One of the hottest topics in cybersecurity today is Zero Trust. Just in the past 20 months, DoD[i] and NIST[ii] published Zero Trust Architectures, CISA published a Zero Trust Maturity Model[iii], an Executive Order[iv] and OMB Memorandum[v] levying requirements on government organizations to implement Zero Trust were issued, and GSA released a Zero Trust Architecture Buyer’s Guide[vi]. Not to mention all the vendors advertising Zero Trust solutions, Gartner and Forrester publications, and the other 3,660,000,000 results from a Google search on the term “Zero Trust.” Likewise, a search on the term "How to Implement Zero Trust" yielded 80,900,000 results. It’s safe to say there is a lot of interest in Zero Trust.

But what is Zero Trust? According to Gartner[vii], Zero Trust network security “starts with a default deny posture of [trusting nothing]. Access is granted based on the identity of the humans and their devices — plus other attributes and context, such as time/date, geolocation, device posture, etc. — and adaptively offers the appropriate trust required at the time.” This is a significant paradigm shift from traditional, "trust, then verify” perimeter-based network security that seeks to keep malicious actors out, while assuming that anyone who is already inside the network can be trusted. The Zero Trust security model eliminates the idea of a trusted network, assuming instead that threats exist both inside and outside a network, so no one human or thing can be trusted implicitly. Under this model’s principle of "verify, then trust," permissions are only granted to user accounts, devices, applications, or services once properly validated, and moreover trust must be continually revalidated to maintain access.

With all the buzz, you’d think Zero Trust is a brand-new silver bullet for all our cybersecurity concerns. But if you’ve worked in cybersecurity for a while, you’ll find much of Zero Trust to be hauntingly familiar. Let’s explore that further:

Since it seems that each publication addressing Zero Trust has a different take on the concept, for simplicity let’s just look at one of the Zero Trust frameworks, the DHS CISA Zero Trust Maturity Model.

 organizes capabilities required to achieve Zero Trust into five categories (referred to as pillars): Identity, Device, Network/Environment, Application Workload, and Data. The capabilities listed in each pillar are then divided into three maturity levels: Traditional, Advanced, and Optimal. It’s here that a sense of déjà vu begins to set in when looking at the security functions called out for each block of the Maturity Model.

As we begin to examine the CISA model, we see Multifactor Authentication and Federated Identity required under the Identity pillar. Nothing new here conceptually. The original patent[viii] for the SecurID token was filed in 1993, Chip and Pin for credit cards was introduced in France in 1984[ix], and Paypal began offering a token for multifactor authentication around 2006[x]. So multifactor authentication has been available to enhance identity security for decades. Standards for Federated Identity Management (Single Sign-On) such as OpenID have been around since 2005[xi], and many commercial solution providers have broad user bases today. Again, nothing new.

Under the Device pillar, Device Compliance Enforcement and Data access management based on initial device posture are specifically called out. Requirements for automated asset management, vulnerability scanning, and patching are also levied in the detailed descriptions of this pillar. Again, not really anything new. In the SANS Consensus Audit Guidelines[xii] (the precursor to the SANS Top 20 Security Controls) dated 02 Mar 2009, the first control requires an inventory of all devices on the network and the third requires secure configurations for all network devices. NIST 800-53[xiii] published in February 2005 addressed requirements for configuration management. For over a decade, we've had solutions associated with Network Access Control and VPNs that install a client on the user’s computer and assess device security status and compliance before admitting the device onto the network. More recent methods add other sources of data, such as endpoint security scanning, and network vulnerability scans to facilitate that determination. This is the basis of the DoD comply-to-connect strategy and associated implementation framework[xiv] developed over the past decade. Everything in the Traditional and Advanced blocks of this pillar are well-known security requirements with existing solutions.

In the Network/Environment pillar, we see macro-segmentation, traffic encryption, internal micro-segmentations using micro-perimeter controls, as well as basic network traffic analytics. Traditional firewall and VLAN technology to enable macro-segmentation have been available since the late 90s[xv]. Information Flow Enforcement controls to enforce segmentation was first added to NIST 800-53 in Rev. 1 published in 2006. Next Generation firewalls coupled with Active Directory (or other user-to-IP tie-in) have been capable of enabling network micro-segmentation for over a decade.

The concept of Micro-perimeters is a more recent development moving the firewall to the application. For comparison, network micro-segmentation might sit at the front of a data center and can control the IP addresses, and for web pages, the URL accessible by a user. The micro-perimeter sits with the application and can control access with finer granularity beyond just the URL, such as the type of queries allowed. While the term micro-perimeter is new, the ability to provide this level of data access control at the application level is not. The Multiplexed Information and Computing Services (Multics)xvi operating system designed in the late 1960s, and evolved through the 1980s, provided an application-based data protection capability similar to a micro-perimeter. The operating system could prevent direct user access to data thus enabling the application as the enforcement control point for data access. The concepts are the same, differing only in the method of access to the application.

Other Network/Environment pillar capabilities have also been around. We have had the capability to do basic traffic analysis for 20+ years. And strong encryption for data-at-rest and data-in-motion has been recommended and commercially available for decades.

The Application Workload pillar for the Advanced Maturity level requires centralized authentication and authorization for access to applications and integration of threat protections into application workflows. Standards and solutions to meet these requirements have been available for almost forty years, dating back to when MIT developed Kerberos[xvi] in the 1980s. Requirements for application security date back to the early publications of both the Sans Top 20 Security Controls and NIST 800-53. The migration to cloud services has accelerated the use of centralized authentication services.

The final pillar, Data, requires application of least privilege data access, and encryption of data at rest. The concept of Least Privilege dates back to 1983 when the National Computer Security Center (NCSC) Trusted Computer System Evaluation Criteria (TCSEC, aka. Orange Book)[xvii] was initially released. The original 2009 SANS critical controls included “Controlled Access Based on Need to Know,” and the 2005 release of NIST 800-53 v1 included the Least Privilege security control. It is not until the third revision of 800-53 in 2010 that we see a control specifically addressing Protection of Information at Rest recommending encryption, but that was added twelve years ago. Again, all well-known cybersecurity principles.

