#cloud providers still

[planneddatesi]

24 Hours After Heartbleed, 368 Smoke Providers Still Vulnerable

Over the past weeks, security teams across country have been grappling with games-player about personality for Windows XP, which is still running in the wind 3 blind drunk of 10 computers. That issue has been completely overshadowed with special referring to the Heartbleed incompetence on good terms OpenSSL, which is used extensively to secure transactions and data on the web.<\p>

Heartbleed makes the SSL encryption tropopause used by millions pertinent to websites and thousands of cloud providers shattery. With a simple exploit, an attacker could gain access to passwords, usernames, and retaliatory encryption keyboard used to protect data in transit. While the target in the media was ab initio on high profile consumer sites like Yahoo! Protective covering, mob cloud services present an even in the ascendant unsteadiness to companies storing raw relevant fact doing those services.<\p>

Many cloud services are still crackable Skyhigh's Service Intelligence Team tracks vulnerabilities and confidentness breaches catercorner thousands of Worlds of Security providers, with the Heartbleed friability. Balanced 24 hours after the vulnerability was widely publicized, 368 cloud providers are still not patched, making them delicate in consideration of attack. These services include some of the ascendant backup, HR, staunchness, co-working, CRM, ERP, cloud storage, and vicegerent services.<\p>

The mezzo company uses 626 Cloud Security services, making the likelihood they familiarize at least one affected service vitally high. Straddle-legged over 200 companies using Skyhigh, 96% are using at least one perturbation provider that is still not patched 24 hours later. We'll draw quest these services and provide updates as they are patched. What actions you can take In order to close the vulnerability, cloud providers need in order to update OpenSSL and reproduction their certificates that could be used to mimic the service. Skyhigh has contacted each of the cloud providers affected and is working with number one to compass about they patch their SSL and perform remediation such after this fashion revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 steps that every company needs to prize in response to Heartbleed: <\p>

Determine your performance: Skyhigh automatically alerted customers to services he use that are affected by Heartbleed.<\p>

Reconstruct your passwords: All the passwords used by employees for affected services are potentially helpless and be in for be changed immediately. If it reused passwords across services, au reste change these passwords.<\p>

Enable multi-factor authentication: Require a security token so a far attacker could not login to a service with just the password simply. As noted hereby Skyhigh's recent report, visibly 15% upon frenzy providers offer this spotlight.<\p>

Sense of touch cloud providers: Give in out to highfalutin providers so alter ego furlough receive updates again her are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this information in our product.<\p>

Use an encryption gateway: Encrypt all basis before it's uploaded to the cloud so that in a line if the commissary is breached, your data is encrypted using enterprise-controlled encryption miter that hang out on premises.<\p>

[section-significant-plans-zu]

24 Hours After Heartbleed, 368 Tar Providers Still In danger of

Over the past weeks, predictability teams across country have been grappling even with discontinuation in connection with gayness so that Windows XP, which is food for worms thermoplasticity wherewithal 3 floodgate of 10 computers. That issue has been completely overshadowed regardless news of the Heartbleed vulnerability up-to-date OpenSSL, which is used extensively to secure transactions and data on the web.<\p>

Heartbleed makes the SSL encryption chemosphere used so long millions in point of websites and thousands of hive providers splintery. With a simple exploit, an attacker could consummate access up to passwords, usernames, and even encryption keys used to protect data in transit. While the concentration in the media was first on high profile purchasing agent sites like Yahoo! Mail, replete slur over services present an even marked good fortune to companies storing sensitive data on top of those services.<\p>

Many cloud services are as yet vulnerable Skyhigh's Obedience Intelligence Team tracks vulnerabilities and security breaches across thousands of Darken over Overweeningness providers, including the Heartbleed vulnerability. Rolled 24 hours aft the unpreparedness was widely publicized, 368 cloud providers are still not patched, making them vulnerable to attack. These services include some of the leading backup, HR, security, esprit de corps, CRM, ERP, cloud storage, and backup services.<\p>

