Your Tech Story

security

Proofpoint Inc

Proofpoint Inc – An American SaaS Provider Specialising In Security Software.

Proofpoint Inc is a security software company based in Sunnyvale, California, US. Eric Hahn founded the company in 2002 and since then it has grown into a big family of more than 3600 employees. Proofpoint is a very well-known and reliable company when it comes to providing SaaS and products. The main product of the company is providing security software for inbound email, email encryption, outbound data loss prevention, email archiving, etc. Proofpoint currently serves more than 8,000 organizations across the globe. Apart from its headquarter, the company also has offices in Australia, Europe, Canada, US, and several Asian countries. Currently, Gary Steele is the Chairman and CEO of the company.

History of the Company

In June 2002, Eric Hahn founded the company, Proofpoint Inc. He is most famous as the CTO of Netscape Communications which lost the market to Internet Explorer. For a year, the company made attempts to raise a good amount of funding. So, after it received Series A funding, the company raised $7 million and then decided to launch publicly in July 2003. During the initial days, venture investors like Benchmark Capital along with Stanford University backed the company. The same year, Proofpoint released its first product and raised another $9 million from Series B funding.

The first-ever product that was released by Proofpoint was called the Proofpoint Protection Server. This was built for medium and large-scale businesses and it used machine learning algorithms to detect spam mails more accurately. The span detection software was hit in the market in the 2000s and it was one of the top business properties. This led to the very rapid growth of Powerpoint as it gained many customers in a short span of time.

With the increase in the number of cyber threats in different forms, the products of Proofpoint evolved accordingly. The company also introduced features like email encryption and identity-based encryption in its products. In 2008, the company introduced Proofpoint on Demand- Standard Edition which was especially for small and medium scale businesses that don’t run on their own servers. In 2012, the company filed its first IPO and became a publicly-traded company. A few months ago, Proofpoint declared that it will be acquired by a private equity firm, Thoma Bravo.

Proofpoint Inc
Image source: itsupplychain.com

Shifting Strategies During the Pandemic

With the start of lockdown that is still continuing in many places, business scenarios and goals changed for many companies. Proofpoint also had to evolve because of the sudden change in the work environment and something it didn’t plan to do. A major part of Proofpoint’s solutions revolves around mail, especially direct mail programs. But with the onset of the pandemic, they needed to change strategies as employees of companies all over the world shifted to their home environment. Halting the services of the company was never an option, so the company laid new strategies according to the remote workflow within only a week and a half and made some effective changes. Proofpoint decided to modify their direct mail programs and focus on targeted intent-based digital outreach.

Acquisitions

Proofpoint has acquired several companies in its journey since 2003. The first company acquired by Proofpoint was Fortiva which was back in June 2008 followed by Secure Data in Motion in the same year. In 2012, the company acquired NextPage and next year bought three companies in a row, namely, Abaca Technology Corporation, Armorize Technologies, and Sendmail Inc. The two biggest acquisitions in the history of Proofpoint are Wombat Security Technologies and ObserveIT, both for $225 million. The company’s latest acquisition was in February 2021 when it bought InteliSecure.

Gary Steele – CEO of Proofpoint Inc

Gary Steele has been serving as the CEO of the company since day 1. He is responsible for all the successful funding rounds and filing its first IPO. Before joining Proofpoint, he worked at many famous companies like Hewlett-Packard, Sun Microsystems, Portera, and Sybase Inc. He studied computer science at Washington State University.

dave logo

Popular Banking Application Dave Suffer Major Security Breach Putting Millions at Risk

As the future looks digital, an integral part of IT infrastructure has been developing security measures. With most companies taking their business online, the protection of customer privacy is vital to enterprises. Over the past decade or so, we have seen a steep rise in cyber-attacks and security breaches. Many popular and large companies have fallen prey to such attacks, leading to a loss in credibility and customer loyalty. Recently, banking application Dave.com added itself to the list of enterprises hit by such cybersecurity attacks. Here’s a look at how bad the data breach is, and what it means for the company.

Dave’s Data Breach

Digital finance and banking app Dave.com, which is also a prominent tech unicorn confirmed they had fallen prey to a major security breach. Today, a hacker published on a forum, details regarding over 7,516,625 of Dave’s users. As per a report provided to ZDNet, the company claimed that the breach occurred through one of their former business partners. The origin of the breach, therefore, was through an engineering analytics platform Waydev. The company served as one of Dave’s third-party service providers earlier, and it was through their breach that a hacker gained access to Dave’s records. 

