Vulnerabilities / Threats

7/18/2017
04:05 PM
50%
50%

Rapid7 Buys Security Orchestration and Automation Firm Komand

Rapid7 has acquired Komand with plans to integrate its orchestration and automation technology into the Insights platform.

Rapid7 has acquired Komand, a security orchestration and automation company, to address the need for automation as security threats increase and environments become more complex, the organization reported today.

Komand's technology will be integrated into the Rapid7 Insight platform, which will be expanded to orchestrate and automate across security and IT operations. This is intended to help security teams struggling with resources to automatically detect and respond to risks with fewer people.

Some sample use cases for the automation and orchestration tech include malware investigation and containment, chat operations for addressing routine questions, and risk remediation and patching.

"The complexity of today’s security and IT ecosystems have put security and IT operations teams at a significant disadvantage when they need to respond quickly," said Lee Weiner, chief product officer at Rapid7, in a statement. "By developing contextualized automation technology, we’ll be able to cut back the time it takes to respond to an incident—when minutes can mean the difference between a minor issue and significant compromise or loss."

Read more here about Rapid7 and its acquisition.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
No SOPA
50%
50%
No SOPA,
User Rank: Ninja
7/31/2017 | 6:03:50 PM
Rapid7's Evolution
I'm curious how this will affect the evolution of Rapid7.  From the beginning I liked this team because of their hands-on and aggressive work ethic.  Over time we've seen a more formal and systematic process emerging but I have a hard time picturing Komand in the Rapid7 wheelhouse.  Will be interesting to watch unfold.  Deral Heiland is one of my favorite industry speakers and Rapid7 is definitely an industry moving.  They don't do anything without a solid purpose so congrats on the acquisition.
White House Cybersecurity Strategy at a Crossroads
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/17/2018
The Fundamental Flaw in Security Awareness Programs
Ira Winkler, CISSP, President, Secure Mentem,  7/19/2018
Number of Retailers Impacted by Breaches Doubles
Ericka Chickowski, Contributing Writer, Dark Reading,  7/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-19990
PUBLISHED: 2018-07-23
October CMS version prior to build 437 contains a Cross Site Scripting (XSS) vulnerability in the Media module and create folder functionality that can result in an Authenticated user with media module permission creating arbitrary folder name with XSS content. This attack appear to be exploitable v...
CVE-2018-19990
PUBLISHED: 2018-07-23
October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...
CVE-2018-19990
PUBLISHED: 2018-07-23
FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fix...
CVE-2018-19990
PUBLISHED: 2018-07-23
FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-overflow that may result in remote code execution. This attack appears to be exploitable via specially crafted ASF file that has to be provide...
CVE-2018-19990
PUBLISHED: 2018-07-23
FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. This attack appear to be exploitable via specially c...