Press Release

April 14, 2023 11:42 AM

Updated statement regarding LockBit claims

Mike Beck, Chief Information Security Officer, Darktrace

We have completed a thorough security investigation following yesterday’s tweets by LockBit claiming they had compromised Darktrace’s internal systems. We can confirm that there has been no compromise of our systems or any of our affiliate systems. Our service to our customers remains uninterrupted and is operating as normal and no further action is required.

Press Release

April 13, 2023 9:30 AM

Statement regarding LockBit claims

Earlier this morning we became aware of tweets from LockBit, the cyber-criminal gang, claiming that they had compromised Darktrace’s internal security systems and had accessed our data. Our security teams have run a full review of our internal systems and can see no evidence of compromise. None of the LockBit social media posts link to any compromised Darktrace data. We will continue to monitor the situation extremely closely, but based on our current investigations we are confident that our systems remain secure and all customer data is fully protected.


Press Release

Darktrace / CLOUD™ brings real-time cloud detection and response to Microsoft Azure

Cambridge, UK
October 3, 2024
  • AI-based CDR system provides real-time detection, investigation, and prioritization of cloud threats.
  • Integration with Microsoft Azure’s virtual network flow logs lowers deployment times by 95%.
  • Darktrace research shows almost two thirds of cybersecurity professionals expect cloud security to be where defensive AI has the greatest impact by 2027.
  • Darktrace / CLOUD leverages virtual network flow logs to understand the unique network patterns of Azure environments.


Darktrace, a global leader in AI for cybersecurity, today announced the expansion of Darktrace / CLOUD to support Microsoft Azure environments. The AI-driven Cloud Detection and Response (CDR) system leverages Microsoft’s virtual network flow logs for agentless deployment, slashing deployment times by 95%.

The need for AI-driven cloud security has never been more critical. 51% of US organizations use cloud computing today[1], and global spending on public cloud services is expected to reach $805 billion in 2024[2]. Moreover, Darktrace’s State of AI Cybersecurity report found that 61% of cybersecurity professionals surveyed believe cloud security will be the area most impacted by defensive AI over the next three years. Yet, security professionals highlight lack of skills and cost as barriers to building[3]. Darktrace / CLOUD helps organizations tackle these challenges head on.

Enabling teams through real-time understanding, detection and response in the cloud
Also available for AWS deployments, Darktrace / CLOUD is built from the ground up for cloud defense. It leverages Darktrace’s unique Self-Learning AI to monitor cloud assets, containers and users, and correlate that activity with identity and network data from across an organization’s digital ecosystem. This contextualized understanding enables Darktrace / CLOUD to provide proactive detection, investigation and response to malicious activity across cloud environments, within seconds.

Darktrace’s Self-Learning AI also enables Darktrace / CLOUD to deliver automated Cloud Security Posture Management (CSPM). It continuously assesses cloud configurations against industry standards, and allows security teams to identify and prioritize misconfigurations, vulnerabilities, and policy violations in real-time. These capabilities give security teams a complete, live understanding of their cloud environments and help them focus their limited time and resources where they are needed most.

“At Center Parcs, we’ve brought WiFi to the forest. Our network enables everything down to ordering food or paying for an activity with a QR code and smartphone. Cloud is central to that,” comments Haider Kubba, Group Information Security Officer at Center Parcs, the UK’s leading short break vacation destination, running six vacation villages in the UK and Republic of Ireland.

“Cloud audit logging and audit review, and the flexibility of cloud in general, is amazing for business – but it’s also a challenge for security, and it’s on the security team to say ‘Yes, we can absolutely make this happen securely’. With Darktrace, I know my cloud formation, my cloud infrastructure, the environment in which a lot of guests will be interacting with, is secure.”

Orla McGrath, Global Partner Solutions Lead, UK, Microsoft adds, “Darktrace / CLOUD is an exciting expansion of Darktrace and Microsoft’s longstanding collaboration. It brings real-time cloud detection and response to Microsoft Azure customers, and through Darktrace’s integration with virtual network flow logs, makes accessing that new level of security fast and simple.”

Simplified deployment with Microsoft Azure
Darktrace / CLOUD is one of the first security systems to integrate with Microsoft Azure’s virtual network flow logs for agentless deployment into the cloud. By leveraging virtual network flow logs, Darktrace / CLOUD automatically captures network data and integrates into Azure cloud environments with minimal manual effort beyond initial configuration. Consequently, deployment times are reduced to as little as 15 minutes, from several weeks, common for agent-based systems, and several days with most agentless systems.