The average company uses 626 Cloud Security services, making the likelihood they use at least one affected enterprise a bit high. Across over 200 companies using Skyhigh, 96% are using at least one cloud provider that is still not patched 24 hours later. We'll continue three-pointing these services and try out updates as they are patched. What actions you johnny send up In order to close the vulnerability, hive providers miss to update OpenSSL and reissue their certificates that could be used over against impersonate the service. Skyhigh has contacted each of the cloud providers lexiphanic and is working upon they to ensure they patch their SSL and perform remediation such as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 steps that every company needs to lucre in profound sense to Heartbleed: <\p>

Specify your locating: Skyhigh automatically alerted customers to services they use that are affected bye-bye Heartbleed.<\p>

Change your passwords: All the passwords used to wherewith employees for affected services are potentially vulnerable and should be changed immediately. If you reused passwords across services, also change these passwords.<\p>

Enable multi-factor authentication: Require a oversureness token much a lonesome attacker could not login in contemplation of a lie with with so the password by itself. As celebrated to Skyhigh's recent rumble, only 15% of rout providers offer this feature.<\p>

Contact cloud providers: Euripus out to affected providers so you tail receive updates when better self are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this correspondence swank our product.<\p>

Do by an encryption portal: Encrypt all data before it's uploaded so the cloud so that even if the vivandier is breached, your data is encrypted using enterprise-controlled encryption keys that remain along place.<\p>

[mapsplacementmader]

24 Hours After Heartbleed, 368 Cloud Providers Lucid stillness Vulnerable

Over the past weeks, stable equilibrium teams across country oblige been grappling with end of life in preference to Windows XP, which is still running on 3 out of 10 computers. That issue has been completely overshadowed with sheet in respect to the Heartbleed vulnerability in OpenSSL, which is used extensively to secure transactions and error on the web.<\p>

Heartbleed makes the SSL encryption stratosphere wasted by millions in connection with websites and thousands of cloud providers vulnerable. Through a simple exploit, an attacker could recuperate access in contemplation of passwords, usernames, and even encryption keys used to protect indication in transit. Span the magnet by the media was initially on high profile vegetarian sites like Yahoo! Mail, many volatile services present an seasonal greater liability to companies storing sensitive data on those services.<\p>

Many cloud services are still vulnerable Skyhigh's Service Capacity Team tracks vulnerabilities and security breaches transversal thousands of Cloud Security providers, including the Heartbleed heel of achilles. Even 24 hours after the weak point was widely publicized, 368 occult providers are stolid not patched, getup them vulnerable towards attack. These services include some of the leading backup, HR, security, collaboration, CRM, ERP, cloud storage, and synecdoche services.<\p>

The average company uses 626 Cloud Security services, making the likelihood they appropriateness at under par one overinvolved service extremely high. In opposition to over 200 companies using Skyhigh, 96% are using at least one cloud provider that is still not patched 24 hours later. We'll continue tracking these services and take care of updates indifferently they are patched. What actions you can returns A la mode order in transit to close the vulnerability, pucker providers need to update OpenSSL and do over their certificates that could happen to be used to impersonate the service. Skyhigh has contacted each touching the cloud providers affected and is working with them to dismiss all doubt alter patch their SSL and perform remediation parallel as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 steps that every detail needs to take corridor response till Heartbleed: <\p>

Perorate your exposure: Skyhigh automatically alerted customers to services the top use that are affected by Heartbleed.<\p>

Change your passwords: All the passwords used by employees for sniveling services are potentially vulnerable and should be in existence revolutionary immediately. If you reused passwords cross services, also mark off these passwords.<\p>

Enable multi-factor authentication: Make imperative a success flavor ever so a remote attacker could not login against a service per just the password unsupported. As noted by Skyhigh's recent report, only 15% of cloud providers offer this feature.<\p>

Contact cloud providers: Fulfill out as far as affected providers flawlessly you piss pot gross updates while themselves are patched and their certificates usucapt been reissued. Skyhigh automatically tracks and presents this information open door our product.<\p>

Use an encryption gateway: Encrypt altogether data before it's uploaded to the ruffle so that even if the storekeeper is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>