The question is then “Is Zero Trust just old wine in a new bottle?” or does it bring something new to the fight? Zero Trust is at least shining a new spotlight on required security controls that haven’t been universally applied despite having been known and recommended for many years. If so many of the tenets of Zero Trust have been recommended by security practitioners for decades, why aren’t they already in widespread use? The answer lies in the fact that security is the enemy of ease of use. Network users don’t want to be burdened with carrying tokens for multifactor authentication, strong passwords that are hard to remember, having to ask for access to data that they didn’t need to do their job until just now, networks slowed by the need to encrypt and decrypt data, and all the other “burdens” of strong cybersecurity. Security is also hard, often requiring restructuring of network architecture and additional capital investment. Security is often seen as an unnecessary cost by senior executives, at least until after they experience a ransomware attack or major security breech. Mandatory requirements for Zero Trust may be just the incentive needed to get network owners to finally implement all those well-known security controls we’ve recommended for decades.

Zero Trust also brings with it several newer concepts. The core tenet of Zero Trust is to assume that the network has already been compromised, and malicious actors are inside the network perimeter. This idea encourages stronger identity management and access controls and shifts the defensive focus from boundary defense to role-based and attribute-based access, network segmentation, data segmentation, and treats each application as a boundary. This leads to a key new concept: The user logs into applications, not the network, and data is accessed through the application based on the user’s need to know, and right to know. The paradigm shifts from blanket trust to transactional trust.

The truly innovative elements of Zero Trust are found in the requirements for the Optimal level of the CISA Zero Trust Maturity Model. Continuous validation isn't that hard to achieve. Most centralized security authentication/authorization systems issue a token that has a lifetime forcing continuous validation. When the token expires, re-authentication/authorization is required. In Contrast, real time analysis, continuous monitoring, machine learning, encryption of all data at rest and in motion, and other requirements are beyond the scope of most current enterprises. Virtualization, cloud services, artificial intelligence, machine learning and automation capabilities are required to achieve these goals. Technology is truly still evolving as new approaches and techniques improve how this can be done by machines, because in most places there aren't enough human resources to manage and analyze the data flow, much less do it in real-time. For most network owners, this will require significant investment and rebuild of their networks to add these capabilities. These investments and changes are unlikely to happen overnight. Network owners can still implement those legacy elements of Zero Trust that are well understood and for which many commercial solutions are available in the near term.

The bottom line is that Zero Trust can serve as a forcing function for the implementation of good security practices that have been recommended by cybersecurity practitioners for many years, while encouraging adoption of even stronger controls enabled by newer technologies. Adoption of Zero Trust principles will help minimize the blast radius of data breaches to single user sessions rather than the entire enterprise. And the increased automation and centralized control required for an optimal implementation of Zero Trust will reduce the burden on administrators implementing required security controls, making them more dynamic and transparent to users. Finally, remember Zero Trust is a journey not a destination, with each step taken providing more protection to organizational data, and well worth the trip.


[i] Joint Defense Information Systems Agency (DISA) and National Security Agency (NSA), Department of Defense (DOD) Zero Trust Reference Architecture (2021).

[ii] Rose, S., Borchett, O., Mitchell, S., & Connelly, S., NIST Special Publication 800-207 Zero Trust Architecture (2020).

[iii] CISA Cybersecurity Division, Zero Trust Maturity Model (2021).

[iv] Exec. Order No. 14028, 86 Fed. Reg. 93 (May 12, 2021).

[v] Office of Management and Budget, Memorandum M-22-09 Moving the U.S. Government Toward Zero Trust Cybersecurity Principles (2022).

[vi] GSA, Zero Trust Architecture Buyer's Guide (2021).

[vii] McQuaid, A., MacDonald, N., Watts, J., & Handa, S. (2022). (tech.). Market Guide for Zero Trust Network Access. Gartner

[viii] Weiss, K. P. (1996, January 16). Enhanced security for a secure token code.

[ix] Roos, D. (2014, May 16). How chip and PIN credit cards work. HowStuffWorks. Retrieved May 18, 2022, from https://money.howstuffworks.com/personal-finance/debt-management/chip-and-pin-credit-cards.htm

[x] Gibson, S. (2007, August 2). Security now! Transcript of Episode #103. Retrieved May 18, 2022, from https://www.grc.com/sn/sn-103.htm

[xi] Fitzpatrick, B. (2005, May 16). Distributed identity: Yadis. LiveJournal. Retrieved May 18, 2022, from http://community.livejournal.com/lj_dev/683939.html

[xii] Gilligan, J. (2009, February 27). Consensus Audit Guidelines - Draft 1.0. SANS.org. Retrieved May 18, 2022, from http://www.sans.org/cag/guidelines.php

[xiii] NIST, Recommended security controls for Federal Information Systems and organizations (2005). Gaithersburg, MD; U.S. Dept. of Commerce, National Institute of Standards and Technology.

[xiv] Defense Information Systems Agency. Fact Sheets. (n.d.). Retrieved May 23, 2022, from https://www.disa.mil/about/fact-sheets

[xv] "IEEE Standards for Local and Metropolitan Area Networks: Virtual Bridged Local Area Networks," in IEEE Std 802.1Q-1998 , vol., no., pp.1-214, 8 March 1999, doi: 10.1109/IEEESTD.1999.89204.

[xvi] S. P. Miller, B. C. Neuman, J. I. Schiller, and J. H. Saltzer, Section E.2.1. Kerberos Authentication and Authorization System, M.I.T. Project Athena, Cambridge, Massachusetts (December 21, 1987).

[xvii] National Computer Security Center, DoD 5200.28-STD Department of Defense Trusted Computer System Evaluation Criteria (1985).

Zero Trust: Same Old Controls, or Something New and Shiny?

