BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Insider Threats Can Start from the Outside, Too

Posted March 12, 2012    Peter McCalister

The term insider threats used to spark images of malicious employees stealing copies of filesor looking at information they weren’t supposed to, but in today’s complex world of technology, insider threats have evolved.

According to a preliminary version of the Verizon 2012 Data Breach Investigations Report, 92 percent of attacks analyzed were external in origin, with hacking and malware playing a part in 99 percent of reported incidents. Today’s criminal hackers often use malware , or just plain old-fashioned con games, to gain the trust of employees and subsequently entice them to share sensitive information that will allow the hacker to gain access to the companies’ information. It can be as simple as pretending to be a fellow co-worker and coercing an employee to share sensitive information, such as a password, or as complex as a bogus email containing malware, but either way you slice it, outsiders are becoming more creative at finding their way in.

In situations like this having the right privilege identity management policies in place can mean the difference between protecting your organization and facing a major security risk. By only allowing employees access to information that is necessary for them to perform their jobs, organizations are mitigating the risk of sensitive information being shared with the wrong person. For more information, click here.

Leave a Reply

Additional articles

How To Implement The Australian Signals Directorate’s Top 4 Strategies

Posted October 20, 2014    Morey Haber

The Australian Signals Directorate (ASD), also known as the Defence Signals Directorate, has developed a list of strategies to mitigate targeted cyber intrusions. The recommended strategies were developed through ASD’s extensive experience in operational cyber security, including responding to serious security intrusions and performing vulnerability assessments and penetration testing for Australian government agencies. These recommendations…

Tags:
, , , ,
asp-mvc

Exploiting MS14-059 because sometimes XSS is fun, sometimes…

Posted October 17, 2014    BeyondTrust Research Team

This October, Microsoft has provided a security update for System.Web.Mvc.dll which addresses a ‘Security Feature Bypass’. The vulnerability itself is in ASP.NET MVC technology and given its wide adoption we thought we would take a closer look. Referring to the bulletin we can glean a few useful pieces of information: “A cross-site scripting (XSS) vulnerability exists…

Tags:
4bestpracticesaudits-blog

Four Best Practices for Passing Privileged Account Audits

Posted October 16, 2014    Chris Burd

Like most IT organizations, your team may periodically face the “dreaded” task of being audited. Your process for delegating privileged access to desktops, servers, and infrastructure devices is a massive target for the auditor’s microscope. An audit’s findings can have significant implications on technology and business strategy, so it’s critical to make sure you’re prepared…

Tags:
, , , ,