Trellix | September 22, 2022
Trellix, the cybersecurity company delivering the future of extended detection and response (XDR), announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence. Comprised of hundreds of the world’s most elite security analysts and researchers, the Advanced Research Center produces actionable real-time intelligence and threat indicators to help customers detect, respond and remediate the latest cybersecurity threats.
“The threat landscape is scaling in sophistication and potential for impact We do this work to make our digital and physical worlds safer for everyone. With adversaries strategically investing in talent and technical know-how, the industry has a duty to study the most combative actors and their methods to innovate at a faster rate.”
-Aparna Rayasam, Chief Product Officer, Trellix
Trellix Advanced Research Center has the cybersecurity industry’s most comprehensive charter and is at the forefront of emerging methods, trends and actors across the threat landscape. The premier partner of security operations teams across the globe, Trellix Advanced Research Center provides intelligence and cutting-edge content to security analysts while powering our leading XDR platform.
Python Tarfile Vulnerability Highlights Software Supply Chain Complexities
In coordination with today’s launch, Trellix Advanced Research Center also published its research into CVE-2007-4559, a vulnerability estimated to be present in over 350,000 open-source projects and prevalent in closed-source projects. It exists in the Python tarfile module which is a default module in any project using Python and is found extensively in frameworks created by Netflix, AWS, Intel, Facebook, Google, and applications used for machine learning, automation and docker containerization. The vulnerability can be exploited by uploading a malicious file generated with two or three lines of simple code and allows attackers arbitrary code execution, or control of a target device.
“When we talk about supply chain threats, we typically refer to cyber-attacks like the SolarWinds incident, however building on top of weak code-foundations can have an equally severe impact This vulnerability’s pervasiveness is furthered by industry tutorials and online materials propagating its incorrect usage. It’s critical for developers to be educated on all layers of the technology stack to properly prevent the reintroduction of past attack surfaces.”
-Christiaan Beek, Head of Adversarial & Vulnerability Research, Trellix.
Open-source developer tools, like Python, are necessary to advance computing and innovation, and protection from known vulnerabilities requires industry collaboration. Trellix is working to push code via GitHub pull request to protect open-source projects from the vulnerability. A free tool for developers to check if their applications are vulnerable is available on Trellix Advanced Research Center’s GitHub.
Trellix is a global company redefining the future of cybersecurity and soulful work. The company’s open and native extended detection and response (XDR) platform helps organizations confronted by today’s most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through machine learning and automation to empower over 40,000 business and government customers with living security. More at https://trellix.com.
About Trellix Advanced Research Center
Trellix Advanced Research Center brings together an elite team of security professionals and researchers to produce insightful and actionable real-time intelligence to propel customer outcomes and the industry at large. Driven by the industry’s most comprehensive charter, our skilled researchers detect trends ahead of the market to empower our customers and partners to solve for emerging threats. More at https://www.trellix.com/en-us/threat-center.html.
Shipwell | September 16, 2022
Shipwell, an industry-leader in cloud-based shipping and logistics, and NMB Solutions Inc., which provides a Microsoft-certified D365 Gateway for multi-modal transportation, parcel shipping and compliance solutions for Microsoft Dynamics 365 (D365), today announced their partnership, bringing Shipwell’s modern, best-in-class Transportation Management System (TMS) to the Microsoft D365 community.Now, more than ever, industries across various sectors are demanding significant efficiency gains and looking to reduce transportation and supply chain-related costs. By integrating Shipwell’s powerful, modern TMS with NMB’s Microsoft-Certified Gateway for D365 Finance and Operations module, this partnership paves a way for state-of-the-art, cloud-native solutions to automate, optimize and streamline customers’ supply chains.
Born from the recognition that supply chains must evolve to match the needs of a changing industry, Shipwell’s technology creates a better experience for businesses and customers. From instantly uncovering greater efficiency and cost savings in shipping options to automated disruption monitoring and management, Shipwell’s centralized solution transforms supply chains to be responsive and streamlined.
