BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Microsoft Vulnerabilities & Admin Privileges

Posted January 28, 2011    Peter McCalister

Some of you may have already seen the annual report we do each year on vulnerabilities in Microsoft products. Our last report found that in 90% of critical vulnerabilities could be mitigated with the removal of administrative rights.

This presents three sources of risks to Windows desktops in a business environment:

  • Users that are slow to download the latest patches leave their PCs vulnerable
  • Discovered vulnerabilities that have not yet been patched
  • Vulnerabilities Microsoft is not yet aware of, but there is some awareness in the hacker community

But alas, today a Computerworld article highlights the trouble with relying on Microsoft patches alone to protect PCs from Microsoft vulnerabilities. Microsoft pulled a December 14th Outlook patch after it caused several performance issues on PCs that downloaded it, reissuing a fixed patch over a  month later.

This means PCs were left unpatched for at least a month and Computerworld reveals, this isn’t the first time. Microsoft’s own blog post responding to a recent FTP vulnerability in Windows 7 seems to indicate that they may not be patching it:

“We’ll continue to investigate this issue and, if necessary, we‘ll take appropriate action to help protect customers.”

I don’t blame Microsoft. They work hard, push out a lot of patches and fix critical vulnerabilities as quickly as possible. But when you’re talking about several suites of software that are amongst the most common applications on the desktop, that’s a big target and a lot of software.

No vendor could possibly keep up with it, but that’s why the organizations has to remove administrative rights to protect themselves under the real-world circumstance of prolific vulnerabilities.

 

Leave a Reply

Additional articles

webinar_chalk

Webinar March 4th: Recreating the Carbanak Breach & Techniques for Mitigating Similar Attacks

Posted March 3, 2015    Lindsay Marsh

Join BeyondTrust Research and Development team for an in-depth live webinar that will explore the attack vectors used in the Carbanak Bank Breach and share successful mitigation techniques needed to prevent this type of attack.

Tags:
, ,
VMware Hardening Guidelines-img3

How to Audit VMware ESX and ESXi Servers Against the VMware Hardening Guidelines with Retina CS

Posted February 27, 2015    BeyondTrust Research Team

Retina CS Enterprise Vulnerability Management has included advanced VMware auditing capabilities for some time, including virtual machine discovery and scanning through a cloud connection, plus the ability to scan ESX and ESXi hosts using SSH. However, in response to recent security concerns associated with SSH, VMware has disabled SSH by default in its more recent…

Tags:
, , , ,
dave-shackleford-headshot

Privileged Passwords: The Bane of Security Professionals Everywhere

Posted February 19, 2015    Dave Shackleford

Passwords have been with us since ancient times. Known as “watchwords”, ancient Roman military guards would pass a wooden tablet with a daily secret word engraved from one shift to the next, with each guard position marking the tablet to indicate it had been received. The military has been using passwords, counter-passwords, and even sound…

Tags:
, , ,