BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Thoughts From Another Successful RSA

Posted February 18, 2011    Peter McCalister

17,000 security professionals descended on Moscone Center in San Francisco this week for the annual RSA pilgrimage of education, communication and motivation.  Now that the event is over and everyone is heading back to their respective everyday roles, I thought I pass along a few observations to commemorate what was easily one of the better shows in the last couple of years for the security industry.

  • Tweeting was rampant and #RSAC and #BeyondTrust got a lot of attention.  My favorite retweet was a quote overheard at the show “I am just one more breach away from a budget increase”.  Pretty sad but true observation that we need to have privileges misused in an organization and harm observed before budgets can be freed to implement a least privilege solution.
  • Publications like eWeek set their lists of top 11 companies to check out at RSA and guess who was the first company on the list?  That’s right…BeyondTrust!.  Check out the cool slide show here.
  • The new wave of instant blogging right from the show floor was also evident.  Now readers could read as quick as the blogger could hit post about their observations from the floor.  My favorite this year was Steve Ragan of The Tech Herald who reported on newly exposed vulnerabilities in some desktop least privilege architectures
  • My absolute favorite post-RSA article though has to go to Robert Mullins of NetworkWorld entitled “Do you want competitors telling the world what’s wrong with your product?
  • iPads also seemed to be the swag of choice and BeyondTrust was no exception at handing out a few to those lucky enough to win the drawings from the over 1,000 people who visited our booth.

Thanks again to all of our customers and new prospects for making this the most successful RSA ever!

Leave a Reply

Additional articles

How To Implement The Australian Signals Directorate’s Top 4 Strategies

Posted October 20, 2014    Morey Haber

The Australian Signals Directorate (ASD), also known as the Defence Signals Directorate, has developed a list of strategies to mitigate targeted cyber intrusions. The recommended strategies were developed through ASD’s extensive experience in operational cyber security, including responding to serious security intrusions and performing vulnerability assessments and penetration testing for Australian government agencies. These recommendations…

Tags:
, , , ,
asp-mvc

Exploiting MS14-059 because sometimes XSS is fun, sometimes…

Posted October 17, 2014    BeyondTrust Research Team

This October, Microsoft has provided a security update for System.Web.Mvc.dll which addresses a ‘Security Feature Bypass’. The vulnerability itself is in ASP.NET MVC technology and given its wide adoption we thought we would take a closer look. Referring to the bulletin we can glean a few useful pieces of information: “A cross-site scripting (XSS) vulnerability exists…

Tags:
4bestpracticesaudits-blog

Four Best Practices for Passing Privileged Account Audits

Posted October 16, 2014    Chris Burd

Like most IT organizations, your team may periodically face the “dreaded” task of being audited. Your process for delegating privileged access to desktops, servers, and infrastructure devices is a massive target for the auditor’s microscope. An audit’s findings can have significant implications on technology and business strategy, so it’s critical to make sure you’re prepared…

Tags:
, , , ,