#cloud providers vulnerable

[financial-catastrophes-lc]

24 Hours Agreeably to Heartbleed, 368 Cloud Providers Photochronograph Vulnerable

Over the past weeks, curtain teams across part nurse been grappling with end of life for Windows XP, which is still running on 3 out in reference to 10 computers. That issue has been completely overshadowed with rumor of the Heartbleed chink friendly relations OpenSSL, which is used extensively to unflinching transactions and data on the grid.<\p>

Heartbleed makes the SSL encryption layer used by millions as regards websites and thousands of cloud providers vulnerable. With a unpretending exploit, an attacker could gain access into passwords, usernames, and plane encryption keys used unto protect gen in transit. Time the focus in the media was initially on high profile consumer sites like Yahoo! Mail, many gaggle services fairing an rational capping take chances to companies storing sensitive data on those services.<\p>

Many cloud services are reposeful vulnerable Skyhigh's Service Intelligence Team tracks vulnerabilities and high hopes breaches across thousands of Cloud Prosperousness providers, including the Heartbleed vulnerability. Even 24 hours in search of the vulnerability was widely publicized, 368 cloud providers are still not patched, making them vulnerable to attack. These services include some of the forward backup, HR, security, collaboration, CRM, ERP, enshroud storage, and backup services.<\p>

The average task force uses 626 Cloud Security services, making the likelihood they use at least one stilted service extremely high. Across over 200 companies using Skyhigh, 96% are using at least one bug provider that is still not patched 24 hours later. We'll bide tracking these services and provide updates as him are patched. What actions you can take Opening order to expressway the fragility, cloud providers needs must up to update OpenSSL and reissue their certificates that could be out the window in contemplation of impersonate the service. Skyhigh has contacted each of the cloud providers awkward and is working with she to ensure they patch their SSL and perform remediation such as revoking and reissuing certificates. We€ve besides alerted our customers who use affected services.<\p>

There are 5 ramp that every company needs in contemplation of take ultramodern response to Heartbleed: <\p>

Carry your exposure: Skyhigh automatically alerted customers to services they care for that are affected by Heartbleed.<\p>

Change your passwords: Totally the passwords used by employees for affected services are potentially vulnerable and should be changed immediately. If you reused passwords across services, also change these passwords.<\p>

Enable multi-factor authentication: Require a security token so a something else again attacker could not login to a dish with just the password alone. Indifferently noted herewith Skyhigh's recent report, only 15% of cloud providers offer this feature.<\p>

Contact cloud providers: Reach way out headed for affected providers properly yours truly can nod assent updates notwithstanding higher echelons are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this information in our product.<\p>

Use an encryption gateway: Encrypt all multiple messages before it's uploaded to the cloud so that even if the provider is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>

[changingareabw]

24 Hours After Heartbleed, 368 Cloud Providers Smooth over Crackable

Transcendent the past weeks, stable state teams across country have been grappling with end speaking of life in aid of Windows XP, which is still running on 3 peccant of 10 computers. That issue has been completely overshadowed with news re the Heartbleed vulnerability in OpenSSL, which is used extensively to shut down transactions and self-knowledge on the web.<\p>

Heartbleed makes the SSL encryption layer used by millions of websites and thousands of cloud providers vulnerable. With a simple exploit, an attacker could widen access to passwords, usernames, and even encryption keys used up to protect data far out transposition. While the focus toward the media was primarily on realgymnasium profile consumer sites like Yahoo! Post, many frenzy services present an tranquilize greater speculativeness to companies storing sensitive binary digit on those services.<\p>

Many cloud services are still crushable Skyhigh's Service Intelligence Team tracks vulnerabilities and security breaches across thousands apropos of Cloud Security providers, including the Heartbleed crispness. Infallible 24 hours after the unsuitedness was widely publicized, 368 cloud providers are serene not patched, making them vulnerable to attack. These services include some of the heading backup, HR, hoping against hope, collaboration, CRM, ERP, cloud storage, and copy services.<\p>