The fintech company allows users to receive cash advances for bills by linking their bank accounts and, therefore, avoid overdraft fees. Subscribers also have the option of taking extra money on loan, up to $100, following which they can borrow more after repaying the original investment.

Control Measures

The company verified that they have plugged the hacker’s entry point and that they have started to notify users regarding the breach. Furthermore, the company is in the process of resetting app passwords to prevent further pilferage. A spokesperson for the company made it clear that Dave had started taking appropriate control measures as soon as they became aware of the breach. 

The incident prompted an investigation, which is still underway to find the exact cause of the breach. Furthermore, the company is collaborating on the ongoing investigation with the FBI. These bodies will analyze claims stating that a hacker cracked Dave’s passwords in an attempt to sell their customer data. To add more resources and assist the investigation, the company has brought in CrowdStrike, which is a leading cyber-security firm.

Public Data Now

ZDNet learned about the breach on Saturday morning when a reader tipped them regarding the fact a hacker was offering people user data via RAID. The information was viable on a platform that has recently gained a reputation for being the best place to leak secure data and other databases. The hacker who goes by the name ShinyHunters is one who has a reputation, having done this before countless times. The name is associated with several high profile hacks, including that of companies like Wishbone, Tokopedia, and Mathway among others.

As of now, data from the app is available via a free download for members who unlock access to it using forum credits. The data on view includes real names, emails, birth dates, addresses, and contact numbers of millions of customers. For a few unfortunate users, the details also include information related to their credit/debit cards and even their Social Security Numbers. However, Dave confirmed that such data was under encryption and hence would not be accessible to the public. 

The company also stated that while the hacker claims to have passwords included, they are hashed out using a function called bcrypt. However, Dave also confirmed that as of now, they have no evidence to verify that hackers executed anything while they had access to user data.

Dave, which offers cash advance services and overdraft protection will now have to take steps to reaffirm the users of their security. Since the breach resulted in over 7.5 million records being sold via auction and then released for free, the company will have to overhaul their security protocol.

WhatsApp to Soon Roll Out a Fingerprint Authentication Feature to its Android Users

According to WABetaInfo, WhatsApp may soon release a fingerprint authentication for its Android users along with the much awaited ‘Dark Mode’ feature. The company had been testing the beta version of the dark mode feature for Android for quite some time, and now a report is surfacing confirming the release of the same.

whatsapp
Image Source: pymnts.com

WhatsApp is testing its beta app version number 2.19.82 and has submitted a new feature report to the Google Play Beta Program, which also includes the ‘dark mode’ feature in it. Facebook has already added the dark mode feature to its messenger, and according to the reports it soon will be bringing the feature to its other messaging app WhatsApp.

The dark mode has also been adopted by apps like Twitter, Reddit, Telegram, etc. The feature helps reduce the battery consumption for the AMOLED and OLED smartphones by reducing the full display pixel utilization. The company has also uploaded a screenshot along with the report that shows the dark mode in notifications settings, account settings, data and storage settings, and chat storage.

Also, WhatsApp has already provided its iOS app users with Face Id as well as Touch Id authentication for both iPhone and iPad, and now the Android users will also be able to use the Touch Id feature to authenticate their WhatsApp.

The new security feature has been spotted in the Android beta version 2.19.83. By default, the fingerprint authentication will be disabled and to enable the Touch Id for WhatsApp the users can select the option ‘Use Fingerprint to Unlock’, in the Privacy option under Account settings. Then the users will be asked to register their fingerprint for the authentication process. And, then the users can select the time span after which WhatsApp should lock, when not in use, i.e. after 1 minute, after 10 minutes or after 30 minutes. After enabling the fingerprint authentication, users will have to unlock the app with their touch Id, every time they would want to use it.

Though most of the Android users are already using the third party app locks for WhatsApp, an inbuilt authentication feature will add an extra security zone, and the users can ditch the other apps for the security.

The company is also testing and is about to roll out features including frequently forwarded and forwarding info and the audio file name in chat. The frequently forwarded and forwarding info feature will show the number of times a message has been forwarded, which may help in opposing the spread of fake news. Also, the audio file name in chat will show the name of the audio file sent over WhatsApp chat.