Collaborate Disseminate
CyberArk researchers have released BlobHunter, an open-source tool organizations can use to discover Azure blobs containing sensitive files they have inadvertently made public. The cloud storage misconfiguration problem The many advantages of using the… Continue reading Open-source tool BlobHunter helps pinpoint public Azure blobs that might contain sensitive files
In order for organizations to prevent becoming the next victim of a breach due to unauthorized third-party user access, as has happened in prominent recent breaches, a strong security posture built around privileged access management (PAM) and identity… Continue reading How do I select a PAM solution for my business?
CyberArk announced it is working with Forescout and Phosphorus to enable organizations to secure the increasing number of IoT devices and technologies resulting from digital business transformation. Customers can significantly reduce risk using the joi… Continue reading CyberArk, Forescout and Phosphorus help orgs secure their IoT devices
CyberArk announced CyberArk Cloud Entitlements Manager, a privilege-based, artificial intelligence-powered service designed to strengthen the security of cloud environments. Through continuous monitoring of cloud access, CyberArk enforces least privile… Continue reading Remove excessive cloud permissions with CyberArk Cloud Entitlements Manager
CyberArk announced new advancements for CyberArk Alero that enable remote users to securely access critical systems managed by CyberArk from any mobile device – including non-smartphones. There are nearly 1.3 billion feature phones, or non-smartphones,… Continue reading CyberArk Alero enhancements provide secure privileged access for remote users
CyberArk, the global leader in privileged access management, announced it has acquired Santa Clara, California-based IDaptive. Together, CyberArk and Idaptive will deliver the industry’s only modern identity platform with a security-first approach. As … Continue reading CyberArk acquires IDaptive to provide SaaS delivered innovation with a security-first approach
Microsoft has fixed a flaw in Teams that could have allowed attackers to launch a wormlike attack on multiple accounts by sending one victim a malicious GIF image. Continue reading ‘Evil GIF’ account takeover flaw patched in Teams
Zoom isn’t the only video conferencing service attracting scrutiny from security researchers. Microsoft Teams, the technology giant’s professional collaboration tool, included a software bug that could have made it possible for hackers to steal data. Hackers could have used a malicious GIF to scrape user data from Microsoft Teams user accounts, spreading through an organization’s entire roster of employees who use the service, researchers from CyberArk announced Monday. The issue existed for three weeks between the end of February through mid-March, when much of the U.S. started to telework in response to the coronavirus pandemic. “The amount of data that goes into these applications is enormous and often includes confidential information from user names and passwords to top-secret business information – making them prime targets for attackers,” Omer Tsarfati, a CyberArk researcher, said in a blog post. CyberArk did not point to any evidence the issue had been exploited in […]
The post Researchers used a GIF to prove they could access Microsoft Teams user data appeared first on CyberScoop.
Continue reading Researchers used a GIF to prove they could access Microsoft Teams user data
CyberArk, the global leader in privileged access management, announced expanded capabilities of CyberArk Alero to support emerging business continuity priorities. Building on its core use case of enabling privileged access for remote vendors, Alero, a … Continue reading CyberArk Alero’s expanded capabilities allow remote employees secure access to critical systems
RSA Conference 2020 is underway at the Moscone Center in San Francisco. Check out our microsite for the conference for all the most important news. Here are a few photos from the event, featured vendors and organization include: RSA, Microsoft, vFeed, … Continue reading Photos: RSA Conference 2020, part 3