…But my dad, my sister, and my brother-in-law did, and I genuinely respect all those who have. With Applied Network Solutions (ANS), I am excited to be part of a company that shares my passion to honor the commitment of those in the armed services who are transitioning to private sector life via the DoD SkillBridge program.

A program in which military members on the cusp of separation can apply to be interns at commercial companies while still being paid their military pay and benefits for the final few months of their enlistment.

The program creates positive opportunities for both parties involved.

The transitioning military member gets to experience real-life working in the business world. For some, this can be a refreshing change; for others a bit more difficult to adapt to. In the case of the latter, even more reason to take a few months to gradually adapt to life outside of the structure and rigor of military life. In addition, military members may gain assistance and mentoring with regards to interviewing and job searching. In the case of my company, they are afforded training, study time, and vouchers to test for information technology and/or cybersecurity industry certifications – the backbone of DoD contractor hiring and qualifications. In short, ANS desires to do everything we can to set our interns up for success in their new work-life beyond the military.

Participating companies gain the potential to hire vetted, disciplined, quality candidates while potentially leapfrogging the wickets of general recruiting processes and procedures. So much more than just “free labor” that the term “intern” may conjure in the minds of some, companies gain a chance to build engagement, loyalty, and goodwill from a qualified pool of candidates appreciative of the opportunities being offered. ANS simply believes it’s the right thing to do for those who have given of themselves in service to our country.

Anthony, one of our current SkillBridge interns put it this way: “It’s like the DoD partnering with industry to give back to the military members a chance to gain a skillset for better employment opportunities. There’s not a lot of call for a mortarman or artillery gunner in the commercial sector!” Anthony started his internship days before our company-wide annual kick-off party. It was there that we learned that Anthony already knew many of our employees. They were contractors working with him previously! We are selective in who we employ and bring on as interns, as we look for people with aptitude and a love for the mission they support. Anthony is no exception.

Former SkillBridge beneficiary at our company, David, recently related to me, “I genuinely feel lucky to have found ANS!” We assisted David in his relocation and transition, allowing him ample time for out-processing and attending to his few remaining military responsibilities. We provided training which he leveraged to gain additional desired IT certifications. We happily cheered him on as he successfully applied to and negotiated a great paying job 

 – but that’s totally okay as it was never about us in the first place! All credit goes to him!

With internship locations in both San Antonio, TX and Columbia, MD we have been fortunate enough to employ many of our interns. One intern immediately joined ANS at the end of his internship and was accepted onto a cyber protection team in TX. Another learned the ropes of becoming a Software Developer during his internship and proved essential in creating our new website - a task that not many others were up for completing!

Don’t Just Say “Thank You” … Show Your Gratitude!

Working and living in San Antonio, Texas, I meet and know a great many current and former military members. I often say to them, “Thank you for your service!” and sincerely mean it, but simply 

 “Thank You” to show my appreciation is easy, and ultimately profits them nothing. It is 

something to show that appreciation that takes deliberate effort.

Comprised of 52% Veterans, ANS takes great pride in hiring and taking care of our prior military servicemen and women. As a business community, may we always be about 

Want to become a SkillBridge Industry Partner?

More information on SkillBridge can be found at 

Reflections On The SkillBridge Experience

My name is Emily. I am a 31-year-old cybersecurity enthusiast, and I have been in the Information Technology and Cybersecurity field for eight years. I specialize in network threat detection and mitigation and enjoy forensic analysis and studying adversary behavioral patterns. Some of my hobbies include hiking, kayaking, reading Fantasy Fiction, and crafting. I am married to my best friend and have a 4-year-old German Shepherd, Cipher.

Some of the brightest minds in Information Technology were and are women. From the mid to late 1800s to the current day, women have been pioneers in the world of computing. Great minds like Ada Lovelace, Grace Hopper, Katherine Johnson, Margaret Hamilton, Adele Goldberg, Hedy Lamar, and many more have designed and developed computations still used today. Without women, the computing world we live in today may look very different. Women worldwide are breaking down barriers and announcing that women can do anything with the correct equation of motivation and passion.

The Cybersecurity workforce is ever-changing, and amongst these changes, the most popular topic of change is the rise of women in the industry. More women are applying and being hired for cybersecurity roles every day. Women are also earning higher-level positions faster than their male counterparts. According to The International Information System Security Certification Consortium (ISC)² survey conducted in 2018, 24% of the cyber workforce is women 

. The study includes women in positions where at least 25% of their daily duties are Cybersecurity responsibilities. The study comprises traditionally prominent government roles and small businesses nationwide and worldwide 

. So why are women still only making up a quarter of the workforce? There are many contributing factors to the slow rise of women in cyber. Experts say, “access to opportunities, education, and the lack of value on diversity could be some contributing factors 

.” Although these barriers to entry still exist, many companies are working hard to provide more opportunities for women and encourage women to join the workforce.

To continue to increase our female workforce in cyber, we should be inspiring young women and girls to act on their curiosities about Science, Technology, Engineering, and Math (STEM). Marketing to them the benefits of participating in STEM programs can give them the freedom to explore their passions when they are young. They may feel confident enough to enter the workforce knowing they have the skills and abilities to be valued team members.STEM field jobs are typically challenging and rigorous. Working in STEM roles requires copious amounts of training and education to be competent, so expressing passions and working towards goals early in life can contribute to their success. It is also essential to teach all young people to follow their passions regardless of their race, color, national origin, religion, sex (including pregnancy, sexual orientation, gender identity, or transgender status). Inclusivity is the way of the future.

A common theme in most communities right now is inclusivity. What does it look like to be an inclusive workforce? Where do we start? These questions are all valid and not always easy to answer. People are different and have different needs. Our paths are all different, and how we arrive at a conclusion may never be the same. So, how do we inspire people from all walks of life to work together with synergy and maintain productivity? We start by being people-focused. We consider that exultant employees are more productive and benefit the bottom line. We support employees’ passions because that leads to inspiration and innovation. We believe in their goals and develop pathways to help them reach them. We encourage diversity because it provides unique perspectives, and we do all these things for everyone, including the women aspiring to be great leaders in the industry.

