Connect with us

Tech

Panorays: 21% of enterprises have cloud storage in a single region

Published

on

Panorays: 21% of enterprises have cloud storage in a single region

Elevate your enterprise data technology and strategy at Transform 2021.


As more organizations rely on third-party providers for services such as marketing, support, and operation, they are also depending heavily on these providers to protect the data properly. Recent research found that 21% of companies have their cloud storage located in a single region, said third-party security risk management platform provider Panorays.

The service providers may be storing the organization’s data with a cloud provider, and that could expose the organization to risk if the storage is not properly configured. For example, a service provider could host a website within a cloud storage bucket, such as Amazon Web Services Simple Storage Service (S3). The default configurations can lead to security issues because they make the server object and file contents publicly accessible.

Panorays assessed the external cloud infrastructure of third parties’ cloud providers as part of its research. More than 20% of companies have their cloud storage in a single region. This is not surprising, since it’s cheaper and easier for companies to deploy single-region architecture. However, this practice can be problematic when faced with disaster recovery, which is why it’s not recommended.

Panorays checked if specific cloud services were exposed to the public because exposed cloud infrastructure resources increases risk and the organization’s attack surface. From the tens of thousands of storage buckets found in our assessment, 5% were found to have public browsing/listing permissions.

Panorays also checked if the services were located in a single geographic region since having different regions is recommended for business continuity.

These buckets belonged to professional companies and not private individuals, which may explain why the figures were lower than expected, said Demi Ben-Ari, Panorays co-founder and CTO. “Nevertheless, we expected this to be even lower, considering that open buckets remain a pressing problem that has gained a great deal of publicity lately.”

Read the full research from Panorays.

VentureBeat

VentureBeat’s mission is to be a digital town square for technical decision-makers to gain knowledge about transformative technology and transact.

Our site delivers essential information on data technologies and strategies to guide you as you lead your organizations. We invite you to become a member of our community, to access:

  • up-to-date information on the subjects of interest to you
  • our newsletters
  • gated thought-leader content and discounted access to our prized events, such as Transform 2021: Learn More
  • networking features, and more

Become a member

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

DataStax throws weight behind Pulsar messaging platform to kill Kafka

Published

on

Elevate your enterprise data technology and strategy at Transform 2021.


DataStax launched an implementation of the open source Apache Pulsar distributed messaging and streaming platform, dubbed Astra Streaming, that is integrated with its database service based on an instance of Cassandra running on top of a serverless computing platform.

Pulsar will supersede Apache Kafka software as the next-generation distributed messaging platform, said Chris Latimer, vice president of product management for DataStax. “We see it as a Kafka killer,” he said.

Kafka has gained a significant amount of traction as a distributed messaging platform that makes it easier to share large volumes of persistent data across a distributed computing platform. Instead of only being able to access data at rest, both Kafka and Pulsar enable applications to also access data in motion. Those capabilities have proven especially crucial within digital business application environments where data needs to be analyzed as close to the points where it is being created and consumed as possible.

Pulsar traces its lineage back to a distributed messaging platform created at Yahoo that advocates claim provides faster throughput and lower latency than Apache Kafka in many use cases. Pulsar is also designed to support multiple tenants, is easier to deploy, and can be employed to replace Kafka using a familiar application programming interface (API) construct. Overall, the total cost of ownership of Pulsar is less, according to a recent analysis published by the market research firm GigaOm.

DataStax is also positioning Astra Streaming, available in beta, as a natural complement to Astra DB, a database-as-a-service based on a version of Cassandra deployed on top of Kubernetes clusters accessing an object-based storage system. That instance of Cassandra has been rearchitected as a set of microservices that can more easily scale up and down as needed, according to DataStax. A key benefit of the integration of Astra Streaming and Astra DB is the ability to interact with event logs in a way that feels familiar to anyone who is experienced with database technologies, said Latimer.

It’s not clear to what degree the decision to select a database will be coupled to the acquisition of a database. DataStax, however, disclosed last month it counts CGi Global Technologies, Energisme, ESL Gaming, Innovapost, Koddi, Overstock.com, Payment Approved, Titanium Intelligent Solutions, T-Mobile, Trading Technologies International, Ubirch, US Bank, and Verizon as customers. It also received an unspecified amount of funding from Goldman Sachs.

Most enterprise IT organizations have yet to commit to Pulsar, Kafka, or any other type of distributed messaging and streaming platform. However, the awareness of the need for these types of platforms has increased considerably thanks to digital business transformation initiatives that require data to be processed in near real time. In many cases, organizations are trying to bring together data management, engineering, storage, and security under a common framework that makes it simpler to treat data as a corporate asset that can be maximized by multiple applications. At the core of that strategy is an effort to leverage AI models that require massive amounts of data to be trained and then deployed in a production environment, noted Latimer.

The challenge organizations now face is aligning all the disparate teams that once managed each of those functions around a set of best practices that are consistently implemented.