NMB Solutions has been an innovator in the Microsoft community for 15+years, and has been hyper-focused over the last several years on providing mission-critical and purpose-built solutions for the Microsoft D365 community.
“This partnership is a natural fit for both companies, Shipwell’s TMS solution slides right into the wheelhouse of the majority of North American D365 Finance and Supply Chain customers. It is affordable, robust and scalable. D365 customers needing modern-day TMS capabilities will be amazed by what they can achieve with this solution.”
-Chris Morgan, president of NMB Solutions.
Shipwell’s robust, reputable, Gartner-recognized TMS platform integrates seamlessly with existing business applications, partners and workflows, reducing implementation time for go live in as little as 8-10 weeks. The solution not only minimizes customers’ IT and integration resource requirements but also maximizes savings and value.
We are excited about the opportunity to bring D365 ERP connectivity and experience to the Shipwell network with NMB Solutions,said Greg Price, CEO of Shipwell. “NMB is an expert in D365 and supply chain, and they bring a wealth of knowledge and capabilities to this partnership and to the Microsoft community. NMB’s Gateway for TMS is a game changer, and combined with Shipwell’s modern-day TMS, the Microsoft D365 community will now have the ability to deploy best-in-class, certified solutions for transportation management and real-time visibility – resulting in significant efficiencies, savings and continuous improvements.
Backed by AI and machine learning capabilities, Shipwell’s data-driven technology provides automation, comprehensive tracking, exception management and advanced analytics at every point in the supply chain, allowing customers to proactively address delays and reduce spend. To learn more about this partnership, visit the NMB booth and product showcase at the upcoming D365 Community Summit in Orlando.
In a world where shipping expectations and complexity are greater than ever, Shipwell is on a mission to empower supply chain efficiency at scale across every company size, stage, and industry. Supply chain solutions today are highly disconnected, rigid, and difficult to use, but Shipwell is disrupting the status quo. Our solution combines everything our customers need in a comprehensive platform that adapts as the market and business demands change, so they can effectively manage the entire process in one place and never have to rip and replace. Shipwell is proud to be recognized by industry experts as a leader in shipping and logistics, including Gartner Magic Quadrant for TMS, Forbes 2020 Next Billion-Dollar Startup, and was named fourth fastest-growing company in North America on the 2021 Deloitte Technology Fast 500. To learn more, visit www.shipwell.com.
About NMB Solutions Inc.
NMB Solutions is a Microsoft Gold Business Applications Partner. The company was founded in 1999 as a VAR and implementer of Axapta, which would go on to become Microsoft Dynamics AX. In 2013, NMB transitioned to an ISV, solely focused on delivering third-party parcel shipping and LTL solutions for Dynamics AX. Today, NMB has customers across the globe in many different industries. To learn more, visit: www.nmbsolutions.ca, or visit our booth #814 at NA Community summit 2022.
PROCUREMENT AND SOURCING,SUPPLY CHAIN
Flex | August 03, 2022
For the fourth year in a row, Flex (NASDAQ: FLEX) has been named as Lenovo EMEA Logistics Supplier of the Year. The award is recognition of Flex's ability to create a seamless experience for companies and their customers that is resilient and adaptable to rapidly changing global end market demands. The award was presented at the Lenovo EMEA Global Logistics Suppliers Conference attended by Lenovo's connected partner network.
Flex's value added fulfilment services, which include vendor managed inventory, warehousing, fulfilment and last mile distribution, helped Lenovo deliver increased volumes across their PC & Smart Devices, Mobile, Server and Cloud business in what was a dynamic and highly challenging supply chain environment.
