Story image

New phishing weapon in Menlo's cyber security arsenal

06 Oct 2016

Furthering its efforts to eliminate threats and IT risks facing businesses, cloud-based security firm Menlo Security has expanded the Menlo Security Isolation Platform with a new phishing prevention solution.

The new solution is designed to stop email threats including malicious links, credential theft and weaponized attachments.

According to the company, the vast majority of enterprise cybersecurity attacks begin through targeted email phishing attacks. These attacks spread easily from user end points to infect enterprise systems with malware that is subsequently leveraged to steal credentials, intellectual property and customer data.

These high-level breaches result in costs to the enterprise that range from millions to even billions of dollars in damages and tarnished reputation, the security firm warns.

Poornima DeBolle, co-founder and chief product officer at Menlo Security, says current email security approaches that utilise ‘good vs. bad’ schemes to detect phishing and embedded malware, fail to stop targeted threats that can compromise thousands of users for weeks or even months before being recognised and removed.

“Existing security products simply fail to detect every malicious link and cannot protect every individual,” she says.

Further exacerbating this problem, according to Menlo Security, legacy security solutions generate frequent incident alerts, requiring security professionals to continuously rule out false positives, resulting in severe strain on ‘over-worked and understaffed’ cyber security teams.  

“Email persists as the top malware infection vector for enterprises, resulting in many forms of theft and fraud,” says DeBolle.

“Adding phishing Isolation capabilities to the MSIP creates the only phishing prevention solution that completely eliminates targeted spear-phishing attacks and drive-by exploits by isolating all email links and attachments,” she explains.

“By stopping this top infection vector, Menlo enables CISOs to report definitive progress against malware attacks to their boards of directors, while also freeing up precious cyber security incident-response resources within their teams.”

Available either on-premises, as-a-service via the cloud, or as part of a managed security service, the solution scales to address the needs of both large enterprise and smaller companies looking to eliminate phishing risk from their environments.

DeBolle says the solution was developed in close collaboration with Fortune 500 customers, to specifically address prevention shortfalls in existing secure email gateway products.

“The Menlo solution has been proven in production at scale in these demanding enterprise environments with hundreds of thousands of users,” she says.

What to expect from the Surface Hub 2S
Microsoft has released details about the next iteration of the Surface Hub featuring mobility, reduced weight and a 85in version in the works.
Too many 'critical' vulnerabilities to patch? Tenable opts for a different approach
Tenable is hedging all of its security bets on the power of predictive, as the company announced general available of its Predictive Prioritisation solution within Tenable.io.
Informatica launches new AI-driven innovations
Informatica announced new features and AI-driven innovations across five key segments.
Hands-on review: The ruggedly tough CAT S61 smartphone
The driveway beckoned me, so I dropped the phone several times.  Back in the study, close examination has failed to reveal a single scratch.
Industrial control component vulnerabilities up 30%
Positive Technologies says exploitation of these vulnerabilities could disturb operations by disrupting command transfer between components.
McAfee announces Google Cloud Platform support
McAfee MVISION Cloud now integrates with GCP Cloud SCC to help security professionals gain visibility and control over their cloud resources.
Nutanix introduces new cloud-native solutions for enterprises
Nutanix announced the general availability of its certified Kubernetes solution.
Talend integrates Pipeline Designer with IPaaS offering
Talend has added a web-based graphical designer to its integration platform-as-a-service, Talend Cloud.