Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint

6/8/2017
02:30 PM
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
50%
50%

Microsoft to Buy Hexadite for AI, Enterprise Security

Acquisition of Israeli security startup aims to strengthen Windows 10 security with artificial intelligence, company says.

Microsoft has confirmed plans to acquire cybersecurity startup Hexadite, which leverages artificial intelligence to detect and defend against cyberattacks.

Boston-based Hexadite was founded in 2014 and has roots in Israel, where researchers are still based. Its technology uses automation for incident response, a move its founders say was made necessary to combat the growth in cybercrime and shortfall of security talent.

Hexadite connects with existing detection tools to investigate and resolve threats. The system is modeled after logic and processes used among human cyber analysts, and relies on threat intel and algorithms to act on alerts as they happen.

When it detects a security threat, Hexidate automatically goes to the endpoint and queries network resources for more information. The result of one investigation can kick off multiple; for example, if the system uncovers malware that could put multiple endpoints at risk.

Microsoft reports more advanced and targeted cyberattacks can cost businesses between $12 and $17 million per incident. It plans to integrate Hexadite's technology into Windows 10 to strengthen enterprise security.

More specifically, it plans to integrate AI-based automatic investigation and remediation into Windows Defender Advanced Threat Protection (WDATP), which it claims will make incident response faster and more effective. Microsoft claims WDATP, which protects against advanced threats like zero-day attacks and ransomware, runs on nearly two million devices.

"Our vision is to deliver a new generation of security capabilities that helps our customers protect, detect, and respond to the constantly evolving and ever-changing cyberthreat landscape," reports Terry Myerson, EVP for Microsoft's Windows and Devices Group.

"Hexadite's technology and talent will augment our existing capabilities and enable our ability to add new tools and services to Microsoft's robust enterprise security offerings," Myerson says.

Officials did not state the exact value of the transaction; however, TechCrunch cites sources who report a price tag around $100 million. Following the close of the deal, Hexadite will be "fully absorbed" into Microsoft as part of its Windows and Devices Group.

"This acquisition will build on the work we're already doing to deliver the tools necessary to stay secure in today's evolving threat landscape," Microsoft says. The Hexadite purchase fits into its overall plan to boost security with new tech like AI and machine learning.

This is the latest in a series of acquisitions targeting smaller cybersecurity companies. Microsoft has also bought Adallom, Aorato, and Secure Islands in recent years to broaden its security portfolio.

Interestingly, the Hexadite news arrives as Microsoft realigns and consolidates some of its cloud, AI, and data platform business units, ZDNet reports. Scott Guthrie, EVP of the Cloud and Enterprise Group, is creating a new Cloud AI Platform division that will handle Azure Search, Azure Machine Learning, Algorithms and Data Science Solution team, Microsoft Bot Framework, and R Server.

Microsoft is also adding a new Azure + Data Platform Group, to be run by CVP of Azure Jason Zander. James Phillips, who currently leads Business Applications Platform and Intelligence, will be head of a new Business Applications Group.

Black Hat USA returns to the fabulous Mandalay Bay in Las Vegas, Nevada, July 22-27, 2017. Click for information on the conference schedule and to register.

Related Content:

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial ... View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
News
Inside the Ransomware Campaigns Targeting Exchange Servers
Kelly Sheridan, Staff Editor, Dark Reading,  4/2/2021
Commentary
Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain
Rik Turner, Principal Analyst, Infrastructure Solutions, Omdia,  3/30/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-3493
PUBLISHED: 2021-04-17
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivile...
CVE-2021-3492
PUBLISHED: 2021-04-17
Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (ker...
CVE-2020-2509
PUBLISHED: 2021-04-17
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later Q...
CVE-2020-36195
PUBLISHED: 2021-04-17
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia C...
CVE-2021-29445
PUBLISHED: 2021-04-16
jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDe...