June 2023 Summaries

Lenovo has confirmed Esper as part of its Trusted Supplier Program, which aims to ensure suppliers meet stringent security standards set by Lenovo's customers. Recognized by supply chain security experts, the program involves a thorough review of each supplier's security processes, including IT management and software development, and requires ongoing compliance with industry best practices to mitigate security risks. Esper, known for its dedicated device solutions, facilitates the delivery of software across various hardware and is committed to exceeding global security standards. Esper's inclusion in the program highlights its dedication to providing secure, scalable solutions for enterprises, offering comprehensive control over the security and integrity of mission-critical devices, particularly within the Android ecosystem.

Esper, a company focused on customer-centric innovation, has been recognized by G2 as #13 in the Best IT Management Products 2022 category, reflecting its commitment to maintaining direct relationships with users to foster innovation. This recognition underscores Esper's role as an industry disruptor in the fleet and device management space, a testament to the support from partners like Insight and Madrona. The company views this accolade as a call to action to enhance its unique DevOps for devices platform, promising significant announcements in 2022 aimed at enhancing digital transformation through seamless hardware and software integration. Esper's ongoing journey is marked by a growing customer base and a talented team, positioning it to capitalize on the evolving landscape of digital transformation.

A critical zero-day vulnerability called log4shell was discovered in the Apache log4j utility, allowing arbitrary code execution on affected systems, which could include essential internet infrastructure. While Esper believes that Android devices are unlikely to be exploited due to the absence of native support for the Java Naming and Directory Interface (JNDI) and the common use of Android's own logging library, they advise customers to remain vigilant. The vulnerability poses a greater risk to web servers, regardless of the operating system on which applications run. Despite not primarily using Java for backend services, Esper identified and patched vulnerable open-source components like Apache Flink within their infrastructure, ensuring no customer-facing systems were compromised. They are committed to deploying further patches as they become available and will continue monitoring the situation to safeguard their systems against log4shell.