Microsoft is warning users of legacy Windows OS systems that they must act quickly to patch the newly-detected BlueKeep Wormable vulnerability or face dire consequences that could rise to the level of the WannaCry attack that shut down systems worldwide in 2017.  Yikes.

To prevent another such catastrophic and global ransomware propagation, organizations are scrambling to identify and remediate assets that are vulnerable as per Microsoft’s recent announced critical flaw CVE-2019-0708 that affects legacy operating systems — Windows 2003, Windows 7, Server 2008, and XP. However, this remains a daunting challenge for enterprises who have deployed vast numbers of network-connected devices – medical, industrial, manufacturing, facilities, and other OT/IOT – that run on embedded legacy Windows operating systems.  In today’s hyper-connected enterprise, the massive quantity and heterogeneity of these connected devices makes the task of addressing this critical vulnerability even more daunting.

Take control with Ordr.

The Ordr Systems Control Engine, or SCE, can quickly and automatically identify all devices connected to your enterprise network that are vulnerable.  Critically, the Ordr SCE uses only passive monitoring techniques, which – unlike active vulnerability scanning tools – will not disrupt your mission-critical and often sensitive equipment. You can procure a list of these systems quickly, and bypass the traditionally manual and time-consuming process of physically tracking down known inventory assets and assessing each individually for risk and vulnerability.  Timing is critical, so eliminating this manual process will save you not only time and money, it could be critical in protecting your brand, in ensuring the security of your data, in possibly saving lives.

Once you know what’s at risk, you can easily use the Ordr SCE to automate and deploy microsegmentation policies, enabling your infrastructure to basically operate as a bodyguard for each device, to isolate and protect each device from any future exploit that weaponizes CVE-2019-0708. These protections can be implemented in your existing network and security tooling, such as your switches, NAC tools, and firewalls. This compensating control allows you to dramatically reduce the risk so you can confidently continue to operate your legacy equipment until, at some point, the manufacture provides a patch.

Here’s a video that shows you how Ordr can help. Contact us to learn more.

Leading Asset and Attack Surface Management Solution Now Easily Available for AWS Customers

SANTA CLARA, Calif., April 2, 2024 — Ordr, the leader in AI-powered asset intelligence, today announced the availability of OrdrAI CAASM+ (Cyber Asset Attack Surface Management) in AWS Marketplace, a digital catalog with software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on Amazon Web Services (AWS).

Today’s news means that AWS Marketplace customers in need of an enterprise-scale asset intelligence solution now have immediate access to OrdrAI CAASM+. Ordr integrates with AWS to deliver complete ground to cloud visibility — from assets in remote sites and campus devices, all the way to assets in the cloud. With OrdrAI CAASM+, organizations can ensure all AWS assets align with their company security policies.

The availability of Ordr on the AWS marketplace also allows enterprises, customers, and partners to simplify the procurement process, optimize costs and address AWS enterprise spending commits.

“Whether they know it or not, every organization’s attack surface is expanding. This creates a challenge for security teams tasked with understanding and protecting their organizations; if you can’t see everything in your environment, how can you protect it?,” said Jim Hyman, CEO of Ordr. “With OrdrAI CAASM+, customers can establish a single source of the truth for all connected assets, enabling them to discover vulnerabilities, security gaps, misconfigurations, or noncompliance issues. With availability on AWS Marketplace, it’s even easier for organizations to streamline and simplify procurement, and accelerate their asset visibility and security journey.”

Ordr’s easy-to-deploy CAASM+ product secures the expanded attack surface for every enterprise — devices, users, installed software, SaaS, and cloud workloads. OrdrAI CAASM+ goes beyond API-only solutions, combining API data collection and proprietary discovery methods with AI/ML classification to give accurate, complete asset visibility across the entire enterprise, including the 40% of assets (IoT, OT, IoMT) that most often go unseen or are left unsecured. In addition, security teams can improve their security hygiene, reduce their attack surface and accelerate incident response with accurate asset context.

Get more information on OrdrAI CAASM+ in the AWS Marketplace.

We’ve always known the value of partnering with Cisco Meraki. Recently we learned that we were selected by the Meraki team as the September 2023 Ecosystem Partner of the Month. This is a great honor for all of us at Ordr, we’re thrilled by the recognition of our efforts, and believe our deep integration and continued partnership is a Win/Win for our joint customers. 

The Ordr and Cisco Meraki joint solution is giving enterprise security teams what they want from the Cisco Meraki platform – ‘enterprise grade’ networking features, not the least of which includes policy and segmentation. By combining Ordr and Cisco Meraki customers can: 

• Discover every device via the seamless Ordr and Meraki cloud integration.
• Gain granular visibility into every single asset in their network including IT, Internet of Things (IoT), Internet of Medical Things (IoMT), and Operational Technologies (OT) devices.
• Identify their attack surface with insights such as devices with vulnerabilities, outdated operating systems, recalls, weak passwords, anomalous behaviors, and active threats.
• Simplify and automate policy creation to accelerate incident response and Zero Trust projects.

Our successful partnership is not just about technology but also includes a strong collaboration to keep customer needs at the forefront of everything we do together. Ordr is a Cisco Co-Sell partner focused on finding the best integrated solutions for our customers through our global, shared partner community.

Our successful partnership is not just about technology but also includes a strong collaboration to keep customer needs at the forefront of everything we do together. Ordr is a Cisco Co-Sell partner focused on finding the best integrated solutions for our customers through our global, shared partner community. 

A big shout out to our Cisco Meraki colleagues who make working together fun and rewarding Alicia Lorenzetti David Hoysan Jacky Lo Matthew D’Angelico Joe Maestri Shayna Boudreau, MBA Anna (Ania) Esipova Disha Moses Hope Galley Stephanie Feliciano Allison Norfleet, Oren Brigg, Albert Chen, Shweta Palande, Vasundhra Dewangan, Cory Guynn, John M. Kuchta Danna Simon.

Watch the live Cisco Meraki Ecosystem Partner of the Month announcement 

And don’t forget to request a demo on the Meraki Marketplace 

Read the announcement on the Meraki Community

Julie Criscenti Heck

Head of Global Partner Ecosystem Marketing

Julie Criscenti Heck

Head of Partner Marketing

Julie is Head of Partner Marketing, engaging with Ordr channel partners, and technology partners on driving connected device security initiatives, and working on joint solutions and marketing activities.