BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Filter:
guy laptop

Back to Least Privilege Basics

Posted March 17, 2011    Peter McCalister

Least Privilege is something we’ve talked about before, and odds are good we’ll talk about it again. The reason it keeps coming up is because it’s important! It’s the key to securing Windows desktops, and it’s fundamental in the protection of root access.

Categories:
Privileged Account Management
ipad pic

The Privilege To Roaming Access Comes With Responsibilities

Posted March 16, 2011    Peter McCalister

We’re big fans of Apple’s iPad. How can you not like them? Svelte, sleek and slick in execution.

Categories:
General
sticky

Automating Configuration Auditing

Posted March 15, 2011    Morey Haber

????????I want to discuss a rather simple use case with my readers that until recently, had a rather complex solution. Consider you are a major airline, corporation, or even a local government with thousands of systems that should be identical from a configuration perspective. These could be airline check-in kiosks, a call center handling support calls,…

Categories:
Privileged Account Management
Tags:
, , , , , , , , ,
Good-better-best

4 Bad Habits to Kick for IT Security

Posted March 15, 2011    Peter McCalister

Isn’t it amazing how easy it is to adopt bad habits? The crazy thing is that no one is immune- they plague each and every one of us. Whether we were taught incorrect practices or are just looking for shortcuts to make our lives/jobs/situations easier, each of us yields to poor patterns at some point in our lives.

Categories:
Vulnerability Management
Team

Do You Sudo? SHOULD You Sudo?

Posted March 14, 2011    Peter McCalister

Chances are, if your organization utilizes Unix and Linux servers, your IT staff uses sudo. After all, sudo ships free with virtually all versions and flavors of Linux and Unix and has long been a favorite tool for administrators to define what commands OS users can execute as root, without actually disclosing the root password.

Categories:
Vulnerability Management
php

PHP Substr_Replace Memory Corruption

Disclosed March 13, 2011    Fully Patched
Vendors: PHP
Vulnerability Severity: Medium
Exploit Impact: Remote Code Execution
Exploit Availability:
Categories:
Zeroday Tracker
yinyang

The Yin and Yang of Security and Productivity

Posted March 11, 2011    Peter McCalister

If, as I discussed in one of my last posts, we can’t rely on compliance standards for anything more than setting the minimum bar for establishing our security measures, we are back to having to do the difficult trade off analysis on the real impact of security on productivity versus the benefits. And while there is no simple answer on how to do that analysis, there may be a different way to frame the problem.

Categories:
Vulnerability Management
ninjamonkey

Talking Ninja Monkey Hacks Android

Posted March 10, 2011    Peter McCalister

No, we are not talking about a new John Carpenter movie or tabloid headline, although this is the headline I would love to see. The real headline is that hackers found a way to hijack root for Google Android and injected malware into 21 applications.

Categories:
Security Research
cloud

Retina in the Cloud

Posted March 10, 2011    Brad Hibbert

We recently expanded our cloud-based security offerings with Retina Cloud, so I figured it was time to post my first blog on eEye and the cloud. eEye has been providing vulnerability scanning using a SaaS model since 2009 and today, we offer customers a variety of options with respect to vulnerability scanning from the “cloud”….

Categories:
Vulnerability Management
Tags:
,
kindle

What Do You Think About VEF?

Posted March 9, 2011    The eEye Research Team

Please use the “Leave a Reply” function below and tell us your comments, thoughts, and suggestions about VEF. – One person will be selected at random to win a new Amazon Kindle and $25 gift card – Deadline to be entered into the VEF contest is Friday 03/11 at noon PST. – Please note that all…

Categories:
Security Research
Tags:
,