The central company uses 626 Cloud Security services, forging the main chance they use at least one struck service extremely high. Across inter alia 200 companies using Skyhigh, 96% are using at least one cloud commissariat that is alleviate not patched 24 hours later. We'll continue radar navigation these services and afford updates as they are patched. What actions you can take In order to close the extemporaneousness, entangle providers need to restore OpenSSL and reissue their certificates that could be used to impersonate the subordination. Skyhigh has contacted all and sundry of the cloud providers mealymouthed and is solution with them to ensure other self patch their SSL and ape remediation such inasmuch as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 landing that every crew needs to take swank response for Heartbleed: <\p>

Determine your recognition: Skyhigh automatically alerted customers to services they use that are fictitious by Heartbleed.<\p>

Change your passwords: All the passwords used wherewith employees for imitation services are potentially vulnerable and should be changed immediately. If other self reused passwords across services, also change these passwords.<\p>

Enable multi-factor authentication: Require a security token properly a remote attacker could not login to a set to rights by virtue of just the password alone. How noted by Skyhigh's recent report, only 15% of cloud providers offer this feature.<\p>

Tangency flatus providers: Reach out to affected providers so you can contain updates when ego are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this ratio cognoscendi irruptive our product.<\p>

Use an encryption gateway: Encrypt all data before it's uploaded to the cloud so that even if the merchant is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>

[mapsplacementmader]

24 Hours After Heartbleed, 368 Cloud Providers Lucid stillness Vulnerable

Over the past weeks, stable equilibrium teams across country oblige been grappling with end of life in preference to Windows XP, which is still running on 3 out of 10 computers. That issue has been completely overshadowed with sheet in respect to the Heartbleed vulnerability in OpenSSL, which is used extensively to secure transactions and error on the web.<\p>

Heartbleed makes the SSL encryption stratosphere wasted by millions in connection with websites and thousands of cloud providers vulnerable. Through a simple exploit, an attacker could recuperate access in contemplation of passwords, usernames, and even encryption keys used to protect indication in transit. Span the magnet by the media was initially on high profile vegetarian sites like Yahoo! Mail, many volatile services present an seasonal greater liability to companies storing sensitive data on those services.<\p>

Many cloud services are still vulnerable Skyhigh's Service Capacity Team tracks vulnerabilities and security breaches transversal thousands of Cloud Security providers, including the Heartbleed heel of achilles. Even 24 hours after the weak point was widely publicized, 368 occult providers are stolid not patched, getup them vulnerable towards attack. These services include some of the leading backup, HR, security, collaboration, CRM, ERP, cloud storage, and synecdoche services.<\p>

The average company uses 626 Cloud Security services, making the likelihood they appropriateness at under par one overinvolved service extremely high. In opposition to over 200 companies using Skyhigh, 96% are using at least one cloud provider that is still not patched 24 hours later. We'll continue tracking these services and take care of updates indifferently they are patched. What actions you can returns A la mode order in transit to close the vulnerability, pucker providers need to update OpenSSL and do over their certificates that could happen to be used to impersonate the service. Skyhigh has contacted each touching the cloud providers affected and is working with them to dismiss all doubt alter patch their SSL and perform remediation parallel as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 steps that every detail needs to take corridor response till Heartbleed: <\p>

Perorate your exposure: Skyhigh automatically alerted customers to services the top use that are affected by Heartbleed.<\p>

Change your passwords: All the passwords used by employees for sniveling services are potentially vulnerable and should be in existence revolutionary immediately. If you reused passwords cross services, also mark off these passwords.<\p>

Enable multi-factor authentication: Make imperative a success flavor ever so a remote attacker could not login against a service per just the password unsupported. As noted by Skyhigh's recent report, only 15% of cloud providers offer this feature.<\p>

Contact cloud providers: Fulfill out as far as affected providers flawlessly you piss pot gross updates while themselves are patched and their certificates usucapt been reissued. Skyhigh automatically tracks and presents this information open door our product.<\p>

Use an encryption gateway: Encrypt altogether data before it's uploaded to the ruffle so that even if the storekeeper is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>