BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

January VEF winner announced. Takes home an Amazon Kindle Fire.

Posted January 26, 2012    Sarah Lieber

As you all know, every month we host our Vulnerability Expert Forum (VEF) webinar. This is a time where our experts share valuable insight regarding new vulnerabilities that are discovered and the actions that need to be taken as a result. It’s a quick way to get up to speed on current potential risks to your organization and a way to explore the impact that high-risk vulnerabilities and exploits have on network environments and infrastructures. eEye is committed to helping security administrators reduce the workload they face by making this information easily accessible and by clearly presenting all required information to our audience.

If you haven’t attended a VEF before, I encourage you to sign up and join our next one on February 15, 2012. Not only will you receive a complete analysis of recently announced critical vulnerabilities from Microsoft and other software vendors but you could potentially win a Kindle product from us!

Just ask our January winner, Alex Klink, who was awarded with a new Amazon Kindle Fire for participating in our discussion earlier this month. Congrats to Alex. Funny enough he had been following the #hashDoS hashtag on Twitter which is what brought him to our blog to participate. Here’s more about him:

Alexander ‘alech’ Klink is a Solutions Consult Security at n.runs AG based in Germany, where he works as a penetration tester. While studying mathematics, Alex learned lots of fancy maths, which he forgot again rather quickly. He kept the frustration tolerance that comes with being a mathematician, though and uses it daily.

Alex enjoys discovering bugs in the specification, (not only business) logic errors, finding privacy issues in Adobe products and portrait photography. His CPU fan is being heavily abused by his research these days. Together with Julian ‘zeri’ Wälde, he looked at the hash table implementations of web application platforms and (re)discovered the so-called #hashDoS bug.

Again, congrats to Alex and thank you to all for being continued supporters of eEye and security for all. Don’t forget to join us at our next VEF and you too could possibly take home a new Kindle product! Sign up here.

Tags:
, , ,

Leave a Reply

Additional articles

flash-logo

Adobe Patches Zero-Day Flaw Being Exploited in the Wild

Posted January 22, 2015    BeyondTrust Research Team

Earlier this week, French malware researcher Kafeine reported on a new Adobe Flash zero-day vulnerability that was being exploited in the wild using the latest versions of the Angler Exploit Toolkit. “Any version of Internet Explorer or Firefox with any version of Windows will get owned if Flash up to 16.0.0.287 (included) is installed and enabled”…

Tags:
, , , , ,

Your Data Security Strategy Starts with Deploying a Least Privilege Model (part 2 of 2)

Posted January 22, 2015    Scott Lang

In last week’s blog, we talked about how controls and accountability must be put into place so that only the right folks can access data and the systems on which that data resides, and that employing a least privilege model helps to achieve that and more. We’re using conclusions and data from a recent report…

Tags:
, , , ,
Larry-Brock-CISO

Basic Blocking and Tackling for Defending Against Advanced Targeted Attacks

Posted January 22, 2015    Larry Brock

With football season at its pinnacle at both the college and professional levels, the best teams continually focus on the fundamentals that make them successful. In security, we need to do the same.  It is okay for us to have a few key plays, especially in certain industries where we have to focus on unique…

Tags:
, , , , ,