Of course, advocates of Kafka are not yet ready to roll over simply because Pulsar has emerged as an alternative. The issue, of course, is many of those same organizations are among the most inclined to adopt a new platform when it becomes stable enough to support distributed applications at scale.

VentureBeat

VentureBeat’s mission is to be a digital town square for technical decision-makers to gain knowledge about transformative technology and transact.

Our site delivers essential information on data technologies and strategies to guide you as you lead your organizations. We invite you to become a member of our community, to access:

  • up-to-date information on the subjects of interest to you
  • our newsletters
  • gated thought-leader content and discounted access to our prized events, such as Transform 2021: Learn More
  • networking features, and more

Become a member

Continue Reading

Tech

Vungle agrees to buy influencer marketing platform JetFuel

Published

on

JetFuel cofounders JJ Maxwell and Tim Lenardo.

Elevate your enterprise data technology and strategy at Transform 2021.


Vungle has agreed to buy influencer marketing platform JetFuel for an undisclosed price.

The deal is the fourth acquisition that Vungle has made in the past seven months, and the first since it acquired playable ads firm TreSensa in May.

San Francisco-based Vungle is creating a mobile performance marketing platform and it believes that JetFuel can position it for the next generation of user acquisition by helping it reach audiences in the fast-growing creator economy, said Jeremy Bondy, CEO of Vungle, in an interview with GamesBeat.

A changing market

San Francisco-based JetFuel enables app developers and other advertisers to scale marketing campaigns across a network of over 15,000 fully-verified influencers, with a combined reach of over 4 billion Instagram followers, 1.5 billion TikTok followers, and 100 million daily Snapchat views. Influencers started out as a cheaper alternative to paid user acquisition via advertising.

“You have somebody who’s making an individual choice to tell the story of your brand in a really authentic way,” Bondy said. “And they’re using their own personal cachet and channel in order to tell that story. You’re not relying on this pure distribution algorithm across apps. It’s much, much more personalized. ”

Advertisers could cut deals with influencers to get them to hawk goods to their followers. And while influencers have become extremely, uh, influential, it’s hard to scale because it isn’t easy to cut deals with every single one of them.

That’s where JetFuel comes in, as it has made a platform to help automate the process of reaching influencers. As Vungle continues to expand the breadth of its mobile performance marketing platform, JetFuel enables Vungle to offer advertisers even greater reach in acquiring high-value users and the ability to target the increasingly valuable Gen Z market through engaging, influencer-owned viral content that drives action.

“This emerging and undeniably fast-growing influencer segment is increasing day by day, and it’s becoming more and more compelling,” Bondy said. “In our diligence, we found that every CEO of a gaming company that we talked to said that they had some form of influencer strategy, whether it be in the early stages or a mature team. And that directly ties back to our relevance within the overall gaming business. We started off just working with marketing and growth teams as a network. And then we expanded to data teams through AlgoLift, and then to game and product teams through GameRefinery, to design teams through TreSensa, and now to social teams through JetFuel.”

The global influencer market is expected to be worth $13.8 billion in 2021, up from $1.7 billion in 2016, a compound annual growth rate (CAGR) of 52%, according to a 2021 report by the Influencer Marketing Hub. Advertisers continue to invest a larger share of their marketing budget in influencer marketing each year. JetFuel has innovated in this space by automating campaign management and execution, removing the need for the time-consuming manual work that is characteristic of traditional influencer marketing. The company charges advertisers on a cost-per-action (CPA) basis, ensuring that advertisers achieve measurable outcomes with high ROI. JetFuel also empowers influencers to create authentic, custom promotions that drive strong results.

Above: JetFuel cofounders JJ Maxwell and Tim Lenardo.

Image Credit: JetFuel/Vungle

“The growth is undeniable,” Bondy said. “It’s a 52% CAGR with no slowing down in sight.”

Bondy said that JetFuel has a forward-thinking vision that influencer platforms like JetFuel can reach Gen Z audiences that are normally hard for advertisers to reach through traditional means.

“They empower influencers on the creator side as well as advertisers,” Bondy said. “The company has only been around for three years, and they built this massive following. What we found natural about the fit is that everything they do is performance. Every single advertiser engagement is set up on a cost-per-action (CPA) basis. It’s pure performance and so it scales really nicely. We think the infusion of our advertiser base could turn this into the next Vungle.”

JetFuel provides tools for influencers to build their business.

“They empower the creator economy with offers, recommendations for how to build their stories so that they can market products effectively,” Bondy said. . They can even offer financial products down the road. And this really feeds the scalability and virality of it. There are incentives for creators to bring on other creators. So it has that snowball type of effect. We anticipate investing very, very heavily in the growth of this business.”

A shopping spree

This acquisition means that Vungle is still closer to its goal of creating mobile performance marketing platform that addresses the complete app growth cycle. Combined with GameRefinery, AlgoLift, and TreSensa, the Vungle platform provides a suite of tools, including game design and development, marketing, playable ads, and measurement.