Once we have provided a thriving working environment for all, we all must take a moment to do a personal moral and ethical inventory every day and in everything that we do.“We should remain aware of unconscious bias, communicate the significance of managing bias, endorse pay equity, acknowledge all cultures, make company resources available to everyone, and never stop tracking progress over time 

.” Awareness and acknowledgment of personal bias and developing ways to thwart the tendency to discriminate in the workplace can help make all employees feel safe and welcome. Being an advocate for women in the workplace can help women feel safe and welcome.

The relationship between a mentor and mentee can be very beneficial. Mentorship programs have proven to be helpful for employees eager to increase their skill level, responsibilities, and career advancement. Employees who have mentorship in the workplace have higher job satisfaction, retention, productivity, and career growth 

. Mentors have all the previously stated benefits and have the pride of developing the next generation of leaders and innovators. The lack of mentorship in the workplace can be detrimental to the organization’s overall success. A mentorship program decreases employee conversation, experience sharing, and direction.

I am a woman. I have been in a male-dominated field since I was 19 years old. I have also spent my entire career in Information Technology and Cybersecurity. After graduating high school in 2010, I joined the United States Army as an Information Technology Specialist. In Basic Training and Advanced Individual Training, I was one of the very few women pursuing a career in Communications and IT. The environment in the military was still very much a “boy’s club.” I had to learn quickly how to identify allies and advocate for myself. I believe the less-than-welcoming environment made me resilient and creative. Even though the military setting wasn’t always accepting women, it wasn’t bad all the time. Over the six years I was in the service; I had one great mentor. One of my mentors was my Non-Commissioned Officer in Charge or NCOIC for the IT shop. She was a fierce Sergeant. She was loyal to her team and engaged with us on what we wanted for our futures. She helped me not only with career advancement but also with personal and life tribulations. She was my first example of how powerful career women can be assets to the workforce. She also taught me to treat others with dignity and respect regardless of rank or position.

After leaving the Army in 2016, I went back to school for my degree in Cybersecurity. Once again, as I walked through the doors of the enormous lecture hall in the business building, I saw rows and rows of young men with few young women. I honestly wasn’t expecting anything else. I knew I wanted to be friends with the women who sat before me. I knew I wanted to share my experiences and allow them to share theirs with me as well. I knew we would be strongest together. So, that is precisely what I did. I made friends. Some of those women graduated and became financial advisors, statical analysts, and, yes, cybersecurity professionals. As for the teaching population, I had exactly four female professors in 4 ½ years of schooling. Every single one of them taught an Information Systems or Cybersecurity course. Each of them brought their perspective into the classroom and made me feel like I could do anything if I wanted to. College was a pivotal moment in my career when I realized the Cybersecurity industry needed more women, and I would do everything I could to make that happen…starting with me.

Following my graduation, I joined Applied Network Solutions. I started with the corporate team developing security postures and capabilities procurement, which I had never done before. I was in a group of five, and I was the only woman. I enjoyed the work I was doing, and the men on my team were very bright and welcoming. They pushed me out of my comfort zone and provided feedback on my work. I learned so much from them in the short time I worked in the position. A few weeks after joining the ANS team, I moved to my current position on contract. I currently work with nearly all men. There are four or five other women, but I am the only full-time female operator. I now have two mentors that have been incredible in helping me navigate my new role and helping me advance to the next step in my career. They have guided me through onboarding, shared their expertise, and saved me from repeating their blunders from the past. They have become wonderful friends, and I cherish their guidance and perspective. They also happen to both be male. I share this because women do not always need a woman mentor. The mentor/mentee relationship should never be restricted to gender.

The future looks bright for women in cyber. We look back to the past and the women who paved the way before us. We look forward to the future and encourage the next generation of women to act on their passions for cyber. We foster a working environment fit for everyone. We support diversity, innovation, inspiration, and inclusion. We work together as a team to build brighter futures and support the changing workforce for “doing what we have always done will get us what we have always gotten [5].”  Change is coming, and the women of today and tomorrow will be the best in the business.

https://www.isc2.org/-/media/ISC2/Research/ISC2-Women-in-Cybersecurity-Report.ashx?la=en&hash=4C3B33AABFBEAFDDA211856CB274EBDDF9DBEB38

https://www.lifewire.com/why-we-need-more-women-working-in-cybersecurity-5116378

https://www.ceridian.com/blog/support-diversity-and-inclusion-in-the-workplace

https://www.mentorscout.com/benefits-of-workplace-mentoring.cfm

https://www.goodreads.com/quotes/904186-if-you-always-do-what-you-ve-always-done-you-ll-always

Right Where We Belong

Welcome to Applied Network Solutions, Inc. (ANS). We are the same ANS, with an improved, updated look. We have spent many months refreshing our site to reflect our focus on people and technology. We are a company that doesn't try to do everything. Instead, we are hyper-focused on networking and cybersecurity. 

22 years ago, ANS was formed out of a passion for technology and the desire to deliver solutions with impact. We have always been equally focused on our employees and securing the network to protect our national security. Often, defense contractors rent contracts and rent people. We hire for the person, not the position and we are invested in continuous development and opportunities for our employees. Our engineers are encouraged to think beyond a single contract or customer and focus on development and opportunities; call it “Passion over Profit.”

As we reflect on the last two decades and fast forward to years to come, I am humbled to say ANS has not waivered on the solutions we deliver and the commitment to our employees. I am honored to work alongside some of the most talented and passionate people in the industry and that they have chosen ANS to be part of their career. We continuously strive to be better and have excelled in doing so entirely due to the dedication and passion of our employees. I cannot thank them enough!

Please check back periodically as we will be posting updates and refreshed content.

