The ITAM Roundup: 8/11/24
š° News
Trend Micro reportedly exploring sale after being approached by potential buyers
Trend Micro is reportedly exploring a potential sale after being approached by several buyers, including private equity firms, though a deal is not guaranteed. The company, a leader in cybersecurity solutions, has been working with investment banks to gauge interest while continuing its focus on business transformation and AI-driven security services. Trend Micro's market cap stands at approximately $6.5 billion, and the company's acquisition could follow the trend of recent cybersecurity deals, potentially attracting interest from firms like Thoma Bravo.
Cloud growth puts hyperscalers on track to take up 60% of datacenter capacity by 2029
By 2029, hyperscalers like Amazon, Microsoft, and Meta are projected to occupy over 60% of global datacenter capacity, driven by the growing demand for cloud services and digital platforms. This marks a significant shift from just seven years ago when on-premises datacenters dominated the landscape, now reduced to 37% of the total. The rise of generative AI is expected to further accelerate this trend, as hyperscalers are better equipped to handle AI operations compared to traditional enterprise datacenters.
Raptor Lake microcode limits Intel chips to a mere 1.55 volts to prevent CPU destruction
Intel has revealed that a microcode update, 0x129, limits the voltage of its Raptor Lake 13th and 14th Gen Core processors to 1.55 volts to prevent damage caused by elevated operating voltages, which were leading to CPU failures. The update, now being incorporated into BIOS patches by motherboard vendors, aims to balance performance and safety, though minor performance hits have been noted in specific applications. While overclocking remains possible, Intel advises caution, especially for users of affected processors, as the new voltage limit is intended to protect the CPUs from further harm.
Whatās new at Flexera | August 2024
Flexera's August 2024 update introduces new features across IT Asset Management, SaaS Management, and FinOps capabilities. Notable updates include new overview dashboards and a SKU browser for Snow Atlas and Flexera One ITAM, enhanced cloud license management for Azure, and improved Salesforce insights for SaaS management. Additionally, new security enhancements, including updates to the Software Vulnerability Manager, and expanded support for Azure cost and usage exports, aim to optimize software licensing, reduce costs, and improve overall IT asset visibility and compliance.
CrowdStrike to Give Customers Better Control Over Falcon Sensor Updates
In response to the global outage, CrowdStrike is implementing enhanced testing procedures, new deployment controls, and third-party code reviews to prevent similar incidents, while also giving customers more control over software updates. Additionally, Microsoft is considering changes to Windows to reduce security vendors' dependence on kernel drivers, emphasizing the need for collaboration to strengthen the Windows ecosystem.
https://petri.com/crowdstrike-control-falcon-sensor-updates/
š Tips
Crowdstrike Fallout, OneDrive Changes, and Planner Gets Copilot: The Practical 365 Podcast S4 E24
In this episode of the Practical 365 Podcast, the hosts discuss the fallout from the Crowdstrike Falcon incident, exploring what went wrong and whether alternatives like Defender for Endpoint are viable options. They also cover changes to OneDrive for Business licensing, noting that unlicensed users will be charged starting January 2025, likening it to a "tax on staff turnover." Finally, they discuss the introduction of Copilot to Microsoft Planner.
Open source software: Ways for CISOs to quell the fear
Open source software offers many benefits, but it also presents security risks that have been linked to major vulnerabilities in recent years. While traditional practices like code scanning are important, CISOs need to adopt additional strategies, such as using software supply chain security tools and setting clear criteria for open source usage, to effectively manage these risks. Despite the security challenges, the widespread adoption of open source is unlikely to decline, making it crucial for organizations to proactively address these concerns to maximize its advantages.
The best Microsoft System Center Service Manager Alternative
The article compares Microsoft System Center Service Manager (SCSM) with InvGate Service Desk as an alternative IT Service Management (ITSM) solution. It highlights SCSM's strengths, such as ease of implementation and integration capabilities, but notes its complexity and higher cost as drawbacks. InvGate Service Desk is presented as a user-friendly, scalable, and cost-effective alternative, offering advanced features like AI-powered automation, a modern UI, and superior customer support, making it a strong contender for organizations seeking to enhance their ITSM processes.
šBugs & Exploits
Cisco warns of critical RCE zero-days in end of life IP phones
Cisco has issued a warning about multiple critical remote code execution (RCE) zero-day vulnerabilities affecting its end-of-life Small Business SPA 300 and SPA 500 series IP phones. These vulnerabilities, which allow attackers to execute arbitrary commands with root privileges, will not be patched, and users are advised to upgrade to newer, supported models like the Cisco IP Phone 8841 or 6800 series. Cisco also offers a Technology Migration Program (TMP) for customers to trade in their old devices for credit toward new equipment.