“The availability of Darktrace / CLOUD in Microsoft Azure offers new security opportunities for single and multi-cloud users, including improved identity and access management (IAM), which has been voted by European security leaders as the top cloud security challenge facing their organizations in 2024. It also offers new possibilities for agentless cloud detection and response, taking advantage of Azure’s new virtual network flow logs,” said David Clemente, IDC.

Lowered cloud operating costs through agentless deployment
Darktrace / CLOUD’s agentless approach additionally lowers the cost of operating cloud by eliminating the CPU and memory consumption associated with cloud security agents. Through Darktrace / CLOUD’s agentless approach, the need for dedicated resources per cloud instance is reduced and performance impact minimized. Teams can scale their security across their cloud architecture without the cost of additional agents.

"As organizations rapidly transition to the cloud, cloud detection and response are becoming critical to ensuring safety and security, but personnel and cost are proving notable barriers to their effective deployment,” comments Max Heinemeyer, Chief Product Officer at Darktrace.

“We built Darktrace / CLOUD to help teams protect their cloud with the resources they have. Using our Self-Learning AI, integrated with Microsoft Azure, it deploys quickly and easily then provides teams with constant visibility, autonomous investigation and real-time response without ballooning operating costs. Teams can focus on building their resilience, not firefighting.”
Darktrace / CLOUD is available through Azure Marketplace via private offer, listed under Darktrace ActiveAI Security Platform™.
 
For more information about Darktrace / CLOUD and its support for Azure, please visit darktrace.com/blog/introducing-real-time-multi-cloud-detection-response-powered-by-ai.

About Darktrace

Darktrace is a global leader in AI for cybersecurity that keeps organizations ahead of the changing threat landscape every day. Founded in 2013, Darktrace provides the essential cybersecurity platform protecting organizations from unknown threats using its proprietary AI that learns from the unique patterns of life for each customer in real-time. The Darktrace ActiveAI Security Platform™ delivers a proactive approach to cyber resilience with pre-emptive visibility into security posture, real-time threat detection, and autonomous response – securing the business across cloud, email, identities, operational technology, endpoints, and network. Breakthrough innovations from our R&D teams in Cambridge, UK, and The Hague, Netherlands have resulted in over 200 patent applications filed. Darktrace’s platform and services are supported by over 2,400 employees around the world who protect nearly 10,000 customers across all major industries globally. To learn more, visit http://www.darktrace.com.

[1] https://awsus.publicfirst.co/
[2] IDC Press Release,Worldwide Spending on Public Cloud Services is Forecast to Double Between 2024 and 2028, According to New IDC Spending Guide, July 2024
[3] https://files.scmagazine.com/wp-content/uploads/2023/11/CBIR_Cloud-Security_CISO-Stories.pdf

News coverage
News publication logo

Darktrace / CLOUD™ brings real-time cloud detection and response to Microsoft Azure

