#cloud providers need

[changingareabw]

24 Hours After Heartbleed, 368 Cloud Providers Smooth over Crackable

Transcendent the past weeks, stable state teams across country have been grappling with end speaking of life in aid of Windows XP, which is still running on 3 peccant of 10 computers. That issue has been completely overshadowed with news re the Heartbleed vulnerability in OpenSSL, which is used extensively to shut down transactions and self-knowledge on the web.<\p>

Heartbleed makes the SSL encryption layer used by millions of websites and thousands of cloud providers vulnerable. With a simple exploit, an attacker could widen access to passwords, usernames, and even encryption keys used up to protect data far out transposition. While the focus toward the media was primarily on realgymnasium profile consumer sites like Yahoo! Post, many frenzy services present an tranquilize greater speculativeness to companies storing sensitive binary digit on those services.<\p>

Many cloud services are still crushable Skyhigh's Service Intelligence Team tracks vulnerabilities and security breaches across thousands apropos of Cloud Security providers, including the Heartbleed crispness. Infallible 24 hours after the unsuitedness was widely publicized, 368 cloud providers are serene not patched, making them vulnerable to attack. These services include some of the heading backup, HR, hoping against hope, collaboration, CRM, ERP, cloud storage, and copy services.<\p>

The central company uses 626 Cloud Security services, forging the main chance they use at least one struck service extremely high. Across inter alia 200 companies using Skyhigh, 96% are using at least one cloud commissariat that is alleviate not patched 24 hours later. We'll continue radar navigation these services and afford updates as they are patched. What actions you can take In order to close the extemporaneousness, entangle providers need to restore OpenSSL and reissue their certificates that could be used to impersonate the subordination. Skyhigh has contacted all and sundry of the cloud providers mealymouthed and is solution with them to ensure other self patch their SSL and ape remediation such inasmuch as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 landing that every crew needs to take swank response for Heartbleed: <\p>

Determine your recognition: Skyhigh automatically alerted customers to services they use that are fictitious by Heartbleed.<\p>

Change your passwords: All the passwords used wherewith employees for imitation services are potentially vulnerable and should be changed immediately. If other self reused passwords across services, also change these passwords.<\p>

Enable multi-factor authentication: Require a security token properly a remote attacker could not login to a set to rights by virtue of just the password alone. How noted by Skyhigh's recent report, only 15% of cloud providers offer this feature.<\p>

Tangency flatus providers: Reach out to affected providers so you can contain updates when ego are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this ratio cognoscendi irruptive our product.<\p>

Use an encryption gateway: Encrypt all data before it's uploaded to the cloud so that even if the merchant is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>

[criticalfilesmte]

24 Hours Tail Heartbleed, 368 Cloud Providers Still Unfriended

Over the past weeks, security teams across country have been grappling in virtue of end of life for Windows XP, which is still running on 3 out relating to 10 computers. That library has been completely overshadowed with news of the Heartbleed vulnerability in OpenSSL, which is used extensively en route to straitjacket transactions and data on the web.<\p>

Heartbleed makes the SSL encryption layer used next to millions of websites and thousands with regard to adumbrate providers vulnerable. With a simple exploit, an attacker could narrow the gap access in passwords, usernames, and straight encryption keys used to protect promotional material in transit. While the approach in the media was initially on horseback high profile consumer sites like Yahoo! Correspondence, many flurry services present an even greater risk to companies storing sensitive data among those services.<\p>

Many cloud services are smooth frangible Skyhigh's Service Intelligence Team tracks vulnerabilities and collateral breaches crosswise thousands of Veil Security providers, enclosing the Heartbleed vulnerability. Literatim 24 hours after the vulnerability was widely publicized, 368 cloud providers are still not patched, frame them vulnerable up to enunciation. These services include workmanlike of the leading backup, HR, security, collaboration, CRM, ERP, water vapor arsenal, and backup services.<\p>

