Cyber Defense eMagazine January 2021 Edition

More documents

Recommendations

Info

The Privileged Credential Security Advantage By Tony Goulding, Cybersecurity Evangelist at Centrify Over time, a causality has emerged that accounts for the majority of security risks for enterprises: privileged accounts lead to data breaches. So much so that the majority of breaches (over 67 percent) in 2020 were caused by credential theft. Organizations that prioritize privileged credential security have an advantage over their peers by ensuring their operations are more resilient to data breaches. However, there’s a gap that continues to widen between those guarded against a breach and the numerous others that aren’t. Many have paid attention and embraced the warnings and guidance from analysts, press, and vendors that called for implementing privileged access management (PAM) security controls to mitigate the risk. The question is, did you go far enough? Cyber Defense eMagazine – January 2021 Edition 76 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
IT Automation Software and the Attack Surface As it relates to privileged accounts, the attack surface can be enormous and very diverse. Reducing this attack surface is a primary objective. However, for many organizations, the first – and often, only – focus is on the human administrator and their privileged activities. Let’s visit another slice of this attack surface that often flies under the radar. Your mileage may vary, but this risk can be just as significant, if not more so. It’s the use of privileged accounts by IT automation software; tools commonly found in IT service management (ITSM), IT operations management (ITOM), and continuous configuration and automation (CCA) platforms, such as asset discovery, vulnerability scanning, and software orchestration. For example, you may use one tool to scan the network for systems and analyze each one looking for exploits, vulnerabilities, and misconfigurations. And another tool may help you maintain a single system of record for your IT assets by conducting an inventory of each system, feeding results into different tools to show applications, infrastructure, as well as service relationships and dependencies. On top of these, a different tool from a different vendor may be helping you control your IT infrastructure, job scheduling, and inventory management. Like the others, it needs administrative access to IT infrastructure. In common, they all need to log into IT systems via SSH or WinRM to run commands and scripts with privileges and obtain system-level intelligence. Therein lies the risk. Externalizing Credential Management By default, IT configures these privileged account IDs and passwords statically within the tool. Let’s be clear about what this means. You’re entrusting the keys to every IT system, on-premises and perhaps in the cloud as well, to an application whose core strength is not identity and credential management. Not only that, IT must manually configure dozens or even hundreds of credentials in the tool. Multiply that by the number of tools requiring privileged accounts, and the lights never go off for IT. We haven’t even got to password rotation. Thankfully, several leading vendors in the space have recognized this. As an alternative, most allow IT to externalize identity and credential management to a third-party solution designed for the job. Relocating credentials to a hardened password vault is the best practice to mitigate this risk. Instead of IT configuring passwords within the tool, the tool fetches them from the vault at scan time. If an attacker compromises the tool, they won’t find any privileged account passwords in its configuration settings, preventing lateral movement to the IT servers and limiting what could amount to a complete compromise of every server in your IT infrastructure, including domain controllers. Reducing Risk and Adding Value The value doesn’t end there, however. By now, it’s evident that passwords are inherently weak and introduce risk. IT can use the vault to strengthen passwords and help prevent login denials. Frequent rotation helps mitigate the risk, along with setting long, cryptic passwords. Unfortunately, this falls below Cyber Defense eMagazine – January 2021 Edition 77 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
3 Email Hacking Techniques to Watch
Page 3 and 4:
The Rising Tide of Security Threats
Page 5 and 6:
@MILIEFSKY From the Publisher… Ne
Page 7 and 8:
Welcome to CDM’s January 2021 Iss
Page 9 and 10:
Cyber Defense eMagazine - January 2
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
3 Email Hacking Techniques to Watch
Page 25 and 26: 3. Hijacking email threads When Emo
Page 27 and 28: etween the data sets and filter out
Page 29 and 30: The Bottom Line AIOps is a journey,
Page 31 and 32: handle the IT and security challeng
Page 33 and 34: Businesses Must Protect Their Most
Page 35 and 36: Tokenization also allows businesses
Page 37 and 38: Lately, Zero Trust is all the buzz,
Page 39 and 40: Let's look at what's the same. They
Page 41 and 42: Cryptocurrency Ransomware Is on The
Page 43 and 44: commission from you. That is why co
Page 45 and 46: The second national lockdown in Nov
Page 47 and 48: Communication Streaming Challenges
Page 49 and 50: the plaintext ends up with some sig
Page 51 and 52: create new global admins, add them
Page 53 and 54: Cybersecurity Maturity Model Certif
Page 55 and 56: est practices into your core busine
Page 57 and 58: Businesses Should See Security as A
Page 59 and 60: Businesses must increasingly focus
Page 61 and 62: Cybersecurity risk not only help un
Page 63 and 64: - Mapping sensitive data assets (su
Page 65 and 66: ACRR Formula The ACRR is based on t
Page 67 and 68: Development Model This indicated if
Page 69 and 70: About the Author Gyan Prakash is a
Page 71 and 72: Understanding the Industrial IoT Wh
Page 73 and 74: E-Merchants: Secure Your Online Sal
Page 75: Damaged Reputation - Damage can ext
Page 79 and 80: How To Keep Your Children Safe In R
Page 81 and 82: About the Author Nevin Markwart, Ch
Page 83 and 84: The cause? More remote work, fear o
Page 85 and 86: About the Author Jody Paterson is a
Page 87 and 88: Identifying personal data breaches
Page 89 and 90: Brave New World: Safari Content Blo
Page 91 and 92: AdGuard, EasyList and uBlock filter
Page 93 and 94: When Businesses Get Hacked- Who Are
Page 95 and 96: failing to enforce adequate securit
Page 97 and 98: Security and Remote Management: Wha
Page 99 and 100: Looking Ahead to 2021, and Beyond A
Page 101 and 102: workforces and education. However,
Page 103 and 104: About the Authors Steve Hanna is th
Page 105 and 106: As solutions for eXtended Detection
Page 107 and 108: 2. Threats against MSPs, cloud serv
Page 109 and 110: Why 'Thinking Small' Is the Way to
Page 111 and 112: Simplification of micro-segmentatio
Page 113 and 114: commonly used by IT orgs -- can int
Page 115 and 116: ServiceNow Discovery Documentation
Page 117 and 118: Are Your Organization’s Critical
Page 119 and 120: ● Gaining insight into how attack
Page 121 and 122: MITRE Shield introduces active defe
Page 123 and 124: How Next-Gen Identity Governance an
Page 125 and 126: • performing access reviews and c
Page 127 and 128:
and intent-based authentication pol
Page 129 and 130:
Innovation, Automation and Securing
Page 131 and 132:
management, as well as monitoring c
Page 133 and 134:
Peer-To-Peer Cybersecurity Insights
Page 135 and 136:
Transitioning to Remote Work: The A
Page 137 and 138:
Traqq also performs automatic track
Page 139 and 140:
6. Tool to Prevent Inefficient Task
Page 141 and 142:
Page 143 and 144:
You asked, and it’s finally here
Page 145 and 146:
9 Years in The Making… Thank You
Page 147 and 148:
Page 149 and 150:
show all

Cyber Defense eMagazine January 2021 Edition

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?