BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Filter:
adobe

Adobe Flash Clickjacking Vulnerability

Disclosed August 20, 2011    Fully Patched
Vendors: Adobe, Google
Vulnerability Severity: Medium
Exploit Impact:
Exploit Availability:
Categories:
Zeroday Tracker
cloudlock1

The Value of Attack and Malware Data in Prioritizing Remediation

Posted August 19, 2011    Morey Haber

Here at eEye, we’ve been discussing in great depth, the value of various risk scoring mechanisms, attack vectors, and exploit intelligence. Considering all the various standards that are being used to derive risk scores (proprietary, CVSS, PCI (based on CVSS with conditions), DoD Categories, etc.) and how organizations are currently prioritizing remediation efforts, we found a…

Categories:
Vulnerability Management
annie

Accident Prone Annie Requires New Policies For Control

Posted August 19, 2011    Peter McCalister

I introduced you to Accident Prone Annie as an archetype for the type of insider villain who may already be infiltrating your extended enterprise a couple of weeks ago and guess what? Almost every day I see an article that represents “Dave” as manifesting in another company with some measurable harm that was newsworthy.

Categories:
General
apache

Apache httpd Remote Denial of Service (Memory Exhaustion)

Disclosed August 19, 2011    Fully Patched
Vendors: Apache Software Foundation
Vulnerability Severity: High
Exploit Impact: Denial of Service
Exploit Availability:
Categories:
Zeroday Tracker
cropcircle

Is Public Cloud Security As Mysterious As Crop Circles?

Posted August 18, 2011    Peter McCalister

There are many of you out there who have seen pictures of crop circles and believe that they are truly a mystery that no one will ever get to the bottom of. For those of us in the information security field, I think we are starting to believe that the key to security in public clouds may be as elusive as the secret to crop circles.

Categories:
Vulnerability Management
dave2

Disgruntled Dave Snoops Your Healthcare Records

Posted August 17, 2011    Peter McCalister

I introduced you to Disgruntled Dave as an archetype for the type of insider villain who may already be infiltrating your extended enterprise a couple of weeks ago and guess what? Almost every day I see an article that represents “Dave” as manifesting in another company with some measurable harm that was newsworthy.

Categories:
Vulnerability Management
MMPC

Why Less is More with Admin Rights

Posted August 16, 2011    Peter McCalister

A recent blog post at Microsoft Malware Protection Center warns that disabling the User Account Control (UAC) tool increases the likelihood of malware threats. According to Microsoft’s Joe Faulhaber who published the entry, the Sality virus family, Alureon rootkits, Rogue antivirus like FakePAV, Autorun worms, and the Bancos banking Trojans all have variants for turning UAC off.

Categories:
Vulnerability Management
irene2

Identity Thief Irene Hijacks Customer Database At Travelodge

Posted August 15, 2011    Peter McCalister

I introduced you to Identity Thief Irene as an archetype for the type of insider villain who may already be infiltrating your extended enterprise a couple of weeks ago and guess what? Almost every day I see an article that represents “Irene” as manifesting in another company with some measurable harm that was newsworthy.

Categories:
Vulnerability Management
cloud

What Comes After Discovery – Rediscovery and Scan

Posted August 15, 2011    Jerome Diggs

Over the next few blog posts I’ll show you ways to leverage your investment in Retina CS to help automate and streamline various scenarios I run into in the field. One common scenario I see quite often happens when customers are first implementing a vulnerability management solution into their organization. I call this the ‘What…

Categories:
Vulnerability Management
bigdata-98x98

Learning from the Ghosts of Data Breaches Past

Posted August 12, 2011    Peter McCalister

Data breaches are unfortunately becoming a staple in the ever-changing world of information technology. As this environment continues to shift, it would be nice if malicious insiders and trouble-causing outsiders would shift right out of reality. This, however, is not a likely reality, therefore we must examine carefully ways to mitigate the effects of these…

Categories:
Vulnerability Management