Privileged Identity Management News Line October 2011

Events / Press / Analysts

McAfee Focus 11 Security Conference. Las Vegas, NV. October 18-20, 2011. Come visit us in our booth and check out our McAfee ePO integrations.

WEBINAR: Enterprise Windows Security Management with User Manager Pro Suite. October 25, 2011 @ 11am PT. Learn how to use our product User Manager Pro Suite to report on and remediate rogue local user accounts, improper group memberships, unauthorized shares, weak permissions, registry entries, BIOS settings, WMI reporting and more.

WEBINAR: Managing Database Administrator Credentials. October 26, 2011 @ 11am PT. Learn how to easily find SQL Server instances on your Windows systems, find their accounts, change credentials and propagate new credentials to connection strings in seconds. See how Enterprise Random Password Manager (ERPM) can be used to manage the credentials and connection strings of other database engines.

WEBINAR: Self-Service Passwords Resets and Password Synchronization, The Easy Way. October 27, 2011 @ 11am PT. Users forgetting their passwords is always the number one load on the Help Desk. Automating the solution to this problem can save money and free up Help Desk staff to address more critical user problems. See how our self-service password reset and password synchronization products can eliminate users calling the Help Desk for password resets.

WEBINAR: Windows Privileged Identity Management. November 2, 2011 @ 11am PT. Learn how ERPM can be used to automatically find machines, accounts and their usage, reliably propagate password changes, and delegate access to sensitive credentials on the Windows platform. Integrate into SIEM and trouble ticket systems to alert you to out of compliance situations.

WEBINAR: Effectively Managing Windows Services, Scheduled Tasks and COM objects. November 3, 2011 @ 11am PT. Proper maintenance of Windows Services, Scheduled Tasks and COM objects across thousands of computers can be such a large task that it never gets done. Our tools allow you to update credentials or change configuration across thousands of machines in just a few minutes. Attend our free webinar and see how quickly you can get the job done.

WEBINAR: Linux/UNIX Privileged Identity Management. November 9, 2011 @ 11am PT. Learn how ERPM can be used to automatically find machines, accounts and their usage, reliably propagate password changes, and delegate access to sensitive credentials on the Linux/UNIX platforms. Integrate into SIEM and trouble ticket systems to alert you to out of compliance situations.

WEBINAR: Managing Lights-out Management Card Credentials.
November 16, 2011 @ 11am PT. Up until recently, there has been no easy way to change the default credentials on a large number of lights-out management cards (IP KVMs) at the same time, much less control access to who has the credentials. Learn how to find these cards, change their credentials, and delegate access to these devices in a time limited manner using ERPM.

Will NFC make the mobile wallet work? BBC News. Phil Lieberman, head of IT security specialists Lieberman Software, believes the technology poses a significant security risk to consumers. "I think it's insane. How's that for vague?" he says.

Betfair loses data on more than three million customers to hackers. InfoSecurity. The brutal reality is that a multi-million pound betting exchange, with operations in several countries, processing millions of transactions every single day, was clearly hacked by Far Eastern cybercriminals, despite the fact that the exchange had claimed previously that its security systems – as required by multiple regulatory authorities – were up to scratch.

Two Factor Authentication: SMS vs. Tokens. eSecurityPlanet. It’s really a toss-up with no right answer. SMS-based authentication is technically inferior to hard tokens in that the transmission could theoretically be intercepted and used by an intruder. In practice, the SMS method is superior since the organization does not have to worry about token distribution or lost tokens and this is a less expensive and generally a more easily deployed methodology. Most of the cost and complexity of hard tokens revolves around configuration and distribution.

Going Open Source causes IT security chaos if it is done just to save money. bobsguide. The fact that the e-commerce software that is at the heart of this problem is open source is probably the cause of the failure to patch and update, as unlike commercial software, there is no-one to ‘nag’ the user about the need to update.