New Look, Same ANS 

<span style="caret-color: rgb(85, 85, 85); clear: right; color: #555555; float: right; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin-bottom: 1em; margin-left: 1em; padding: 0px 10px 5px 0px;"><img height="150px" src="https://2.bp.blogspot.com/-ZAuluyoiucA/WMooQv6W2-I/AAAAAAACtiI/i1IMez_groo5Ew_Pv9coooxsKLp71kgVACLcB/s320/att-mwc17-globe.png" style="background-color: white; border: 1px solid rgb(238, 238, 238); padding: 6px;" width="200px" /><a href="https://www.wsj.com/articles/at-t-verizon-raise-prices-and-test-consumer-budgets-11656156781?mod=hp_lead_pos3" target="_blank">The Wall Street Journal</a> comments on recent price hikes from AT&amp;T and Verizon, mostly concerning mid-range, monthly plans. &nbsp;Both carriers increased the price of certain older wireless plans by up to $6 for single lines and $12 for family plans. &nbsp;Meanwhile, T-Mobile is constrained in its ability to raise prices by the regulatory agreement related to its acquisition of Sprint.Company officials expressed confidence that consumers will accept the price increases and/or move to unlimited data plans, however they declined to comment on how much additional revenenue will be generated.<a href="https://www.wsj.com/articles/at-t-verizon-raise-prices-and-test-consumer-budgets-11656156781?mod=hp_lead_pos3">https://www.wsj.com/articles/at-t-verizon-raise-prices-and-test-consumer-budgets-11656156781?mod=hp_lead_pos3</a>

The Wall Street Journal comments on recent price hikes from AT&T and Verizon, mostly concerning mid-range, monthly plans.  Both carriers increased the price of certain older wireless plans by up to $6 for single lines and $12 for family plans.  Meanwhile, T-Mobile is constrained in its ability to raise prices by the regulatory agreement related to its acquisition of Sprint.
Company officials expressed confidence that consumers will accept the price increases and/or move to unlimited data plans, however they declined to comment on how much additional revenenue will be generated.
https://www.wsj.com/articles/at-t-verizon-raise-prices-and-test-consumer-budgets-11656156781?mod=hp_lead_pos3

WSJ: AT&T, Verizon Raise Prices and Test Consumer Budgets

Most of those surveyed are concerned about AI-based attacks and deepfakes, but suggest that their organization is ready.

Threat Intelligence Services Are Universally Valued by IT Staff

Security is wasting time and resources patching low or no risk bugs. In this post, we examine why security practitioners need to rethink vulnerability management.

Why We're Getting Vulnerability Management Wrong

CISA tells organizations running VMware servers without Log4Shell mitigations to assume compromise.

APT Groups Swarming on VMware Servers with Log4Shell

A new study says 97% of open source vulnerabilities linked to software supply chain risks are not attackable — but is "attackability" the best method for prioritizing bugs?

Only 3% of Open Source Software Bugs Are Actually Attackable, Researchers Say

Continuous monitoring is key to keeping up with software-as-a-service changes, but that's not all you'll need to get better visibility into your SaaS security.

7 Steps to Stronger SaaS Security

We have a tech innovation problem, not a staff retention (or recruitment) problem.

The Cybersecurity Talent Shortage Is a Myth

Edgecore Networks introduced a full-stack OpenWiFi hospitality solution for ISP and MSP customers based on TIP OpenWiFi software.<div class="separator" style="clear: both; text-align: center;"><a href="https://wifi.edge-core.com/openwifi" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;" target="_blank"><img border="0" data-original-height="1228" data-original-width="2122" height="231" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitQg89qgTChIV7AXudhddVDHbkGMDOSrOeBZuvYgPO0YXGd1aD3vWWzPJ04O7SuQP6d8FGa9R0IENXzPIwyV0k_H-w9TjUIwRVzbj_mwhcsLP_glRgp2YtncccHKD6HZn5cWeeO7DSXYBHqeCs2-3vqFZ1Z7uUiU22D9Sw0spTUBt6WSvCuYPN6swj/w400-h231/Screen%20Shot%202022-06-23%20at%2021.58.40.png" width="400" /></a></div>Edgecore’s ecCLOUD and Wi-Fi AP both use the latest version of TIP OpenWiFi 2.0, released for commercial use. TIP OpenWiFi 2.0 utilizes uCentral, a lightweight agile communications framework that can dramatically cut cloud hosting costs. In addition, TIP OpenWiFi’s open architecture enables Edgecore to work with application service providers to develop services including Smart Indoor Location Solution, network quality of experience (QoE), network security and other services. The Smart Indoor Location Solution is now available for trial use, and the world's first hospitality- and MDU-dedicated TIP OpenWiFi AP, EAP104, will be available for test appointments from now on, being officially launched in Q3 2022.Edgecore’s ecCLOUD enterprise controller that can manage hundreds of thousands of Wi-Fi Access points (APs) from both Edgecore as well as any other hardware vendor with compatible OpenWiFi software. In addition, Edgecore’s EAP104, the world's first open hospitality and multi-dwelling&nbsp;Edgecore said it has actively led the way adopting the Telecom Infra Project’s (TIP) OpenWiFi to unlock limitations and create an OpenWiFi compatible infrastructure with commercial expansion value, rewriting the nature of hospitality Wi-Fi networks. ISPs and MSPs are now no longer bound by a single vendor but can flexibly choose mixing and matching from different cloud controllers, Wi-Fi APs, and switches.“Edgecore’s full-stack OpenWiFi hospitality solution unbinds ISPs and MSPs from closed network infrastructures and introduces unlimited innovation possibilities and business potential. As one of the earliest and active TIP OpenWiFi partners, Edgecore Networks will keep working with TIP to grow the OpenWiFi ecosystem together globally.” said Tengtai Hsu, Vice President of Edgecore Networks.<a href="https://wifi.edge-core.com/openwifi" target="_blank">http://www.wifi.edge-core.com&nbsp;</a>

Edgecore Networks introduced a full-stack OpenWiFi hospitality solution for ISP and MSP customers based on TIP OpenWiFi software.


