Attacks/Breaches
4/30/2010
08:37 AM
50%
50%

Symantec To Buy PGP, GuardianEdge For $370 Million

The data encryption firms offer technology for standards-based encryption of full-disks, removable media, files, folders and smartphones.

Symantec is hoping to improve its position in the data encryption market with the $370 million acquisition of two privately held security firms.

Symantec on Thursday said it planned to buy PGP for $300 million in cash and GuardianEdge for $70 million in cash. The agreements, which are subject to customary closing conditions and regulatory approvals, are expected to close in the current quarter.

PGP and GuardianEdge offer technology for standards-based encryption of full-disks, removable media, files, folders and smartphones. Symantec plans to combine the technology with its own to address the growing need for encryption of data moving across an increasing number of mobile devices attached to corporate networks. Based on figures from IDC, the encryption market is expected to reach $1.7 billion in 2013.

Symantec said it would combine technology from both acquisitions and standardize it on the PGP encryption-key management platform in order to deliver centralized policy and key management capabilities. The PGP platform will then be integrated into Symantec's Protection Center, which provides consolidated access to threat, security and operational dashboards and reporting.

In addition, the new technology will enhance Protection Center's ability to manage endpoint security, prevent data loss and secure gateways, Symantec said.

On the customer side, PGP brings enterprise, small and medium-sized businesses and consumers to Symantec's customer base. GuardianEdge, which is already a partner, will boost Symantec's presence in the government sector.

Upon closing, PGP and GuardianEdge will become a part of Symantec's Enterprise Security Group led by Senior VP Francis deSouza.

Symantec has been on a buying spree this year. In January, Symantec said it would buy Gideon Technologies to boost Symantec's risk management offerings for the public sector. Financial terms were not disclosed.

Gideon extended Symantec's portfolio with security content automation protocol-validated configuration and vulnerability assessment technology. SCAP is a method for using specific standards to communicate software flaw and security information between security products.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading December Tech Digest
Experts weigh in on the pros and cons of end-user security training.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3407
Published: 2014-11-27
The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888.

CVE-2014-4829
Published: 2014-11-27
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allows remote attackers to hijack the authentication of arbitrary users for requests tha...

CVE-2014-4831
Published: 2014-11-27
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to hijack sessions via unspecified vectors.

CVE-2014-4832
Published: 2014-11-27
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.

CVE-2014-4883
Published: 2014-11-27
resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Now that the holiday season is about to begin both online and in stores, will this be yet another season of nonstop gifting to cybercriminals?