BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Filter:
stolen

Stolen Fruit is the Sweetest (Especially for Hackers)

Posted February 3, 2011    Peter McCalister

I’m sure you’ve heard the saying, “stolen fruit is the sweetest.” It’s a phrase that gets thrown around lightly, but it’s time to take it to heart. In a day when information and sensitive data are being stolen, manipulated, and blasted for the world to read, this is a saying we all need to look at twice. Hackers, inside security leakers, and thieves all agree: that which is stolen is the sweetest. You don’t want to find out how sweet the information in your enterprise will be to them. Steps should to be taken to secure the sensitive information and data in enterprises across the world.

Categories:
General
broken chain

Least Privilege Legacy Apps and the Desktop “Wild West”: Part 4

Posted February 2, 2011    Peter McCalister

This week we report the conclusions of our recent survey of 185 IT Administrators and Help Desk Operatives, in a report Legacy Applications and Least Privilege Access Management’ – which reveals the way legacy apps leave Windows desktop environments unnecessarily exposed to attack from malware, as well as providing an open door to insider threats.

Categories:
Privileged Account Management
hands

Prevent Security Storms by Eliminating Admin Rights

Posted February 1, 2011    Peter McCalister

How many times have you heard the old proverb, “after the storm comes the calm?” And how many times have you just accepted “storms” as part of life? From my point of view, these downpours aren’t actually necessary.

Categories:
Vulnerability Management
pillars

Prioritizing Vulnerability Assessment and Remediation Steps: A New Users Guide to Getting Started – Part 1

Posted January 31, 2011    Morey Haber

New users to vulnerability assessment often ask the same question: “How do I get started”? While this may sound incredibly generic for a security engineer, many companies have never had a vulnerability management process in place and are trying to comprehend the problems of missing patches, remediation prioritization, and risk acceptance. As a basic recommendation,…

Categories:
Vulnerability Management
Tags:
, , ,
The Duke

Least Privilege Legacy Apps and the Desktop “Wild West”: Part 3

Posted January 31, 2011    Peter McCalister

This week we report the conclusions of our recent survey of 185 IT Administrators and Help Desk Operatives, in a report ‘Legacy Applications and Least Privilege Access Management’ which reveals the way legacy apps leave Windows desktop environments unnecessarily exposed to attack from malware, as well as providing an open door to insider threats.

Categories:
Privileged Account Management
videolan

VLC Media Player MKV Demuxer Vulnerability

Disclosed January 30, 2011    Fully Patched
Vendors: VideoLAN
Vulnerability Severity: High
Exploit Impact:
Exploit Availability:
Categories:
Zeroday Tracker
Win 7

Microsoft Vulnerabilities & Admin Privileges

Posted January 28, 2011    Peter McCalister

Some of you may have already seen the annual report we do each year on vulnerabilities in Microsoft products. Our last report found that in 90% of critical vulnerabilities could be mitigated with the removal of administrative rights.

Categories:
Vulnerability Management
microsoft

Microsoft Windows MHTML

Disclosed January 28, 2011    Fully Patched
Vendors: Microsoft
Vulnerability Severity: Low
Exploit Impact: Information Disclosure
Exploit Availability:
Categories:
Zeroday Tracker
The Duke

Least Privilege Legacy Apps and the Desktop “Wild West”: Part 2

Posted January 27, 2011    Peter McCalister

This week we report the conclusions of our recent survey of 185 IT Administrators and Help Desk Operatives, in a report Legacy Applications and Least Privilege Access Management’ which reveals the way legacy apps leave Windows desktop environments unnecessarily exposed to attack from malware, as well as providing an open door to insider threats.

Categories:
Privileged Account Management
Team

Password Rotation, Phishing and Authentication Limitations, Oh My!

Posted January 26, 2011    Peter McCalister

As we have pointed out in several recent blog posts, getting users to choose effective passwords is hard. This is particularly important to us at BeyondTrust since for our PIM solutions to function correctly we need to accurately authenticate a user to know what access privileges to grant them While new technologies for user authentication are on the way, they aren’t here just yet.

Categories:
General