BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Firewalls Not Preventing Data Breaches? Try a Dose of Least Privilege

Posted April 4, 2012    Peter McCalister

An article was published last month indicating a malware-infected computer at ConnecticutCollege was the cause of the breach of 18,000 social security numbers of teachers, employees, and student workers. According to the report, “a computer in the CCSU business office was infected in December, and sat on the system for eight days before it was detected and removed.” By now we all know that data breaches are bad. We understand the ramifications of lost/manipulated/stolen data. We know they should be avoided at all costs. So why do they keep happening?

Maybe it’s because IT organizations aren’t treating the root cause of the problem. Since we led with the Connecticut College incident, let’s use it as an example. I’m sure there were extensive firewalls protecting the sensitive information of those 18,000 people. I have no doubt that a lot of thought and planning went into the anti-malware software that was supposedly protecting the corporate network. But what happens when that’s not enough? Firewalls and anti-malware software are just Band-Aids when it comes to treating IT security as a whole. While they help by placing a barrier between the outside world and the goings on of the corporate network, they don’t actually treat or solve the cause of why the breaches are occurring in the first place.

Unmanaged and unaudited administrative credentials and root access are at the cause of data breaches. Bottom line. These credentials can be hijacked by malware and allow hacks to occur in otherwise secure corporate networks. To properly treat the problems that cause data breaches, these credentials MUST be managed. Users must have access to tasks necessary for job functionality, but not too many that they can access anything at any time. When this kind of freedom is allowed your users, malware can take hold and your data becomes insecure. Fortunately, BeyondTrust can help. Click here for more information on ways to manage administrative credentials the right way and reduce the threat of malware in your organization.

Leave a Reply

Additional articles

red-thumbprint

Why big data breaches won’t always be so easy

Posted September 19, 2014    Byron Acohido

This blog post is republished with the permission of ThirdCertainty. See the original post here. – By: Byron Acohido, Editor-In-Chief, ThirdCertainty Some day, perhaps fairly soon, it will be much more difficult for data thieves to pull off capers like the headline-grabbing hacks of Home Depot and Target. That’s not a pipe dream. It’s the projected outcome…

Tags:
, , , , ,
pbps-blog2

8 Reasons Your Privileged Password Management Solution Will Fail

Posted September 18, 2014    Chris Burd

Leveraging complex, frequently updated passwords is a basic security best practice for protecting privileged accounts in your organization. But if passwords are such a no-brainer, why do two out of three data breaches tie back to poor password management? The fact is that not all privileged password management strategies are created equal, so it’s critical…

Tags:
, , , , , ,
pbps-customer-campaign-image

You Change Your Oil Regularly; Why Not Your Passwords?

Posted September 11, 2014    Chris Burd

There are many things in life that get changed regularly:  your car oil, toothbrush and hopefully, your bed sheets.  It’s rare that you give these things much thought – even when you forget to change them. But what if you’re forgetting something that can cost you millions of dollars if left unchanged for long periods…

Tags:
, , ,