Speaking at the virtual Lenovo Supplier Conference, where the theme was resiliency, intelligence and ambition, Lenovo Head of Global Logistics, Gareth Davies, said, "Never has there been greater challenges in the logistics space. There are multiple hurdles, including unprecedented supply and demand volatility, and significant transportation constraints. To these the Flex team really responded. Every one of our partners raised their game to help Lenovo navigate a volatile, high volume and challenging year, but Flex won out against strong competition for their outstanding performance."
"We are honored to receive this award from our valued partner Lenovo. I am proud of the hard work and dedication of our teams across EMEA, in what was another highly unpredictable year for supply chains. Our team truly demonstrated our capability to be a trusted partner for a market-leading brand who needed to move fast, retain operational resiliency and maintain its competitive advantage."
-Pat Ring, senior vice president and general manager for Flex Global Services and Solutions,
Over 11,000 employees across 30 countries in Flex Global Services and Solutions (GSS) help customers manage how their products exist in the world through a range of value added services including fulfillment, logistics, aftermarket services and circular economy solutions.
Flex (Reg. No. 199002645H) is the manufacturing partner of choice that helps a diverse customer base design and build products that improve the world. Through the collective strength of a global workforce across 30 countries and responsible, sustainable operations, Flex delivers technology innovation, supply chain, and manufacturing solutions to diverse industries and end markets.
Expedite All | August 30, 2022
Expedite All announced the launch of a new, nationwide expedite transportation network that gives shippers on-demand access to more than 1,000 carriers offering over 5,000 expedite vehicles at rates up to 10% lower than traditional expedite. Expedite All is disrupting the expedite industry, leveraging proprietary Truck Map and Freight Rate Calculator technology and a network of trusted small vehicle carriers to offer shippers a new transportation option: short-, medium- and long-haul expedite services that can be utilized for routine shipping needs. Expedite All's fast-growing small vehicle network offers an effective transportation solution for virtually any shipper in any industry, from the first mile to the last mile.
"Due to the high cost, shippers use traditional expedite only when they have to, and mainly for relatively short distances The new Expedite All model makes it faster, easier and less costly to utilize expedite services for everything from short- to long-haul shipments, essentially providing shippers with a new transport mode that adds flexibility to their everyday transportation mix."
-Alex Winston, president of Expedite All
Exclusive transportation service often means placing a load as small as one pallet on a dedicated 53-foot semi trailer, which is inefficient and environmentally unfriendly, continued Winston. That pallet could be loaded onto a small vehicle, like a sprinter van, that is faster, costs less and offers a much more sustainable option for shippers. Sprinter vans are as much as two and a half times more fuel efficient than semi trucks, so they emit two and half times less CO2 into the atmosphere. By providing shippers with access to a large network of small vehicles, Expedite All is on the front lines of delivering greener, more efficient transportation solutions.
Expedite All offers immediate access to more than 5,000 expedite vehicles, including sprinter vans, cargo vans, straight trucks and box trucks across the continental U.S. On average, a standard sprinter van can carry up to three pallets, a box truck can carry up to seven and a straight truck can carry up to 14, representing an enormous amount of untapped capacity that Expedite All is making available to shippers. At launch, the size of the company's network rivals the available capacity of the largest existing expedite providers, with plans to grow.
Expedite All's map-based user interface provides shippers with real-time visibility to available vehicles, making finding and booking the right vehicle fast and easy. Expedite All's Freight Rate Calculator uses proprietary algorithms to allow shippers to quickly get an estimated rate quote without having to call and compare rates from multiple expedite providers. Shippers can track their shipments online from pickup to delivery and receive 24/7 dedicated phone support throughout their shipment's journey.
About Expedite All
Expedite All is an emerging industry disruptor, leveraging proprietary Truck Map and Freight Rate Calculator technology and a network of more than 1,000 trusted small vehicle carriers to offer shippers a new transportation option: short- to long-haul expedite services at rates up to 10% lower than traditional expedite. Expedite All is a faster, less costly and more sustainable transportation solution. To learn more, visit www.expediteall.com.