Apple has driven this change with the modification to the Identifier for Advertisers (IDFA), which helps track users for ad targeting. Apple has prioritized privacy over ad targeting, so it’s getting a lot harder to acquire users for specialized games such as strategy. The first three acquisitions that Vungle did were dealing with that IDFA change in some way.

“What’s interesting about this one, as relates to IDFA, is that you have a direct relationship with the creator, which is analogous to AppLovin’s ownership of content, or could be depending upon how deep relationships we build with those creators,” Bondy said. “So I think that’s probably the most relevant connection point.”

How JetFuel works

Tim Lenardo, CEO of JetFuel, said in a statement that there are huge benefits to pairing up with an ad tech leader like Vungle, as JetFuel is solving problems in influencer marketing now that are similar to those that Vungle has spent the past 10 years solving in mobile. Lenardo and JJ Maxwell, the cofounders, were app developers who previously built Boomerang.

JetFuel’s flagship influencer product, The Plug, offers a self-serve monetization for anyone with an online following and aims to be a comprehensive platform for influencer success. Simultaneously, JetFuel enables advertisers to scale influencer campaigns without time-consuming, manual work. JetFuel operates like a programmatic ad network, allowing advertisers to bid on results and optimize towards downstream metrics. To date, the company has delivered over 60 million app installs to it’s mobile partners and is the only influencer network ever recognized as a leading return on ad spend (ROAS) partner in AppsFlyer’s Performance Index.

Vungle wants to be the trusted guide for growth and engagement, transforming how people discover and experience apps. Mobile app and game developers partner with Vungle to monetize their apps through in-app ad experiences.

Advertisers depend on Vungle to reach, acquire, and retain high-value users worldwide. Vungle’s data-optimized ads run on over a billion unique devices to drive engagement and increase returns for publishers and advertisers ranging from indie studios to powerhouse brands, including Rovio, Pandora, and Microsoft. The company is headquartered in San Francisco and has offices around the world. Bondy said the JetFuel team would move into Vungle’s office when the timing works out.

This acquisition brings Vungle to around 350 employees.

GamesBeat

GamesBeat’s creed when covering the game industry is “where passion meets business.” What does this mean? We want to tell you how the news matters to you — not just as a decision-maker at a game studio, but also as a fan of games. Whether you read our articles, listen to our podcasts, or watch our videos, GamesBeat will help you learn about the industry and enjoy engaging with it.

How will you do that? Membership includes access to:

  • Newsletters, such as DeanBeat
  • The wonderful, educational, and fun speakers at our events
  • Networking opportunities
  • Special members-only interviews, chats, and “open office” events with GamesBeat staff
  • Chatting with community members, GamesBeat staff, and other guests in our Discord
  • And maybe even a fun prize or two
  • Introductions to like-minded parties

Become a member

Continue Reading

Tech

Lightspin: 46% of AWS S3 buckets could be misconfigured and unsafe

Published

on

s3 misconfigurations are big deal

Elevate your enterprise data technology and strategy at Transform 2021.


Cloud misconfigurations expose organizations to significant risk, according to a new analysis of Amazon Web Services (AWS) Simple Storage Service (S3) buckets conducted by Lightspin, a cloud security provider. In-depth research into 40,000 AWS buckets and their cloud storage permissions found that 46% of AWS S3 buckets could be misconfigured and should therefore be considered unsafe, Lightspin said.

Above: A diagram that explains how AWS evaluates access and assigns definitions to objects within S3 buckets.

Image Credit: Lightspin

Misconfigured S3 buckets can open your cloud environment up to a huge amount of risk. Public read access could lead to a data breach, while public write access can launch malware or encrypt data to hold your company ransom.

Certain AWS cloud storage permissions are currently complex and even obtuse, as one of the AWS access options is defined as “Objects can be public.” As AWS evaluates the access permissions of all files at the bucket level, rather than the object level, an object’s ACL is not considered. In short, the definition “Objects can be public” doesn’t allow organizations to definitively understand whether their objects are accessible or not. The diagram above can help to visualize which objects would be given this classification.

Lightspin’s research revealed that more than 40% of AWS S3 buckets have this definition attached, on top of the 4% that are defined as public. As part of this research, the company created a free, open source Python tool that scans the cloud environment in full and clarfies which objects are public and which are not.

Read Lightspin’s full research into the risks of misconfigured S3 buckets.

VentureBeat

VentureBeat’s mission is to be a digital town square for technical decision-makers to gain knowledge about transformative technology and transact.

Our site delivers essential information on data technologies and strategies to guide you as you lead your organizations. We invite you to become a member of our community, to access:

  • up-to-date information on the subjects of interest to you
  • our newsletters
  • gated thought-leader content and discounted access to our prized events, such as Transform 2021: Learn More
  • networking features, and more

Become a member

Continue Reading

Trending