Edgecore’s ecCLOUD and Wi-Fi AP both use the latest version of TIP OpenWiFi 2.0, released for commercial use. TIP OpenWiFi 2.0 utilizes uCentral, a lightweight agile communications framework that can dramatically cut cloud hosting costs. In addition, TIP OpenWiFi’s open architecture enables Edgecore to work with application service providers to develop services including Smart Indoor Location Solution, network quality of experience (QoE), network security and other services. The Smart Indoor Location Solution is now available for trial use, and the world's first hospitality- and MDU-dedicated TIP OpenWiFi AP, EAP104, will be available for test appointments from now on, being officially launched in Q3 2022.

Edgecore’s ecCLOUD enterprise controller that can manage hundreds of thousands of Wi-Fi Access points (APs) from both Edgecore as well as any other hardware vendor with compatible OpenWiFi software. In addition, Edgecore’s EAP104, the world's first open hospitality and multi-dwelling 
Edgecore said it has actively led the way adopting the Telecom Infra Project’s (TIP) OpenWiFi to unlock limitations and create an OpenWiFi compatible infrastructure with commercial expansion value, rewriting the nature of hospitality Wi-Fi networks. ISPs and MSPs are now no longer bound by a single vendor but can flexibly choose mixing and matching from different cloud controllers, Wi-Fi APs, and switches.
“Edgecore’s full-stack OpenWiFi hospitality solution unbinds ISPs and MSPs from closed network infrastructures and introduces unlimited innovation possibilities and business potential. As one of the earliest and active TIP OpenWiFi partners, Edgecore Networks will keep working with TIP to grow the OpenWiFi ecosystem together globally.” said Tengtai Hsu, Vice President of Edgecore Networks.
http://www.wifi.edge-core.com

Edgecore launches hospitality solution based on TIP OpenWiFi

Telstra Wholesale is leveraging ADVA FSP 150 technology to provide its Rapid Mobile Activation service. The new capabilities enable Telstra Wholesale’s communication service provider (CSP) customers to quickly provision Ethernet connectivity and deliver greater levels of resilience.&nbsp;<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-ol2UX-IuDd6qWY6ou_rN_eO72Vg-d7zcqUKf_-ilUR_ZgphWAGpI5yLPJ3A_7S48RtyTTA683uK1vj4slfuC_F58qaaYniFyzltXv86B7qpspCg5Imfsn8kxDjOWvR6smSEMk6MmC7peWitgqf5V41PFtwtpIp-rT-5HWdAvQ6fGTZo_8mcNRrQG/s1992/Screen%20Shot%202022-06-23%20at%2022.05.49.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" data-original-height="1250" data-original-width="1992" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-ol2UX-IuDd6qWY6ou_rN_eO72Vg-d7zcqUKf_-ilUR_ZgphWAGpI5yLPJ3A_7S48RtyTTA683uK1vj4slfuC_F58qaaYniFyzltXv86B7qpspCg5Imfsn8kxDjOWvR6smSEMk6MmC7peWitgqf5V41PFtwtpIp-rT-5HWdAvQ6fGTZo_8mcNRrQG/s320/Screen%20Shot%202022-06-23%20at%2022.05.49.png" width="320" /></a></div>With Telstra Wholesale’s new offering, CSPs across Australia can install their customer premises equipment using Ethernet over mobile. End users then have faster access to services while they wait for fiber to be provisioned. Once fiber is in place, the mobile service becomes a backup so that Layer 2 services are available even in the event of a fiber outage. The new capabilities are enabled by the ADVA FSP 150-XG300 Series of 10Gbit/s multi-layer demarcation, aggregation and edge computing devices. The technology delivers zero-touch provisioning at the network edge with fully automated activation and advanced security controls. It enables Telstra Wholesale to provide a differentiated service that offers a unique competitive advantage.“Our new Rapid Mobile Activation is changing the way our customers deliver business internet and other services. Using the power of our mobile network and the LTE capabilities of ADVA’s edge solution, we’re making it quick and easy for CSPs to meet booming demand for enterprise connectivity. We’re also creating another layer of redundancy for enhanced availability,” said Glenn Osborne, executive, wholesale segment at Telstra InfraCo. “Ethernet Access customers will benefit greatly from these innovative mobile capabilities, particularly businesses that are moving locations or need connectivity sooner and value the added resilience of mobile backup, which will prove invaluable as they digitize their operations.”“Our long-standing partnership with Telstra Wholesale has brought Ethernet services with ever greater levels of quality and reliability to businesses throughout Australia. Now our innovation and support are helping empower CSPs with unprecedented scale, speed and efficiency. Rapid Mobile Activation lets Telstra Wholesale’s customers bring enterprises online in as little as eight working days. It also relieves end users from the cost and complexity of configuring their own mobile backup,” commented Erik Lindberg, VP of sales, APAC at ADVA. “Telstra Wholesale is streamlining activation processes while also making connectivity more robust. At a time when IoT technology is coming into its own, the new service will open up a world of opportunities across a wide range of industries.”<a href="http://www.adva.com">http://www.adva.com</a>

Telstra Wholesale is leveraging ADVA FSP 150 technology to provide its Rapid Mobile Activation service. The new capabilities enable Telstra Wholesale’s communication service provider (CSP) customers to quickly provision Ethernet connectivity and deliver greater levels of resilience. 


With Telstra Wholesale’s new offering, CSPs across Australia can install their customer premises equipment using Ethernet over mobile. End users then have faster access to services while they wait for fiber to be provisioned. Once fiber is in place, the mobile service becomes a backup so that Layer 2 services are available even in the event of a fiber outage. The new capabilities are enabled by the ADVA FSP 150-XG300 Series of 10Gbit/s multi-layer demarcation, aggregation and edge computing devices. The technology delivers zero-touch provisioning at the network edge with fully automated activation and advanced security controls. It enables Telstra Wholesale to provide a differentiated service that offers a unique competitive advantage.

