Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

It’s the Little Things That Count

Posted November 3, 2011    Peter McCalister

As we discussed several times, enterprise IT security isn’t easy. As recent article at Dark Reading makes clear, part of the reason is that even the smallest flaw can lead to a major security breach.

The article covers a number of areas – configuration and patch management, network access, and embedded systems – but not surprisingly the most interesting to us dealt with the insider threat. As the article makes clear overlooking a rarely used account with high-powered privileges can lead to disastrous results. More and more hacker’s are being patient and exploiting small security flaws and leveraging social engineering to get access to the keys to the kingdom. So as this example makes clear, admin privileges to a system that doesn’t house critical data can be exploited to get to more important systems. It even states “Even so, ignorance is no excuse when the bad guys hone in on an inconspicuous weakness, like a few older, rarely used desktops that haven’t been updated with the latest patches. It takes only one weak link for an attacker to gain a foothold into an organization and steal valuable data, or set up shop for long-term cyberespionage.”

So what’s the answer? Take nothing for granted, monitor all your systems carefully and treat privileged access to any system as a high priority. When it comes to enterprise IT security, it’s the little things that count.

Leave a Reply

Additional articles


Retina CS Vulnerability Management Solution Gets Primetime Award for Innovation

Posted October 12, 2015    Sandi Green

Analyst firm Frost & Sullivan presented BeyondTrust with the 2015 award for ‘Best Practices in Enabling Technology Leadership in the Vulnerability Management Industry.

, ,

Answering the age-old question, ‘What’s plugged into my network?’

Posted October 9, 2015    Alejandro DaCosta

“What’s plugged into my network?” is a question I hear frequently from security administrators. And, really, it’s no surprise why. No longer do we have to account just for the physical servers in our datacenters, workstations and a few network devices. Now we need to keep track of roaming laptops, dynamic virtual systems, off-site cloud deployments and BYOD.


Closing the Vulnerability Gap

Posted October 7, 2015    Brian Chappell

Managing vulnerabilities is a significant challenge for many organizations. The main difficulties with managing this manifest in two key areas. The first is that the list isn’t static. The second is priority.