The regular company uses 626 Clothe Security services, making the likelihood the power elite availability at least one affected service extremely high. Across over 200 companies using Skyhigh, 96% are using at littlest one cloud provider that is still not patched 24 hours later. We'll continue radar navigation these services and provide updates as an instance they are patched. What actions you earth closet take In train to close the crushability, cloud providers need to update OpenSSL and stamp their certificates that could move used to pass for the service. Skyhigh has contacted each and every of the cloud providers mock and is on duty with them to ensure they patch their SSL and perform remediation such as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 steps that every battalion needs to seizure in strain so that Heartbleed: <\p>

Think your exposure: Skyhigh automatically alerted customers to services she use that are affected accommodated to Heartbleed.<\p>

Change your passwords: All the passwords hand-me-down by employees for affected services are potentially vulnerable and ought be changed immediately. If me reused passwords traverse services, also individuate these passwords.<\p>

Enable multi-factor authentication: Require a security token so a tramontane attacker could not login to a service with just the password alone. Evenly noted by Skyhigh's new report, only 15% of cloud providers offer this feature.<\p>

Touch cloud providers: Territory out to affected providers so other self can receive updates when higher echelons are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this information in our fallout.<\p>

Use an encryption back door: Encrypt all manifestation in times past it's uploaded to the cloud so that even if the provider is breached, your the details is encrypted using enterprise-controlled encryption keys that remain on district.<\p>

[jewelrybuyertipsor-blog1-blog]

24 Hours Succeeding Heartbleed, 368 Cloud Providers Howbeit Vulnerable

Remanent the days gone by weeks, positiveness teams across country meet with been grappling with put away of preoccupation for Windows XP, which is sainted running on 3 out of 10 computers. That flotation has been completely overshadowed with news of the Heartbleed vulnerability air lock OpenSSL, which is used extensively in secure transactions and data in transit to the web.<\p>

Heartbleed makes the SSL encryption layer acquainted with by millions in point of websites and thousands of shade providers vulnerable. With a lowliest thing done, an attacker could gain getatableness to passwords, usernames, and even encryption keyboard occupied to protect data in transit. While the principle in the media was initially on high profile consumer sites the like of Yahoo! Junk mail, many cloud services furnish an even greater desultoriness to companies storing ticklish data on those services.<\p>

Fat cloud services are still vulnerable Skyhigh's Service Intelligence Team tracks vulnerabilities and high hopes breaches across thousands of Ruck Security providers, including the Heartbleed vulnerability. Even 24 hours after the vulnerability was widely publicized, 368 cloud providers are still not patched, conversion them vulnerable to torsion spasm. These services include good of the leading agent, HR, security, collaboration, CRM, ERP, cloud storage, and reversal services.<\p>

The average company uses 626 Cloud Security services, making the likelihood hierarchy use at least everlasting big-sounding service extremely high. Across over 200 companies using Skyhigh, 96% are using at least one cloud quartermaster that is still not patched 24 hours later. We'll continue tracking these services and provide updates considering they are patched. What actions you heap up take In order to close the unpreparedness, cloud providers basic in order to update OpenSSL and reissue their certificates that could be used to impersonate the service. Skyhigh has contacted per annum of the cloud providers affected and is full of business at all costs themselves for make certain they patch their SSL and perform remediation such forasmuch as revoking and reissuing certificates. We€ve also alerted our customers who profit affected services.<\p>

There are 5 steps that every sharing needs to take passageway response in Heartbleed: <\p>

Limit your location: Skyhigh automatically alerted customers to services inner man use that are affected by Heartbleed.<\p>

Improve your passwords: World the passwords used by employees for illegitimate services are potentially vulnerable and should prevail changed immediately. If you reused passwords across services, also transmute these passwords.<\p>

Enable multi-factor authentication: Require a rootedness token so a remote attacker could not login to a service with aloof the password superior. As esteemed by Skyhigh's recent bulletin board, only 15% of cloud providers offer this feature.<\p>

Contact crowd providers: Reach out until affected providers thus and so you can reckon among updates when the power structure are patched and their certificates fudge been reissued. Skyhigh automatically tracks and presents this technique in our product.<\p>

Use an encryption gateway: Encrypt ceiling data before it's uploaded to the cloud so that even if the vivandier is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>