“Our new Rapid Mobile Activation is changing the way our customers deliver business internet and other services. Using the power of our mobile network and the LTE capabilities of ADVA’s edge solution, we’re making it quick and easy for CSPs to meet booming demand for enterprise connectivity. We’re also creating another layer of redundancy for enhanced availability,” said Glenn Osborne, executive, wholesale segment at Telstra InfraCo. “Ethernet Access customers will benefit greatly from these innovative mobile capabilities, particularly businesses that are moving locations or need connectivity sooner and value the added resilience of mobile backup, which will prove invaluable as they digitize their operations.”
“Our long-standing partnership with Telstra Wholesale has brought Ethernet services with ever greater levels of quality and reliability to businesses throughout Australia. Now our innovation and support are helping empower CSPs with unprecedented scale, speed and efficiency. Rapid Mobile Activation lets Telstra Wholesale’s customers bring enterprises online in as little as eight working days. It also relieves end users from the cost and complexity of configuring their own mobile backup,” commented Erik Lindberg, VP of sales, APAC at ADVA. “Telstra Wholesale is streamlining activation processes while also making connectivity more robust. At a time when IoT technology is coming into its own, the new service will open up a world of opportunities across a wide range of industries.”
http://www.adva.com

Telstra Wholesale deploys ADVA FSP 150 for Rapid Mobile Activation

Tibit Communications announced $30 million in series C funding to support its its 10G PON manufacturing capacity and 25G PON program.<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipGtm7BGm5v0QMDUXBnyDwxpKp94uda1wjiqGo43pFw-rl5YuE0p841YEV7w7zOLJIpatU7fO9yk2bAw42oRCqrHJOPkqje4ocje72MhwIh2HGVkN8xkweUHJKaLvLNsjkLA1yU0VSoGO7Gwm6NqQ4Zuhcobh3olnO1wNr3Ezm2hoWKwrYmh0yWSCQ/s2652/Screen%20Shot%202022-06-23%20at%2022.38.05.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" data-original-height="1634" data-original-width="2652" height="197" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipGtm7BGm5v0QMDUXBnyDwxpKp94uda1wjiqGo43pFw-rl5YuE0p841YEV7w7zOLJIpatU7fO9yk2bAw42oRCqrHJOPkqje4ocje72MhwIh2HGVkN8xkweUHJKaLvLNsjkLA1yU0VSoGO7Gwm6NqQ4Zuhcobh3olnO1wNr3Ezm2hoWKwrYmh0yWSCQ/s320/Screen%20Shot%202022-06-23%20at%2022.38.05.png" width="320" /></a></div>The investment will be used immediately to accelerate Tibit's 25G ASIC program, which will build upon its successful 10G ASIC and MicroPlug™ OLT product line. 25GS-PON will be the next big step in PON access speeds for enterprise, multi-gig residential services and 5G wireless connectivity. Tibit is a founding member and contributor to the 25GS-PON MSA, the 25 gigabit PON standard which now includes almost 50 carriers, system vendors and solution providers worldwide (www.25gspon-msa.org). Tibit's increased investment in 25GS-PON today will establish the Tibit MicroPlug OLT product line as a cornerstone platform for the next big step in fiber broadband access speeds.The funding round includes Tibit's current investors Liberty Global (LGI), Swisscom Ventures, Intel Capital, Ciena, Juniper Networks and Solasta Ventures.The Series C investment will also scale Tibit's manufacturing capabilities to meet demand fueled by its successful solution partnerships, game-changing innovations in simplifying PON and control of its own OLT ASIC silicon."Tibit has been well positioned to take advantage of the tailwinds from operators investing in 10G PON fiber deployments, which have led to incredible momentum for the company in the marketplace and strong investor support. This funding will enable us to grow our 10G manufacturing capabilities and develop an innovative 25G solution," said Richard Stanfield, President and CEO of Tibit.<a href="https://tibitcom.com/">https://tibitcom.com/</a>

Tibit Communications announced $30 million in series C funding to support its its 10G PON manufacturing capacity and 25G PON program.


The investment will be used immediately to accelerate Tibit's 25G ASIC program, which will build upon its successful 10G ASIC and MicroPlug™ OLT product line. 25GS-PON will be the next big step in PON access speeds for enterprise, multi-gig residential services and 5G wireless connectivity. Tibit is a founding member and contributor to the 25GS-PON MSA, the 25 gigabit PON standard which now includes almost 50 carriers, system vendors and solution providers worldwide (www.25gspon-msa.org). Tibit's increased investment in 25GS-PON today will establish the Tibit MicroPlug OLT product line as a cornerstone platform for the next big step in fiber broadband access speeds.

The funding round includes Tibit's current investors Liberty Global (LGI), Swisscom Ventures, Intel Capital, Ciena, Juniper Networks and Solasta Ventures.
The Series C investment will also scale Tibit's manufacturing capabilities to meet demand fueled by its successful solution partnerships, game-changing innovations in simplifying PON and control of its own OLT ASIC silicon.
"Tibit has been well positioned to take advantage of the tailwinds from operators investing in 10G PON fiber deployments, which have led to incredible momentum for the company in the marketplace and strong investor support. This funding will enable us to grow our 10G manufacturing capabilities and develop an innovative 25G solution," said Richard Stanfield, President and CEO of Tibit.
https://tibitcom.com/

