BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Vulnerability Expert Forum Highlights: April 2014

Posted April 16, 2014    Chris Burd

We had a great turnout for last week’s April 2014 Vulnerability Expert Forum (VEF) webcast. BeyondTrust Research experts, Carter and DJ, provided in-depth knowledge about the latest vulnerabilities and their potential impacts on network environments. Below are highlights from the Forum, plus an on-demand video of the presentation.

Latest critical vulnerabilities, vendor patches, and zero-day threats
This month, Microsoft released four security bulletins and patches that repair a total of 11 remote code execution vulnerabilities. These patches affect Microsoft Word and Office Web Apps, Internet Explorer, Windows File Handling Component, and Microsoft Publisher.

Patch criticality and prioritization
The two most critical patches include MS14-017 (Microsoft Office 2010) and MS14-018 (Internet Explorer, all versions except IE 10) — administrators should deploy these patches immediately to prevent exploitation by attackers, following up with patches MS14-019 (Windows File Handling) and MS14-020 (Microsoft Publisher 2003, 2007).

Security in the news
The experts also provided insight into the following security news topics:

  • The Global security phenomenon Heartbleed, the OpenSSL bug, which allows hackers to disclose 64KB of memory.
  • The new threat of remote USB attacks for USBs running remote USB redirection.
  • Banks to be hit with Microsoft costs for running out-of-date Microsoft XP on ATMs.
  • The NSA using inactive Botnets for their own purposes.
  • The Tesla Model S pleasantly surprises users with a few IT-tweaks.

Check out this recording of the 30-minute presentation for more details:

> Register for next month’s VEF webcast
> Request a trial of Retina Network Security Scanner

Tags:
, , , , ,

Leave a Reply

Additional articles

gartner market guide image - aug 2014

Introducing the Gartner Market Guide for Privileged Account Management

Posted July 29, 2014    Chris Burd

Gartner recently released a new Market Guide for Privileged Account Management (PAM), and we’d like to share a complimentary copy with you. The report includes PAM market analysis and direction, vendor overviews, and recommendations for selecting PAM solutions for your environment. BeyondTrust is one of two representative vendors (out of 20) to address all solution…

Tags:
, , , , , , , ,
Integrating Least Privilege and Password Management to Solve Account Security Challenges

Integrating Least Privilege and Password Management to Solve Account Security Challenges

Posted July 24, 2014    Morey Haber

There is a reason all BeyondTrust Privileged Account Management (PAM) solutions share the PowerBroker name: They all inherently enable you to reduce user-based risk and can be integrated under a centralized IT risk management platform. Here’s one common use case that demonstrates how this integration changes the playing field. Consider the challenge of privileged access:…

Tags:
, , , , ,
PowerBroker Password Safe Password Age Report

Reshaping Privileged Password Management with Password Safe 5.2

Posted July 21, 2014    Martin Cannard

Today, we’re pleased to unveil the latest edition of our privileged password management solution, PowerBroker Password Safe. I’ll start with a brief intro of what’s new and then tell you a little about the driving factors behind Password Safe development. New features for mitigating password risk and ensuring accountability enterprise-wide Here’s the 10,000-foot overview of…

Tags:
, , ,