October 3, 2024

cv
Darktrace named a Challenger in first Gartner® Magic Quadrant™ for Email Security Platforms ·      Evaluated on Completeness of Vision and Ability to Execute Darktrace, a global leader in AI for cybersecurity,today announces that Darktrace / EMAIL™, has been recognized in thefirst ever Gartner Magic Quadrant™ for Email Security Platforms (ESP) as a Challenger. Chris Kozup, Chief Marketing Officer, Darktrace, said of therecognition: “We are extremely proud to have been recognized in the first MagicQuadrant for ESP.  We believe the factthat wehave seen such wide scale adoption is testament to the unique way in which wedevelop products to keep our customers safe from even the most sophisticated emailcompromises. We believe our placement reaffirms our dedication to deliveringexceptional customer service, and innovations that safeguard against the emailchallenges of today—and tomorrow.” Darktrace customers consistently acknowledge its exceptional customersupport, delivered by an award-winning[1]service team. Darktrace has the highest percentage of 5-star ratings with a 4.8rating on Gartner® Peer Insights™ out of 249 reviews as on[MW1]  19th December. We feel this unwavering commitment to customersatisfaction is evident in strong renewal rates and accelerated growth inDarktrace / EMAIL over the past few years, gaining almost 5,000 customers sinceits launch in 2019. Darktrace / EMAIL, one of the fastest-growing emailsecurity products on the market, is built on Darktrace’s unique Self-LearningAI, a multi-layered AI engine that leverages different types of AI includingNLP and behavioral analysis to detect threats, instead of traditional securitymeasures such as signatures and sandboxing. This approach enables Darktrace todetect and stop threats like business email compromise attacks and noveltechniques, including some 56% of which passed through customers’ other emailsecurity layers. This pioneering approach has enabled Darktrace to introduce industry-leadingcapabilities such as QR code analysis and automated incident investigations, alongsidedifferentiated functionality to help teams add new depth to their emailsecurity, including: Account     take over and Lateral mail account compromise protection.     Contributing yet another layer to the AI behavioural profile for each     user, security teams can now spot early symptoms of account compromise or     malicious insiders before a link or attachment payload is sent, and     exfiltration occur   Microsoft Teams security with advanced messaging analysis: Advancing beyond simple text analysis to     behavioral and natural language content analysis that tracks context     across both email and instant messaging to identify the approximately 38% of     phishing, sophisticated social engineering and novel insider threats other     solutions fail to capture ·      Drastically improveend user reporting with Cyber AI Analyst narratives: Real-time awareness training capabilities reduce falsepositives in phishing investigations by up to 60% by providing context specificanalysis of each received email to each employee as they interact with their mail.·       MailboxSecurity Assistant to increase security team operational efficiency: All forms ofsecondary investigations can now automatically perform advanced behavioralbrowser analysis and stop malicious links within webpages, reducing manualeffort of security analysts to detecting phishing links, and allowing them to remediateup to 70% more malicious phishing links than before.·       AI based,autonomous data loss prevention: to immediately protect organizations from misdirected emails,insider threats, and data loss—both classified and unclassified – using userbehavior and dynamic content analysis to determine sensitivity, removing administrativeoverhead from manual expressions and labeling.Marco Cavallo, IT Manager at Darktrace / EMAIL customer Arpa Industries comments:“During the POV, Darktrace / EMAIL showed how specific attacks weresurgically blocked. We realized that other tools wouldn’t have detected thesethreats.” Darktrace / EMAIL is part of Darktrace’s ActiveAI Security Platform™,offering network, cloud, endpoint, identity and operational technologyprotection from a single shared architecture, all built on Darktrace’s uniqueAI engine – providing a strong, integrated approach to threat prevention,detection and response across an organization’s entire digital footprint. Darktrace’s global presence supports a diverse and varied customer base,and adapts proactively to customer pain points of all kinds. Darktrace’sadaptability across all market segments, from SMBs to large enterprisessupports both first time email security buyers and mature email securitystacks. It is able to meet varied security needs with lower setuprequirements, includes capability for advanced depth in configuration and,particularly for mature organizations, can augment existing security providerswith additional protections.   Download the fullMagic Quadrant for Email Security Platforms here Resources:·      Read more onthe Darktrace Blog·      Read more abouthow business email compromise attacks are evolving on The Inference  Gartner disclaimersGartner, Magic Quadrant for EmailSecurity Platforms, Max Taggett, Nikul Patel, Franz Hinner, Deepak Mishra, 16December 2024 GARTNER is a registered trademarkand service mark of Gartner and Magic Quadrant and Peer Insights are aregistered trademark, of Gartner, Inc. and/or its affiliates in the U.S. andinternationally and are used herein with permission. All rights reserved.
Gartner Peer Insights content consists of the opinions of individual endusers based on their own experiences with the vendors listed on the platform,should not be construed as statements of fact, nor do they represent the viewsof Gartner or its affiliates. Gartner does not endorse any vendor, product orservice depicted in this content nor makes any warranties, expressed orimplied, with respect to this content, about its accuracy or completeness,including any warranties of merchantability or fitness for a particularpurpose. Gartner does not endorse any vendor,product or service depicted in its research publications and does not advisetechnology users to select only those vendors with the highest ratings or otherdesignation. Gartner research publications consist of the opinions of Gartner’sresearch organization and should not be construed as statements of fact.Gartner disclaims all warranties, expressed or implied, with respect to thisresearch, including any warranties of merchantability or fitness for aparticular purpose.  About DarktraceDarktrace is a global leader in AI for cybersecurity that keepsorganizations ahead of the changing threat landscape every day. Founded in2013, Darktrace provides the essential cybersecurity platform protectingorganizations from unknown threats using its proprietary AI that learns fromthe unique patterns of life for each customer in real-time. The DarktraceActiveAI Security Platform™ delivers a proactive approach to cyber resiliencewith pre-emptive visibility into security posture, real-time threat detection,and autonomous response – securing the business across cloud, email,identities, operational technology, endpoints, and network. Breakthroughinnovations from our R&D teams in Cambridge, UK, and The Hague, Netherlandshave resulted in over 200 patent applications filed. Darktrace’s platform andservices are supported by over 2,400 employees around the world who protectnearly 10,000 customers across all major industries globally. To learn more,visit http://www.darktrace.com.   ---- 
[1] Darktrace wins two Globeeawards for excellent customer service [PressRelease] [MW1]shouldthis be 'of'