released a new security standard that allows telcos to run core public telecom services in - wait for it - public clouds. Here's how it works and what it means for the telecom ecosystem.

AI isn't a 'silver bullet' for cyber security, neither does it need to represent unacceptable risk. Drawing on research into the experience of early adopters, this White Paper provides guidance on what to expect from AI in cyber security..

Orange Polska can point to three clear examples of how SecBI's Autonomous Investigation software has detected threats that other security controls missed.    

Government and government cyber security agencies can be very helpful in getting telco security spending signed off. Telco security professionals should be looking to exploit those opportunities.

With Reuters disclosing that Dell is exploring a sale of Secureworks, who's the right buyer for one of the true leaders in cyber security?

Akamai is gaining traction with its enterprise security strategy but faces a number of challenges in seeking to outperform its achievements in cloud security.

Coming out of its global analyst event in New Jersey, it's clear that Nokia needs to further develop its security strategy to support its drive into enterprise networking.

Now that Palo Alto Networks has joined, there are two focused security vendors in the Next Generation Mobile Network (NGMN) Alliance. Other security vendors should consider joining too.

Red Hat has a substantial portfolio of security features for container environments. These are designed to protect both the application and the underlying infrastructure.

Adversaries might not be using machine learning or AI to drive cyber attacks yet but it's a matter of time before they do. There are profound ethical concerns around the use of AI too, especially when it comes to its use in warfare.

Rather than go after the broader enterprise security market, Vodafone is targeting SMEs with mobility-oriented cyber security solutions that play to its core strengths.

Telcos should consider partnering leading managed security services players to share risk, assets and know-how, and grow their revenues and brand in this market.

AMTSO’s new standard for transparency in advanced malware testing methods is a step forward in cleaning up the fiercely-contested endpoint security market.

Unless 5G security options are diverse, customizable and transparent, enterprise CSOs won’t sign-off on new 5G use cases on the scale that telcos are hoping for. Download the White Paper 

Buyers and vendors of network security products should actively embrace and support NetSecOPEN as its disruptive and transparent approach can enhance the network security ecosystem.

  Deutsche Telekom’s 1,250-strong Telekom Security unit is entering its second year of commercial operations. Driving sales in Europe is the near-term priority.

HardenStance attended Cybertech in Tel Aviv last week. Here’s a Briefing on the current state of the Israeli market in cyber security start-ups

Runtime protection is now a bigger concern for Twistlock's customers than vulnerability management. Just one of the things I learnt when I met up with Dima Stopel, one of the company's Co-Founders, at CyberTech in Tel Aviv last week

On November 27th 2017, Akamai completed the acquisition of leading DNS provider, Nominum. Download the HardenStance take on how Akamai plans to leverage the acquisition of Nominum across its portfolio and drive its cybersecurity business to $1 billion in 4-5 years.  

At Capacity Europe’s “Network Security Summit” I gave the keynote address on “Cyber Threats & Opportunities For Telecom Operators”. Click on the above link to access my slide presentation