Tibit raises $30 million for 10G and 25G PON

&nbsp;IQE plc, &nbsp;a leading supplier of compound semiconductor wafer products and advanced material solutions, announced a mult-year supply agreement with IBM. The deal includes the supply of epiwafers supporting 3D Sensing, LiDAR for automotive, and optical networking applications.Americo Lemos, Chief Executive Officer of IQE, commented: “Our partnership with Lumentum is in alignment with our strategy to strengthen our customer relationships and to enter into long-term agreements securing wafer supply. Lumentum and IQE are industry leaders in the 3D Sensing space, and this partnership is underpinned by IQE’s unrivalled technology portfolio. We look forward to our continued collaboration and expansion of our business relationship into new market segments.”<span style="caret-color: rgb(85, 85, 85); clear: right; color: #555555; float: right; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin-bottom: 1em; margin-left: 1em; padding: 0px 10px 5px 0px;"><img height="150px" src="https://2.bp.blogspot.com/-JLrkkre8ntU/WqlHpYmyTMI/AAAAAAAC5Wg/0pLaiGQDRmc19xpyJd5rxN1hq6aKLaisgCLcBGAs/s320/lumentum-ofc.png" style="background-color: white; border: 1px solid rgb(238, 238, 238); padding: 6px;" width="200px" />Alan Lowe, Chief Executive Officer of Lumentum, added: “I am pleased to extend our fruitful partnership with IQE into the future. They supported our ramp to high volumes in the consumer space, where we have shipped more than 1 billion large scale VCSEL arrays. As we start to ramp high volumes of differentiated solutions into even more demanding applications in the coming years in the automotive, extended reality, and industrial spaces, I’m sure our partnership will continue to flourish.”<a href="https://www.lumentum.com/en/media-room/news-releases/iqe-announces-multi-year-strategic-supply-agreement-lumentum">https://www.lumentum.com/en/media-room/news-releases/iqe-announces-multi-year-strategic-supply-agreement-lumentum</a>

IQE plc,  a leading supplier of compound semiconductor wafer products and advanced material solutions, announced a mult-year supply agreement with IBM. The deal includes the supply of epiwafers supporting 3D Sensing, LiDAR for automotive, and optical networking applications.
Americo Lemos, Chief Executive Officer of IQE, commented: “Our partnership with Lumentum is in alignment with our strategy to strengthen our customer relationships and to enter into long-term agreements securing wafer supply. Lumentum and IQE are industry leaders in the 3D Sensing space, and this partnership is underpinned by IQE’s unrivalled technology portfolio. We look forward to our continued collaboration and expansion of our business relationship into new market segments.”

Alan Lowe, Chief Executive Officer of Lumentum, added: “I am pleased to extend our fruitful partnership with IQE into the future. They supported our ramp to high volumes in the consumer space, where we have shipped more than 1 billion large scale VCSEL arrays. As we start to ramp high volumes of differentiated solutions into even more demanding applications in the coming years in the automotive, extended reality, and industrial spaces, I’m sure our partnership will continue to flourish.”
https://www.lumentum.com/en/media-room/news-releases/iqe-announces-multi-year-strategic-supply-agreement-lumentum

Lumentum locks in wafer supply deal with IQE

Aligned Data Centers announced plans for SLC-03, a new data center on its hyperscale campus in West Jordan, Utah. The Build-to-Scale project will add more than 100 MW of capacity to the campus in order to meet hyperscale demand for Aligned’s scalable and sustainable infrastructure.&nbsp;<div class="separator" style="clear: both; text-align: center;"><a href="Aligned Data Centers announced plans for SLC-03, a new data center on its hyperscale campus in West Jordan, Utah. The Build-to-Scale project will add more than 100 MW of capacity to the campus in order to meet hyperscale demand for Aligned’s scalable and sustainable infrastructure. “Our newest Build-to-Scale customer requires not only rapid construction timelines to keep pace with their accelerated growth, but seamlessly scalable, sustainable infrastructure that supports their environmental commitments, which are some of the most aggressive in the world,” states Andrew Schaap, CEO of Aligned. “This is our fourth hyperscale data center in the Salt Lake City metro area – a market we entered just three-and-a-half years ago. Our expansion in the Silicon Slopes is a testament to Aligned’s continuous ability to deliver critical capacity quickly – wherever our customers require it.” https://www.aligneddc.com/aligned-expands-salt-lake-metro-area-campus-with-third-hyperscale-data-center/" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;" target="_blank"><img border="0" data-original-height="730" data-original-width="1136" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH1lyBo6GzuetiTr1PMDB6FW1ZhDdMxYyekFO53kVvX-kyOGk6RLp8WVF4NZgswXkaLpk9KMcgWR3qmnPWD9BM3Vh3gOCwVK5pYsnSrcm5xOTCk2m0qS1bQccrfCMfTvTBjQdb3z9kg7ImJyPBFB237-EPjxB9ybcgSrT-9RNdcSRlV-o8f3sj_9hM/s320/Screen%20Shot%202022-06-23%20at%2022.49.06.png" width="320" /></a></div>“Our newest Build-to-Scale customer requires not only rapid construction timelines to keep pace with their accelerated growth, but seamlessly scalable, sustainable infrastructure that supports their environmental commitments, which are some of the most aggressive in the world,” states Andrew Schaap, CEO of Aligned. “This is our fourth hyperscale data center in the Salt Lake City metro area – a market we entered just three-and-a-half years ago. Our expansion in the Silicon Slopes is a testament to Aligned’s continuous ability to deliver critical capacity quickly – wherever our customers require it.”<a href="https://www.aligneddc.com/aligned-expands-salt-lake-metro-area-campus-with-third-hyperscale-data-center/">https://www.aligneddc.com/aligned-expands-salt-lake-metro-area-campus-with-third-hyperscale-data-center/</a>

Aligned Data Centers announced plans for SLC-03, a new data center on its hyperscale campus in West Jordan, Utah. The Build-to-Scale project will add more than 100 MW of capacity to the campus in order to meet hyperscale demand for Aligned’s scalable and sustainable infrastructure. 

“Our newest Build-to-Scale customer requires not only rapid construction timelines to keep pace with their accelerated growth, but seamlessly scalable, sustainable infrastructure that supports their environmental commitments, which are some of the most aggressive in the world,” states Andrew Schaap, CEO of Aligned. “This is our fourth hyperscale data center in the Salt Lake City metro area – a market we entered just three-and-a-half years ago. Our expansion in the Silicon Slopes is a testament to Aligned’s continuous ability to deliver critical capacity quickly – wherever our customers require it.”
https://www.aligneddc.com/aligned-expands-salt-lake-metro-area-campus-with-third-hyperscale-data-center/

Featured Post

Zero Trust: Same Old Controls, or Something New and Shiny?

Our Insights