Advertisement
100, Anti Virus, breaches, compliance, Compliance Tools, Corporate Networks, Endpoints, Hacking Software, Hotfixes, Kotler, Machine Software, Marketwire, Microsoft Products, Microsoft Service Packs, Microsoft Updates, Mobile Networks, organizations, Peer To Peer Applications, Personal Firewall, Security, Security Breaches, Security Enforcement, Security Standards, Virtual Machine, Virus Problems
NEW YORK, NY–(Marketwire – December 14, 2009) – Inspections of approximately 100,000 endpoints over 25 organizations shows that typically organizations suffer from 10-30% of security breaches or non-compliance on endpoints in the networks. The top threats were missing third-party agents, unauthorized peer-to-peer applications, missing Microsoft updates, and antivirus issues. The report was issued by Promisec, Inc., a leader in delivering Clientless Endpoint Management (CEM) software solutions to identify and eliminate threats in corporate networks.
The top 4 threats to corporate endpoints were:
– Missing third-party agents — Unauthorized peer-to-peer applications — Microsoft products missing recent service packs or hotfixes — Antivirus problems, meaning the antivirus was disabled, missing, or not updated for the latest version
“It’s increasingly difficult for IT staff to get full visibility of the endpoints,” said Robin Mayo, President of US Operations of Promisec. “Today many endpoints are running 5 or 6 agents for standards compliance or to meet security standards. It’s no surprise that in many organizations, more than 20% of endpoints are missing or have misconfigured one or several of those agents.”
The report covers the trends and incidence of the following threats to corporate networks:
– Missing third-party agents, such as encryption, personal firewall, and other management and compliance tools. — Anti-virus problems, such as disabled or missing antivirus, or lack of recent updates — Peer-to-peer applications — Missing Microsoft service packs and hotfixes — Dual connectivity through wireless and mobile networks — Existence of hacking software — Unmanaged workstations — Unauthorized Virtual Machine software use — Unauthorized USB and PDA use
“Today, users and applications are sophisticated,” said Hilik Kotler, Promisec Co-Founder and EVP Business Development. “Users can easily bypass security enforcement mechanisms by using unauthorized devices, installing unauthorized applications, and disabling required updates or security maintenance tasks. Most of this behavior isn’t malicious, but it poses serious threats to corporate networks. Our inspection was able to identify this behavior, where client-based solutions tend to fall short.”
According to the report, all organizations were at risk with problems involving employee misconduct and technical errors on the endpoints. No organization showed a clean bill of health.
Promisec’s annual study aims to reveal serious problems that persist at the endpoint level of enterprises and other organizations. The company’s research has provided CIOs with unprecedented visibility inside their networks. The full report is available athttp://promisec.com/security_audit_report.html.
Promisec offers a free security and compliance audit to qualifying organizations. To apply for a free audit, visit http://promisec.com/free_audit_request.html.
About Promisec
Promisec, Inc. delivers Clientless Endpoint Management (CEM) software solutions that eliminate threats and optimize corporate internal networks with unprecedented visibility and control over the endpoints. Promisec’s patented technology allows IT managers to identify and resolve security, compliance and policy issues in a matter of minutes, without making any changes to the network or endpoints.
Founded in 2004 by former military intelligence experts, Promisec’s management team brings broad high-level executive experience in the network security industry.
Promisec is a privately held company with headquarters in Israel and offices in New York, Tokyo and Paris. Our customers include Forbes Global 2000 companies and other organizations in the manufacturing and service industries as well as government and health care institutions.
For more information, see www.promisec.com.
Related Videos :
- NASA A Giant Breach in Earth s Magnetic Field
NASA: A Giant Breach in Earth' s Magnetic Field science.nasa.gov On June 3, 2007 NASA' s five THEMIS spacecraft discovered a breach in Earth' s magnetic field ten times larger than anything previously thought to exist. Solar wind can flow in through the opening to “load up” the magnetosphere for powerful geomagnetic storms. But the breach itself is not the biggest surprise. Researchers are even more amazed at the - Salahis Breach Found on Facebook Norton Grills Secret Service Director 3 12 09
THE US SECRET SERVICE STINKY STORY www.4law.co.il ______ The New York Post editorial on presidential party crashers. Crashergate: now what? November 29, 2009 It was one of the most egregious security breaches in memory, but the Secret Service was quick to assert that President and Mrs. Obama were never in any danger during Tuesday' s White House gatecrashing by a pair of pathetic publicity - Object Capabilities for Security
Google Tech Talks November, 30 2007 ABSTRACT Existing systems often do a poor job of meeting the principle of least privilege. I will discuss how object capability systems and language-based methods can help address this shortcoming. In language-based object capability systems, an object reference is treated as a capability; unforgeability of references ensures unforgeability of capabilities; and all privileges are expressed as capabilities in this way. This makes - Breach USA 2007 FBI true story
SYNOPSIS “Breach” is based on the true story of former 25 year veteran FBI Intelligence agent Robert Hanssen. Based on “The Eleventh Hour” by Adam Mazer and Bill Rotko and inspired by true events, “Breach” is a dramatic thriller set inside the halls of the FBI – the gatekeeper of the nation' s most sensitive and potentially volatile secrets. Genre: Drama – Thriller. Writers: Adam Mazer and William Rotko. Producers: Robert
Tags: 100 Anti Virus, breaches, compliance, Compliance Tools, Corporate Networks, Endpoints, Hacking Software, Hotfixes, Kotler
Latest Searches: None